tap646
Privacy Policy

This Privacy Policy ("Policy") is issued by tap646 ("tap646," "we," "us," or "our") and applies to all users ("you," "your," or "User") of the tap646 online gaming platform accessible at tap646.vip and any associated services, mobile experiences, or communications channels operated by tap646.

tap646 takes privacy seriously. As a Philippines-based online gaming operator serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Iloilo, and other regions, we are subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. We are also subject to applicable PAGCOR regulatory data governance requirements.

By creating an account with tap646 or by continuing to use our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy.

For the purposes of the Data Privacy Act of 2012 and applicable data protection law, tap646 is the personal information controller ("PIC") in respect of all personal data processed through the tap646 platform.

As the personal information controller, tap646 determines the purposes and means of processing personal data collected from users of the platform. Any personal information processors ("PIPs") engaged by tap646 — such as payment processors, KYC verification services, or IT infrastructure providers — process personal data only on tap646's documented instructions and subject to appropriate data processing agreements.

Contact details for data-related inquiries, including requests to exercise your data rights, are set out in Section 15 of this Policy.

tap646 collects the following categories of personal data from users, depending on the nature of your interaction with the platform:

tap646 does not intentionally collect special categories of personal data (e.g., health data, religious beliefs, political opinions) unless specifically required by a regulatory obligation. Where such data is provided voluntarily by a user (for example, in the context of a responsible gaming assessment), it will be handled with enhanced protections.

tap646 collects personal data through the following methods:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated collection: Technical data collected automatically when you access the tap646 platform, including IP address, device identifiers, browser characteristics, session timestamps, and page interaction data via cookies and similar technologies.
• Third-party sources: Identity verification data from licensed KYC/AML service providers used to verify the documents you submit; fraud detection signals from third-party risk systems; payment confirmation data from GCash, Maya, BPI, BDO, and other payment processors.
• Platform activity: Gaming behavior data generated by your use of tap646's products, including bet placement, game selection, session length, win/loss history, and bonus redemption activity.

tap646 processes personal data for the following specific and documented purposes:

• Account management: Creating, operating, and maintaining your tap646 account, including authentication, profile management, and customer service.
• Age and identity verification: Verifying that you meet the 21+ age requirement and confirming your identity in compliance with PAGCOR regulations and our KYC obligations.
• Payment processing: Facilitating deposits from and withdrawals to your GCash, Maya, or bank account; recording transaction history; and managing your tap646 wallet balance.
• Regulatory compliance: Meeting obligations under PAGCOR's licensing framework, anti-money laundering (AML) requirements under Republic Act No. 9160 as amended, and the Data Privacy Act of 2012.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, money laundering, bonus abuse, and other prohibited activities.
• Responsible gaming: Monitoring gaming activity patterns to identify potentially problematic behavior, administering self-exclusion requests, and enforcing deposit, loss, and session limits set by the user.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, payment flows, and user experience across the tap646 product.
• Communications: Sending account notifications, transaction confirmations, security alerts, and where you have opted in, promotional communications about tap646 offers and updates.

Under the Data Privacy Act of 2012, tap646 processes personal data on the following legal bases:

• Consent: For marketing communications, optional profile data, and processing activities where we specifically request your consent at the point of collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Performance of a contract: Processing necessary to provide you with the tap646 service under our Terms & Conditions — including account creation, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AML law (RA 9160), the Data Privacy Act, and other applicable Philippine law.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregated analytics, where such interests are not overridden by your fundamental privacy rights.

Where tap646 relies on legitimate interests as a legal basis, we conduct and document a legitimate interests assessment (LIA) to confirm that the processing is proportionate and that appropriate safeguards are in place.

tap646 does not sell, rent, or trade personal data to third parties for their own commercial purposes. Personal data may be shared only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers as necessary to process your transactions. Each provider operates under their own privacy policy and applicable Philippine financial regulations.
• KYC and identity verification providers: Licensed third-party services that verify identity documents and screen against sanctions and politically exposed person (PEP) lists, as required for AML compliance.
• IT and hosting infrastructure: Cloud and server infrastructure providers that host tap646's platform and databases. These providers act as personal information processors under documented agreements with tap646.
• Game content providers: Game studios (e.g., Jili, PG Soft, Pragmatic Play) may receive session tokens or anonymized player identifiers necessary for game delivery. No personally identifiable information beyond what is operationally required is shared.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities where tap646 is legally required or compelled to disclose information.
• Professional advisers: Lawyers, auditors, and insurers who advise tap646, subject to professional confidentiality obligations.

tap646 is a Philippines-based platform and processes personal data primarily within the Philippines. Where the use of third-party service providers involves data being processed in other jurisdictions (for example, where a payment processor or KYC provider operates servers outside the Philippines), tap646 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with the Data Privacy Act of 2012.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, adequacy assessments of the recipient jurisdiction's data protection framework, and technical measures ensuring data is encrypted in transit and at rest.

In all cases, personal data transferred internationally by tap646 is subject to the same level of protection described in this Policy, regardless of where it is processed.

tap646 retains personal data for the periods set out below, or longer where required by applicable law or regulatory obligation:

Upon expiry of the applicable retention period, tap646 will securely delete or irreversibly anonymize personal data in accordance with our internal data disposal procedures, unless retention is required for ongoing regulatory proceedings or legal claims.

tap646 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, and disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the tap646 platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all login sessions, payment transactions, and account management actions.
• Encryption at rest: Sensitive personal data stored in tap646's databases — including identity documents and payment information — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data systems is restricted to authorized personnel on a role-based, need-to-know basis. All administrative access is authenticated with multi-factor authentication and subject to access logging and audit trails.
• Two-factor authentication (2FA): tap646 offers and strongly recommends 2FA for all user accounts, providing an additional layer of protection against unauthorized login.
• Penetration testing: tap646's systems are subject to regular security assessments, including vulnerability scanning and penetration testing, by qualified security professionals.
• Incident response: tap646 maintains a documented data breach response procedure. In the event of a personal data breach, we will notify affected users and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act.

tap646 uses cookies and similar tracking technologies on the platform to support core functionality, security, and platform performance. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the platform to function — including session authentication, security tokens, login state management, and anti-CSRF protections. These cannot be disabled without impacting platform functionality.
• Functional cookies: Remember your preferences (such as language settings, remembered username, and notification preferences) to provide a more consistent experience across sessions.
• Analytics cookies: Collect anonymized, aggregated data about how users navigate the platform — pages visited, session duration, game category interactions — to help tap646 improve the user experience. This data does not identify you personally.
• Security and fraud detection cookies: Device fingerprinting and behavioral signals used to detect and prevent fraudulent activity, including unauthorized login attempts, multi-account creation, and bot activity.

tap646 does not use third-party advertising cookies or behavioral retargeting technologies. You can manage cookie preferences through your browser settings, noting that disabling strictly necessary cookies will prevent normal platform use.

Under the Data Privacy Act of 2012, as a Filipino data subject you hold the following rights in respect of your personal data held by tap646. To exercise any of these rights, contact us using the details in Section 15.

tap646 will respond to all data rights requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further thirty (30) days, notifying you of the extension and the reason. We may require you to verify your identity before processing a rights request to ensure we do not disclose or act upon data incorrectly.

tap646 is strictly an adult gaming platform. Access is limited to individuals aged 21 years and above, in compliance with PAGCOR's minimum age requirements for online gambling in the Philippines. The tap646 platform is not directed at, and does not knowingly collect personal data from, individuals under 21 years of age.

Age verification is conducted as part of the KYC process at account registration. Where tap646 discovers or has reasonable grounds to believe that an account was registered by an individual under 21, we will immediately suspend the account, delete any personal data collected, and report the matter to PAGCOR as required. Any funds deposited by an underage user may be held pending regulatory guidance.

tap646 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or platform functionality. The effective date at the top of this Policy indicates when it was last reviewed and updated.

For material changes to this Policy — such as changes to the categories of data we collect, new purposes of processing, or changes to sharing arrangements — tap646 will provide advance notice to registered users via email or in-platform notification where practicable.

Your continued use of the tap646 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions. We recommend checking this page periodically for updates.

If you have any questions, concerns, or requests relating to this Privacy Policy or tap646's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the live chat widget on tap646.vip — the fastest way to reach us for urgent privacy concerns.
• Email: [email protected] — for formal data rights requests, please include "Privacy Request" in the subject line along with your registered account details for identity verification.

tap646 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. The DPO may be reached through the email address above, marked for the attention of the Data Protection Officer.

If you are not satisfied with tap646's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph). tap646 will cooperate fully with any NPC investigation.

This Privacy Policy was last reviewed and is effective as of January 1, 2026. All prior versions of this Policy are superseded by this document.