Data Privacy & Your Rights

Tamasaph Privacy Policy – How We Protect Your Data PH

At Tamasaph, your personal data belongs to you. This Privacy Policy explains clearly and honestly what information we collect, why we need it, how long we keep it, and exactly what rights you have as a Filipino player under Philippine law.

Effective date: 1 June 2025  |  RA 10173 Compliant

Fully compliant with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and NPC regulations.


🛡️ Your Data Rights at a Glance

Under RA 10173, every Filipino player on Tamasaph has these rights — no questions asked.

Right to Access

Request a full copy of all personal data Tamasaph holds about you.

Right to Correct

Update or correct inaccurate data in your Tamasaph account profile at any time.

Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

Right to Object

Opt out of data processing for direct marketing purposes at any time.

Right to Portability

Receive your data in a portable, machine-readable format on request.

Right to Complain

File a complaint with the National Privacy Commission (NPC) if your rights are not respected.

tamasaph
SECTION 1

Who We Are — The Tamasaph Data Controller

Tamasaph ("we", "us", "our") operates the online gaming platform accessible at tamasaph.best. As the operator of this platform and the entity that determines the purposes and means of processing your personal data, Tamasaph acts as the Personal Information Controller (PIC) under the Philippine Data Privacy Act of 2012 (Republic Act 10173).

This Privacy Policy applies to all personal data collected and processed by Tamasaph in connection with your registration, use of the platform, and any interactions you have with our services — whether through our website, mobile browser, customer support, or any other Tamasaph communication channel.

If you have any questions about this Policy or how Tamasaph handles your personal data, please contact our Data Protection Officer (DPO) at privacy@tamasaph.best.

In plain terms: Tamasaph is a Philippines-based platform and your primary point of contact for all data privacy matters. We don't hide behind offshore subsidiaries or vague corporate structures when it comes to your data.

SECTION 2

Personal Data We Collect

Tamasaph collects only the data necessary to operate the platform legally, safely, and in compliance with our PAGCOR licence and AML obligations. Here is a breakdown of what we collect and when:

Data Category Examples When Collected
Identity Data Full legal name, date of birth, government ID number Registration & KYC verification
Contact Data Philippine mobile number, email address Registration
Financial Data GCash number, Maya account, bank account details First deposit / withdrawal setup
Transaction Data Deposit history, withdrawal history, bet history, win/loss records Ongoing platform use
Technical Data IP address, device type, browser type, session timestamps Every platform visit
Usage Data Pages visited, games played, features used, session duration Every platform visit
Communications Data Support chat transcripts, email correspondence, complaint records When you contact support
Verification Documents Copy of Philippine national ID, proof of address KYC verification before withdrawal

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers, except where expressly required by law (for example, in cases where our AML obligations require enhanced due diligence).

We do not purchase personal data lists from third parties for marketing purposes.

SECTION 3

How Tamasaph Uses Your Personal Data

Every use of your personal data at Tamasaph has a specific, documented purpose. We do not use your data for anything we haven't told you about. Here is what we use your data for:

  • Account creation and management: Registering your Tamasaph account, verifying your identity, and managing your profile and preferences.
  • Service delivery: Processing your deposits and withdrawals, crediting winnings, managing bonus eligibility, and operating the games lobby.
  • Regulatory compliance: Fulfilling our obligations under our PAGCOR licence, the Philippine Anti-Money Laundering Act (AMLA), and the Data Privacy Act. This includes KYC verification, transaction monitoring, and filing reports to authorities where legally required.
  • Fraud prevention and platform security: Detecting and preventing fraudulent accounts, multi-accounting, bonus abuse, and other violations of our Terms and Conditions.
  • Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support service based on past interactions.
  • Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviours and offering appropriate interventions, in accordance with PAGCOR's responsible gaming guidelines.
  • Service improvement: Analysing platform usage data (in anonymised, aggregated form) to improve game performance, interface design, and the overall Tamasaph experience.
  • Communications: Sending you account notifications, security alerts, deposit confirmations, and — where you have opted in — promotional offers about Tamasaph's games and bonuses.

Marketing emails: If you'd rather not receive promotional messages from Tamasaph, you can unsubscribe at any time using the link in any marketing email, or by contacting support. Opting out of marketing will not affect essential account communications such as transaction receipts and security alerts.

SECTION 4

Legal Basis for Processing

Under the Philippine Data Privacy Act, Tamasaph must have a lawful basis for every type of personal data processing we carry out. Our processing activities rely on the following legal grounds:

  • Contract performance: Processing necessary to provide the services you requested when you registered your Tamasaph account — including account management, payment processing, and game operation.
  • Legal obligation: Processing required to comply with Philippine law, including PAGCOR licensing requirements, AMLA transaction monitoring, KYC verification mandates, and tax reporting obligations.
  • Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your rights and freedoms.
  • Consent: Processing for direct marketing communications, where you have expressly opted in. You can withdraw this consent at any time.

Where Tamasaph relies on legitimate interests, we have conducted a balancing assessment to ensure that our interests do not unfairly override your privacy rights. These assessments are documented and available to our Data Protection Officer on request.

SECTION 5

Who We Share Your Data With

Tamasaph does not sell your personal data to anyone. We share your data only where necessary, with the following categories of recipients:

  • Game providers: Licensed third-party game studios (PG Soft, Pragmatic Play, JILI, CQ9, and others) receive technical session data necessary to operate their games. They do not receive your financial details or government ID information.
  • Payment processors: GCash (Mynt), Maya (Voyager), GrabPay, and banking partners receive the financial data required to process your deposits and withdrawals. All payment partners are BSP-supervised entities.
  • Identity verification services: Third-party KYC providers that verify government-issued IDs. These providers are contractually bound to process your data only for the purpose of verification and to comply with RA 10173.
  • Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and the National Privacy Commission (NPC), where we are legally required to disclose information.
  • IT and infrastructure providers: Cloud hosting, security, and analytics providers who process data on our behalf under binding data processing agreements. All are required to maintain confidentiality and security standards consistent with RA 10173.
  • Professional advisers: Lawyers, auditors, and consultants, where they need access to your data to provide services to Tamasaph — strictly under confidentiality obligations.

All third-party processors engaged by Tamasaph are required by contract to implement appropriate technical and organisational security measures and to process your data only on documented instructions from Tamasaph.

SECTION 6

Cookies and Tracking Technologies

The Tamasaph website uses cookies and similar tracking technologies to make the platform work, to understand how you use it, and to improve your experience. Here is what we use and why:

  • Essential cookies: Required for the platform to function — session authentication, login state, security tokens. These cannot be disabled without breaking the platform.
  • Analytics cookies: Help us understand how players navigate the Tamasaph platform — which pages are visited, where players spend time, and where technical issues occur. We use aggregated, anonymised data from these cookies to improve the service.
  • Preference cookies: Remember your settings such as language preference, display options, and responsible gaming configurations.
  • Security cookies: Detect suspicious activity patterns, protect against CSRF attacks, and support our fraud detection systems.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your Tamasaph account. Analytics and preference cookies can be disabled without affecting core functionality.

SECTION 7

How Long We Keep Your Data

Tamasaph retains personal data only for as long as necessary for the purpose it was collected, or as required by Philippine law. The following retention periods apply:

  • Account data and transaction records: Retained for a minimum of 5 years from the date of the last transaction, as required by the Philippine AMLA.
  • KYC verification documents: Retained for 5 years from account closure, in compliance with PAGCOR licensing conditions and AMLA requirements.
  • Customer support records: Retained for 3 years from the date of the interaction, to support dispute resolution and service quality review.
  • Technical and usage logs: Retained for 12 months, after which they are anonymised or deleted.
  • Marketing consent records: Retained until you withdraw consent, plus an additional 12 months to document compliance.

When the applicable retention period expires, Tamasaph securely deletes or anonymises your personal data using industry-standard data destruction methods.

SECTION 8

How We Secure Your Personal Data

Tamasaph implements a layered approach to data security, combining technical controls, organisational policies, and ongoing monitoring to protect your personal information. Key measures include:

  • 256-bit TLS encryption for all data transmitted between your device and the Tamasaph platform
  • Encryption at rest for all stored personal and financial data on Tamasaph servers
  • Role-based access controls — Tamasaph staff can only access personal data that is strictly necessary for their job function
  • Multi-factor authentication (MFA) for all administrative system access
  • Regular penetration testing and vulnerability assessments by independent security specialists
  • Incident response procedures aligned with NPC notification requirements — in the event of a personal data breach affecting your rights, you will be notified within 72 hours of Tamasaph becoming aware
  • Staff training on data privacy and security, conducted at least annually for all employees who handle personal data

No system is 100% secure. If you ever suspect that your Tamasaph account has been accessed without your authorisation, contact support immediately at support@tamasaph.best and change your password without delay.

SECTION 9

Exercising Your Data Rights

As a data subject under RA 10173, you have the rights described at the top of this page. Here is how to exercise each of them with Tamasaph:

  • Access: Email privacy@tamasaph.best with the subject line "Data Access Request." We will provide a full copy of your data within 15 business days.
  • Correction: Basic profile corrections can be made directly in your account settings. For corrections requiring document verification (such as name changes), contact support.
  • Erasure: Request data deletion by emailing privacy@tamasaph.best. Note that we may be required to retain certain data for regulatory or legal purposes, in which case we will explain specifically what we cannot delete and why.
  • Objection to marketing: Click "Unsubscribe" in any Tamasaph marketing email, or email privacy@tamasaph.best to opt out of all marketing communications.
  • Data portability: Request an export of your data in JSON or CSV format by emailing privacy@tamasaph.best.
  • Complaint to the NPC: If you believe Tamasaph has not handled your data correctly, you have the right to lodge a complaint with the National Privacy Commission at www.privacy.gov.ph.

Tamasaph will not charge a fee for exercising any of the above rights. We aim to respond to all data rights requests within 15 business days. If your request is complex, we may extend this by a further 15 business days, in which case we will notify you.

SECTION 10

Children's Privacy

Tamasaph is strictly an adults-only platform. The minimum age to register and play is 21 years, as mandated by PAGCOR. We do not knowingly collect personal data from anyone under 21.

All registration processes include date-of-birth verification, and KYC document checks are required before first withdrawal to confirm age eligibility. If Tamasaph discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed, all funds returned to their source, and the data securely deleted.

If you are a parent or guardian and believe your child may have registered on Tamasaph, contact us immediately at privacy@tamasaph.best or support@tamasaph.best. We will investigate and act promptly.

SECTION 11

International Data Transfers

Some Tamasaph service providers — including certain cloud infrastructure and game studio partners — are based outside the Philippines. Where your personal data is transferred to recipients in other countries, Tamasaph ensures that appropriate safeguards are in place as required under RA 10173, including:

  • Binding contractual clauses requiring overseas processors to apply data protection standards equivalent to RA 10173
  • Transfers only to jurisdictions or organisations that provide an adequate level of data protection as assessed by the National Privacy Commission
  • Contractual prohibitions on sub-processing without Tamasaph's prior written consent

You may request information about specific international data transfers affecting your personal data by contacting privacy@tamasaph.best.

SECTION 12

Changes to This Privacy Policy

Tamasaph may update this Privacy Policy from time to time to reflect changes in our data practices, new legal obligations, or improvements in how we protect your information.

When we make material changes — changes that significantly affect how your data is used or your rights as a data subject — we will notify you by:

  • Posting a notice on the Tamasaph homepage and platform dashboard at least 14 days before the changes take effect
  • Sending an email notification to your registered Tamasaph email address

Minor, non-material changes (such as formatting corrections or clarifications that do not alter your rights) may be made without prior notice. The "Effective date" at the top of this Policy always reflects the date of the most recent substantive update.

Your continued use of Tamasaph after an updated Privacy Policy takes effect constitutes your acceptance of the revised Policy. If you do not accept the changes, you should stop using the platform and contact support to close your account.

SECTION 13

Contact Our Data Protection Officer

Tamasaph has appointed a Data Protection Officer (DPO) in accordance with RA 10173. The DPO is responsible for overseeing all data protection activities and ensuring Tamasaph's compliance with Philippine privacy law.

  • Data Privacy Enquiries: privacy@tamasaph.best
  • General Support: support@tamasaph.best
  • Live Chat: Available 24/7 from any page after logging in to your Tamasaph account
  • Response time: Data rights requests responded to within 15 business days

For complaints that Tamasaph has not resolved to your satisfaction, you can also contact the National Privacy Commission of the Philippines directly. NPC contact details are available at www.privacy.gov.ph.

tamasaph

🔒 How Tamasaph Keeps Your Data Safe

Six real technical and organisational measures — not marketing language.

256-bit TLS Encryption

Every byte of data travelling between your device and the Tamasaph platform is encrypted using 256-bit TLS — the same standard used by major Philippine banks and government platforms. Your login, payment details, and personal information are never transmitted in plain text.

Role-Based Access Controls

Tamasaph staff can only access the specific data required for their job. A customer support agent helping with a payment issue cannot access your game history, and a game analyst cannot access your ID documents. Access is controlled, logged, and audited.

Regular Security Testing

Independent penetration testing and vulnerability assessments are conducted on the Tamasaph platform on a regular schedule. Any vulnerabilities identified are remediated before they can be exploited. We take a proactive rather than reactive approach to security.

72-Hour Breach Notification

In the event of a personal data breach that could affect your rights, Tamasaph is committed to notifying affected players within 72 hours of discovery — in line with NPC requirements. You won't find out about a breach from the news before you hear it from us.

Encryption at Rest

Personal and financial data stored on Tamasaph servers is encrypted at rest using AES-256. Even in the unlikely event that physical server access were obtained, stored data cannot be read without the decryption keys — which are stored separately and rotated regularly.

Staff Privacy Training

Every Tamasaph employee who handles personal data undergoes formal privacy training during onboarding and refresher training annually. Our internal data handling procedures are reviewed and updated in line with changes to RA 10173 implementing rules and NPC guidance.

📋 How to Exercise Your Rights With Tamasaph

The process is simple and free. No forms to fill out — just a clear email to our DPO.

1

Email Our DPO

Send your request to privacy@tamasaph.best. State which right you want to exercise (access, correction, deletion, etc.) and include your registered email or mobile number so we can identify your account.

2

Identity Verification

To protect you from unauthorised data requests, Tamasaph will verify your identity before processing any data rights request. This is typically a quick confirmation via your registered contact details.

3

We Respond Within 15 Business Days

Tamasaph will fulfill your request or explain any legal limitations within 15 business days. There is no charge for any data rights request.

4

Escalate to the NPC If Needed

If you're not satisfied with Tamasaph's response, you can file a formal complaint with the National Privacy Commission of the Philippines at www.privacy.gov.ph.

tamasaph

Your Privacy. Our Commitment.

Play on Tamasaph With Full Confidence

Your personal data is protected by Philippine law, 256-bit encryption, and a team that takes privacy seriously. Register your free Tamasaph account today and play 200+ certified games — with your data in safe hands.

Must be 21+. Gambling involves risk. Play responsibly. PAGCOR Licensed. RA 10173 Compliant.