Privacy Policy

01 Introduction

tapwin1 ("tapwin1," "we," "us," or "our") operates the online gaming platform available at tapwin1.net (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you," "your," or "Player") who access or use the tapwin1 Platform, particularly our valued players across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City.

This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights you have in relation to your personal data. This policy applies to all personal data collected through the tapwin1 Platform, including through account registration, gameplay, financial transactions, customer support interactions, and your use of our website.

tapwin1 processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and the implementing rules and regulations issued by the National Privacy Commission (NPC). Where applicable, we also adhere to internationally recognized data protection principles.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the tapwin1 Platform. By using tapwin1, you confirm that you are at least 21 years of age and consent to the processing of your personal data as described in this policy.

02 Personal Data We Collect

tapwin1 collects personal data that is necessary to provide you with a safe, secure, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents
• Selfie or facial image for identity verification purposes
• Proof of payment method ownership

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details — stored in tokenized or masked form only)
• Account balance history
• Bonus and promotional transaction records

2.4 Gaming Activity Data

• Game session history, including games played, wagers placed, and outcomes
• Responsible gaming settings and self-exclusion records
• Bonus usage and wagering activity

2.5 Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies

2.6 Communications Data

• Records of your communications with tapwin1 customer support
• Feedback, complaints, and dispute records
• Marketing communication preferences

03 How We Use Your Personal Data

tapwin1 uses the personal data we collect for the following purposes:

tapwin1 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or as otherwise permitted by applicable law.

04 Legal Basis for Processing

tapwin1 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to provide you with access to the tapwin1 Platform, process your transactions, and manage your account.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations (RA 9160), gaming regulations, and tax reporting obligations.
• Legitimate interests: tapwin1 processes certain data to pursue its legitimate business interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: Where required by law, tapwin1 will obtain your explicit consent before processing your personal data — for example, for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Sharing Your Personal Data

tapwin1 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and for the purposes described in this policy:

• Payment processors and e-wallet providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers who assist tapwin1 in verifying your identity and age in compliance with regulatory requirements.
• Game software providers: Licensed game developers and platform providers whose games are available on tapwin1, to the extent necessary to deliver gaming services.
• Regulatory and law enforcement authorities: Philippine government agencies, including the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities, where disclosure is required by law or court order.
• IT and security service providers: Third-party providers who assist tapwin1 with platform hosting, cybersecurity, and technical operations, subject to strict data processing agreements.
• Professional advisors: Legal, accounting, and auditing firms, subject to professional confidentiality obligations.

All third parties with whom tapwin1 shares personal data are required to handle such data in accordance with applicable data protection laws and tapwin1's data processing standards. tapwin1 does not authorize any third party to use your personal data for their own independent marketing purposes.

06 Cookies and Tracking Technologies

tapwin1 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session security, and analyze Platform usage. The types of cookies we use include:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional cookies: These cookies remember your preferences and settings (such as language and display preferences) to provide a more personalized experience on tapwin1.
• Analytics cookies: tapwin1 uses aggregated, anonymized analytics data to understand how players use the Platform, identify areas for improvement, and optimize the gaming experience.
• Security cookies: These cookies help tapwin1 detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the tapwin1 Platform. tapwin1 does not use cookies to serve third-party advertising on the Platform.

07 Data Retention

tapwin1 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general data retention periods are as follows:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, as required by RA 9160.
• Financial transaction records: Retained for a minimum of five (5) years, in compliance with AML regulations and tax reporting obligations.
• Gaming activity records: Retained for a minimum of three (3) years following the relevant gaming session.
• Customer support communications: Retained for a minimum of two (2) years following the resolution of the relevant inquiry or complaint.
• Marketing preferences: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, tapwin1 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

08 Data Security

tapwin1 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the tapwin1 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access controls: Access to personal data within tapwin1 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Secure infrastructure: tapwin1's Platform is hosted on secure, regularly audited infrastructure with firewalls, intrusion detection systems, and continuous security monitoring.
• Password security: Player passwords are stored in hashed form using industry-standard cryptographic algorithms. tapwin1 will never ask you for your password via email, chat, or phone.
• Regular security assessments: tapwin1 conducts regular vulnerability assessments and security audits to identify and address potential security risks.

09 Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by tapwin1:

To exercise any of these rights, please contact tapwin1's Data Protection Officer using the contact details provided in Section 13 of this policy. tapwin1 will respond to all verified data subject requests within the timeframes prescribed by the Data Privacy Act of 2012.

10 Children's Privacy

The tapwin1 Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. tapwin1 does not knowingly collect personal data from individuals under the age of 21.

If tapwin1 discovers or has reason to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data in question, and take appropriate action in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and believe that your child has provided personal data to tapwin1, please contact our support team immediately so that we can take prompt action.

11 International Data Transfers

tapwin1 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software developers operating internationally.

Where personal data is transferred outside the Philippines, tapwin1 ensures that appropriate safeguards are in place to protect your data, including:

• Entering into data processing agreements with recipient organizations that require them to protect personal data to a standard equivalent to that required under Philippine law.
• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission.
• Implementing contractual clauses and technical safeguards to protect personal data during international transfers.

12 Updates to This Privacy Policy

tapwin1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this policy, tapwin1 will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how tapwin1 protects your personal data. Your continued use of the tapwin1 Platform following the posting of any changes constitutes your acknowledgment of the updated policy.

13 Contact Us and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by tapwin1, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that tapwin1 has not handled your personal data in accordance with the Data Privacy Act of 2012. Information about the NPC and how to file a complaint is available through official Philippine government channels.