tamasaa Privacy Policy

01 Who We Are

tamasaa ("we," "us," or "our") is the operator of the online gaming platform accessible at tamasaa.net, offering casino games, slots, bingo, fishing games, and related entertainment services to players in the Philippines. This Privacy Policy applies to all personal data collected, processed, and stored by tamasaa in connection with your use of the tamasaa platform, website, and any communications you have with our support team.

tamasaa operates in accordance with PAGCOR gaming standards and takes its obligations under applicable Philippine data protection legislation seriously. If you have any questions about how we handle your personal data, the contact details at the end of this Policy are always available to you.

02 Data We Collect

tamasaa collects personal data across several categories. The specific data collected depends on the nature of your interaction with the platform.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health records, or biometric data beyond what is strictly required for identity verification purposes.

03 How We Collect Your Data

tamasaa collects personal data through the following channels:

• Direct submission: When you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automated technical collection: When you browse or use the tamasaa platform, we automatically collect certain technical data such as your IP address, device identifiers, browser type, and session activity through server logs and cookies.
• Payment processors: When you deposit or withdraw via GCash, PayMaya, BPI, BDO, Metrobank, or UnionBank, those providers share transaction confirmation data with tamasaa to update your wallet balance and transaction history.
• Game providers: The third-party studios whose games are hosted on tamasaa may provide session and outcome data to tamasaa for the purpose of reconciliation, dispute resolution, and responsible gaming monitoring.
• Identity verification partners: Where automated identity verification is used as part of the KYC process, our verification partner shares the outcome of the verification check with tamasaa.

04 How We Use Your Data

tamasaa uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and secure your tamasaa account, including authentication, password recovery, and session management.
• KYC and regulatory compliance: To verify that you meet the minimum age requirement of 21 years 21+ and to satisfy our anti-money laundering (AML) obligations as required under PAGCOR gaming standards.
• Transaction processing: To process deposits and withdrawals in Philippine Pesos (₱) via your chosen payment method and to maintain accurate financial records.
• Game service delivery: To load and run game sessions, record wagering activity, apply bonus credits, and calculate and credit winnings to your account balance.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct.
• Responsible gaming: To monitor gaming patterns, apply any deposit limits, cool-off periods, or self-exclusion settings you have activated, and to identify players who may be exhibiting signs of problem gambling.
• Customer support: To respond to your queries, process complaints, and resolve disputes in a timely and documented manner.
• Promotions and communications: Where you have opted in to marketing communications, to send you information about tamasaa bonuses, promotions, and platform updates relevant to Filipino players.
• Platform improvement: To analyse aggregate, anonymised usage data to identify technical issues, improve the player experience, and optimise platform performance.

05 Legal Basis for Processing

tamasaa processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is required to perform the gaming services contract between you and tamasaa — including account creation, game delivery, and financial transaction processing — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: Processing carried out to comply with applicable law, including PAGCOR regulatory requirements, anti-money laundering legislation, and KYC obligations, is carried out on the basis that it is required by law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of tamasaa's legitimate interests in operating a secure, compliant, and well-functioning gaming platform, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications is carried out on the basis of your explicit consent, which you may withdraw at any time without consequence to your account status.

06 Data Sharing & Disclosure

tamasaa does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank receive only the payment reference data necessary to process your deposit or withdrawal transaction.
• Game content providers: Licensed third-party game studios whose content is hosted on tamasaa receive session identifiers and wager data necessary to run game rounds and return results. These providers are contractually prohibited from using this data for any purpose other than game delivery and reconciliation.
• Identity verification partners: Where automated KYC verification is used, your identity document data is shared with a licensed verification provider for the sole purpose of confirming your identity and age. Documents are not retained by verification partners beyond the statutory minimum.
• Regulatory authorities: tamasaa will disclose personal data to PAGCOR or other competent Philippine government authorities where required by law, court order, or lawful regulatory request.
• Law enforcement: Where tamasaa has reasonable grounds to suspect that an account is being used for illegal activity — including money laundering or fraud — we may share relevant account data with the appropriate Philippine law enforcement authorities.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by tamasaa may access personal data as necessary in connection with specific mandates, subject to strict confidentiality obligations.

07 Cookies & Tracking Technologies

tamasaa uses cookies and similar tracking technologies on the tamasaa.net website to ensure the platform functions correctly, to keep you securely logged in during your session, and to collect anonymised analytics data that helps us improve the platform experience for Filipino players.

The cookies we use fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the tamasaa website to function. They enable core features such as secure login session management and account wallet state. The platform cannot operate without them, and they cannot be disabled.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting and responsible gaming notification configuration — so that the platform behaves consistently across sessions.
• Analytics cookies: We use anonymised first-party analytics to understand how players interact with the tamasaa platform — which game categories are most popular, where players experience difficulty, and how page performance can be improved. This data is aggregated and cannot be used to identify individual players.
• Security cookies: These cookies assist in detecting and preventing fraudulent login attempts, account takeover activity, and automated bot traffic targeting the platform.

tamasaa does not use third-party advertising or behavioural targeting cookies. You may adjust cookie preferences in your browser settings at any time, noting that disabling strictly necessary cookies will prevent you from logging into your tamasaa account.

08 Data Retention

tamasaa retains your personal data for the minimum period required to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable law and regulatory obligations. The following retention guidelines apply:

• Active account data: Personal data associated with an active tamasaa account is retained for the lifetime of the account and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and identity documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification, as required by applicable AML and gaming regulations.
• Transaction records: Financial transaction records — including deposit and withdrawal histories — are retained for five (5) years from the date of each transaction for audit and compliance purposes.
• Gaming activity logs: Game session logs are retained for a period of two (2) years and are used to resolve any disputes regarding game outcomes or account balances.
• Support communications: Live chat transcripts and email correspondence with tamasaa support are retained for two (2) years from the date of each interaction.
• Marketing consent records: Records of your marketing consent preferences are retained for the duration of your account and for one (1) year following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted from tamasaa systems or irreversibly anonymised so that it can no longer be associated with any individual player.

09 Your Data Rights

As a tamasaa player, you have the following rights in relation to your personal data. These rights may be exercised by contacting tamasaa support via live chat or the email address provided in Section 14 of this Policy:

• Right of access: You may request a copy of the personal data tamasaa holds about you. We will provide this within 30 days of a verified request, at no charge for the first request per 12-month period.
• Right to correction: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. For data such as your legal name or date of birth, a supporting document may be required.
• Right to erasure: Subject to applicable legal retention obligations, you may request that tamasaa delete your personal data. Note that where retention is required by AML or gaming regulations, erasure requests may be deferred until the mandatory retention period has expired.
• Right to restrict processing: You may request that tamasaa restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or pending investigation of a complaint.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. All marketing objections are acted upon immediately.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable export of the personal data you have provided to tamasaa.
• Right to withdraw consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

10 Data Security

tamasaa implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport security: All data transmitted between your browser or device and tamasaa.net is protected using 256-bit SSL/TLS encryption. Our platform enforces HTTPS across all pages and rejects non-secure connections.
• Password protection: Account passwords are stored using industry-standard one-way cryptographic hashing (bcrypt with an appropriate work factor). tamasaa staff cannot retrieve or view any player's password in plain text under any circumstances.
• Access controls: Access to systems that contain personal data is restricted to tamasaa staff with a legitimate operational need. All staff access is logged, and privileged access is subject to multi-factor authentication.
• Payment data handling: tamasaa does not store complete payment account numbers on its own servers. Full payment credentials are processed and held by the relevant licensed payment service provider.
• Penetration testing: tamasaa's platform undergoes regular security assessments, including penetration testing by independent security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in harm to affected players, tamasaa will notify affected players and, where required, the relevant regulatory authority within the timeframes prescribed by applicable law.

While tamasaa takes all reasonable steps to protect your data, no system is entirely immune to risk. Players are encouraged to use a strong, unique password for their tamasaa account and to enable two-factor authentication (2FA) where available.

11 Children & Minors

tamasaa's gaming services are strictly for adults. In accordance with PAGCOR standards governing real-money online gaming in the Philippines, all players must be a minimum of 21 years of age 21+ to register an account and participate in any real-money game on the tamasaa platform.

tamasaa does not knowingly collect personal data from any individual under the age of 21. Where tamasaa discovers or has reasonable grounds to suspect that a registered account holder is under 21, the account will be immediately suspended pending identity verification. If the holder is confirmed to be underage, the account will be permanently closed and all deposited funds will be returned to the payment source after deducting any winnings generated from game play, as permitted under applicable gaming regulations.

If you are a parent or guardian and believe that a minor in your care has registered an account with tamasaa, please contact us immediately via live chat or email so that the account can be investigated and closed without delay.

12 Third-Party Services

The tamasaa platform integrates with a number of third-party service providers to deliver a complete gaming experience to Filipino players. These include licensed game content studios, payment processors, identity verification services, and platform infrastructure providers.

Each third-party service provider engaged by tamasaa is subject to contractual obligations that require them to:

• Process personal data only for the specific, documented purpose for which it was shared by tamasaa.
• Implement technical and organisational security measures equivalent to or exceeding those maintained by tamasaa.
• Not sub-process or further disclose personal data to any fourth party without prior written authorisation from tamasaa.
• Cooperate with tamasaa in responding to player data rights requests and regulatory enquiries.
• Delete or return personal data at the conclusion of the service engagement.

tamasaa reviews its third-party data processing arrangements on a regular basis to ensure ongoing compliance with the standards described in this Privacy Policy.

13 Updates to This Privacy Policy

tamasaa reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The "Last Reviewed" date at the top of this Policy will be updated whenever a material change is made.

Where a change to this Privacy Policy materially affects the way tamasaa processes your personal data, we will notify you via a notice displayed upon your next login to your tamasaa account, or by email to your registered address, with a minimum of 14 days' advance notice before the change takes effect.

Your continued use of the tamasaa platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the changes, you may close your account and withdraw your Real-Money Balance prior to the effective date of the amendment.

The current version of this Privacy Policy is always available at tamasaa.net/privacy-policy and supersedes all prior versions.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how tamasaa has handled your personal data, you may contact our support team through the following channels:

• Live Chat: Available 24/7 directly from your tamasaa account dashboard. Average response time is 3–5 minutes. Our agents speak both English and Tagalog.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team. We aim to provide a substantive response within 5 business days.

If you are not satisfied with tamasaa's response to a privacy concern or data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the competent supervisory authority for data protection matters in the Philippines.