1. Introduction and Scope
This Privacy Policy ("Policy") describes how tapwin7 ("tapwin7," "we," "us," or "our") collects, uses, stores, shares, and protects personal data obtained through the tapwin7 online gaming platform at tapwin7.org and all associated services (collectively, the "Platform").
This Policy applies to all registered users of the tapwin7 Platform, prospective users who interact with our registration flows, and visitors to the website. It applies regardless of how you access the Platform — through a desktop browser, mobile browser, or any other means.
tapwin7 acts as the personal information controller in respect of the personal data described in this Policy. We are registered with the National Privacy Commission of the Philippines as required by applicable law.
Please read this Policy carefully. If you have questions about how tapwin7 handles your personal data, please contact our Data Protection Officer using the details provided in Section 13 of this Policy.
2. Personal Data We Collect
tapwin7 collects the following categories of personal data in connection with your use of the Platform:
2.1 Identity & Contact Data
- Full legal name as it appears on your government-issued identification
- Date of birth (for mandatory age verification — tapwin7 is strictly 21+)
- Email address and mobile phone number
- Residential address, city, province, and postal code
- Username and account credentials (passwords are stored in hashed form only — tapwin7 never stores plain-text passwords)
2.2 Identity Verification Documents
- Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys national ID)
- Proof of address documentation
- Source-of-funds documentation where required by anti-money laundering regulations
- Selfie photographs taken for identity verification purposes
2.3 Financial & Transaction Data
- GCash account details and PayMaya details used for deposits and withdrawals
- Bank account details (BPI, BDO, Metrobank) used for bank transfer transactions
- Deposit history, withdrawal history, and transaction amounts in Philippine Peso (₱)
- Bonus redemption history and wagering records
2.4 Gameplay & Behavioral Data
- Game session records, wager amounts, game outcomes, and win/loss history
- Session duration, login timestamps, and logout timestamps
- Responsible gaming tool usage (deposit limit settings, session time alerts, self-exclusion requests)
- Customer support interaction records, including live chat transcripts
2.5 Technical & Device Data
- IP address and approximate geolocation data
- Device type, operating system version, and browser type
- Cookies and similar tracking technologies (see Section 8)
- Platform access logs and error reports
3. How We Collect Your Personal Data
tapwin7 collects personal data through the following means:
- Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
- Automated collection: Technical data collected automatically as you use the Platform, including via cookies, session tracking, and server logs.
- Third-party sources: Identity verification data from third-party KYC service providers; fraud detection data from anti-fraud platforms; payment verification data from GCash, PayMaya, and banking partners.
- Regulatory sources: Information shared with tapwin7 by PAGCOR or other competent authorities in connection with regulatory compliance obligations.
4. How We Use Your Personal Data
tapwin7 uses the personal data we collect for the following purposes:
- Account management: To create, maintain, and administer your tapwin7 account, including processing your login credentials and maintaining your account dashboard.
- Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity as required by applicable law and PAGCOR regulations.
- Payment processing: To process deposits via GCash, PayMaya, and bank transfer, and to process withdrawal requests to your registered payment accounts.
- Regulatory compliance: To comply with our obligations under the Philippine Anti-Money Laundering Act ("AMLA"), the Terrorism Financing Prevention and Suppression Act, PAGCOR licensing requirements, and other applicable laws.
- Fraud prevention and security: To detect and prevent fraudulent activity, unauthorized access, and other forms of abuse of the Platform.
- Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, to administer responsible gaming tools requested by users, and to enforce self-exclusion arrangements.
- Customer support: To respond to your inquiries, complaints, and support requests via live chat and email.
- Platform improvement: To analyze usage patterns and improve the functionality, security, and user experience of the tapwin7 Platform.
- Marketing communications: To send promotional communications where you have provided your consent. You may withdraw consent for marketing communications at any time through your account settings.
5. Legal Basis for Processing
Under the Philippine Data Privacy Act, tapwin7 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil the tapwin7 Terms & Conditions agreement with you, including account management, payment processing, and game service delivery.
- Legal obligation: Processing required to comply with Philippine law, including AMLA, PAGCOR regulations, tax obligations, and court orders.
- Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests do not override your privacy rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent that may be withdrawn at any time.
6. Sharing Your Personal Data
tapwin7 does not sell your personal data to third parties. We share your data only in the following limited circumstances:
- Payment processors: GCash (Mynt / Globe Fintech Innovations), PayMaya (Maya Bank), BPI, BDO, Metrobank, Visa, and Mastercard — solely for the purpose of processing your financial transactions.
- KYC and identity verification providers: Third-party identity verification platforms used to fulfil our KYC obligations. These providers process your data on our behalf under data processing agreements.
- Game content providers: Evolution Gaming, Pragmatic Play, PG Soft, and other game providers receive necessary session data to deliver their games within the tapwin7 Platform.
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities where required by law.
- Law enforcement: Philippine law enforcement agencies where disclosure is required by a valid court order, subpoena, or other legal process.
- Professional advisers: Legal counsel, auditors, and other professional advisers bound by confidentiality obligations.
All third parties with whom tapwin7 shares personal data are required to handle your data in accordance with applicable data protection laws and tapwin7's data processing standards.
7. Data Retention
tapwin7 retains personal data for as long as is necessary for the purposes set out in this Policy, subject to the following minimum retention periods required by law:
- Account and transaction records: Minimum five (5) years from account closure, as required by PAGCOR regulations and AMLA.
- KYC verification documents: Minimum five (5) years from the date of verification or account closure, whichever is later.
- Responsible gaming records: Retained for the duration of any self-exclusion period plus two (2) years.
- Customer support records: Two (2) years from the date of the interaction.
- Marketing consent records: Until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.
Upon expiry of the applicable retention period, tapwin7 will securely delete or anonymize your personal data in accordance with its data disposal procedures.
8. Cookies and Tracking Technologies
tapwin7 uses cookies and similar tracking technologies on the Platform for the following purposes:
- Essential cookies: Required for the Platform to function, including maintaining your logged-in session, processing transactions, and ensuring Platform security. These cookies cannot be disabled without affecting Platform functionality.
- Analytics cookies: Used to understand how players navigate and use the Platform, enabling us to improve the user experience. Analytics data is aggregated and does not identify individual users.
- Preference cookies: Store your Platform preferences, such as display settings and language preferences.
- Marketing cookies: Used only where you have given explicit consent to receive personalized promotional content. You may withdraw this consent at any time through your browser settings or by contacting tapwin7 support.
You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from using core Platform features including the tapwin7 Login function.
9. Data Security
tapwin7 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and tapwin7 servers.
- Encryption of sensitive data at rest, including payment credentials and identity documents.
- One-way cryptographic hashing of account passwords — tapwin7 cannot retrieve your password.
- Multi-factor authentication requirements for account access and withdrawal processing.
- Regular penetration testing and vulnerability assessments by independent security professionals.
- Strict access controls limiting employee access to personal data on a need-to-know basis.
- Incident response procedures for data breach detection, containment, and notification in accordance with NPC requirements.
In the event of a personal data breach that poses a real risk of serious harm to you as a data subject, tapwin7 will notify you and the National Privacy Commission in accordance with applicable Philippine law.
10. Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by tapwin7:
| Right | Description |
|---|---|
| Right to be Informed | The right to know what personal data tapwin7 holds about you, how it is used, and with whom it is shared — as set out in this Policy. |
| Right of Access | The right to request a copy of the personal data tapwin7 holds about you. tapwin7 will respond to access requests within fifteen (15) business days. |
| Right to Rectification | The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your tapwin7 account settings. |
| Right to Erasure | The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to tapwin7's legal retention obligations. |
| Right to Object | The right to object to processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing based on legitimate interests. |
| Right to Data Portability | The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible. |
| Right to Lodge a Complaint | The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated. |
To exercise any of these rights, please contact tapwin7's Data Protection Officer using the contact details in Section 13. tapwin7 will respond to all rights requests within the timeframes required by applicable law.
11. Children's Privacy and Underage Users
The tapwin7 Platform is strictly intended for use by persons aged 21 years and above. tapwin7 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory component of the tapwin7 registration process.
If tapwin7 becomes aware that personal data has been collected from a person under 21 years of age, tapwin7 will immediately suspend the relevant account, delete the personal data of the underage user, and take such additional steps as may be required by PAGCOR and applicable law.
If you believe that tapwin7 may have inadvertently collected personal data from a person under 21, please contact the tapwin7 Data Protection Officer immediately using the contact details in Section 13.
12. Changes to This Privacy Policy
tapwin7 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes to this Policy will be communicated to registered users by email to the address on file, or through a prominent notice on the Platform, at least seven (7) days prior to the effective date of the change.
Your continued use of the tapwin7 Platform after the effective date of any update to this Policy constitutes your acceptance of the revised terms. The date of the most recent update is shown at the top of this page. We recommend reviewing this Policy periodically.
13. Contact Information and Data Protection Officer
tapwin7 has appointed a Data Protection Officer ("DPO") as required by the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the tapwin7 DPO:
Data Protection Officer, tapwin7
Email: [email protected] (plain text — not a clickable link)
Response time: Within fifteen (15) business days of receipt
For urgent data security concerns or suspected data breaches, tapwin7's 24/7 live chat support is available through the Platform to escalate your concern immediately to the DPO team.
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with tapwin7's response to your data privacy concern.