Privacy Policy — talaph Casino

Welcome to talaph's Privacy Policy. talaph ("talaph," "we," "us," or "our") is a PAGCOR-registered online casino platform operating at talaph.net, serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and the wider Philippines. We are committed to protecting and respecting your privacy in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its implementing rules and regulations.

This Privacy Policy explains how talaph collects, uses, stores, discloses, and protects personal information that you provide to us or that we collect when you use the talaph platform, including its website, mobile interface, games, payment services, promotions, and customer support channels.

This Privacy Policy should be read together with talaph's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

For the purposes of the Data Privacy Act of 2012, talaph is the personal information controller responsible for your personal data collected through the talaph platform. talaph determines the purposes and means of processing your personal information and is accountable for the data protection obligations described in this Privacy Policy.

talaph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and for handling player data rights requests. You may contact the talaph DPO through the contact details provided in Section 14 of this Privacy Policy.

talaph collects personal data from you in three main ways: data you provide directly to us, data collected automatically when you use the platform, and data received from third parties such as payment providers and identity verification services.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address, email address, and mobile number provided when creating your talaph account.
• Identity Verification (KYC) Documents: Government-issued identification such as a Philippine passport, driver's licence, SSS ID, UMID, or PhilSys National ID, along with a selfie or live photo for verification purposes.
• Payment Information: GCash account number, PayMaya account number, BPI/BDO/Metrobank account details, and transaction records necessary to process deposits and withdrawals in Philippine Peso (PHP / ₱).
• Communications: Records of your communications with talaph customer support via live chat, email, or any support ticket system.
• Responsible Gaming Preferences: Deposit limits, session limits, and self-exclusion requests submitted through your account dashboard.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, session duration, click patterns, betting history, transaction logs, and platform navigation behavior.
• Location Data: Approximate geographic location derived from your IP address, used to verify that you are accessing talaph from within the Philippines as required by PAGCOR regulations.
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 7 of this Privacy Policy.

3.3 Data Received from Third Parties

• Identity verification results from KYC service providers engaged by talaph.
• Transaction confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Fraud risk signals and AML screening results from financial crime prevention service providers.
• Responsible gaming referral data from PAGCOR's self-exclusion registry, where applicable.

talaph uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your additional consent:

• Account Management: To register your talaph account, verify your identity, maintain your account in good standing, and communicate important account-related notices.
• Service Delivery: To provide access to talaph's full suite of online casino games including slots, live casino, sports betting, sabong, and bingo; to process deposits and withdrawals; and to deliver promotions and bonuses you have opted into.
• Regulatory Compliance: To fulfil talaph's obligations under PAGCOR regulations, Republic Act No. 9160 (Anti-Money Laundering Act) as amended, the Data Privacy Act of 2012, and all other applicable Philippine laws and regulations — including mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC) where required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the talaph platform.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, to enforce deposit and session limits you have set, to process self-exclusion requests, and to comply with PAGCOR responsible gaming requirements.
• Platform Improvement: To analyse usage patterns, conduct research, test new features, and improve the overall quality and performance of the talaph platform for all Filipino players.
• Marketing Communications: To send you promotional offers, bonus alerts, and talaph news — but only where you have consented to receive marketing communications. You may withdraw consent at any time via your account settings.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through talaph's 24/7 support channels.

Under the Data Privacy Act of 2012, talaph processes your personal data on the following legal bases:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between talaph and you (i.e., your talaph account agreement and our Terms & Conditions). Without this data, we cannot provide talaph's services.
• Legal Obligation: Certain data processing — particularly KYC/AML verification, transaction reporting to PAGCOR and AMLC, and responsible gaming record-keeping — is required by Philippine law. talaph processes data for these purposes to fulfil its legal obligations regardless of your consent preferences.
• Legitimate Interests: talaph processes technical and usage data on the basis of our legitimate interests in operating a secure, fair, and compliant gaming platform, preventing fraud, and improving our services — provided these interests are not overridden by your privacy rights.
• Consent: Where talaph relies on your consent as the legal basis — most notably for marketing communications and for the use of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

talaph does not sell your personal data. We may share your personal data with the following categories of recipients only for the purposes described in this Privacy Policy:

• PAGCOR and Philippine Regulatory Authorities: As a PAGCOR-registered operator, talaph is required to share player data and transaction records with PAGCOR upon request and in accordance with our licence conditions. talaph also reports to the AMLC where required under RA 9160.
• Payment Service Providers: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC and Identity Verification Partners: talaph engages licensed identity verification service providers to conduct KYC checks. These providers process your identity documents solely for the purpose of verifying your eligibility to use talaph.
• Technology and Hosting Partners: talaph's platform infrastructure is supported by third-party technology providers, including cloud hosting services, game technology suppliers, and cybersecurity providers, who process data on talaph's behalf under strict data processing agreements.
• Professional Advisors: talaph's legal advisors, auditors, and compliance consultants may access limited personal data as necessary to provide professional services to talaph, subject to professional confidentiality obligations.
• Law Enforcement: talaph may disclose personal data to the Philippine National Police, National Bureau of Investigation, courts, or other competent authorities where required by law, court order, or to protect the rights and safety of talaph, its players, or the public.

talaph uses cookies and similar technologies — including web beacons, local storage, and session identifiers — to operate the platform, remember your preferences, and analyse how Filipino players use talaph's services.

Types of cookies talaph uses:

• Strictly Necessary Cookies: Essential for the talaph platform to function. These cookies maintain your login session, enforce security controls, and enable core gameplay features. They cannot be disabled without breaking the platform.
• Functional Cookies: Remember your language preference, display settings, and responsible gaming preferences so you don't have to re-enter them on every visit.
• Analytics Cookies: Help talaph understand how players navigate the platform so we can improve the experience. These cookies collect aggregated, anonymised data and do not identify you personally.
• Marketing Cookies: Used to display relevant talaph promotions within the platform based on your activity. These cookies are used only with your consent and can be disabled via your cookie preferences.

You can manage your cookie preferences at any time through your browser settings or talaph's in-platform cookie preference centre. Note that disabling strictly necessary cookies will impair your ability to use the talaph platform.

talaph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

Upon expiry of the applicable retention period, talaph will securely delete or anonymise your personal data in accordance with NPC-approved data disposal procedures.

talaph implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Transport Layer Security (TLS): All data exchanged between your device and the talaph platform is encrypted in transit using TLS 1.2 or higher.
• Data Encryption at Rest: Sensitive personal data and payment information stored on talaph's servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within talaph is strictly limited on a need-to-know basis. All staff with access to personal data undergo background checks and data privacy training.
• Multi-Factor Authentication (MFA): talaph systems require MFA for all administrative access to platforms and databases holding personal data.
• Regular Security Audits: talaph undergoes periodic penetration testing and security audits conducted by independent cybersecurity firms to identify and remediate vulnerabilities.
• Incident Response: talaph maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to affected players, talaph will notify the National Privacy Commission and affected players within 72 hours of discovery, as required by NPC Circular 16-03.

Under the Data Privacy Act of 2012, you have the following rights with respect to the personal data talaph holds about you. To exercise any of these rights, contact talaph's Data Protection Officer using the details in Section 14. talaph will respond to all valid data rights requests within thirty (30) days of receipt.

• Right to Be Informed: You have the right to be informed about how talaph collects and processes your personal data. This Privacy Policy fulfils that obligation. If you have questions not answered here, please contact our DPO.
• Right to Access: You may request a copy of the personal data talaph holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: If any of your personal data held by talaph is inaccurate or incomplete, you may request that it be corrected. You may also update basic account information directly through your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where the processing was unlawful — subject to talaph's legal and regulatory retention obligations, which may override this right in certain circumstances.
• Right to Data Portability: Where technically feasible, you may request that talaph provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to talaph processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your privacy rights outweigh talaph's interests.
• Right to File a Complaint: If you believe talaph has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.

The talaph platform is strictly intended for adults who are 21 years of age or older in accordance with PAGCOR regulations governing online casino services in the Philippines. talaph does not knowingly collect, process, or store personal data from individuals below the age of 21.

If talaph discovers or is notified that personal data has been collected from an individual below 21 years of age, talaph will immediately close the relevant account, return any real-money funds to the originating payment source, and permanently delete all personal data associated with that account from talaph's systems.

The talaph platform may contain references or links to third-party services such as payment gateways (GCash, PayMaya, BPI, BDO, Metrobank) and game technology providers. When you navigate to a third-party platform, that platform's own privacy policy — not this talaph Privacy Policy — will govern the collection and use of your personal data on that platform.

talaph is not responsible for the privacy practices of any third-party service and recommends that you review the applicable privacy policy of any third-party platform before submitting personal information to it.

talaph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulations, NPC guidance, or talaph's data processing practices. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — talaph will notify you via email to the address registered on your account and/or through a prominent notice on the talaph platform at least fourteen (14) days before the changes take effect.

Your continued use of the talaph platform after any amended Privacy Policy takes effect constitutes your acceptance of the updated policy. If you do not agree with any material change, you should close your talaph account before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way talaph handles your personal data, please contact talaph's Data Protection Officer through the following channels:

• Email: [email protected] — mark your subject line "Data Privacy Request – [Your Account Username]" for fastest processing.
• Live Chat: Available 24/7 inside your talaph account dashboard for immediate assistance with non-sensitive privacy queries.

talaph's Data Protection Officer will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or within the timeframe prescribed by the NPC for the type of request submitted.

If you are not satisfied with talaph's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.

This Privacy Policy was last reviewed and updated in January 2026. talaph operates under PAGCOR registration. All rights reserved.