tamasaph Privacy Policy

1. Who We Are (Data Controller)

tamasaph ("tamasaph," "we," "us," "our") is the data controller responsible for your personal information collected through the tamasaph platform at tamasaph.club. As data controller, tamasaph determines the purposes and means of processing your personal data.

tamasaph operates as an online gaming and casino platform serving Filipino players, and processes personal data in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR).

For all data privacy matters, you may contact our designated Data Protection Officer (DPO) at the contact details provided in Section 15 of this Policy.

2. Personal Data We Collect

tamasaph collects the following categories of personal data from players and website visitors:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number (Philippine mobile number)
• Government-issued identification number (e.g., SSS, UMID, PhilHealth, passport number)

2.2 Financial Data

• GCash or PayMaya account number (mobile number associated with the e-wallet)
• Bank account details (bank name, account name) for bank transfer transactions
• Debit card details (card number is tokenised and not stored by tamasaph)
• Transaction history, including deposit amounts, withdrawal amounts, and dates

2.3 Gaming and Account Data

• Username and account ID
• Gaming history, including games played, bets placed, wins, and losses
• Bonus and promotion usage history
• Responsible gaming settings (deposit limits, self-exclusion status)
• Customer support interaction records

2.4 Technical and Usage Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser information
• Pages visited, time spent on pages, and navigation patterns
• Login timestamps and session duration
• Cookie identifiers and similar tracking technologies (see Section 7)

2.5 Verification Documents

• Copies of government-issued photo identification submitted for KYC verification
• Proof of address documents (utility bills, bank statements)
• Selfie photographs submitted for identity verification purposes

3. How We Collect Your Data

tamasaph collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the tamasaph website, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud service providers; payment verification data from payment processors such as GCash and PayMaya.

4. How We Use Your Personal Data

tamasaph uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and account data
Age and identity verification (KYC)	Identity data, verification documents
Processing deposits and withdrawals	Financial data, identity data
Providing gaming services	Account data, gaming data
Responsible gaming compliance	Gaming data, account data
Anti-fraud and security monitoring	Technical data, financial data, identity data
Anti-money laundering (AML) compliance	Identity data, financial data, transaction history
Customer support	Identity, contact, and account data
Marketing communications (with consent)	Contact data, gaming preferences
Platform improvement and analytics	Technical and usage data (anonymised)
Regulatory reporting	Identity data, financial data, gaming data

5. Legal Basis for Processing

tamasaph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your tamasaph account and provide gaming services).
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time.

6. Sharing Your Personal Data

tamasaph does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, and Philippine banking partners, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who assist in verifying your identity and age.
• Fraud prevention services: Anti-fraud and risk management service providers who help protect the platform and its players.
• IT and hosting providers: Cloud infrastructure and data hosting providers who store and process data on our behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law.
• Legal and professional advisors: Lawyers, auditors, and other professional advisors, where necessary for legal compliance or dispute resolution.

All third-party service providers who process personal data on behalf of tamasaph are bound by data processing agreements that require them to process data only on tamasaph's instructions and to maintain appropriate security measures.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the tamasaph website. They help us recognise your device, remember your preferences, keep you logged in, and understand how you use the platform.

7.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These cannot be disabled. They include session cookies that keep you logged in and security cookies that protect against fraud.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits.
• Analytics cookies: Help us understand how players use the platform so we can improve it. Data collected is aggregated and anonymised.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your explicit consent.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may affect the functionality of the tamasaph platform and prevent you from logging in or accessing certain features.

8. Data Retention

tamasaph retains your personal data for the following periods:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with Philippine anti-money laundering regulations.
• KYC verification documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by the Anti-Money Laundering Act (AMLA) and its amendments.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of consent.
• Technical and usage data (logs): Retained for up to twelve (12) months, after which they are anonymised or deleted.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tamasaph:

• Right to be informed: The right to know what personal data tamasaph collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data tamasaph holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You can update most account information directly through your tamasaph account dashboard.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to tamasaph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe tamasaph has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 15. tamasaph will respond to all verified data subject requests within thirty (30) days of receipt.

10. Data Security

tamasaph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for data stored at rest on tamasaph servers
• TLS 1.3 encryption for all data transmitted between your device and tamasaph
• Multi-factor authentication (MFA) options for player accounts
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• 24/7 security monitoring and intrusion detection systems
• Regular staff training on data privacy and information security
• Formal incident response procedures aligned with NPC breach notification requirements

While tamasaph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your tamasaph login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

11. Children's Privacy

The tamasaph platform is strictly intended for adults aged 21 years and above. tamasaph does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If tamasaph becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all funds will be frozen pending investigation, and the personal data will be deleted in accordance with applicable law.

If you believe a minor has registered an account on tamasaph, please contact our support team immediately at the contact details provided in Section 15.

12. International Data Transfers

tamasaph primarily stores and processes your personal data within the Philippines. In some cases, personal data may be transferred to and processed by service providers located outside the Philippines — for example, cloud infrastructure providers or identity verification services with international operations.

Where personal data is transferred outside the Philippines, tamasaph ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under Philippine law, in accordance with NPC guidelines on cross-border data transfers.

13. Third-Party Links

The tamasaph website may contain links to third-party websites or services. This Privacy Policy applies only to the tamasaph platform. tamasaph is not responsible for the privacy practices of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

tamasaph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, tamasaph will notify registered players via email or an on-platform notification at least seven (7) days before the changes take effect.

The updated Privacy Policy will always be available on this page, with the effective date clearly indicated at the top. Your continued use of the tamasaph platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how tamasaph protects your personal information.

15. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way tamasaph handles your personal data, please contact our designated Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated:

This Privacy Policy was last updated on January 1, 2026. Previous versions are available upon request by contacting the tamasaph Data Protection Officer.