taraph Privacy Policy

1. Information We Collect

taraph collects various categories of personal information to provide, maintain, and improve our services. The types of data we collect depend on how you interact with our Platform.

1.1 Information You Provide Directly

When you register for a taraph account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (e.g., passport number, driver's license number, national ID number)
• Contact Information: Email address, mobile phone number, residential address, postal code
• Account Credentials: Username, password, and security questions/answers
• Financial Information: Bank account details, payment method information (GCash account, Maya account, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued ID, proof of address (utility bills, bank statements), selfies for identity verification, source of funds documentation
• Communication Data: Customer support inquiries, live chat transcripts, email correspondence, feedback, and complaints

1.2 Information Collected Automatically

When you access or use the taraph Platform, we automatically collect certain technical and usage data:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
• Connection Information: IP address, internet service provider, time zone, geographic location (country, city, region)
• Usage Data: Pages visited, games played, bet history, session duration, clickstream data, referring/exit pages, timestamps of activities
• Performance Data: Application errors, crash reports, system diagnostics, loading times
• Marketing Data: Marketing preferences, promotional email open rates, campaign engagement metrics

1.3 Information from Third-Party Sources

We may receive information about you from third-party service providers, including:

• Payment Processors: GCash, Maya, Philippine banks, cryptocurrency payment gateways
• Identity Verification Services: KYC/AML compliance providers, fraud detection services, credit bureaus
• Marketing Partners: Affiliate networks, advertising platforms, analytics providers
• Social Media Platforms: If you interact with taraph through social media channels

2. How We Use Your Personal Information

taraph processes your personal data for the following purposes, all of which are necessary to provide our services and comply with legal obligations:

2.1 Account Management and Service Delivery

• Creating and maintaining your taraph account
• Verifying your identity and age (21+ requirement)
• Processing deposits, withdrawals, and financial transactions
• Enabling you to place bets and participate in gaming activities
• Managing bonuses, promotions, and loyalty rewards
• Providing customer support and responding to inquiries
• Sending transactional notifications (deposit confirmations, withdrawal approvals, account alerts)

2.2 Legal and Regulatory Compliance

• Complying with Philippine Amusement and Gaming Corporation (PAGCOR) regulations
• Fulfilling Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) obligations under Philippine law
• Conducting Know Your Customer (KYC) verification to prevent fraud and identity theft
• Detecting and preventing money laundering, fraud, collusion, and other illegal activities
• Responding to legal requests, court orders, and government investigations
• Maintaining records as required by gaming licenses and financial regulations
• Enforcing our Terms and Conditions and preventing prohibited conduct

2.3 Security and Fraud Prevention

• Monitoring account activity for suspicious or fraudulent behavior
• Implementing risk management protocols to protect player funds
• Preventing unauthorized account access and identity theft
• Detecting bonus abuse, collusion, and automated betting
• Securing the Platform against cyberattacks, malware, and data breaches

2.4 Marketing and Communications

• Sending promotional offers, bonuses, and special event notifications (with your consent)
• Personalizing marketing messages based on your gaming preferences and activity
• Conducting market research and customer satisfaction surveys
• Analyzing campaign effectiveness and user engagement

2.5 Platform Improvement and Analytics

• Analyzing user behavior to improve game selection and user experience
• Identifying technical issues and optimizing platform performance
• Developing new features and services based on user feedback
• Conducting A/B testing to enhance user interface design

3. Legal Basis for Data Processing

Under the Philippine Data Privacy Act and international data protection standards, taraph processes your personal information based on the following legal grounds:

Processing Purpose	Legal Basis
Account creation, payment processing, service delivery	Contractual Necessity: Required to fulfill our Terms and Conditions
KYC verification, AML compliance, age verification	Legal Obligation: Required by PAGCOR regulations and Philippine law
Fraud prevention, security monitoring, risk management	Legitimate Interest: Protecting our business and your account security
Marketing communications, promotional offers	Consent: You can opt-out anytime through account settings
Platform improvement, analytics	Legitimate Interest: Enhancing user experience and service quality

4. Data Security Measures

taraph implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

4.1 Technical Security Controls

• Encryption: All data transmitted between your device and taraph servers is protected by 256-bit SSL/TLS encryption
• Secure Storage: Personal data is stored on encrypted servers in secure data centers with restricted physical access
• Firewall Protection: Advanced firewalls and intrusion detection systems prevent unauthorized network access
• Access Controls: Role-based access controls ensure only authorized personnel can access sensitive data
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments
• DDoS Protection: Distributed Denial of Service mitigation to ensure platform availability

4.2 Organizational Security Measures

• Employee Training: All staff undergo data protection and security awareness training
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements
• Incident Response Plan: Documented procedures for responding to data breaches and security incidents
• Data Minimization: We collect only the data necessary to provide our services
• Regular Backups: Automated backups ensure data recovery in case of system failure

5. Data Sharing and Third-Party Disclosure

taraph does not sell your personal information to third parties. We share your data only in the following limited circumstances:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our Platform:

• Payment Processors: GCash, Maya, Philippine banks, cryptocurrency payment gateways (to process deposits and withdrawals)
• Identity Verification Services: KYC/AML compliance providers (Jumio, Onfido, or similar services)
• Cloud Service Providers: Amazon Web Services (AWS), Google Cloud Platform (for hosting and data storage)
• Customer Support Tools: Zendesk, Intercom, or similar platforms (for live chat and ticket management)
• Analytics Providers: Google Analytics, Mixpanel (for usage analysis and performance monitoring)
• Marketing Platforms: Email service providers, SMS gateways (for promotional communications)

All third-party service providers are contractually bound to protect your data and use it only for the purposes we specify.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, and regulatory bodies when:

• Required by Philippine law or court order
• Necessary to comply with PAGCOR reporting requirements
• Responding to lawful requests for information
• Investigating suspected criminal activity, fraud, or money laundering
• Protecting the safety and rights of taraph, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and prominent notice on our Platform before such transfer occurs.

5.4 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot be used to identify you with third parties for statistical analysis, research, or marketing purposes. This data does not constitute personal information under Philippine data protection law.

6. Cookies and Tracking Technologies

taraph uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content.

6.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, account login, and security features. Cannot be disabled.
• Performance Cookies: Collect information about how you use taraph, including page views, session duration, and navigation paths. Used to improve platform performance.
• Functionality Cookies: Remember your preferences (language, currency, game favorites) to provide a personalized experience.
• Marketing Cookies: Track your browsing activity across sites to deliver targeted advertising. You can opt-out of marketing cookies through your browser settings.

6.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Note that disabling certain cookies may limit platform functionality. To manage cookies:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Manage cookies

7. Your Privacy Rights Under Philippine Law

The Philippine Data Privacy Act grants you the following rights regarding your personal information:

7.1 Right to Be Informed

You have the right to know what personal data we collect, how we use it, and with whom we share it. This Privacy Policy fulfills that obligation.

7.2 Right to Access

You may request a copy of all personal information we hold about you. We will provide this data in a structured, commonly used, and machine-readable format within thirty (30) days of your request.

7.3 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request corrections. You can update most information directly through your taraph account settings.

7.4 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data under certain circumstances, including:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where consent was the legal basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed

Note that we may retain certain information to comply with legal obligations, resolve disputes, or enforce our Terms and Conditions.

7.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. You can opt-out of marketing communications at any time by clicking the "unsubscribe" link in promotional emails or adjusting your account settings.

7.6 Right to Data Portability

You may request that we transfer your personal data to another service provider in a structured, commonly used format, where technically feasible.

7.7 Right to File a Complaint

If you believe taraph has violated your privacy rights, you may file a complaint with the Philippine National Privacy Commission (NPC):

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila 1307
Email: [email protected]
Hotline: (02) 8234-2228

7.8 Exercising Your Rights

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) business days. For complex requests, we may extend this period to thirty (30) days with prior notification.

8. Data Retention Periods

taraph retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal requirements.

Data Category	Retention Period
Account Information (active accounts)	Duration of account + 5 years after closure
Transaction Records	7 years (as required by Philippine banking and AML regulations)
KYC/Verification Documents	7 years after account closure (PAGCOR requirement)
Marketing Communications Data	Until consent is withdrawn + 6 months
Customer Support Records	3 years after last interaction
Usage and Analytics Data	2 years from collection
Security Logs and Incident Reports	5 years for audit purposes

After the applicable retention period expires, we will securely delete or anonymize your personal data in accordance with industry best practices.

9. Children's Privacy Protection

taraph is strictly intended for individuals aged twenty-one (21) years or older. We do not knowingly collect personal information from minors under the age of 21.

If we become aware that we have inadvertently collected personal data from an individual under 21, we will immediately:

• Suspend the account and prevent further access
• Delete all personal information associated with the account
• Void all transactions and return any deposited funds
• Notify the account holder of the account closure

Parents or guardians who believe their child has created a taraph account should immediately contact us at [email protected] so we can take appropriate action.

10. International Data Transfers

taraph primarily operates within the Philippines and stores data on servers located in secure data centers within the country. However, some of our third-party service providers may process data in jurisdictions outside the Philippines.

When we transfer personal data internationally, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Certification schemes such as Privacy Shield (where applicable)
• Binding corporate rules for multinational service providers

All international transfers comply with the Philippine Data Privacy Act's requirements for cross-border data flow.

11. Changes to This Privacy Policy

taraph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a new "Last Updated" date
• Notify registered users via email at least thirty (30) days before the changes take effect
• Display a prominent notice on the taraph Platform homepage

Your continued use of taraph services after the effective date of the updated Privacy Policy constitutes acceptance of the changes. If you do not agree with the modifications, you must discontinue use of the Platform and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

For general customer support inquiries unrelated to privacy, please contact:

• Email: [email protected]
• Live Chat: Available 24/7 on the taraph Platform
• Response Time: Average 60 seconds

Last Updated: January 15, 2025
Version: 4.1
Effective Date: January 15, 2025