taraph Privacy Policy

1 Introduction

taraph ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the taraph online gaming platform at taraph.org. This Privacy Policy describes how taraph collects, uses, stores, shares, and protects your personal data in connection with your use of the taraph website, mobile browser interface, and all associated services (collectively, the "Platform").

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It should be read alongside the taraph Terms & Conditions and Responsible Gaming Policy.

If you do not agree with any part of this Privacy Policy, you should discontinue use of the taraph Platform and, if applicable, request closure of your Account. Questions about this policy may be directed to the taraph Data Protection Officer using the contact details in Section 14.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, taraph acts as the personal information controller in respect of the personal data it collects from players and visitors to the Platform.

taraph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA and this Privacy Policy. The DPO can be contacted using the details provided in Section 14 of this Policy.

3 Personal Data We Collect

taraph collects the following categories of personal data from players and Platform visitors. The specific data collected depends on how you interact with the taraph Platform:

taraph does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance purposes. Where sensitive personal information is collected, it is handled with the heightened protections required by the DPA.

4 How We Collect Your Data

taraph collects personal data through the following means:

• Directly from you: When you register an Account, complete identity verification, make a deposit or withdrawal, contact taraph support, respond to a survey, or use any interactive feature of the Platform.
• Automatically: When you access or use the taraph Platform, certain technical and usage data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for more details on cookies.
• From third-party verification providers: taraph may receive identity verification data from third-party KYC service providers engaged to assist with the verification of player identities and documents.
• From payment processors: When you make a deposit or withdrawal, taraph receives transaction confirmation data from the relevant payment provider (e.g., GCash, PayMaya, or your bank). taraph does not store full payment credentials – only the reference data necessary to process and reconcile transactions.
• From regulatory authorities: taraph may receive information from PAGCOR or other Philippine regulatory bodies in connection with its licensing and compliance obligations.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, taraph processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and taraph – specifically, to operate your Account, process deposits and withdrawals, deliver gaming services, and manage bonuses and promotions.
• Legal obligation: Processing is necessary for taraph to comply with its legal and regulatory obligations under Philippine law, including PAGCOR licensing requirements, anti-money laundering (AML) obligations under Republic Act No. 9160 (as amended), and the Data Privacy Act of 2012.
• Legitimate interests: Processing is necessary for taraph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of taraph services – provided these interests are not overridden by your rights and interests.
• Consent: Where taraph processes your personal data for purposes not covered by the above bases (such as sending you optional marketing communications), we will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Personal Data

taraph uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and administer your taraph Account, including verifying your identity and eligibility to use the Platform.
• Service delivery: To provide you with access to taraph's games, features, and services, and to process your deposits, withdrawals, and bonus claims.
• Regulatory compliance: To fulfil taraph's obligations under PAGCOR regulations, AML laws, and other applicable Philippine legislation, including conducting Know Your Customer (KYC) checks and filing required regulatory reports.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, to administer self-exclusion and limit-setting tools, and to fulfil taraph's responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the taraph Platform.
• Marketing communications: Where you have provided consent, to send you information about taraph promotions, new games, and special offers. You may opt out of marketing communications at any time through your Account settings or by contacting taraph support.
• Legal proceedings: To establish, exercise, or defend legal claims involving taraph.

7 Sharing Your Personal Data

taraph does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Identity verification providers: Third-party KYC service providers engaged to assist taraph in verifying player identities and documents as required by PAGCOR and AML regulations.
• Payment processors: Payment service providers (including GCash, PayMaya / Maya, and banking partners) engaged to process deposits and withdrawals on behalf of taraph players.
• Technology and hosting providers: Cloud hosting, data storage, and platform infrastructure providers who process data on taraph's behalf under strict data processing agreements.
• Fraud prevention and security services: Third-party providers engaged to assist taraph in detecting and preventing fraud, money laundering, and other prohibited activity.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory obligation.
• Legal and professional advisers: Lawyers, auditors, and other professional advisers engaged by taraph in connection with legal proceedings, regulatory matters, or business operations, subject to professional confidentiality obligations.

8 Cookies & Tracking Technologies

The taraph Platform uses cookies and similar tracking technologies to enhance your experience, analyse Platform usage, and support security functions. The following types of cookies may be used:

• Strictly necessary cookies: These cookies are essential for the taraph Platform to function correctly. They enable core features such as Account login, session management, and security. These cookies cannot be disabled without significantly impairing Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the taraph Platform, such as which pages are visited most frequently and whether error messages are received. This data helps taraph improve the Platform's performance and user experience.
• Functionality cookies: These cookies allow the taraph Platform to remember your preferences (such as language settings and display preferences) to provide a more personalised experience.
• Security cookies: These cookies assist taraph in detecting and preventing fraudulent activity, including identifying unusual login patterns and protecting against cross-site request forgery (CSRF) attacks.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the taraph Platform. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set – refer to your browser's help documentation for instructions.

9 Data Retention

taraph retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Account data: Personal data associated with an active taraph Account is retained for the duration of the Account's existence and for a period of at least five (5) years following Account closure, in accordance with PAGCOR licensing requirements and AML record-keeping obligations under Philippine law.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• KYC documents: Identity verification documents are retained for the period required by applicable PAGCOR and AML regulations, typically five (5) years from the date of verification or Account closure, whichever is later.
• Support communications: Customer support correspondence is retained for a period of three (3) years from the date of the last communication, unless a longer retention period is required in connection with an ongoing dispute or legal proceeding.
• Technical and usage data: Anonymised or aggregated technical and usage data may be retained indefinitely for analytical and platform improvement purposes, as it no longer constitutes personal data once anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with taraph's data disposal procedures. Where deletion is not immediately possible due to technical constraints, the data will be isolated and protected from further processing until deletion can be completed.

10 Data Security

taraph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the taraph Platform is encrypted using Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser's address bar when using taraph.
• Encryption at rest: Sensitive personal data stored on taraph's systems, including identity documents and financial data, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to taraph personnel and authorised service providers who have a legitimate need to access it. Access is governed by role-based access controls and is subject to regular review.
• Two-factor authentication: taraph offers two-factor authentication (2FA) for player Accounts and requires it for administrative access to systems containing personal data.
• Regular security assessments: taraph conducts regular security assessments, vulnerability scans, and penetration tests to identify and remediate potential security weaknesses in the Platform.
• Staff training: taraph personnel who handle personal data receive regular training on data protection obligations and security best practices.
• Incident response: taraph maintains a documented data breach response procedure. In the event of a breach, taraph will notify the NPC and affected players in accordance with the timeframes prescribed by the Data Privacy Act.

While taraph takes all reasonable steps to protect your personal data, no security system is completely impenetrable. You also play an important role in keeping your data secure – please refer to the Account Security section of the taraph Terms & Conditions for guidance on protecting your Account credentials.

11 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by taraph. To exercise any of these rights, please contact the taraph Data Protection Officer using the details in Section 14:

• Right to be informed: You have the right to be informed about how taraph collects and uses your personal data. This Privacy Policy fulfils that obligation.
• Right of access: You have the right to request a copy of the personal data taraph holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data taraph holds about you. You may update certain information directly through your Account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to taraph's legal and regulatory retention obligations.
• Right to object: You have the right to object to the processing of your personal data where taraph relies on legitimate interests as the legal basis for processing, or where your data is being processed for direct marketing purposes.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to taraph in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where taraph processes your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: If you believe taraph has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Children's Privacy

The taraph Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing casino-style online gambling. taraph does not knowingly collect personal data from individuals under the age of 21.

If taraph becomes aware that personal data has been collected from an individual under the age of 21, it will take immediate steps to delete that data and close the associated Account. Any winnings accrued by an underage player will be forfeited in accordance with the taraph Terms & Conditions.

13 Updates to This Privacy Policy

taraph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes to this Privacy Policy are material – meaning they significantly affect your rights or how taraph processes your personal data – taraph will notify registered players via the contact details on file (typically by email) prior to the changes taking effect. For minor or clarificatory changes, taraph may update the Policy without individual notification.

Continued use of the taraph Platform following notification of material changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should discontinue use of the Platform and request Account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how taraph protects your personal data. Archived versions of previous Privacy Policies are available upon request from the taraph Data Protection Officer.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or taraph's handling of your personal data, please contact the taraph Data Protection Officer through the following channel:

• Email (DPO): [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the taraph Platform after logging in to your Account.

When submitting a data rights request, please include your full name, registered email address, and a clear description of your request so that taraph can process it efficiently. taraph may need to verify your identity before processing certain requests to protect against unauthorised access to personal data.

If you are not satisfied with taraph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. For more information about your rights under the Data Privacy Act, visit the NPC's official resources.

For matters relating to responsible gaming, self-exclusion, or player welfare, please visit the taraph Responsible Gaming page. For general platform information, visit our FAQ page or About Us page.