Tara77 Privacy Policy

1 Introduction

Tara77 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the Tara77 online gaming platform available at tara77.app and its associated mobile applications ("the Service"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

This Privacy Policy applies to all registered players, visitors to the Tara77 website, and any other individuals whose personal data Tara77 processes in connection with the provision of its services. It should be read together with the Tara77 Terms & Conditions, which govern your use of the platform.

By registering for a Tara77 account or by continuing to use the Tara77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must discontinue use of the Tara77 platform.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, Tara77 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the Tara77 platform.

As Personal Information Controller, Tara77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data protection law.

Where Tara77 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud hosting services — those providers act as Personal Information Processors (PIPs) and are contractually bound to process data only on Tara77's instructions and in accordance with applicable law.

3 Personal Data We Collect

Tara77 collects the following categories of personal data, depending on how you interact with the platform:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Gender;
• Nationality and country of residence;
• Government-issued identification number (e.g., Philippine passport number, SSS/UMID number, driver's licence number).

3.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (including barangay, city/municipality, province, and postal code).

3.3 Financial & Payment Data

• GCash or PayMaya mobile wallet number;
• Bank account details (BDO, BPI, Metrobank, or other supported banks) for withdrawal processing;
• Transaction history, including deposit amounts, withdrawal amounts, and dates;
• Source of funds declarations where required by anti-money laundering regulations.

3.4 Gaming Activity Data

• Game session logs, including games played, wagers placed, and outcomes;
• Account balance history;
• Bonus and promotion usage;
• Responsible gaming tool settings (deposit limits, self-exclusion status).

3.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Unique device identifiers;
• Login timestamps and session duration;
• Cookies and similar tracking technologies (see Section 8).

3.6 Communications Data

• Records of communications between you and Tara77 support, including live chat transcripts, emails, and support ticket content;
• Survey responses and feedback submitted voluntarily.

4 How We Collect Your Data

Tara77 collects personal data through the following means:

• Directly from you — when you register for a Tara77 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey;
• Automatically — through cookies, web beacons, and server logs when you access and interact with the Tara77 website or mobile application;
• From third parties — from KYC and identity verification service providers, payment processors (such as GCash, PayMaya, BDO, BPI, and Metrobank), fraud detection services, and, where applicable, from publicly available sources or regulatory databases for compliance purposes.

Where Tara77 receives personal data about you from a third party, we will handle that data in accordance with this Privacy Policy and will inform you of the source of the data where required by law.

5 How We Use Your Personal Data

Tara77 uses your personal data for the following purposes:

Tara77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6 Legal Basis for Processing

Tara77 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (RA 10173):

• Contractual necessity: Processing is necessary to perform the contract between you and Tara77 — specifically, to operate your account, process transactions, and provide gaming services;
• Legal obligation: Processing is required to comply with applicable Philippine law, including anti-money laundering regulations (RA 9160, as amended), PAGCOR licensing requirements, and tax reporting obligations;
• Legitimate interests: Processing is necessary for Tara77's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests;
• Consent: Where Tara77 relies on your consent as the legal basis for processing — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

Tara77 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with regulatory requirements;
• Fraud prevention and security services: Providers that assist Tara77 in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct;
• Cloud hosting and IT infrastructure providers: Service providers that host the Tara77 platform and store data on Tara77's behalf, subject to strict contractual data protection obligations;
• Regulatory and law enforcement authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities, where disclosure is required by law or court order;
• Professional advisers: Lawyers, auditors, and accountants, where necessary for the conduct of Tara77's business and subject to professional confidentiality obligations.

8 Cookies & Tracking Technologies

Tara77 uses cookies and similar tracking technologies on its website and mobile application to enhance your experience, maintain session security, and gather analytics data. The following types of cookies may be used:

• Strictly necessary cookies: Essential for the operation of the Tara77 platform, including maintaining your login session and ensuring platform security. These cookies cannot be disabled without affecting platform functionality;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations;
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Tara77 platform, enabling us to identify areas for improvement. This data does not identify you personally;
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Tara77 platform. Tara77 does not use third-party advertising cookies or share cookie data with advertising networks.

9 Data Retention

Tara77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by RA 9160 (Anti-Money Laundering Act) and applicable tax regulations;
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the relevant gaming session;
• Communications data: Retained for two (2) years from the date of the communication, unless a longer period is required for dispute resolution;
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with Tara77's data disposal procedures.

10 Data Security

Tara77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and Tara77's servers;
• Encryption of sensitive data at rest, including financial account details and government ID information;
• Role-based access controls limiting access to personal data to authorised personnel on a need-to-know basis;
• Multi-factor authentication for administrative access to systems containing personal data;
• Regular security vulnerability assessments and penetration testing;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While Tara77 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your Tara77 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by Tara77:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy;
• Right of access: The right to request a copy of the personal data Tara77 holds about you and information about how it is processed;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to Tara77's legal retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds relating to your particular situation, including the right to opt out of direct marketing communications at any time;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that Tara77 has processed your personal data in violation of RA 10173.

To exercise any of these rights, please contact Tara77 at support@tara77.app with the subject line "Data Privacy Request." Tara77 will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days, or within such other period as may be required by applicable law.

Tara77 may request proof of identity before processing a data subject rights request to ensure that personal data is not disclosed to an unauthorised person.

12 Children's Privacy

The Tara77 platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations applicable to casino-style online gaming. Tara77 does not knowingly collect personal data from individuals under the age of 21.

If Tara77 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will take immediate steps to delete that data and close the associated account. If you believe that Tara77 may have collected data from a minor, please contact us immediately at support@tara77.app.

13 Cross-Border Data Transfers

Tara77 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to, stored in, or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services.

Where personal data is transferred outside the Philippines, Tara77 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under RA 10173;
• Transfers only to countries or organisations that provide an adequate level of data protection as determined by the National Privacy Commission;
• Your explicit consent to the transfer, where required by applicable law.

By using the Tara77 platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the provision of the Tara77 service, subject to the safeguards described above.

14 Updates to This Privacy Policy

Tara77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, Tara77 will notify registered players by email or through a prominent notice on the platform at least seven (7) days before the changes take effect, where practicable.

The "Effective Date" at the top of this Privacy Policy indicates when the current version came into force. Your continued use of the Tara77 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically. The most current version will always be available at tara77.app/privacy-policy.

15 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how Tara77 handles your personal data, please contact our Data Protection Officer using the details below. We take all privacy concerns seriously and will respond promptly.

If you are not satisfied with Tara77's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173. Information about how to file a complaint with the NPC is available on the NPC's official website.

For information about your rights as a player, please also review our Terms & Conditions and our Responsible Gaming page.