Privacy Policy

This Privacy Policy ("Policy") describes how tapwin7 ("tapwin7," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("User," "Player," or "you") who access or interact with the tapwin7 online gaming platform at tapwin7.club and its associated digital interfaces.

tapwin7 is committed to protecting the privacy and personal data of all users in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (NPC) of the Philippines, and applicable PAGCOR data governance requirements.

By registering an account on or accessing the tapwin7 platform, you acknowledge that you have read, understood, and agree to the collection and use of your personal information as described in this Policy. If you do not agree with any part of this Policy, you should not register for or use the tapwin7 platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, tapwin7 acts as the Personal Information Controller (PIC) with respect to all personal data collected from users of the tapwin7 platform. tapwin7 determines the purposes for which, and the manner in which, your personal data is processed.

Where tapwin7 engages third-party service providers — including payment processors, game software suppliers, fraud detection services, and customer support platforms — to process personal data on its behalf, those parties act as Personal Information Processors (PIP) under data processing agreements that bind them to the same standards of protection required under the DPA.

tapwin7 has designated a Data Protection Officer (DPO) as required by the Data Privacy Act. The DPO is responsible for overseeing tapwin7's compliance with this Policy and applicable privacy law. Contact details for the DPO are provided in Section 14 of this Policy.

tapwin7 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarizes the primary categories of data collected and representative examples of each.

tapwin7 does not collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act — such as health or genetic data, religious or political beliefs, or biometric data — unless specifically and expressly required for identity verification and only with your explicit written consent.

tapwin7 collects personal data through the following primary channels:

• Direct submission: Information you provide when registering your tapwin7 account, completing KYC verification, submitting a withdrawal request, contacting support, or participating in promotions.
• Platform interaction: Data generated automatically as you use the tapwin7 platform, including game session logs, betting activity, wallet transactions, and navigation behavior within the site.
• Cookies and tracking technologies: Session cookies, analytics cookies, and similar technologies deployed on the tapwin7 platform as described in Section 9.
• Payment processors: Transaction confirmation data returned by GCash, Maya, BPI, BDO, Metrobank, 7-Eleven CLiQQ, Coins.ph, GrabPay, and USDT payment networks when processing your deposits and withdrawals.
• Identity verification services: Data returned by third-party KYC verification providers who assist tapwin7 in confirming the authenticity of identity documents submitted during account verification.
• Fraud and security systems: Device fingerprinting and behavioral analytics systems that identify unusual account access patterns, potential duplicate accounts, or suspected fraudulent activity.

tapwin7 processes your personal data only where it has a lawful basis to do so under the Data Privacy Act of 2012. The following table maps each processing purpose to its applicable legal basis.

Where tapwin7 relies on legitimate interests as a legal basis, we have conducted a balancing test to confirm that those interests are not overridden by your privacy rights. Where processing is based on your consent, you have the right to withdraw that consent at any time — withdrawal does not affect the lawfulness of processing carried out before withdrawal.

tapwin7 does not sell, rent, or trade personal data to third parties. We share personal data only with the categories of recipient described below, and only to the minimum extent necessary to fulfill the stated purpose.

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, 7-Eleven CLiQQ, Coins.ph, GrabPay, and USDT network providers receive the payment data necessary to complete your deposits and withdrawals. Each processor operates under its own BSP-regulated privacy framework.
• KYC and identity verification providers: Third-party verification services receive your government ID documents and personal details solely for the purpose of age and identity verification. Documents are not retained by the verification provider beyond the period required for this purpose.
• Game software suppliers: Game providers whose titles are available on tapwin7 receive session and RNG audit data necessary for game integrity certification. These providers do not receive your full identity data.
• Fraud prevention and security services: Device and behavioral data is shared with fraud detection platforms to identify and prevent unauthorized account access, bonus abuse, and coordinated fraudulent activity.
• Customer support platforms: Support ticket systems and live chat infrastructure providers receive the account and communication data necessary to deliver support services.
• Regulatory and law enforcement authorities: tapwin7 is required by PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities to disclose specified data upon valid legal request. tapwin7 complies fully with such requests.
• Legal and professional advisors: Lawyers, auditors, and accountants engaged by tapwin7 may access personal data to the extent necessary for the provision of professional services, subject to confidentiality obligations.

tapwin7 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory obligations. The following general retention periods apply:

• Active account data (identity, contact, gaming activity, transaction history): Retained for the duration of your account relationship with tapwin7 and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• KYC documents (government ID copies, proof-of-address): Retained for a minimum of five (5) years following account closure, consistent with AMLC and PAGCOR document retention obligations.
• Transaction records (deposits, withdrawals, game bets): Retained for a minimum of five (5) years from the date of the transaction.
• Support and communication records (live chat logs, email correspondence): Retained for three (3) years from the date of the last interaction, or longer where the record relates to an unresolved complaint or dispute.
• Marketing preference data (opt-in/opt-out records): Retained for the duration of your account relationship and for two (2) years after account closure to demonstrate consent compliance.
• Technical and analytical data (IP logs, session data): Retained for up to twelve (12) months from collection, after which aggregated and anonymized forms may be retained indefinitely for platform analytics purposes.

When personal data is no longer required and has reached the end of its retention period, tapwin7 deletes or anonymizes it in a manner that prevents reconstruction, consistent with the data disposal requirements of the Data Privacy Act Implementing Rules and Regulations.

tapwin7 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. The following technical and organizational measures are applied across all systems that process personal data:

• Transport Layer Security: All data transmitted between your browser and tapwin7 servers is protected using 256-bit SSL/TLS encryption — the same standard applied by Philippine commercial banks and BSP-supervised e-money issuers.
• Data encryption at rest: Sensitive personal data — including identity documents, financial account numbers, and authentication credentials — is stored using AES-256 encryption in tapwin7's data infrastructure.
• Password security: User passwords are never stored in plaintext. tapwin7 applies bcrypt hashing with a cost factor appropriate to current computing capability standards.
• Access controls: Internal access to personal data is governed by role-based access control (RBAC). tapwin7 staff members access only the data required for their specific function, and all access events are logged and auditable.
• Two-factor authentication: tapwin7 supports and encourages SMS-based 2FA for all user accounts, adding a second authentication layer that protects against credential compromise.
• Intrusion detection and monitoring: tapwin7's infrastructure is monitored 24/7 for anomalous activity. Login anomaly detection, rate limiting, and automated blocking are applied to mitigate brute-force and credential-stuffing attacks.
• Penetration testing and audits: tapwin7 commissions periodic third-party security audits and penetration tests of its platform infrastructure.
• Data breach response: tapwin7 maintains a documented data breach response plan. In the event of a breach affecting your personal data, tapwin7 will notify the National Privacy Commission within 72 hours and affected users within a timeframe required by the NPC, as stipulated by the Data Privacy Act.

tapwin7 uses cookies and similar browser-based tracking technologies to operate the platform, maintain session state, analyze platform performance, and personalize your experience. The following categories of cookies are deployed:

• Strictly necessary cookies: These cookies are essential for the tapwin7 platform to function. They include session authentication tokens, load-balancing identifiers, and security cookies that prevent cross-site request forgery (CSRF). These cookies cannot be disabled without impairing platform functionality. No consent is required for their use under applicable law.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting, display options, and previously visited game categories — to provide a more convenient experience on return visits.
• Analytics cookies: First-party analytics cookies collect aggregated, anonymized data about how users interact with the tapwin7 platform — which pages are visited most, where users spend time, and how navigation flows. This data is used solely to improve the platform experience and is not associated with individual user profiles for advertising purposes.
• Fraud prevention cookies: Device fingerprinting and behavioral cookies that help tapwin7's security systems detect suspicious login attempts, duplicate accounts, and potential AML-related activity patterns.

tapwin7 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioral tracking technologies that would profile your activity outside of the tapwin7 platform for commercial targeting purposes.

You may manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Note that blocking strictly necessary cookies will prevent you from logging in to tapwin7.

The tapwin7 platform is strictly for use by individuals who are 21 years of age or older. This minimum age requirement is mandated by PAGCOR and enforced through the KYC identity verification process required of all users before withdrawal eligibility is established.

tapwin7 does not knowingly collect personal data from individuals under the age of 21. If tapwin7 becomes aware that it has inadvertently collected personal data from a person under 21, that account will be immediately suspended, all data will be deleted, any deposited funds will be returned to the source payment method to the extent practicable, and the matter will be reported to PAGCOR.

If you are a parent or legal guardian and you believe that a person in your care under the age of 21 has registered on tapwin7 or provided personal data to the platform, please contact tapwin7's Data Protection Officer immediately at the contact details provided in Section 14. tapwin7 will investigate and act promptly on such notifications.

The Data Privacy Act of 2012 grants you the following rights with respect to your personal data held by tapwin7. tapwin7 is committed to honoring each of these rights within the timeframes required by law:

tapwin7 operates primarily within the Philippines and processes personal data on infrastructure located in the Philippines or in jurisdictions offering equivalent data protection standards. Where tapwin7 engages third-party service providers — such as game software suppliers or fraud detection platforms — that may process data in other countries, tapwin7 ensures that appropriate contractual safeguards are in place.

Such safeguards include data processing agreements that contractually bind the recipient to standards consistent with the Data Privacy Act of 2012, and where applicable, standard contractual clauses recognized by the National Privacy Commission. tapwin7 does not transfer personal data to jurisdictions that do not provide adequate levels of data protection without implementing the safeguards described above.

By using the tapwin7 platform, you consent to the transfer of your personal data to tapwin7's trusted service providers in other jurisdictions where such transfers are necessary for platform operation, subject always to the safeguards described in this section.

tapwin7 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The effective date at the top of this page will be updated whenever the Policy is revised.

For material changes — those that significantly affect your privacy rights or how your data is processed — tapwin7 will notify registered users by email to the address on file and/or by a prominent notice displayed on the tapwin7 platform, providing at least 14 days' advance notice before the change takes effect.

For non-material changes — such as typographical corrections, clarifications of existing practices, or formatting updates — tapwin7 may update the Policy without advance notice, and the revised Policy will take effect immediately upon publication at tapwin7.club/privacy-policy.

Your continued use of the tapwin7 platform following the effective date of any Policy revision constitutes your acceptance of the updated Policy. If you do not accept the revised terms, you should cease using the platform and request account closure before the effective date.

tapwin7 has appointed a Data Protection Officer (DPO) to oversee compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have questions, concerns, or requests regarding the handling of your personal data by tapwin7, you are encouraged to contact the DPO directly.

All data rights requests, privacy inquiries, and data breach reports should be directed to:

For complaints that remain unresolved after tapwin7's internal privacy dispute process, you may escalate to the National Privacy Commission (NPC) of the Philippines, the government agency responsible for administering and enforcing the Data Privacy Act of 2012.

For general support inquiries — including account access, payment issues, and gameplay questions that do not involve a data rights request — tapwin7's customer support team is available 24/7 via live chat on every page of the tapwin7 platform, with a typical response time of under 2 minutes.