tapwin7 Privacy Policy

1. Data Controller

tapwin7 ("tapwin7," "we," "us," "our"), the operator of the online gaming platform accessible at https://tapwin7.vip, is the Data Controller in respect of the personal data of registered users and visitors of the Platform. tapwin7 is registered and operates under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR) within the Republic of the Philippines.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (DPA), its Implementing Rules and Regulations (IRR), and all relevant issuances of the National Privacy Commission (NPC). It applies to all personal data collected by tapwin7 through the Platform, customer support channels, and any other means by which tapwin7 receives personal data from or about you.

2. Personal Data We Collect

2.1 Registration and Account Data

When you create a tapwin7 account, we collect the personal data you provide, which includes:

• Philippine mobile number (primary account identifier)
• Username and encrypted account password
• Date of birth (for mandatory 21+ age verification)
• Email address (optional, for account notifications)

2.2 Identity Verification (KYC) Data

In accordance with PAGCOR licensing requirements and the Anti-Money Laundering Act of the Philippines (RA 9160, as amended), tapwin7 may request and retain the following for Know-Your-Customer verification purposes:

• Government-issued identification (e.g., Philippine passport, driver's licence, UMID, SSS ID, PhilHealth ID, Voter's ID)
• Proof of address documentation
• Source of funds declarations where required by applicable thresholds
• Selfie or live photo for identity confirmation

2.3 Financial Transaction Data

We collect records of all deposits and withdrawals made through your tapwin7 account, including payment method identifiers (e.g., your GCash-registered mobile number, Maya account reference, or bank account details as required for withdrawal routing). Full payment card or bank account numbers are never stored by tapwin7 directly — these are handled by PCI-DSS compliant third-party payment processors.

2.4 Gaming Activity Data

tapwin7 logs all gaming activity conducted through your account, including bet amounts, game titles accessed, session duration, win and loss records, and bonus activity. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

2.5 Technical and Device Data

We automatically collect certain technical data when you access the tapwin7 Platform, including IP address, device type and operating system, browser type and version, referring URL, pages visited, session timestamps, and geolocation data at the country and region level. This data is collected to secure the platform, detect fraud, and improve user experience.

2.6 Communications Data

Records of communications you direct to tapwin7 — including live chat transcripts, support ticket content, and any correspondence submitted via the Platform — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Personal Data

tapwin7 uses the personal data described above for the following purposes:

• Account creation and management: Registering your tapwin7 account, verifying your identity, and maintaining your account in good standing
• Service delivery: Processing deposits and withdrawals, delivering gaming services, crediting bonuses, and providing customer support
• Regulatory compliance: Meeting PAGCOR licensing obligations, complying with the Anti-Money Laundering Act, and fulfilling other applicable Philippine legal requirements
• Age and identity verification: Ensuring that only eligible players aged 21 and above access real-money features of the Platform
• Fraud prevention and platform security: Detecting and preventing fraudulent account activity, multiple account creation, money laundering, and unauthorized access
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and to administer responsible gaming tools and self-exclusion programs
• Marketing communications: Sending promotional materials, bonus notifications, and platform updates — but only where you have provided explicit consent and subject to your right to withdraw that consent at any time
• Platform improvement: Analyzing aggregate and anonymized usage data to improve Platform performance, game selection, and user experience

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, tapwin7 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and tapwin7 — i.e., to operate your account and deliver gaming services
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, and other applicable Philippine laws
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights
• Consent: Processing for marketing communications and optional data collection purposes, where your prior consent has been obtained and can be withdrawn at any time without affecting the lawfulness of prior processing

5. Sharing and Disclosure of Your Data

tapwin7 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the minimum extent necessary for the stated purpose:

5.1 Payment Processors

Personal data necessary to process transactions (including name, mobile number, and account references) is shared with our licensed Philippine payment partners — including GCash, Maya, GrabPay, BPI, BDO, and Metrobank — solely to process your deposits and withdrawals.

5.2 Game Providers

Game providers whose titles are available on the tapwin7 Platform receive session tokens and technical identifiers required to deliver game content. tapwin7 does not share your name or full personal details with game providers beyond what is technically required for session authentication.

5.3 Regulatory and Law Enforcement Authorities

tapwin7 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where required by law, valid legal process, or regulatory directive — without prior notice to you where legally required or permitted.

5.4 Service Providers

tapwin7 engages third-party service providers to perform functions including KYC verification, IT infrastructure, fraud detection, and customer support tooling. These providers act as Data Processors and are contractually bound to process personal data only on tapwin7's instructions and to implement appropriate security measures.

6. Data Retention

tapwin7 retains personal data for as long as your account is active and for such additional period as required by applicable Philippine law and PAGCOR regulations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the AMLA
• Financial transaction records are retained for a minimum of five (5) years from the date of each transaction
• Gaming activity logs are retained for a minimum of three (3) years
• Communications data is retained for up to two (2) years, unless required for an ongoing dispute or regulatory inquiry
• Marketing consent records are retained for the duration of your account and for three (3) years following withdrawal of consent

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymized.

7. Security Measures

tapwin7 implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and the tapwin7 Platform
• Encryption of sensitive data at rest, including account passwords (stored as salted cryptographic hashes) and KYC documents
• OTP-based two-factor authentication for account access and sensitive account operations
• Role-based access controls limiting internal access to personal data to authorized personnel with a demonstrated need
• Regular security assessments and penetration testing of the Platform infrastructure
• Segregated player fund accounts, ensuring your wallet balance is held separately from tapwin7's operating accounts

8. Cookies and Tracking Technologies

tapwin7 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by the tapwin7 Platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled
• Functional cookies: Store your preferences, such as language settings and display options, to personalize your experience
• Analytics cookies: Collect aggregate, anonymized data about how the Platform is used — including pages visited, session duration, and navigation paths — to improve Platform performance
• Marketing cookies: Used to serve relevant promotions and track the effectiveness of tapwin7 marketing campaigns, where you have consented

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. tapwin7 does not use cookies to track your activity on third-party websites.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its IRR, you have the following rights in respect of your personal data held by tapwin7:

To exercise any of the above rights, contact tapwin7's Data Protection Officer at the contact details provided in Section 13 of this Policy. tapwin7 will respond to verified requests within fifteen (15) business days.

10. Children's Privacy and Age Restriction

11. International Data Transfers

tapwin7 is a Philippines-based platform and processes the majority of personal data within the Philippines. Where technical service providers or game providers are located in jurisdictions outside the Philippines, tapwin7 ensures that appropriate safeguards are in place prior to any transfer of personal data, including data processing agreements incorporating NPC-approved standard contractual clauses or equivalent protections under the DPA and its IRR.

12. Changes to This Privacy Policy

tapwin7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or tapwin7's data processing practices. Material amendments will be communicated to registered players via the mobile number or email address associated with their account, or via a prominent notice on the Platform, not less than seven (7) days prior to the effective date of the change. Continued use of the tapwin7 Platform following the effective date constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact and Data Protection Officer

If you wish to exercise your data subject rights, have questions about this Privacy Policy, or wish to raise a data privacy concern, please contact tapwin7's Data Protection Officer through the following channels:

tapwin7 targets acknowledging all data subject requests within three (3) business days and completing verified requests within fifteen (15) business days. For complex requests, this period may be extended by an additional fifteen (15) business days with prior notice.