tah77 Casino — Privacy Policy

§ 01 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Information" or "Personal Data" means any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information, would directly and certainly identify an individual. This includes Sensitive Personal Information as defined under the DPA.
• "Sensitive Personal Information" means personal information (a) about an individual's race, ethnic origin, marital status, age, colour, and religious, philosophical or political affiliations; (b) about an individual's health, education, genetic or sexual life, or to any proceeding for any offence committed or alleged to have been committed by such person, the disposal of such proceedings, or the sentence of any court in such proceedings; (c) issued by government agencies peculiar to an individual, such as social security numbers, previous or current health records, licences or its denials, suspension or revocation, and tax returns; and (d) specifically established by an executive order or an act of Congress to be kept classified.
• "Processing" means any operation or set of operations performed upon personal information, including but not limited to collection, recording, organisation, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction of data.
• "Data Controller" means tah77, the entity that determines the purposes and means of processing personal information.
• "Data Processor" means any third party that processes personal data on behalf of tah77 pursuant to a written data processing agreement.
• "NPC" means the National Privacy Commission of the Philippines, the government agency responsible for administering and implementing the DPA.

§ 02 Data Controller Information

The Data Controller responsible for the personal information collected through the tah77 platform is the tah77 entity operating the licensed online gaming platform at tah77.app, duly authorized by the Philippine Amusement and Gaming Corporation (PAGCOR) under applicable Philippine gaming legislation.

tah77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Policy. The DPO may be contacted through the contact details provided in Section 14 of this Policy.

§ 03 Categories of Personal Information We Collect

tah77 collects personal information across the following categories. The specific data points collected within each category depend on your level of account activity and the services you use.

§ 04 How We Collect Your Personal Information

tah77 collects personal information through the following means:

4.1 Direct Collection

Information you provide directly to tah77 during the registration process, KYC submission, deposit or withdrawal requests, bonus opt-ins, support interactions, and any other direct communication with tah77 staff or automated systems.

4.2 Automated Collection

Technical and behavioural data collected automatically when you access and use the tah77 platform, including through server logs, session tracking, and first-party cookies. See Section 8 for further details on cookies and tracking technologies.

4.3 Third-Party Sources

tah77 may receive personal information from third parties where necessary for KYC verification (e.g., identity verification service providers) and fraud prevention. Any third-party sourced data is processed in accordance with applicable data sharing agreements and this Policy.

4.4 PAGCOR and Regulatory Bodies

In certain circumstances prescribed by PAGCOR licensing conditions or by order of a competent Philippine government authority or court, tah77 may receive information about players from regulatory bodies or law enforcement agencies.

§ 05 Lawful Basis for Processing

Under the Philippine Data Privacy Act of 2012, tah77 processes personal information on the following lawful bases, depending on the specific purpose of the processing:

• Contractual Necessity: Processing required to perform the contract between tah77 and the Player — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with mandatory legal requirements, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate Interest: Processing necessary for tah77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and product improvement, where these interests are not overridden by the Player's privacy rights.
• Consent: Where tah77 relies on consent as the lawful basis for a particular processing activity (e.g., optional marketing communications), consent will be sought expressly, separately, and in a manner that makes the specific purpose clear. Consent may be withdrawn at any time without affecting the lawfulness of processing before withdrawal.

§ 06 How We Use Your Personal Information

tah77 uses collected personal information for the following specific purposes:

• Account registration and management: Creating, maintaining, and administering your tah77 Player account, including password management and account security.
• Identity verification (KYC): Verifying your identity and age in compliance with PAGCOR licensing requirements and AMLA obligations before processing withdrawals or upon reasonable request.
• Payment processing: Facilitating GCash, PayMaya, bank transfer, and card deposit and withdrawal transactions associated with your tah77 Wallet.
• Service delivery: Providing access to casino games, the sportsbook, live dealer tables, bingo rooms, fishing games, and all other tah77 platform features.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, collusion, money laundering, and other prohibited conduct.
• Responsible gaming: Monitoring gaming activity for indicators of problem gambling behaviour and applying player-requested responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Regulatory compliance: Meeting mandatory reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC), and responding to lawful requests from Philippine government authorities and courts.
• Customer support: Responding to player queries, processing complaints, resolving disputes, and maintaining records of support interactions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing communications (with consent only): Sending promotional offers, bonus notifications, and platform updates via SMS or email, where you have explicitly opted in to receive such communications.

§ 07 Sharing Your Personal Information

tah77 does not sell, rent, or otherwise transfer personal information to third parties for their own commercial purposes. tah77 shares personal information only in the following limited circumstances, and only to the extent necessary for the stated purpose:

7.1 Service Providers (Data Processors)

tah77 engages trusted third-party service providers to perform functions on its behalf, including payment processors (GCash/PayMaya API operators, acquiring banks), KYC and identity verification providers, platform infrastructure and hosting providers, cybersecurity and fraud detection services, and customer support software providers. All service providers are engaged under contractual data processing agreements that restrict their use of personal data to the specific services they provide to tah77.

7.2 Game Content Providers

Certain tah77 games are provided by third-party studios (including but not limited to Evolution Gaming, Pragmatic Play, PG Soft, JILI, SA Gaming, and Habanero). Game providers may receive technical session data necessary to deliver their games (e.g., Player ID, currency, session token) but do not receive full personal profile information unless required for a jointly operated product under a separate disclosed agreement.

7.3 Regulatory and Legal Disclosure

tah77 will disclose personal information to PAGCOR, the AMLC, the NPC, the National Bureau of Investigation, the Philippine National Police, or any other competent Philippine government authority or court where tah77 is legally required to do so by applicable law, court order, or regulatory directive. tah77 will, to the extent permitted by law, notify affected players of such disclosures where practicable.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of tah77's business assets, personal data held by tah77 may be transferred to the successor entity as part of that transaction, subject to the successor entity assuming the obligations of this Policy toward existing players. Affected players will be notified of any material change in data controller identity.

§ 08 Cookies & Tracking Technologies

tah77 uses first-party cookies and similar session-tracking technologies to provide, maintain, and secure the tah77 platform. tah77 does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising.

8.1 Essential Cookies

These cookies are strictly necessary for the operation of the tah77 platform — they enable user authentication, maintain session state across pages, remember your language and currency preferences, and support core security functions. Essential cookies cannot be disabled without significantly impairing the functionality of the platform.

8.2 Functional Cookies

Functional cookies allow tah77 to remember choices you have made (such as responsible gaming settings and game display preferences) to improve your experience. These cookies do not track your activity across other websites.

8.3 Analytics Cookies

tah77 uses first-party analytics to understand how players interact with platform features in aggregate, in order to improve the service. Analytics data is processed in anonymised or pseudonymised form wherever technically feasible.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from accessing your tah77 account and using the platform's core features.

§ 09 Data Security

tah77 implements technical and organisational security measures appropriate to the nature of the personal information processed and the risks associated with unauthorized access, disclosure, alteration, or destruction of that information. Key security measures include:

• TLS/SSL Encryption: All data in transit between your device and tah77 servers is protected by current-standard TLS encryption.
• Password Hashing: Player passwords are stored exclusively as salted cryptographic hashes. tah77 does not store passwords in plain text and cannot retrieve your password — only reset it.
• Access Controls: Access to systems containing personal information is restricted to tah77 personnel with a legitimate operational need, governed by role-based access controls and multi-factor authentication for administrative systems.
• KYC Document Security: Identity documents submitted for KYC verification are stored in encrypted form in access-controlled document management systems, separate from transactional data.
• Intrusion Detection and Monitoring: tah77's platform infrastructure is monitored for unauthorized access attempts, anomalous login behaviour, and other security events on a continuous basis.
• Vendor Security Assessments: Third-party service providers with access to personal data are subject to security assessments as part of tah77's vendor due diligence process.

§ 10 Data Retention

tah77 retains personal information only for as long as necessary to fulfil the purposes described in this Policy, subject to any longer retention period required by applicable law or regulatory obligation. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with tah77's data disposal procedures, unless a specific legal hold obligation requires continued retention.

§ 11 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by tah77. To exercise any of these rights, contact tah77's Data Protection Officer using the details in Section 14.

tah77 will respond to data rights requests within 15 business days of receipt. Where a request cannot be fulfilled within that period due to complexity, tah77 will notify you of the delay and the expected resolution date. Some requests may be subject to limitations where fulfilling them would conflict with tah77's mandatory legal obligations under the DPA, AMLA, or PAGCOR requirements.

§ 12 Children's Privacy and Underage Player Protection

tah77's gaming services are strictly restricted to individuals aged 18 years and above. tah77 does not knowingly collect personal information from persons under the age of 18. The mandatory KYC identity verification process — which requires submission of a valid Philippine government-issued photo ID — is specifically designed to prevent underage access to real-money gaming services.

If tah77 becomes aware, through any means, that personal information has been collected from a person who is under 18 years of age, tah77 will:

• Immediately suspend the associated account pending investigation;
• Return any real-money deposits to the payment source, where technically possible;
• Permanently delete the personal information of the minor from its systems, to the extent not required to be retained by law;
• Report the matter to PAGCOR in accordance with regulatory requirements.

§ 13 Changes to This Privacy Policy

tah77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, or tah77's data processing practices. Material changes will be communicated to registered Players via SMS notification to your registered Philippine mobile number and/or by prominent notice on the tah77 platform, with a minimum of 7 days' advance notice before the amended Policy becomes effective.

The "Effective Date" displayed at the top of this Policy reflects the date on which the current version entered into force. The version number is updated with each material revision. The most current version of this Policy will always be available at tah77.app/privacy-policy. Your continued use of tah77 following the effective date of any revised Policy constitutes your acceptance of the revised terms.

§ 14 Contact & Data Protection Officer

For privacy-related inquiries, data rights requests, concerns about tah77's data processing practices, or to contact tah77's Data Protection Officer, please use the following contact channels:

• In-Platform Support Chat: Available 24/7 via tah77.app after login. For data rights requests, use this channel to ensure your request is linked to your verified Account record.
• Email: [email protected] — mark the subject line "DATA PRIVACY REQUEST — [your account registered mobile number]" for expedited routing to the DPO.

tah77's Data Protection Officer will acknowledge receipt of formal data rights requests within 3 business days and provide a substantive response within 15 business days, or notify you of any required extension.

If you are not satisfied with tah77's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

This Privacy Policy was last updated on 1 January 2026 (Version 2026.1). It supersedes all previous versions of the tah77 Privacy Policy. © 2026 tah77. All rights reserved.