taraplay Privacy Policy

1. Data Controller

The data controller responsible for the personal information processed in connection with your use of the taraplay platform is the operator of taraplay.co, a PAGCOR-licensed online gaming entity (hereinafter referred to as "taraplay", "we", "us", or "our").

As a data controller, taraplay determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully and in accordance with the Philippine Data Privacy Act of 2012, its implementing rules and regulations, and the issuances of the National Privacy Commission of the Philippines.

For all data privacy-related enquiries, including data subject rights requests, you may contact taraplay's designated Data Protection Officer (DPO) via the contact details set out in Section 15 of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create an account on taraplay, we collect the following information:

• Full legal name (as appearing on a valid Philippine government-issued identification document);
• Date of birth (for age verification — minimum 21 years);
• Registered email address;
• Philippine mobile number;
• Username and encrypted password;
• Residential address within the Philippines (for KYC and regulatory purposes).

2.2 KYC Verification Data

To satisfy PAGCOR regulatory requirements and Philippine anti-money laundering obligations, taraplay collects identity verification documents including:

• Copies of valid Philippine government-issued identification (PhilSys National ID, UMID, SSS card, driver's licence, or passport);
• Proof of address documents where required;
• Source of funds documentation for accounts exceeding defined transaction thresholds;
• Selfie or live photo for biometric identity verification where applicable.

2.3 Financial Transaction Data

taraplay collects and records all financial transactions associated with your account, including:

• GCash and PayMaya account numbers or registered mobile numbers used for deposits and withdrawals;
• Bank account details (BDO, BPI, Metrobank) where provided for withdrawals;
• Cryptocurrency wallet addresses where applicable;
• Transaction amounts, timestamps, and reference numbers;
• Deposit and withdrawal history for the lifetime of the account.

2.4 Gaming Activity Data

taraplay automatically records all gaming activity on the platform, including game sessions, bet amounts, win and loss outcomes, game titles played, session durations, and in-game behaviour patterns. This data is used for game integrity purposes, responsible gaming monitoring, and regulatory reporting.

2.5 Technical and Device Data

When you access the taraplay platform, we automatically collect certain technical information including your IP address, device type and model, browser type and version, operating system, screen resolution, approximate geographic location derived from IP address, and session timestamps. This data is used for fraud prevention, security monitoring, and platform optimisation.

2.6 Communications Data

taraplay retains records of communications between you and the taraplay support team, including live chat transcripts, email correspondence, and any complaint or dispute records. These are retained for quality assurance and dispute resolution purposes.

3. How We Collect Your Data

taraplay collects personal data through the following means:

• Directly from you — through account registration, KYC submission, transaction initiation, support communications, and voluntary provision of information;
• Automatically — through cookies, web server logs, session tracking technologies, and device fingerprinting as you interact with the taraplay platform;
• From third-party service providers — identity verification agencies, payment processors (GCash, PayMaya, BDO, BPI, Metrobank), and fraud detection services may provide supplementary data about you as part of verification and transaction processing workflows;
• From regulatory and law enforcement authorities — where legally required, we may receive or be required to share information with PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies.

4. Purpose and Legal Basis for Processing

taraplay processes your personal data for the following purposes, each of which is supported by a lawful basis under the Philippine Data Privacy Act:

• Account management and service delivery — Processing is necessary for the performance of the contract between you and taraplay (your account Terms and Conditions);
• Identity verification and KYC compliance — Processing is required for compliance with PAGCOR licensing obligations and the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended);
• Payment processing — Processing is necessary for the performance of the contract and for compliance with financial transaction reporting obligations;
• Fraud prevention and security — Processing is necessary for the legitimate interests of taraplay in protecting the platform, its players, and the integrity of gaming operations;
• Responsible gaming monitoring — Processing is required for compliance with PAGCOR responsible gaming obligations and for the protection of your vital interests as a player;
• Regulatory reporting — Processing is required for compliance with applicable Philippine law, including PAGCOR, AMLC, and National Privacy Commission obligations;
• Marketing communications — Where you have consented to receive promotional communications, taraplay may process your contact details for this purpose. Consent may be withdrawn at any time.

5. Data Sharing and Disclosure

5.1 Service Providers

taraplay shares personal data with carefully selected third-party service providers who process data on taraplay's behalf under data processing agreements that impose obligations equivalent to those in this Policy. These include KYC/identity verification providers, payment processing partners (including GCash and PayMaya operators), game platform providers, fraud detection services, and IT infrastructure providers.

5.2 Regulatory and Legal Disclosure

taraplay may disclose personal data to PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue, or other Philippine regulatory and law enforcement authorities where disclosure is required by law, court order, or regulatory direction. taraplay will comply with such requirements and will notify affected players where legally permissible to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of taraplay's assets, personal data held by taraplay may be transferred to the acquiring entity. Players will be notified of any such transfer and the applicable privacy terms that will govern their data following the transfer.

5.4 No Sale of Personal Data

taraplay does not sell, rent, or trade personal data to third-party advertisers, data brokers, or any other commercial entity for their own independent use. Any data sharing is limited to the purposes described in this Policy.

6. Data Retention

taraplay retains personal data for the periods set out below, after which data will be securely deleted or anonymised unless longer retention is required by applicable law:

• Account and registration data: Retained for the lifetime of the account plus five (5) years following permanent account closure, in accordance with PAGCOR record-keeping requirements;
• KYC verification documents: Retained for a minimum of five (5) years following account closure, in compliance with the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of ten (10) years in compliance with AMLC record-keeping obligations;
• Gaming activity data: Retained for five (5) years following the date of each game session;
• Support communications: Retained for three (3) years following the close of each support interaction;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year as an audit record.

7. Data Security

taraplay implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the taraplay platform;
• Encryption of sensitive data at rest, including password hashes and KYC document storage;
• Role-based access controls limiting taraplay staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the platform infrastructure;
• Two-factor authentication availability for all registered player accounts;
• Continuous monitoring for suspicious access patterns and automated account lockout on repeated failed login attempts.

While taraplay takes all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. In the event of a personal data breach affecting your rights and interests, taraplay will notify affected players and the National Privacy Commission within the timeframes prescribed by Philippine law.

8. Cookies and Tracking Technologies

taraplay uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly necessary cookies: Required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without preventing platform use.
• Functional cookies: Enable personalisation features such as language preferences, game lobby layout, and account settings persistence.
• Analytics cookies: Collect aggregated, anonymised data on how players interact with the taraplay platform, used to improve usability and performance.
• Fraud prevention tracking: Device fingerprinting and behavioural analysis to detect suspicious account activity and prevent multi-accounting.

You may configure your browser to block or delete non-essential cookies. Blocking strictly necessary cookies will impair your ability to use the taraplay platform. taraplay does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by taraplay:

• Right to be Informed: The right to know what personal data taraplay collects, how it is used, with whom it is shared, and how long it is retained — as described in this Privacy Policy;
• Right of Access: The right to request a copy of the personal data taraplay holds about you and information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. For certain data (such as registered name or date of birth), corrections must be supported by documentary evidence;
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data where processing is unlawful, the data is no longer necessary for its original purpose, or consent has been withdrawn — subject to overriding legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe taraplay has violated your data privacy rights.

To exercise any of the above rights, please contact taraplay's Data Protection Officer using the contact details in Section 15 of this Policy. taraplay will respond to verified data subject requests within fifteen (15) business days of receipt.

10. Children's Privacy

The taraplay platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR online gaming regulations. taraplay does not knowingly collect personal data from individuals below the age of 21. Where taraplay discovers that personal data has been collected from an individual below the legal minimum age, that data will be deleted and the associated account will be closed immediately.

If you believe a minor has registered on the taraplay platform, please notify the support team immediately via live chat or at [email protected].

11. Cross-Border Data Transfers

Some of taraplay's third-party service providers — including game platform providers and technology infrastructure partners — may process personal data outside of the Philippines. Where personal data is transferred outside of the Philippines, taraplay implements appropriate safeguards to ensure that the receiving entity provides a level of data protection equivalent to that required under Philippine law. These safeguards may include contractual data protection clauses, the recipient's compliance with internationally recognised data protection frameworks, or adherence to PAGCOR's data governance requirements for licensed operators.

12. Marketing Communications

With your consent, taraplay may send you promotional communications — including bonus offers, new game announcements, VIP programme updates, and platform news — by email or SMS to your registered Philippine mobile number. Your consent to receive marketing communications is obtained at the time of account registration and can be updated at any time from your account notification settings.

To withdraw consent for marketing communications, you may:

• Update your notification preferences in your taraplay account settings;
• Contact taraplay support via live chat;
• Email [email protected] with your withdrawal request.

Withdrawal of marketing consent will not affect your ability to use the taraplay platform or receive service-related communications (such as account security alerts, withdrawal confirmations, and KYC verification updates).

13. Third-Party Links

The taraplay platform does not contain links to external third-party websites for commercial or advertising purposes. Where references to third-party services (such as GCash or PayMaya) appear in the context of payment instructions, these are operational references and not endorsements. taraplay is not responsible for the privacy practices of third-party payment processors — players should review the privacy policies of those services independently.

14. Amendments to this Privacy Policy

taraplay reserves the right to update or amend this Privacy Policy at any time. Notice of material changes will be communicated to registered players via email to the address on file and/or through a prominent notice on the taraplay platform. The revised Policy will take effect on the date indicated in the notice. Continued use of the taraplay platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

Players are encouraged to review this Privacy Policy periodically to remain informed of how taraplay protects their personal data.

15. Contact and Complaints

For all data privacy enquiries, data subject rights requests, or privacy-related complaints, please contact taraplay through the following channels:

• Live Chat: Available 24/7 from your taraplay account dashboard — the fastest channel for urgent privacy-related concerns;
• Email (Data Protection Officer): [email protected] — for formal data subject rights requests and written privacy correspondence. Please include "Data Privacy Request" in your subject line. Allow up to fifteen (15) business days for a response.

If you are not satisfied with taraplay's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (privacy.gov.ph). taraplay will cooperate fully with any investigation conducted by the National Privacy Commission.

Note: The email address above is provided for correspondence reference only and is not a clickable link. For urgent account access issues, please use the 24/7 live chat function in your account dashboard.