tah77 Privacy Policy – Your Data, Protected

This Privacy Policy ("Policy") is issued by tah77 ("tah77," "we," "our," or "us"), the operator of the online casino and sports betting platform accessible at tah77.vip ("Platform"). This Policy describes how tah77 collects, uses, stores, shares, and protects personal data relating to individuals who register, access, or otherwise use the Platform ("Users" or "you").

tah77 processes personal data in compliance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC"). By registering a tah77 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

If you do not agree to the terms of this Policy, you must not register on or access the tah77 Platform. This Policy is to be read in conjunction with tah77's Terms & Conditions, which are available at /terms-conditions.

tah77 collects personal data through the following categories of interaction with the Platform:

tah77 does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Government-issued ID data is collected solely for KYC purposes and is stored with restricted access controls.

Personal data collected by tah77 is used exclusively for the following purposes:

• Creating and managing your tah77 account, including authentication and account security;
• Processing deposits and withdrawals through GCash, PayMaya, BDO, BPI, Metrobank, and bank transfer;
• Verifying your identity and age (21+) in compliance with PAGCOR regulatory requirements and applicable Philippine law;
• Detecting and preventing fraud, money laundering, and unauthorized account access;
• Providing customer support services in English and Tagalog;
• Administering bonuses, promotions, and loyalty programs;
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations;
• Sending transactional communications regarding your tah77 account (account confirmations, deposit receipts, withdrawal notifications);
• Sending promotional communications where you have provided consent (opt-out available at any time);
• Improving Platform performance and user experience through aggregated, anonymized analytics;
• Fulfilling responsible gaming obligations, including administering self-exclusion and deposit limits.

tah77 does not use your personal data for automated individual decision-making or profiling that produces legal effects concerning you, except where required by applicable law or regulation.

tah77 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform our obligations under the tah77 Terms & Conditions, including account management, payment processing, and game provision;
• Legal Obligation: Processing required to comply with applicable laws, including PAGCOR regulatory requirements, AML obligations, tax reporting, and NPC directives;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time.

tah77 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. Personal data is shared only with the following categories of recipients, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment Processors: GCash (G-Xchange Inc.), PayMaya (PayMaya Philippines Inc.), BDO, BPI, Metrobank — for the purpose of processing deposits and withdrawals;
• Game Providers: JILI Games, Evolution Gaming, Pragmatic Play, PG Soft, and Asia Gaming — solely for game delivery and integrity verification;
• KYC and AML Service Providers: Third-party identity verification services used to fulfill regulatory KYC and AML obligations;
• Regulatory Authorities: PAGCOR, the National Privacy Commission, and law enforcement agencies — where required by law or court order;
• IT and Cloud Service Providers: Data hosting, security monitoring, and technical infrastructure providers operating under strict data processing agreements.

All third-party recipients are contractually required to process personal data only for the specified purpose and to implement appropriate security measures. tah77 does not authorize any third party to use your data for their independent marketing or commercial purposes.

tah77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of your tah77 account plus five (5) years following account closure, in compliance with AML regulatory requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations;
• KYC / Identity Verification Documents: Retained for five (5) years from account closure or from the date of the last transaction, whichever is later;
• Support Communications: Retained for two (2) years from the date of the interaction;
• Marketing Consent Records: Retained until consent is withdrawn plus one (1) additional year for compliance evidence purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with tah77's data disposal procedures.

tah77 implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and tah77 servers;
• AES-256 encryption for sensitive personal data stored at rest;
• Multi-factor authentication for tah77 system administrator accounts;
• Role-based access controls limiting data access to personnel with a legitimate operational need;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• 24/7 intrusion detection and monitoring of tah77 production infrastructure.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tah77 will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with the DPA and NPC Circular No. 16-03.

tah77 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Essential for Platform operation, including maintaining your login session, CSRF protection, and load balancing. These cannot be disabled without affecting core Platform functionality;
• Performance & Analytics Cookies: Used to measure page load times, error rates, and user flow within the Platform. Data is aggregated and anonymized;
• Functionality Cookies: Store your language preference and display settings to improve your experience on return visits.

tah77 does not place third-party advertising or behavioral tracking cookies on your device. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in to or use the tah77 Platform.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal data held by tah77:

• Right to Be Informed: The right to know what personal data tah77 collects and processes, and for what purposes — as set out in this Policy;
• Right to Access: The right to request a copy of the personal data tah77 holds about you;
• Right to Correction: The right to have inaccurate or incomplete personal data corrected;
• Right to Erasure: The right to request deletion of personal data where processing is no longer necessary, subject to tah77's legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe tah77 has not handled your personal data in accordance with applicable law.

To exercise any of the above rights, contact tah77's Data Protection Officer at [email protected]. tah77 will respond to verified requests within thirty (30) days.

The tah77 Platform is strictly restricted to individuals aged 21 years and above. tah77 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a minor, we will immediately suspend the relevant account, delete the data, and report the matter as required by applicable Philippine law. If you believe a minor has registered on tah77, please notify our support team at [email protected] immediately.

tah77's primary data processing infrastructure is located in Asia-Pacific data centers. In providing the Platform, personal data may be transferred to and processed by game providers, payment processors, and technical service providers located outside the Philippines. All such transfers are subject to appropriate safeguards, including data processing agreements that incorporate data protection obligations consistent with the DPA and NPC regulations. tah77 does not transfer personal data to jurisdictions that do not provide an adequate level of protection without ensuring equivalent contractual protections are in place.

tah77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Material changes will be communicated to registered players via email or in-Platform notification at least fourteen (14) days before taking effect. Non-material clarifications may be made without advance notice. The date of the most recent revision is displayed at the top of this page. Your continued use of the tah77 Platform after the effective date of a revised Policy constitutes your acceptance of the changes.

tah77 has appointed a Data Protection Officer ("DPO") in accordance with NPC requirements. If you have any questions, concerns, or requests regarding this Privacy Policy or tah77's handling of your personal data, you may contact our DPO through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the tah77 Platform in English and Tagalog

tah77 will acknowledge all privacy-related inquiries within two (2) business days and aims to resolve them within thirty (30) calendar days. For unresolved complaints, you may escalate to the National Privacy Commission.