🔒 tap646 Privacy Policy

This Privacy Policy ("Policy") describes how tap646 ("tap646," "we," "us," or "our") collects, processes, stores, and protects personal information provided by users ("you," "Player," or "User") of the tap646 online gaming platform, accessible at tap646.com and any associated mobile applications (collectively, the "Platform").

tap646 is committed to safeguarding the privacy of all players, particularly in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations as enforced by the National Privacy Commission ("NPC"). By registering an account or using the tap646 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

1. Information We Collect

tap646 collects personal information necessary to provide a safe, compliant, and enjoyable gaming experience. The categories of data we collect include:

1.1 Information You Provide Directly

• Full legal name, date of birth, and nationality;
• Email address, mobile number, and residential address (including city, e.g., Manila, Cebu, Davao, Quezon City, Makati);
• Government-issued identification documents (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID) submitted for KYC verification;
• Payment information, including GCash account numbers, PayMaya details, BDO, BPI, or Metrobank account references (we do not store full card numbers);
• Username, password (stored in hashed form), and security question responses;
• Communications you send to our customer support team.

1.2 Information Collected Automatically

• IP address, device type, operating system, and browser type;
• Geolocation data (country and region level) to verify eligibility;
• Session data, including login timestamps, pages visited, and game activity logs;
• Cookies and similar tracking technologies (see Section 6);
• Transaction history, including deposits, withdrawals, wagers, and bonus usage.

1.3 Information from Third Parties

• Identity verification data from KYC/AML service providers;
• Payment confirmation data from GCash, PayMaya, and banking partners;
• Fraud detection signals from third-party risk management services.

2. How We Use Your Information

tap646 processes your personal data for the following purposes:

• Account Management: To register, verify, and maintain your tap646 player account;
• Identity Verification: To comply with KYC and AML obligations, including age verification (21+ requirement) as mandated by PAGCOR regulations;
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment methods in PHP;
• Platform Operation: To deliver, maintain, and improve the tap646 gaming platform, including game functionality, customer support, and technical operations;
• Regulatory Compliance: To fulfill legal obligations under Philippine law, including reporting requirements to PAGCOR and the Anti-Money Laundering Council (AMLC);
• Responsible Gaming: To monitor gaming behavior and enforce responsible gaming tools such as deposit limits, self-exclusion, and cooling-off periods;
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, cheating, and unauthorized access;
• Marketing Communications: To send you promotional offers, bonuses, and platform updates, where you have provided consent or where permitted by applicable law. You may opt out at any time;
• Analytics: To analyze Platform usage patterns and improve user experience.

3. Legal Basis for Processing

tap646 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration;
• Legal Obligation: Processing required to comply with applicable Philippine laws and PAGCOR regulatory requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming enforcement;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained.

4. Sharing of Personal Data

tap646 does not sell your personal data to third parties. We may share your information with the following categories of recipients:

• Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, solely for transaction processing purposes;
• KYC/AML Providers: Identity verification and anti-money laundering service providers engaged to fulfill our regulatory obligations;
• Game Providers: Third-party game studios and live dealer operators whose games are hosted on the tap646 Platform, to the extent necessary for game delivery;
• Regulatory Authorities: PAGCOR, the NPC, AMLC, and other Philippine government agencies, where required by law or regulatory mandate;
• IT & Security Providers: Cloud hosting, cybersecurity, and fraud detection service providers operating under strict data processing agreements;
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by tap646 are contractually required to process personal data only for the specified purpose and in accordance with applicable data protection laws.

5. Cookies & Tracking Technologies

tap646 uses cookies and similar technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled;
• Functional Cookies: Remember your language preferences, login status, and game settings;
• Analytics Cookies: Collect anonymized data about how players use the Platform to help us improve performance and user experience;
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core tap646 Platform.

6. Data Retention

tap646 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements;
• KYC documentation is retained for the period required by applicable AML regulations;
• Marketing consent records are retained until you withdraw consent or for three (3) years following your last interaction with tap646, whichever is earlier;
• Technical logs and session data are retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

7. Data Security

tap646 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the tap646 Platform;
• Bcrypt hashing for all stored passwords;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing;
• Two-factor authentication options for player accounts;
• Secure, encrypted storage of KYC documents.

While tap646 takes all reasonable precautions, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, tap646 will notify affected players and the NPC in accordance with the requirements of the Data Privacy Act of 2012.

8. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tap646:

• Right to be Informed: To know what personal data tap646 holds about you and how it is processed;
• Right of Access: To request a copy of the personal data tap646 holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of your personal data, subject to our legal retention obligations;
• Right to Object: To object to the processing of your personal data for direct marketing purposes;
• Right to Data Portability: To receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer via the contact details in Section 13 of this Policy. We will respond to all verified requests within thirty (30) days.

9. Protection of Minors

tap646 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for adults aged 21 and above, in accordance with Philippine gambling regulations. If tap646 becomes aware that personal data has been collected from a minor, such data will be immediately deleted and the associated account will be suspended.

Parents and guardians are encouraged to use parental control software to prevent underage access to online gambling platforms.

10. International Data Transfers

Some of tap646's service providers may be located outside the Philippines. Where personal data is transferred internationally, tap646 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to maintain data protection standards equivalent to those required under Philippine law.

11. Changes to This Policy

tap646 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or a prominent notice on the Platform at least seven (7) days before taking effect. The "Last Updated" date at the top of this Policy will reflect the most recent revision. Continued use of the tap646 Platform following any update constitutes your acceptance of the revised Policy.

12. Contact & Data Controller

tap646 is the data controller responsible for your personal information. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

Email: support tap646.com

Our customer support team is available 24/7 via live chat on the Platform. For formal data subject requests, please include your full name, registered email address, and a description of your request to enable us to process it efficiently.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.