tala77 Privacy Policy

This Privacy Policy sets out the principles and practices that govern tala77's handling of personal data relating to players and users of the tala77 online gaming platform. It applies to all personal data collected through the tala77 website at tala77.org, through interactions with the tala77 customer support team, and through any other channel through which a player communicates with tala77.

This Policy applies to all individuals who access the tala77 platform, whether as registered account holders, visitors to the tala77 website who have not registered, or former account holders whose data is retained for legal or operational purposes.

tala77 is committed to processing personal data in a manner that is lawful, fair, and transparent; that limits data collection to what is necessary for specified, explicit, and legitimate purposes; and that ensures data is accurate, kept only as long as necessary, and processed securely. These principles reflect the data protection standards established under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, as administered by the National Privacy Commission.

For the purposes of this Privacy Policy and applicable Philippine data protection legislation, tala77 is the data controller in respect of personal data collected and processed through the tala77 platform. As data controller, tala77 determines the purposes for which and the means by which personal data is processed.

Questions, concerns, or formal requests relating to the processing of your personal data by tala77 should be directed to the tala77 data protection contact as described in Section 16 of this Policy. tala77 is registered with and subject to oversight by the National Privacy Commission of the Philippines in respect of its data processing activities involving Philippine data subjects.

tala77 collects personal data across several categories, depending on the nature of your interaction with the platform. The table below summarizes the principal categories of data collected:

tala77 does not collect or process sensitive personal information as defined under the Data Privacy Act of 2012 — such as health data, political opinions, religious beliefs, or biometric data — except where explicitly required by law (for example, government ID images submitted for identity verification purposes during KYC).

tala77 collects personal data through the following channels and methods:

• Direct Provision: Data you voluntarily provide during account registration, identity verification, payment processing, support interactions, and form submissions on the tala77 platform.
• Automatic Collection: Technical and usage data collected automatically as you interact with the tala77 website, using server logs, session cookies, analytics tools, and similar tracking technologies. See Section 7 for full details on cookies and tracking.
• Payment Processors: Transaction confirmation data received from tala77's payment processing partners, including GCash, Maya, BPI, BDO, and other accepted payment channels, following a deposit or withdrawal instruction from your account.
• Identity Verification Services: Data returned from third-party identity verification providers used to assist in KYC document validation, including document authenticity checks and name-matching services, where applicable.
• Fraud Prevention Services: Risk signals and fraud indicators from third-party fraud screening services used to protect the integrity of the tala77 platform and its player community.
• Public Sources: In limited circumstances, tala77 may cross-reference publicly available information — such as publicly accessible Philippine government databases — to verify identity information provided during KYC.

tala77 processes personal data for specific, legitimate purposes. The following table sets out the primary processing purposes and their corresponding legal bases under the Data Privacy Act of 2012:

tala77 does not sell or commercially license your personal data to third parties. We share personal data only in the following limited and necessary circumstances:

• Payment Service Providers: We share the minimum necessary financial data with payment processors — including GCash, Maya, BPI, BDO, Metrobank, and USDT processing services — strictly to execute your deposit and withdrawal instructions. These processors are contractually bound to handle your data in accordance with applicable Philippine data protection law.
• Identity Verification Providers: We share identity document data with third-party KYC service providers for the purpose of verifying your identity as required for KYC compliance. These providers process data solely for identity verification purposes under data processing agreements with tala77.
• Fraud Prevention Services: We share technical and behavioral data with fraud detection services to protect the security and integrity of the tala77 platform. Data shared is limited to risk signals and does not include full financial account details.
• Game Software Providers: Game providers whose software is hosted on the tala77 platform may receive gaming activity data (such as bet amounts and session data) associated with your player identifier for the purposes of game operation, RNG certification auditing, and provider reporting. This data is pseudonymised where technically feasible.
• Regulatory Authorities: tala77 may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities where required by law, court order, or regulatory direction.
• Law Enforcement: tala77 may disclose personal data to Philippine law enforcement agencies in response to lawful requests or where disclosure is necessary to prevent or detect crime, subject to verification of the legal basis for the request.
• Business Successors: In the event of a merger, acquisition, or sale of all or a substantial part of tala77's business assets, player personal data may be transferred to the acquiring entity as part of the transaction, provided the acquiring entity agrees to process the data in accordance with this Privacy Policy.

The tala77 website uses cookies and similar tracking technologies to deliver and improve platform functionality, maintain your session while logged in, analyze usage patterns, and support fraud prevention systems. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core platform functionality, including session management, authentication, load balancing, and security features. These cookies cannot be disabled without impacting your ability to use the tala77 platform. No consent is required for strictly necessary cookies under applicable law.
• Functional Cookies: Remember your preferences and settings — such as language preferences and game lobby filters — to improve your experience across sessions. These cookies are active by default but can be disabled without affecting core functionality.
• Analytics Cookies: Collect aggregated and anonymized usage data to help tala77 understand how players navigate and use the platform, identify areas for improvement, and measure the effectiveness of new features. Used with your consent.
• Security Cookies: Support fraud detection and abuse prevention systems by identifying unusual access patterns, device fingerprinting anomalies, and other risk signals. These cookies are essential to platform security.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Blocking all cookies may affect the functionality of the tala77 platform, including the ability to log in and maintain a game session.

tala77 implements a multi-layered security framework to protect personal data against unauthorized access, disclosure, alteration, or destruction. The following security measures are in place:

• Encryption in Transit: All data transmitted between your device and tala77 servers is encrypted using TLS 1.2 or higher (256-bit SSL), enforced across all pages and API endpoints of the tala77 platform.
• Encryption at Rest: Sensitive personal data, including identity documents and financial account references, is stored in encrypted form using AES-256 encryption. Encryption keys are managed separately from the encrypted data and subject to strict access controls.
• Access Controls: Access to personal data within tala77's systems is governed by role-based access control (RBAC) principles. Staff access to player data is limited to what is necessary for their specific function and is subject to multi-factor authentication requirements.
• Audit Logging: All access to sensitive player data by tala77 personnel is logged and subject to periodic audit review to detect and investigate any unauthorized or anomalous access.
• Penetration Testing: tala77's platform infrastructure undergoes regular security assessments, including penetration testing by qualified security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: tala77 maintains an incident response plan for personal data breaches. In the event of a breach that poses a real risk of harm to data subjects, tala77 will notify the National Privacy Commission within the timeframe required by law and will notify affected players without undue delay.

Notwithstanding these measures, no data transmission over the internet and no data storage system is entirely immune to security risks. tala77 cannot guarantee absolute security but commits to applying industry-standard measures and to responding promptly to any security incidents affecting player data.

tala77 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymized:

Where you request erasure of your personal data (see Section 10), tala77 will comply with such requests where no legal obligation requires continued retention. Data subject to a legal retention requirement will be quarantined from active processing and deleted at the earliest legally permissible date.

As a data subject under the Data Privacy Act of 2012 of the Philippines, you hold the following rights in relation to the personal data tala77 holds about you. These rights may be exercised by submitting a written request to the tala77 data protection contact described in Section 16.

tala77 may send you promotional communications by email, SMS, or push notification about platform promotions, new games, bonuses, and related tala77 services. All marketing communications are sent only to players who have provided explicit consent at registration or subsequently through their account preferences.

• Opt-In Basis: Marketing consent is collected separately at registration and is not a condition of opening a tala77 account. You can register and use the full tala77 platform without consenting to marketing communications.
• Easy Opt-Out: You may withdraw consent for marketing communications at any time through your tala77 account notification preferences, or by clicking the unsubscribe link in any tala77 marketing email, or by contacting the support team. Opt-out requests are processed within five (5) business days.
• Operational Communications: Certain account communications — such as transaction confirmations, password reset emails, security alerts, and terms update notifications — are sent regardless of marketing preferences, as they are necessary for the administration of your account contract and are not classified as marketing communications.
• Self-Excluded Players: Players who have applied a self-exclusion from the tala77 platform are automatically removed from all marketing communications for the duration of the exclusion period.

The tala77 platform is strictly restricted to individuals aged 21 years and older, consistent with PAGCOR's age requirements for online gaming services in the Philippines. tala77 does not knowingly collect personal data from individuals under the age of 21.

If tala77 becomes aware that personal data has been collected from a person under 21 years of age, the associated account will be suspended immediately, the personal data will be deleted or quarantined in accordance with applicable legal requirements, and any funds in the account will be handled in accordance with applicable Philippine regulations.

If you are a parent or guardian and believe that a person under 21 in your care has registered a tala77 account, please contact the tala77 support team immediately at the contact details provided in Section 16 so that the matter can be investigated and resolved promptly.

The tala77 platform does not contain links to third-party websites. tala77 does not control the content, privacy practices, or data handling of any third-party platform, and this Privacy Policy does not apply to any third-party website, application, or service that you access independently.

Links to third-party payment platforms — such as the GCash or Maya applications — that you access in the course of making a deposit or withdrawal are governed by the respective third party's own privacy policy and terms of service. tala77 is not responsible for the data practices of GCash, Maya, BPI, BDO, Metrobank, or any other payment service provider.

tala77 is a platform operated for and primarily serving the Philippine market. The majority of personal data processing takes place within the Philippines or in jurisdictions that offer a level of data protection substantially equivalent to that provided by Philippine data protection law.

Where personal data is transferred to service providers operating outside the Philippines — for example, certain cloud infrastructure providers, identity verification services, or fraud detection systems — tala77 implements appropriate safeguards to ensure that your data continues to be protected to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards include data processing agreements incorporating standard contractual clauses that obligate the recipient to protect the data in accordance with Philippine standards.

You may request information about the specific cross-border data transfers applicable to your account data and the safeguards in place by contacting the tala77 data protection contact described in Section 16.

tala77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or changes resulting from new platform features or third-party service integrations.

Material changes to this Privacy Policy — meaning changes that affect your rights or the ways in which tala77 processes your personal data in a significant way — will be communicated to registered players by email to the address on file at least fourteen (14) calendar days before the amended Policy takes effect. Non-material changes, including corrections and clarifications, may take effect immediately upon publication.

The "Effective Date" displayed at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how tala77 handles your personal data. Your continued use of the tala77 platform following the effective date of an amendment constitutes your acknowledgment of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to tala77's handling of your personal data, you may contact the tala77 data protection team through the following channels:

tala77 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with tala77's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The National Privacy Commission is the competent supervisory authority for data protection matters under the Data Privacy Act of 2012 and can be contacted through the NPC's official Philippine government channels.

For questions specifically relating to responsible gaming, self-exclusion, or account security, please also visit our Responsible Gaming page or our FAQ page for additional guidance.