Introduction
tapwin8 ("the Company," "we," "us," or "our") operates the online casino and sports betting platform accessible at tapwin8.vip. In the course of providing our services to Filipino players, tapwin8 necessarily collects, processes, stores, and in certain circumstances shares personal data. We are committed to handling that data responsibly, transparently, and in full compliance with applicable Philippine data protection legislation.
This Privacy Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as overseen by the National Privacy Commission (NPC) of the Philippines. Where tapwin8 processes data of players located in other jurisdictions, we additionally apply the data protection standards of the respective applicable law.
tapwin8 acts as the Personal Information Controller (PIC) in respect of all personal data collected from players and site visitors through the tapwin8 Platform. This means tapwin8 determines the purposes and means of processing your personal data. In some cases, tapwin8 may engage third-party service providers who act as Personal Information Processors (PIPs) on our instructions.
We encourage you to read this Privacy Policy carefully. If you have any questions about how tapwin8 handles your personal data, please contact our Data Protection Officer at the details provided in Section 14 of this document.
Personal Data We Collect
tapwin8 collects only the personal data that is necessary for the lawful operation of the Platform and the delivery of our services to Filipino players. The categories of personal data we collect are as follows:
2.1 Account Registration Data
- Full legal name (first name, middle name, last name)
- Date of birth (to verify the minimum age requirement of 21 years)
- Philippine residential address (street, barangay, city/municipality, province)
- Valid Philippine mobile number (Globe, Smart, or DITO)
- Email address
- Username and encrypted password
2.2 Identity Verification (KYC) Data
- Government-issued photo identification document (Philippine passport, UMID, driver's license, PhilSys National ID, or SSS/GSIS ID)
- Proof of address documentation (utility bill, bank statement, or barangay certificate)
- Proof of payment method ownership (screenshot or document confirming GCash, PayMaya, BPI, BDO, or Metrobank account ownership)
- Selfie photograph for facial verification, where required
2.3 Financial Transaction Data
- Deposit amounts, dates, and originating payment method reference numbers
- Withdrawal requests, amounts, and destination account identifiers (e-wallet or bank account numbers, partially masked)
- Transaction history and account balance records
- Source of funds documentation, where required for AML compliance
2.4 Gaming Activity Data
- Game session records (games played, wagers placed, outcomes, timestamps)
- Sports betting selections and bet history
- Bonus and promotional participation history
- Responsible gaming tool usage (deposit limit settings, self-exclusion requests)
2.5 Technical & Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Session duration and navigation data within the tapwin8 Platform
- Cookie identifiers and similar tracking technologies (see Section 7)
2.6 Communications Data
- Customer support chat transcripts and email correspondence
- Feedback, complaints, and dispute records
- Marketing preference settings and communication opt-in/opt-out records
How We Collect Your Data
tapwin8 collects personal data through the following means:
- Directly from you — when you register a tapwin8 Account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or update your Account profile
- Automatically through Platform use — through cookies, server logs, analytics tools, and similar technologies as you navigate and use the tapwin8 Platform (see Section 7 for details)
- From payment service providers — tapwin8 receives transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors when you conduct financial transactions on the Platform
- From identity verification services — when you complete KYC, tapwin8 may use third-party identity verification technology that processes your submitted documents and photographs to confirm authenticity
- From fraud prevention services — tapwin8 may receive risk signals and data from fraud detection partners to protect the integrity of the Platform and its players
Legal Basis for Processing
tapwin8 processes your personal data on one or more of the following legal bases as established under the Philippine Data Privacy Act of 2012:
| Legal Basis | Description | Examples at tapwin8 |
|---|---|---|
| Contractual Necessity | Processing required to perform our contract with you (the Terms & Conditions) | Account creation, payment processing, game delivery, withdrawal processing |
| Legal Obligation | Processing required to comply with Philippine law | KYC verification, AML transaction monitoring, PAGCOR reporting obligations, age verification |
| Legitimate Interests | Processing for tapwin8's legitimate business interests, where not overridden by your rights | Fraud prevention, platform security, responsible gaming monitoring, analytics for Platform improvement |
| Consent | Processing based on your freely given, specific, and informed consent | Marketing emails and SMS, optional cookies and analytics, personalized promotional offers |
Where tapwin8 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. To withdraw consent, contact tapwin8 support or update your communication preferences in your Account settings.
How We Use Your Personal Data
tapwin8 uses the personal data collected from Filipino players for the following specific purposes:
5.1 Account Management & Service Delivery
To create and maintain your tapwin8 Account, authenticate your identity at login, process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, provide access to all game categories on the Platform, and deliver customer support services when you contact the tapwin8 team.
5.2 Legal Compliance
To fulfill tapwin8's obligations under Philippine law, including verification of your age and identity as required by PAGCOR regulations, Anti-Money Laundering Act (AMLA) compliance, transaction monitoring and suspicious activity reporting to the Anti-Money Laundering Council (AMLC), and tax-related record-keeping obligations.
5.3 Platform Security & Fraud Prevention
To detect, investigate, and prevent fraudulent activity including duplicate account creation, bonus abuse, unauthorized access, money laundering, and other prohibited conduct as defined in the tapwin8 Terms & Conditions. tapwin8 uses automated systems and human review to monitor Account and transaction activity for security purposes.
5.4 Responsible Gaming
To operate tapwin8's responsible gaming program, including enforcing deposit and loss limits you have set, processing self-exclusion requests, sending session time reminders, monitoring for indicators of problem gambling, and complying with PAGCOR responsible gaming guidelines.
5.5 Platform Improvement & Analytics
To understand how Filipino players use the tapwin8 Platform, identify areas for improvement, measure the effectiveness of new features, and conduct aggregated analytics that inform product development decisions. This processing uses anonymized or pseudonymized data wherever possible.
5.6 Marketing Communications (with consent)
To send you promotional offers, bonus notifications, new game announcements, and other marketing communications via email or SMS, where you have provided consent and have not subsequently opted out. tapwin8 will never send marketing communications to players who have self-excluded from the Platform.
Data Sharing & Disclosure
tapwin8 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. tapwin8 may share your personal data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:
- Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank — to process your deposit and withdrawal transactions. These providers are independent data controllers for their own processing activities.
- Identity Verification Providers: Third-party KYC technology providers engaged by tapwin8 to verify the authenticity of identity documents submitted by players. These providers act as Personal Information Processors under contract with tapwin8.
- Game Content Providers: Providers such as JILI, Evolution Gaming, SA Gaming, Pragmatic Play, and PG Soft receive limited technical session data necessary to deliver their games through the tapwin8 Platform.
- Fraud Prevention & Security Partners: Specialist fraud detection services that help tapwin8 identify and prevent prohibited conduct, acting as processors under data processing agreements.
- Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where tapwin8 is required to disclose data by law, regulation, court order, or regulatory direction.
- Professional Advisers: Legal counsel, accountants, and auditors engaged by tapwin8 in the course of our business operations, under obligations of confidentiality.
Cookies & Tracking Technologies
tapwin8 uses cookies and similar tracking technologies on the tapwin8 Platform. Cookies are small text files placed on your device by your browser when you visit tapwin8.vip. They enable the Platform to function correctly and allow tapwin8 to understand how Filipino players use the site.
7.1 Categories of Cookies Used by tapwin8
- Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your tapwin8 Account during a gaming session, security cookies that protect against cross-site request forgery, and cookies that store your language and currency preferences. These cookies cannot be disabled without significantly impairing Platform functionality.
- Analytics Cookies: Used by tapwin8 to understand aggregate Platform usage — which game categories are most visited, how players navigate between pages, and where technical issues occur. Analytics data is processed in aggregated, anonymized form and does not identify individual players.
- Functional Cookies: Store your Platform preferences such as your chosen responsible gaming limits display, notification settings, and interface customizations to provide a more personalized experience on subsequent visits.
- Marketing Cookies (consent required): Used only where you have given consent, to measure the effectiveness of tapwin8's promotional campaigns and deliver relevant bonus offers. You can withdraw consent for marketing cookies at any time through the Platform's cookie preference settings.
7.2 Managing Cookies
You can control cookie usage through your browser's privacy settings. Most modern browsers allow you to view, block, and delete cookies. Please note that blocking essential cookies will prevent the tapwin8 Platform from functioning correctly — you will not be able to log in or access your Account if essential session cookies are disabled.
Data Retention
tapwin8 retains your personal data for only as long as necessary to fulfill the purposes for which it was collected, and to comply with applicable Philippine legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | PAGCOR regulatory requirements; AML record-keeping |
| KYC / Identity Documents | Duration of account + 5 years after closure | AMLA compliance; PAGCOR KYC obligations |
| Financial Transaction Records | 10 years from transaction date | Anti-Money Laundering Act (RA 9160) record retention |
| Gaming Activity Logs | 5 years from session date | PAGCOR audit requirements; dispute resolution |
| Support Communications | 3 years from last interaction | Legitimate interest (complaint management) |
| Marketing Preferences & Consent | 3 years from opt-out / account closure | Proof of consent management |
| Technical / Device Logs | 12 months from collection | Security monitoring; fraud detection |
Upon expiry of the applicable retention period, tapwin8 will securely delete or anonymize your personal data in accordance with industry-standard data disposal practices. Where anonymization is not technically possible within a particular data set, the data will be destroyed securely.
Data Security
tapwin8 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our key security controls include:
- Transport Layer Security (TLS/SSL): All data transmitted between your device and the tapwin8 Platform is encrypted using TLS 1.2 or higher. The HTTPS padlock in your browser confirms this encryption is active on every page.
- Password Security: tapwin8 does not store passwords in plain text. All passwords are stored using industry-standard cryptographic hashing algorithms. tapwin8 support staff can never retrieve your plain-text password.
- Access Controls: Access to systems containing personal data is restricted to authorized tapwin8 personnel on a need-to-know basis. All internal access is logged and subject to periodic review.
- Database Encryption: Sensitive personal data, including KYC documents and financial records, is stored using encryption at rest in tapwin8's database systems.
- Two-Factor Authentication: Players may enable optional two-factor authentication (2FA) on their tapwin8 Accounts via OTP sent to their registered Philippine mobile number, providing an additional layer of account security.
- Regular Security Audits: tapwin8 conducts periodic security assessments and penetration testing to identify and remediate potential vulnerabilities in the Platform.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, tapwin8 will notify the National Privacy Commission within 72 hours of becoming aware of the breach in accordance with NPC Circular 16-03, and will communicate directly with affected players where required.
Your Data Rights
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by tapwin8. These rights may be exercised by contacting tapwin8's Data Protection Officer at the details in Section 14.
Right to Access
Request a copy of the personal data tapwin8 holds about you, including the categories of data, the purposes for which it is processed, and the parties with whom it has been shared. tapwin8 will respond to access requests within 15 business days.
Right to Rectification
Request correction of inaccurate or incomplete personal data held by tapwin8. You can update most Account information directly through your tapwin8 Account settings. For KYC data corrections, please contact our support team.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal and regulatory retention obligations that may require tapwin8 to retain certain data for defined periods.
Right to Object
Object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case tapwin8 will cease processing unless compelling legitimate grounds can be demonstrated.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format where technically feasible, and transmit that data to another controller. This right applies to data processed on the basis of consent or contractual necessity.
Right to Lodge a Complaint
If you believe tapwin8 has processed your personal data in a manner inconsistent with the Philippine Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.
Children's Privacy
The tapwin8 Platform is strictly intended for persons aged 21 years and above in compliance with PAGCOR regulations governing online gambling in the Philippines. tapwin8 does not knowingly collect personal data from any person under the age of 21.
If tapwin8 discovers or is informed that personal data has been collected from a person under the minimum age requirement, the relevant Account will be immediately closed, all personal data associated with that Account will be deleted from our systems except as required for legal documentation purposes, and any deposited funds will be returned to the originating payment source.
If you are a parent or guardian and believe that your child under the age of 21 has registered an Account on the tapwin8 Platform, please contact tapwin8's Data Protection Officer immediately using the contact details in Section 14. We will take prompt action upon verification.
Third-Party Links & Services
The tapwin8 Platform contains links to and integrations with third-party services, including payment gateways (GCash, PayMaya, BPI, BDO, Metrobank) and game content providers. When you follow a link to or interact with a third-party service, you leave the tapwin8 Platform and the data handling practices of that third party apply.
tapwin8 is not responsible for the privacy practices of third-party websites or services that are not directly operated by tapwin8. We encourage you to review the privacy policies of any third-party services you use in connection with your tapwin8 account, including your chosen payment provider's privacy policy.
Game content providers integrated into the tapwin8 Platform receive limited technical session data necessary for game delivery. These providers operate under data processing agreements with tapwin8 and are contractually prohibited from using player data for purposes other than game delivery and technical support.
Changes to This Privacy Policy
tapwin8 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, regulatory guidance from the National Privacy Commission, or Platform features.
The effective date of the current version of this Privacy Policy is displayed at the top of this document. tapwin8 will use reasonable efforts to notify registered players of material changes to this Privacy Policy via email notification to the address registered on their tapwin8 Account, or through a prominent notification on the Platform, at least fourteen (14) days prior to the changes taking effect where practicable.
Your continued use of the tapwin8 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of and, where applicable, consent to the updated data practices described therein. If you do not agree with any changes to this Privacy Policy, you must contact tapwin8 support to close your Account before the changes take effect.
Contact & Data Protection Officer
tapwin8 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and with the Philippine Data Privacy Act of 2012. All data rights requests, privacy complaints, and data protection inquiries should be directed to the tapwin8 DPO.
You may contact the tapwin8 Data Protection Officer and customer support team through the following channels:
- 24/7 Live Chat: Available directly on the tapwin8 Platform via the chat widget on any page — the fastest channel for urgent Account-related matters
- Email: [email protected] — for written data rights requests, privacy complaints, and DPO correspondence (plain text only — not a link)
- Response Time: tapwin8 commits to acknowledging all data rights requests within 3 business days and providing a substantive response within 15 business days of the request, in compliance with NPC guidelines
For matters you wish to escalate beyond tapwin8, the National Privacy Commission (NPC) of the Philippines is the appropriate regulatory authority for data protection complaints. Information on lodging a complaint with the NPC can be found at the NPC's official government website.
For questions about the tapwin8 Terms & Conditions, please visit the Terms & Conditions page. For responsible gaming tools and information, visit the Responsible Gaming page.