tap646 Privacy Policy

1. Introduction

tap646 ("tap646," "we," "us," or "the Company") operates the online casino and gaming platform accessible at https://tap646.org (the "Platform"). This Privacy Policy describes how tap646 collects, uses, discloses, stores, and protects the personal information of individuals who access or use the tap646 Platform, including all registered account holders and visitors.

tap646 is committed to protecting the privacy and personal data of all users in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission ("NPC"). tap646 also processes data in accordance with its obligations under PAGCOR regulations, which govern licensed online gaming operators in the Philippines.

By registering a tap646 account or continuing to use the Platform after this Policy is posted, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the tap646 Platform.

2. Personal Data We Collect

tap646 collects the following categories of personal data in the course of providing our services:

2.1 Registration and Identity Data

• Full legal name;
• Date of birth (required to verify 21+ age eligibility);
• Email address;
• Philippine mobile number;
• Username and encrypted password;
• Residential address.

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, PRC ID);
• Selfie or facial image for liveness verification where required;
• Proof of address documentation where requested.

2.3 Financial and Payment Data

• GCash mobile number registered to your tap646 account;
• PayMaya account identifier;
• Bank account name, bank, and account number for bank transfer withdrawal requests;
• Deposit and withdrawal transaction records in Philippine Pesos (PHP).

2.4 Platform Usage Data

• Game session records, wager amounts, game outcomes, and betting history;
• Login timestamps, session durations, and device type;
• IP address and approximate geographic location;
• Browser type, operating system, and device identifiers;
• Customer support interaction records, including live chat transcripts.

2.5 Voluntarily Submitted Data

• Responsible gaming preferences and self-imposed limits;
• Survey responses or feedback submitted to tap646;
• Promotional opt-in preferences.

3. How tap646 Uses Your Personal Data

tap646 uses the personal data collected for the following purposes:

• Account creation and management: To register and maintain your tap646 account, authenticate your identity at login, and communicate account-related notices;
• Age and identity verification: To confirm that you meet the mandatory 21+ age requirement under Philippine law and PAGCOR regulations prior to allowing real-money gameplay;
• Payment processing: To process GCash, PayMaya, and bank deposits and withdrawals, and to maintain accurate financial records of all transactions on your tap646 account;
• Regulatory compliance: To fulfil tap646's obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and related Philippine regulations, including mandatory transaction reporting and player due diligence;
• Responsible gaming: To implement and monitor deposit limits, loss limits, self-exclusion requests, and other responsible gaming tools requested by or applied to your tap646 account;
• Customer support: To respond to your enquiries, resolve account issues, and maintain records of support interactions;
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and abuse of tap646 promotions;
• Platform improvement: To analyse aggregated, anonymised usage data to improve tap646 game offerings, platform performance, and user experience;
• Marketing communications: Where you have provided explicit opt-in consent, to send promotional offers, new game announcements, and bonus notifications. You may withdraw this consent at any time.

4. Legal Basis for Processing

tap646 processes your personal data on one or more of the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to register your tap646 account, process transactions, and provide the gaming services you have requested;
• Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act obligations, National Privacy Commission requirements, and other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, and abuse detection, where tap646's legitimate interests are not overridden by your rights and freedoms;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained and can be withdrawn at any time.

5. Disclosure and Data Sharing

tap646 does not sell, rent, or commercially transfer your personal data to third parties. tap646 may share your data with the following categories of recipients only to the extent necessary to operate the Platform and fulfil regulatory obligations:

• Payment processors: GCash (GXI), PayMaya/Maya Bank, BPI, BDO, Metrobank, and other licensed Philippine financial institutions through which tap646 processes deposits and withdrawals;
• Game providers: JILI Games and other licensed game technology providers who supply the gaming content on tap646 and may receive anonymised session data for technical purposes;
• Identity verification providers: Third-party KYC and document verification service providers engaged by tap646 to fulfil mandatory identity verification requirements;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any Philippine law enforcement authority to whom disclosure is required by law or regulatory mandate;
• Professional advisers: Legal, audit, and compliance advisers bound by professional confidentiality obligations, where necessary for tap646's operations.

All third-party service providers engaged by tap646 are contractually required to handle your personal data only for the specified purpose, implement appropriate security measures, and comply with applicable Philippine data protection laws.

6. Data Retention

tap646 retains your personal data for as long as your tap646 account remains active and for the minimum period required by applicable law thereafter. Specifically:

• Account registration and KYC data: retained for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and Anti-Money Laundering Act obligations;
• Transaction records: retained for a minimum of five (5) years following the date of each transaction;
• Customer support records: retained for three (3) years from the date of the interaction;
• Marketing consent records: retained for the duration of your opt-in consent and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, tap646 will securely delete or anonymise your personal data in accordance with standard data destruction protocols.

7. Cookies and Tracking Technologies

tap646 uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Required to maintain your authenticated session, enable core Platform functionality, and prevent fraudulent session hijacking. These cookies cannot be disabled without impairing Platform functionality;
• Preference cookies: Used to remember your language, display, and responsible gaming settings across sessions;
• Analytics cookies: Used to collect aggregated, anonymised data on Platform usage patterns to improve tap646 performance and game recommendations. No individual player is identified through analytics data.

tap646 does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will prevent tap646 from functioning correctly.

8. Security Measures

tap646 implements the following technical and organisational security measures to protect your personal data:

• AES-256 encryption for data stored at rest in tap646 databases;
• TLS 1.3 encryption for all data transmitted between your device and tap646 servers;
• Multi-factor authentication options available to all tap646 account holders;
• Strict role-based access controls limiting personnel access to personal data on a need-to-know basis;
• Regular third-party security audits and penetration testing of the tap646 Platform;
• Incident response procedures compliant with the NPC's mandatory breach notification requirements under the Data Privacy Act.

In the event of a personal data breach that poses a real risk of serious harm, tap646 will notify affected users and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act and its Implementing Rules.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tap646:

• Right to be informed: To be notified of how tap646 processes your personal data, as set out in this Policy;
• Right of access: To request a copy of the personal data tap646 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data on your tap646 account;
• Right to erasure: To request deletion of your personal data where retention is no longer necessary or lawful, subject to tap646's mandatory regulatory retention obligations;
• Right to object: To object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: To receive a machine-readable copy of the personal data you have provided to tap646;
• Right to lodge a complaint: To file a complaint with the National Privacy Commission if you believe tap646 has violated your data privacy rights.

To exercise any of the above rights, contact tap646 through the 24/7 live chat support on the Platform or by email at the address in the footer of this page. tap646 will respond to data subject requests within fifteen (15) business days of receipt, or within the timeframe prescribed by the NPC where applicable.

10. Children's Privacy

tap646 services are strictly limited to individuals aged 21 years or older in accordance with PAGCOR regulations and Philippine law. tap646 does not knowingly collect personal data from persons under 21 years of age. If tap646 becomes aware that a tap646 account has been created by or on behalf of a person under the minimum age, the account will be immediately suspended, all funds held therein will be subject to review, and the personal data will be handled in accordance with applicable legal requirements.

If you believe that personal data belonging to a minor has been inadvertently submitted to tap646, please contact our support team immediately so that appropriate action can be taken.

11. Cross-Border Data Transfers

tap646 primarily processes personal data within the Philippines. Where tap646 engages third-party service providers who process data outside the Philippines — including cloud infrastructure providers and game technology vendors — tap646 ensures that appropriate contractual safeguards are in place to ensure equivalent levels of data protection, in compliance with Section 21 of the Data Privacy Act and the NPC's rules on cross-border data flows.

tap646 will not transfer your personal data to any jurisdiction that does not provide adequate data protection standards without first obtaining your consent or establishing appropriate legal safeguards.

12. Changes to This Privacy Policy

tap646 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, tap646 will notify active account holders via email or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision.

Your continued use of the tap646 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact the tap646 Data Protection Officer through our 24/7 live chat support facility or via the email address provided in the footer of this website.

Formal written data subject requests and complaints may be submitted via email. tap646 will acknowledge receipt within two (2) business days and provide a substantive response within fifteen (15) business days of acknowledgement, subject to the complexity of the request.