Privacy Policy – tapwi Online Casino Philippines

1. Introduction and Scope

1.1 Purpose of This Policy

This Privacy Policy describes how tapwi ("we," "us," or "our") collects, uses, discloses, stores, and protects personal information obtained from users ("you" or "your") of the tapwi online casino platform, including the website located at tapwi.cam and all associated mobile applications and services (collectively, the "Platform"). By accessing or using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

1.2 Data Controller

tapwi is the data controller responsible for your personal information collected through the Platform. We are registered with the National Privacy Commission of the Philippines and comply with all applicable data protection regulations including the Data Privacy Act of 2012, its implementing rules and regulations, and relevant National Privacy Commission circulars and issuances.

1.3 Consent and Agreement

By creating a tapwi account, using our services, or continuing to access the Platform after this Privacy Policy becomes effective, you expressly consent to the collection, processing, use, storage, disclosure, and transfer of your personal information as described herein. If you do not agree with this Privacy Policy, you must discontinue use of the Platform immediately.

1.4 Updates to This Policy

tapwi reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through email notification or prominent notice on the Platform. The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. Continued use of the Platform after changes are posted constitutes acceptance of the modified Privacy Policy.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for a tapwi account, use our services, or communicate with us, we collect various categories of personal information that you voluntarily provide, including:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (e.g., passport number, driver's license number, national ID number).
• Contact Information: Residential address, email address, mobile phone number, alternative contact details.
• Account Credentials: Username, password, security questions and answers, authentication information.
• Financial Information: Payment method details (GCash account, PayMaya account, bank account information), transaction history, deposit and withdrawal records.
• Verification Documents: Copies of government-issued identification documents, proof of address documents (utility bills, bank statements), proof of payment method ownership, selfie photographs for identity verification.
• Communication Records: Customer support inquiries, chat transcripts, email correspondence, survey responses, feedback submissions.

2.2 Information Collected Automatically

When you access and use the tapwi Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, model, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID).
• Connection Information: IP address, internet service provider, connection type, network performance data.
• Usage Information: Pages visited, games played, time spent on pages, click patterns, navigation paths, referral sources, search queries, session duration.
• Gaming Activity: Bets placed, games played, win/loss records, bonus usage, withdrawal requests, account balance changes.
• Location Data: Approximate geographic location derived from IP address (required to verify you are accessing the Platform from within the Philippines).

2.3 Information from Third Parties

tapwi may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with regulatory obligations:

• Payment Processors: Transaction confirmation data, payment method verification, fraud screening results.
• Identity Verification Services: Identity authentication results, document verification outcomes, fraud risk assessments.
• Credit Reference Agencies: Financial history information for responsible lending assessments (where applicable).
• Regulatory Authorities: Information related to self-exclusion programs, licensing checks, compliance verifications.

3. How We Use Your Information

3.1 Primary Purposes

tapwi processes your personal information for the following legitimate business purposes:

• Account Management: Creating, maintaining, and administering your tapwi account, authenticating your identity, verifying your eligibility to use our services.
• Service Provision: Processing deposits and withdrawals, facilitating gameplay, managing bonuses and promotions, maintaining game history records.
• Customer Support: Responding to inquiries, resolving disputes, addressing complaints, providing technical assistance.
• Security and Fraud Prevention: Detecting and preventing fraudulent activities, protecting against unauthorized access, identifying duplicate accounts, enforcing Terms and Conditions.
• Regulatory Compliance: Meeting PAGCOR licensing requirements, complying with anti-money laundering (AML) regulations, fulfilling know-your-customer (KYC) obligations, responding to legal process and government requests.
• Responsible Gaming: Implementing deposit limits, monitoring gaming patterns, enforcing self-exclusion programs, identifying potential problem gambling behaviors.

3.2 Marketing and Communications

With your consent, tapwi may use your contact information to send you marketing communications including promotional offers, bonus announcements, game launches, newsletters, and other commercial messages. You may opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account communication preferences, or contacting customer support. Opting out of marketing communications does not affect transactional communications necessary for account management and service provision.

3.3 Analytics and Improvement

tapwi uses aggregated and anonymized data for analytical purposes to improve the Platform, enhance user experience, develop new features, optimize game selection, and inform business decisions. This analytical processing does not identify individual users and does not involve profiling or automated decision-making that produces legal or similarly significant effects.

4. Legal Basis for Processing

4.1 Contractual Necessity

Processing of your personal information is necessary to perform the contract between you and tapwi, specifically to provide online casino services, process financial transactions, maintain your account, and fulfill our obligations under the Terms and Conditions you agreed to upon registration.

4.2 Legal Obligations

tapwi processes personal information to comply with legal obligations imposed by PAGCOR regulations, anti-money laundering laws, tax reporting requirements, data retention mandates, and other applicable Philippine laws and regulations governing online gambling operations.

4.3 Legitimate Interests

tapwi has legitimate business interests in processing personal information for security purposes, fraud prevention, platform improvement, customer support, and business analytics, provided such processing does not override your fundamental rights and freedoms.

4.4 Consent

For processing activities not covered by contractual necessity, legal obligations, or legitimate interests (such as marketing communications and certain cookies), tapwi obtains your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5. Information Sharing and Disclosure

5.1 Service Providers

tapwi shares personal information with carefully selected third-party service providers who perform services on our behalf, including:

• Payment Processors: GCash, PayMaya, banking institutions, and other payment service providers to process deposits and withdrawals.
• Game Providers: Third-party software developers who supply casino games available on the Platform.
• Identity Verification Services: Third-party providers who verify identity documents and perform KYC checks.
• Cloud Service Providers: Hosting and data storage providers who maintain our technical infrastructure.
• Customer Support Platforms: Third-party systems used to manage customer inquiries and support tickets.
• Analytics Providers: Services that help us understand Platform usage and user behavior.

All service providers are bound by strict data protection agreements requiring them to process personal information only as instructed by tapwi and to implement appropriate security measures.

5.2 Regulatory Authorities

tapwi discloses personal information to PAGCOR and other regulatory authorities as required to maintain our operating license, demonstrate compliance with gambling regulations, respond to regulatory inquiries, and fulfill reporting obligations. We may also disclose information to law enforcement agencies, courts, and government bodies when legally required or when necessary to protect our legal rights.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving tapwi, personal information may be transferred to the acquiring or successor entity. You will be notified of any such transfer, and the new entity will be bound by this Privacy Policy unless you are provided notice of a new privacy policy and opportunity to opt out.

5.4 Other Disclosures

tapwi may disclose personal information when we believe in good faith that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or the public, to enforce our Terms and Conditions, to prevent fraud or abuse, or to comply with legal process.

6. Data Security

6.1 Security Measures

tapwi implements comprehensive technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your device and tapwi servers is encrypted using industry-standard TLS/SSL protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Strict access controls limit access to personal information to authorized personnel who require access to perform their job functions. Multi-factor authentication protects administrative access.
• Network Security: Firewalls, intrusion detection systems, and continuous monitoring protect our infrastructure against cyber threats.
• Secure Development: Security considerations are integrated into software development lifecycle, including code reviews, vulnerability testing, and penetration testing.
• Employee Training: All employees with access to personal information receive regular data protection and security awareness training.

6.2 Data Breach Response

In the unlikely event of a data breach affecting your personal information, tapwi will notify you and the National Privacy Commission within the timeframes required by law and will take immediate steps to investigate the breach, mitigate harm, and prevent future incidents.

7. Data Retention

7.1 Retention Periods

tapwi retains personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus 10 years after account closure to comply with PAGCOR recordkeeping requirements and tax laws.
• Transaction Records: Retained for 10 years after the transaction date to meet financial recordkeeping and anti-money laundering obligations.
• Identity Verification Documents: Retained for 10 years after account closure or last transaction, whichever is later.
• Communication Records: Retained for 3 years or as required to resolve disputes and maintain records of customer interactions.
• Marketing Consents: Retained until consent is withdrawn or the account is closed.

7.2 Secure Deletion

When personal information is no longer required to be retained, tapwi securely deletes or anonymizes such information using industry-standard data destruction methods that prevent recovery or reconstruction.

8. Your Privacy Rights

8.1 Rights Under Philippine Law

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Information: Right to be informed whether personal information about you is being processed and to receive information about the processing.
• Right to Access: Right to access your personal information held by tapwi and obtain copies of such information.
• Right to Correction: Right to correct inaccurate or incomplete personal information.
• Right to Erasure: Right to request deletion of personal information under certain circumstances, subject to legal retention obligations.
• Right to Object: Right to object to processing of personal information for direct marketing purposes or processing based on legitimate interests.
• Right to Data Portability: Right to receive personal information in a structured, commonly-used format and transmit it to another controller where technically feasible.
• Right to Lodge Complaint: Right to file a complaint with the National Privacy Commission if you believe your privacy rights have been violated.

8.2 Exercising Your Rights

To exercise any of these rights, please contact tapwi's Data Protection Officer through the contact details provided in Section 11 below. We will respond to your request within 30 days. Certain requests may require identity verification before we can process them. In some cases, legal or regulatory requirements may prevent us from fulfilling your request, in which case we will explain the reasons.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you access the tapwi Platform. Cookies help us recognize your device, remember your preferences, understand how you use the Platform, and improve your experience. tapwi uses both first-party cookies (set by us) and third-party cookies (set by service providers).

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function, including authentication, security, and session management. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and personalization choices to enhance your experience.
• Analytics Cookies: Collect information about how visitors use the Platform, which pages are most popular, and where errors occur, helping us improve the Platform.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. These require your consent.

9.3 Managing Cookies

You can control cookies through your browser settings, choosing to accept all cookies, reject all cookies, or receive notification when a cookie is set. Note that blocking essential cookies may prevent you from using certain features of the Platform. You can also manage marketing cookies through our cookie consent tool available on the Platform.

10. International Data Transfers

10.1 Data Storage Location

tapwi primarily stores personal information on servers located within the Philippines or in jurisdictions that provide adequate data protection standards as determined by the National Privacy Commission. Some of our service providers may process personal information in other countries.

10.2 Safeguards for Transfers

When personal information is transferred outside the Philippines, tapwi ensures that appropriate safeguards are in place through contractual clauses requiring recipients to provide data protection equivalent to Philippine standards, compliance with recognized international data protection frameworks, or obtaining your explicit consent where required by law.

11. Contact Information and Complaints

11.1 Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or tapwi's data protection practices, please contact our Data Protection Officer at:

Email: [email protected]
Subject Line: Privacy Inquiry - [Your Account Username]

11.2 National Privacy Commission

If you believe tapwi has violated your privacy rights under Philippine law, you have the right to lodge a complaint with the National Privacy Commission. Contact information for the NPC is available on their official website.

11.3 Response Timeframe

tapwi will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within 30 days. Complex requests may require additional time, in which case we will notify you of the extension and expected response date.