tap777 Privacy Policy

tap777 ("tap777", "we", "us", "our") is the data controller responsible for personal data collected through the tap777 website, mobile interface, and all related services (collectively, the "Platform"). We are committed to handling your personal information with integrity, transparency, and in full compliance with applicable Philippine data protection law.

This Privacy Policy has been drafted in compliance with the Republic Act 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR) as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects the data handling obligations imposed on tap777 by PAGCOR as part of our operating license conditions.

1.1 This Privacy Policy applies to all personal data collected by tap777 through the following channels:

• Account registration and KYC (Know Your Customer) verification
• Use of any tap777 game, betting market, or platform feature
• Financial transactions including deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and 7-Eleven
• Customer support interactions including live chat, email, and any other communication channel
• Browsing and navigating the tap777 website and mobile interface
• Participation in promotions, tournaments, loyalty programs, and surveys

1.2 This Policy applies to natural persons who register accounts, visit the platform as guests, or interact with tap777 through any of the above channels. It does not apply to the personal data of tap777 employees, contractors, or business partners, which is governed by separate internal policies.

1.3 This Policy should be read alongside the tap777 Terms & Conditions and the Responsible Gaming Policy, which together form the complete framework governing your relationship with tap777.

2.1 tap777 collects the following categories of personal data from registered players and platform users:

2.2 Sensitive Personal Information. Under the Data Privacy Act of 2012, certain data points — including government ID numbers — are classified as sensitive personal information and are accorded a higher standard of protection by tap777. We collect sensitive personal information only to the extent strictly required for legal compliance and identity verification.

2.3 tap777 does not collect or store complete payment card numbers. Where card transactions are processed, they are handled by PCI-DSS compliant payment processors who are contractually bound to tap777's data protection standards.

3.1 Directly from You. The majority of personal data tap777 holds is provided directly by you through:

• Account registration forms — name, mobile number, email address, date of birth
• KYC verification submissions — government ID documents and selfies
• Deposit and withdrawal requests — e-wallet and bank account details
• Promotional form entries and survey responses
• Communications with our customer support team via live chat or email

3.2 Automatically Through Platform Use. When you access and use the tap777 platform, we automatically collect technical and usage data including:

• Your IP address and general geographic location (region/city level, such as Metro Manila, Cebu, Davao)
• Device information — model, operating system version, mobile browser type
• Session data — login timestamps, session duration, pages visited, games played
• Game interaction logs — bets placed, outcomes, bet amounts in Philippine Peso

3.3 From Third-Party Sources. With your consent, tap777 may receive data from:

• GCash and Maya — transaction confirmation data to verify deposits and process withdrawals
• PAGCOR self-exclusion registers — to confirm whether a registrant appears on any active exclusion list
• KYC verification service providers — to cross-check identity document authenticity

4.1 tap777 uses personal data collected from players for the following purposes:

• Account Management: Creating and maintaining your tap777 account, processing your login credentials, and managing your PHP wallet balance.
• Identity Verification (KYC): Confirming your identity and age (21+) as required by PAGCOR licensing conditions and Philippine law.
• Transaction Processing: Processing GCash, Maya, bank deposits and withdrawals in Philippine Peso, maintaining accurate financial records, and preventing payment fraud.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions and account activity for indicators of money laundering or financial fraud as required by Republic Act 9160 (Anti-Money Laundering Act) and related PAGCOR directives.
• Platform Operation: Running games, betting markets, live dealer sessions, sabong feeds, and bingo draws — all of which require processing your gameplay and session data.
• Customer Support: Responding to queries, resolving disputes, processing complaints, and providing technical assistance.
• Responsible Gaming: Monitoring play patterns to identify indicators of problem gambling and applying responsible gaming tools where needed, including deposit limit enforcement, session reminders, and self-exclusion measures.
• Communications: Sending account notifications, transaction confirmations, security alerts, and (where consented) promotional offers by SMS, email, or in-app message.
• Platform Improvement: Analyzing aggregate usage data to improve game selection, platform performance, and user experience — all in anonymized or pseudonymized form.
• Legal and Regulatory Compliance: Meeting all obligations imposed on tap777 by PAGCOR, the NPC, the AMLC, and any other competent Philippine authority.

4.2 tap777 does not sell, rent, or trade your personal data to third parties for their marketing purposes. We do not engage in profiling for targeted advertising using player data.

5.1 Under the Data Privacy Act of 2012, tap777 processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our obligations under the tap777 Terms & Conditions — including account creation, transaction processing, and game operation.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, and other applicable Philippine laws — including KYC verification, AML monitoring, and regulatory reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes — such as sending promotional SMS or email communications — is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5.2 Where processing is based on consent, you have the right to withdraw that consent at any time by contacting tap777 support or updating your account communication preferences. Withdrawal of consent for optional communications does not affect your ability to maintain a tap777 account or access platform services.

6.1 tap777 does not sell your personal data. We share personal data only in the following limited and defined circumstances:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, and 7-Eleven receive the minimum transaction data necessary to process your deposits and withdrawals. These processors are independently regulated and bound by their own privacy frameworks.
• KYC Service Providers: Third-party identity verification vendors receive your submitted ID documents solely to authenticate identity on tap777's behalf. These vendors are contractually prohibited from using your data for any other purpose.
• Game Providers: JILI, Pragmatic Play, PG Soft, and other licensed game studios receive anonymized or pseudonymized gameplay session data necessary to operate game rounds. They do not receive your full personal identity data.
• PAGCOR: As our licensing authority, PAGCOR may require access to player account data, transaction records, or game logs for regulatory inspection, audit, or investigation purposes. tap777 is legally obligated to comply with such requests.
• Anti-Money Laundering Council (AMLC): Where required by Republic Act 9160, tap777 may report suspicious transactions or provide account data to the AMLC. These disclosures are mandatory under Philippine law.
• Law Enforcement and Courts: tap777 will disclose personal data to Philippine law enforcement agencies or courts where required by lawful order, search warrant, or other compulsory legal process.

6.2 Where tap777 engages third-party processors to handle personal data on our behalf, we ensure such processors are bound by data processing agreements that require GDPR-equivalent or DPA-equivalent standards of data protection.

7.1 tap777 uses cookies and similar tracking technologies (including session tokens and local browser storage) on the platform to enable core functionality and improve user experience. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — including maintaining your login session, storing your PHP wallet state, and remembering your game lobby position. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Collect anonymized data about how players navigate the tap777 platform — which game categories are visited most, page load times, and error events. This data is used in aggregate to improve platform performance and is not linked to individual identities.
• Functional Cookies: Remember your platform preferences — such as your preferred language, notification settings, and game lobby sort order — so you don't have to reconfigure them on each visit.

7.2 tap777 does not use third-party advertising cookies or behavioral tracking cookies that profile your activity across other websites for advertising purposes.

7.3 You may manage cookie settings through your browser. Note that disabling strictly necessary cookies will impair your ability to use the tap777 platform, including login functionality. For guidance on managing cookies in Chrome on Android (the most commonly used browser among Filipino tap777 players), refer to the Chrome browser settings under Privacy and Security.

8.1 tap777 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the minimum retention periods required by applicable law. The following retention guidelines apply:

• Active Account Data: Retained for the duration of your tap777 account and for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and Philippine AML regulations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of account closure or from the date of the last transaction, whichever is later, in accordance with AMLA record-keeping requirements under Republic Act 9160.
• Transaction Records: Financial records including deposit and withdrawal history are retained for a minimum of five (5) years from the transaction date, consistent with BIR and AMLA requirements.
• Game Logs: Individual game session logs are retained for a minimum of two (2) years for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two (2) years.
• Technical Logs: Server logs and access logs are retained for a maximum of twelve (12) months unless a specific security investigation requires longer retention.

8.2 Upon expiry of the applicable retention period, tap777 will securely delete or permanently anonymize your personal data in accordance with the NPC's recommended data disposal standards.

9.1 tap777 implements technical and organizational security measures appropriate to the sensitivity of personal data held and the risks associated with online gambling platform operations. These measures include:

• Encryption in Transit: All data transmitted between your device and tap777 is encrypted using TLS 1.3 with 256-bit SSL certificates. This covers login credentials, financial transactions, and all API communications.
• Encryption at Rest: Sensitive personal data including KYC documents, government ID numbers, and payment account details are stored in encrypted form within tap777's infrastructure.
• Access Controls: Access to personal data within tap777's systems is restricted on a need-to-know basis. Staff with access to sensitive player data are subject to confidentiality obligations and background checks.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA for their tap777 accounts, adding an additional layer of protection against unauthorized access.
• Intrusion Detection: tap777's infrastructure includes automated monitoring for unusual access patterns, potential brute-force attacks, and data exfiltration attempts.
• Penetration Testing: tap777 conducts periodic security assessments and penetration tests on its platform infrastructure.

9.2 While tap777 takes all reasonable precautions to protect personal data, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own devices and login credentials. tap777 recommends enabling device screen locks, keeping software updated, and not using shared or public devices to access your tap777 account.

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tap777:

• Right to Be Informed: You have the right to be informed of how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data tap777 holds about you, including the categories of data held, the purposes of processing, and any disclosures made to third parties.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Identity and KYC data corrections may require re-submission of supporting documents.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (see Section 8).
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests rather than legal obligation or contractual necessity.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe tap777 has mishandled your personal data.

10.2 To exercise any of these rights, please contact tap777's Data Protection Officer via the contact details in Section 13. tap777 will respond to data rights requests within 15 business days of receipt, in accordance with NPC guidelines.

10.3 Please note that certain rights are subject to limitations. For example, the right to erasure cannot override tap777's legal obligation to retain data for PAGCOR compliance and AMLA purposes during the mandatory retention periods stated in Section 8.

11.1 The tap777 platform is strictly intended for adults aged 21 years and older, in compliance with PAGCOR regulations governing online gambling in the Philippines. tap777 does not knowingly collect personal data from individuals under the age of 21.

11.2 Where tap777 discovers, through KYC verification or any other means, that an account has been registered by or on behalf of a person under the age of 21, that account will be immediately closed, all real-money gameplay will be suspended, and deposits will be returned in accordance with PAGCOR regulatory procedures.

11.3 If you believe that tap777 has inadvertently collected personal data from a minor, please contact the Data Protection Officer immediately at the contact details provided in Section 13 so that appropriate remedial action can be taken.

12.1 tap777 reserves the right to revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The Effective Date shown at the top of this page will be updated to reflect the most recent revision.

12.2 Where changes to this Policy are material — meaning they significantly affect how we process your personal data or materially alter your rights — tap777 will provide advance notice via email to your registered address and via a prominent notice on the platform, at least 14 days before the change takes effect.

12.3 Non-material amendments — such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or updates to reflect minor operational changes — may be published without prior notice.

12.4 Your continued use of the tap777 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must discontinue using the platform and may request account closure.

For any questions about this Privacy Policy, to exercise your data rights under the Data Privacy Act of 2012, or to raise a data protection concern, please contact tap777 through any of the following channels: