tmtplay88 Privacy Policy — Your Data, Your Rights

1.Who We Are — Data Controller

tmtplay88 is the personal information controller responsible for the processing of your personal data in connection with your use of the tmtplay88 online gaming platform. We operate under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and are registered with the National Privacy Commission (NPC) of the Philippines as required by Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA").

tmtplay88 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact information for the DPO is provided in Section 13 of this Policy.

2.Personal Data We Collect

tmtplay88 collects the following categories of personal data in connection with the operation of the Platform:

tmtplay88 does not collect sensitive personal information as defined by the DPA (such as health data, religious beliefs, or political affiliations) except where strictly necessary for responsible gaming compliance (e.g., documenting self-exclusion requests or problem gambling assessments).

3.How We Collect Personal Data

tmtplay88 collects personal data through the following means:

• Direct interactions — Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technologies — Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and interact with the Platform.
• Third-party sources — Identity and financial data received from KYC verification service providers, payment processors (GCash, Maya, BDO, BPI, Metrobank), fraud prevention services, and PAGCOR's player database where applicable.

4.Purpose and Legal Basis for Processing

tmtplay88 processes your personal data for the following purposes and on the following legal bases under the DPA:

• Contract performance — To create and manage your account, process deposits and withdrawals, provide gaming services, and administer bonuses and promotions. This processing is necessary for the performance of the contract between you and tmtplay88.
• Legal obligation — To comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) requirements, age verification mandates (21+ under PAGCOR regulations), and tax reporting obligations under Philippine law.
• Legitimate interests — To prevent fraud, ensure platform security, conduct responsible gaming monitoring, analyze Platform performance, and improve our services. Such processing is balanced against your data subject rights.
• Consent — To send you promotional communications about tmtplay88 offers, games, and VIP program updates, where you have provided explicit consent. You may withdraw consent at any time through your account settings.

5.Data Sharing and Disclosure

5.1 tmtplay88 does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients only where necessary and on a need-to-know basis:

• Payment processors — GCash, Maya/PayMaya, GrabPay, BDO, BPI, Metrobank, and other approved Philippine payment service providers, for the purpose of processing deposits and withdrawals;
• KYC and fraud prevention providers — Identity verification and anti-fraud service providers engaged to verify Player eligibility and prevent fraudulent activity;
• Game providers — Licensed game software providers (including Evolution Gaming, Pragmatic Play, and PG Soft) who operate live dealer studios or supply game software, to the extent necessary for game delivery and audit purposes;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies, as required by law;
• IT and cloud service providers — Third-party technology providers who host, maintain, and support the tmtplay88 Platform infrastructure, bound by confidentiality and data processing agreements.

5.2 All third-party service providers engaged by tmtplay88 are required to maintain appropriate technical and organizational security measures and process personal data only in accordance with tmtplay88's instructions and applicable Philippine data privacy law.

6.Cookies and Tracking Technologies

6.1 tmtplay88 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies — Required for the Platform to function, including session management, login state, security tokens, and fraud prevention. These cannot be disabled without impairing Platform functionality.
• Performance cookies — Collect aggregated, anonymized data about Platform usage (page views, session duration, error rates) to help us improve reliability and user experience.
• Functionality cookies — Remember your preferences such as language settings, preferred game categories, and notification preferences.
• Responsible gaming cookies — Track session duration and activity patterns to support the responsible gaming tools provided in your account settings.

6.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use certain Platform features, including the tmtplay88 login functionality.

7.Data Retention

7.1 tmtplay88 retains personal data for the periods set out below, or for such longer periods as required by applicable Philippine law:

• Account and KYC data — Retained for the duration of your account plus five (5) years following account closure, as required by PAGCOR and AMLA.
• Financial transaction records — Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA reporting obligations.
• Customer support communications — Retained for two (2) years from the date of the interaction, unless required longer for dispute resolution purposes.
• Technical and usage logs — Retained for twelve (12) months for security and fraud detection purposes.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

8.Data Security

tmtplay88 implements the following technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data stored in our databases;
• Two-factor authentication (2FA) available for all Player accounts;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits by independent cybersecurity firms;
• Intrusion detection and prevention systems monitoring all network traffic;
• Comprehensive staff training on data privacy obligations under the Philippine DPA.

No security measure is entirely infallible. In the event of a data breach posing a real risk of serious harm to you, tmtplay88 will notify you and the NPC as required by law.

9.Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by tmtplay88:

• Right to be informed — You have the right to be notified of how your personal data is collected, processed, and stored.
• Right of access — You have the right to request a copy of the personal data tmtplay88 holds about you.
• Right to rectification — You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure — You have the right to request deletion of your personal data where processing is no longer necessary, subject to our legal retention obligations.
• Right to object — You have the right to object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to data portability — You have the right to receive your personal data in a structured, machine-readable format.
• Right to file a complaint — You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact the tmtplay88 Data Protection Officer using the details in Section 13. We will respond within fifteen (15) business days of receiving a verifiable request.

10.Children's Privacy and Underage Access

10.1 The tmtplay88 Platform is strictly for individuals aged 21 years and older as required by PAGCOR. tmtplay88 does not knowingly collect personal data from individuals under the age of 21. Registration requires age verification, and players may be required to provide government-issued identification confirming their age before accessing full platform features or processing withdrawals.

10.2 If tmtplay88 discovers that personal data has been collected from a person under the age of 21, the associated account will be immediately suspended and the data will be deleted in accordance with PAGCOR guidelines. If you believe that a minor has created an account on tmtplay88, please contact our support team immediately via live chat or email.

11.Cross-Border Data Transfers

11.1 Some of the third-party service providers engaged by tmtplay88 — including game software providers and certain technology infrastructure partners — may be located outside the Philippines. Where personal data is transferred outside the Philippines, tmtplay88 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those required by Philippine law.

11.2 tmtplay88 will not transfer your personal data to countries or organizations that do not provide adequate data protection guarantees without your explicit consent, except where required to comply with a legal obligation.

12.Changes to This Privacy Policy

12.1 tmtplay88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The "Last updated" date at the top of this Policy will be revised accordingly.

12.2 Where changes are material, tmtplay88 will notify registered Players by email and/or by displaying a prominent notice upon login for a period of not less than seven (7) days prior to the changes taking effect. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

13.Contact Us — Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or complaints regarding tmtplay88's processing of your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph if you are not satisfied with our response to your data privacy concern.