taraplay Privacy Policy

taraplay ("we," "us," "our," or "the Company") operates the online gaming platform at taraplay.win and related services. We understand that your personal information is important, and we take our responsibility as a data controller seriously.

This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of personal data we obtain from players, visitors, and users of the taraplay platform. By registering an account, accessing the platform, or interacting with any taraplay service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

We encourage all taraplay players — whether based in Manila, Cebu, Davao, Quezon City, or any other part of the Philippines — to read this Policy in full so you understand your rights and our obligations.

taraplay is the data controller responsible for the personal information collected and processed through the taraplay platform. As data controller, taraplay determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out in accordance with applicable Philippine data privacy laws.

taraplay has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy regulations. Contact information for the DPO is provided in Section 15 of this Policy.

taraplay collects the following categories of personal data, depending on your interaction with the platform:

We do not knowingly collect sensitive personal information beyond what is strictly necessary for identity verification, AML/KYC compliance, and responsible gaming obligations. We do not collect data regarding racial or ethnic origin, political opinions, religious beliefs, or health data unless required by applicable law.

taraplay collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the platform, including IP addresses, device identifiers, session data, and behavioral analytics through cookies and similar technologies.
• Third-party sources: Identity verification data from licensed KYC service providers; payment data from GCash, Maya, BPI, BDO, Metrobank, and other payment processors; fraud prevention data from licensed anti-fraud services.
• Publicly available sources: In limited circumstances, taraplay may verify your information against publicly available records for compliance purposes.

taraplay processes your personal data for the following specific, legitimate purposes:

• Account management: Creating and maintaining your taraplay player account, verifying your identity, and managing your login credentials.
• Service delivery: Providing access to casino games, sports betting, bingo, and other platform features.
• Payment processing: Processing deposits and withdrawals via GCash, Maya, and other supported payment methods.
• KYC & AML compliance: Verifying player identity, preventing money laundering, and complying with PAGCOR requirements and applicable Philippine laws.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviors and applying responsible gaming tools including deposit limits and self-exclusion.
• Fraud prevention and security: Detecting and preventing fraud, unauthorized access, and other security threats.
• Customer support: Responding to your inquiries, complaints, and support requests.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications.
• Legal compliance: Meeting reporting obligations to regulatory authorities including PAGCOR and the National Privacy Commission.

Under the Philippine Data Privacy Act of 2012, taraplay processes your personal data on the following legal bases:

• Consent: Where you have given specific, informed, freely given, and unambiguous consent — for example, when opting in to marketing communications or agreeing to this Privacy Policy at registration.
• Contractual necessity: Processing necessary to perform the contract between you and taraplay — including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, PAGCOR regulations, AML requirements, and NPC directives.
• Legitimate interests: Processing necessary for taraplay's legitimate interests in fraud prevention, platform security, and responsible gaming compliance — where such interests are not overridden by your rights and freedoms.

taraplay does not sell your personal data to unaffiliated third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (GXI), Maya Philippines, BPI, BDO, Metrobank, and other financial institutions — for the purpose of processing deposits and withdrawals.
• KYC verification providers: Licensed identity verification service providers used to verify the authenticity of government-issued IDs submitted during account verification.
• Game providers: Licensed gaming software providers who supply games to the taraplay platform may receive anonymized or pseudonymized gameplay data for game operation purposes.
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other relevant Philippine government agencies, where required by law or regulation.
• IT and security service providers: Cloud infrastructure, cybersecurity, and fraud prevention vendors engaged by taraplay to operate and protect the platform.
• Legal and professional advisors: Where required for legal proceedings, regulatory investigations, or professional advice.

taraplay retains your personal data for as long as necessary to fulfill the purposes described in this Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

Specifically:

• Account data: Retained for the duration of your active taraplay account plus a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years following the transaction date.
• Support communications: Retained for three (3) years following resolution of the relevant matter.
• Marketing preferences: Retained until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with taraplay's data disposal procedures.

taraplay implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the taraplay platform.
• Encrypted storage of sensitive data including passwords (hashed with industry-standard algorithms) and financial identifiers.
• Multi-factor authentication (MFA) for internal system access by taraplay staff.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.
• Automated fraud detection systems monitoring for suspicious login patterns and transaction anomalies.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, taraplay will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

taraplay uses cookies and similar tracking technologies (including local storage and session identifiers) to operate the platform, maintain your login session, remember your preferences, and analyze platform usage.

• Essential cookies: Required for the platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect anonymized data on how players use the taraplay platform — including pages visited, games played, and session duration — to improve platform performance and user experience.
• Preference cookies: Store your platform preferences such as language settings and notification preferences.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the taraplay platform. taraplay does not use third-party advertising cookies or share behavioral data with advertising networks.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by taraplay:

• Right to be Informed: The right to know that your personal data is being collected and processed, and to receive this Privacy Policy.
• Right of Access: The right to request a copy of the personal data taraplay holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data, subject to taraplay's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller where technically feasible.
• Right to File a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe taraplay has violated your data privacy rights.

The taraplay platform is strictly for persons aged 21 years and above. taraplay does not knowingly collect personal data from persons under the age of 21. All players are required to confirm their age during registration, and identity verification (KYC) is mandatory before withdrawal access is granted.

If taraplay discovers that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all personal data will be deleted, and the matter may be reported to relevant authorities in accordance with PAGCOR responsible gaming requirements and applicable Philippine law.

If you are a parent or guardian and believe your child has created a taraplay account, please contact us immediately at [email protected].

In the course of operating the taraplay platform, some of your personal data may be transferred to, stored, or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or licensed game studios with servers in other jurisdictions.

When personal data is transferred outside the Philippines, taraplay ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and NPC guidelines, including: contractual data processing agreements requiring equivalent privacy protections, and transfers only to jurisdictions with adequate data protection laws or where the NPC has issued appropriate guidance.

taraplay reserves the right to update or modify this Privacy Policy at any time. When material changes are made, taraplay will notify registered players via the email address or mobile number on file, or through a prominent notice on the taraplay website.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how taraplay protects your personal data. Your continued use of the taraplay platform after a Privacy Policy update constitutes your acceptance of the revised Policy.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact taraplay's Data Protection Officer using the following information:

taraplay aims to respond to all data privacy inquiries and subject access requests within 30 calendar days. For urgent matters — such as suspected unauthorized access to your account — please contact us via live chat for the fastest response.

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official website at privacy.gov.ph.