This Privacy Policy applies to all users of the tmtplay co platform. By registering an account or using any of our services, you confirm that you have read and agree to the practices described in this document.
1 Introduction
tmtplay co ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every player who uses our online gaming services. This Privacy Policy explains how we collect, use, store, share, and protect information about you when you visit our website, register an account, make a deposit, or otherwise interact with the tmtplay co platform.
This policy is written to be clear and readable for Filipino players. We have deliberately avoided overly legal language where possible because we believe you deserve to actually understand what happens to your data – not just have a document buried in the footer that nobody reads.
This Privacy Policy is incorporated by reference into the tmtplay co Terms and Conditions. By accepting the Terms and Conditions, you also accept this policy. If at any point you have questions about how your data is being used, our support team is always available to clarify.
2 Personal Data We Collect
tmtplay co collects personal data in two broad categories: information you provide directly, and information we collect automatically through your use of the platform.
Information You Provide to Us
- Registration data: Your full legal name, date of birth, gender, email address, mobile number, and the username and password you choose when creating an account.
- Identity verification (KYC) documents: A copy of a valid Philippine government-issued ID (such as PhilSys, SSS ID, GSIS ID, Passport, Driver's License, or Voter's ID), and in some cases a selfie or photograph for identity confirmation purposes.
- Financial information: Payment method details (e.g., GCash registered number, Maya account details, bank account name and number for withdrawal purposes). We do not store complete card numbers on our servers.
- Communications: Any messages, enquiries, or feedback you submit to our support team through live chat, email, or any other communication channel.
- Account preferences: Settings and preferences you configure within your account, such as deposit limits, notification preferences, and responsible gaming tool settings.
Information Collected Automatically
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage data: Pages visited, games played, bet amounts, session duration, click patterns, navigation paths, and feature usage within the platform.
- Transaction data: A complete record of all deposits, withdrawals, wagers, bonus credits, and cashback transactions associated with your account.
- Location data: General geographic location inferred from your IP address. We do not collect precise GPS location data.
3 How We Collect Your Data
tmtplay co collects personal data through the following channels and methods:
- Direct submission: When you fill in the registration form, complete KYC verification, submit a withdrawal request, contact support, or update your account profile, you are providing data directly to us.
- Automated tracking: Cookies, web beacons, pixel tags, and similar technologies collect technical and behavioural data automatically when you interact with the platform. See Section 7 for full details on our cookie practices.
- Payment processors: When you complete a deposit or withdrawal through GCash, Maya, or any other payment provider, they transmit transaction confirmation data back to tmtplay co. We receive only the data necessary to verify and record the transaction.
- Third-party identity services: During KYC verification, we may use third-party document verification services. These services process the images you submit and return a verification result to us. The underlying document images are handled in accordance with the service provider's own data protection standards.
- Game providers: Our gaming software suppliers may transmit gameplay data (such as bet history and game outcomes) to our platform in real time to populate your account records.
4 Why We Use Your Personal Data
tmtplay co processes your personal data for specific, legitimate purposes. We do not use your data for any purpose that has not been described in this policy. The following table outlines the primary uses of your data:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Name, email, mobile number, password | Contract performance |
| Identity verification (KYC) | Government ID, selfie, date of birth | Legal obligation |
| Processing deposits and withdrawals | Payment details, transaction history | Contract performance |
| Fraud prevention and security | IP address, device data, transaction patterns | Legitimate interest |
| Customer support | Account data, communication history | Contract performance |
| Regulatory compliance | Full account and transaction records | Legal obligation |
| Platform improvement | Usage and behavioural data (anonymised) | Legitimate interest |
| Promotional communications (opt-in) | Email, mobile number, play preferences | Consent |
We will never use your data for purposes that are incompatible with those listed above without first notifying you and, where required, obtaining your consent.
5 Who We Share Your Data With
tmtplay co does not sell your personal data to third parties. We share data only with the categories of recipients described below, and only to the extent necessary for the stated purpose:
- Payment service providers: GCash, Maya, GrabPay, Coins.ph, and bank partners receive the minimum transaction data required to process your deposits and withdrawals securely.
- Game software suppliers: Our gaming platform providers receive your account identifiers and bet data to deliver game content and record outcomes accurately within your account.
- Identity verification services: Third-party KYC service providers process your submitted documents to confirm your identity. These providers are contractually bound to handle your data securely and may not use it for any other purpose.
- Regulatory and law enforcement authorities: tmtplay co is required by Philippine gaming regulations and anti-money laundering laws to share certain account and transaction data with relevant government agencies upon lawful request. We disclose only what is legally required and will notify you where we are legally permitted to do so.
- Fraud prevention services: We may share limited technical data (such as IP addresses and device fingerprints) with fraud detection partners to protect the platform and its players from illegitimate activity.
- Affiliated companies: Where tmtplay co operates under a group structure, limited account data may be shared with affiliated entities for internal operational, audit, or compliance purposes under strict data-sharing agreements.
All third parties who receive your data from tmtplay co are contractually required to handle it securely, use it only for the stated purpose, and comply with applicable Philippine data protection law.
6 How Long We Keep Your Data
tmtplay co retains your personal data for as long as your account is active and for a defined period after account closure. The specific retention periods are determined by the type of data and the legal requirements applicable to it:
- Account registration data – Retained for the duration of your account plus five years following account closure, in line with Philippine anti-money laundering record-keeping requirements.
- KYC and identity verification documents – Retained for five years from the date of verification or account closure, whichever is later.
- Financial transaction records – Retained for at least five years from the date of each transaction, as required by financial regulations.
- Communication records (support chats and emails) – Retained for two years from the date of the communication.
- Gameplay and betting history – Retained for three years from the date of each session or wager.
- Marketing preference data – Retained until you opt out or request deletion, subject to any applicable legal hold requirements.
Once the applicable retention period has expired and there is no ongoing legal or regulatory obligation to retain the data, tmtplay co will securely delete or anonymise it.
7 Cookies and Tracking Technologies
tmtplay co uses cookies and similar tracking technologies to make the platform function correctly, remember your preferences, analyse usage patterns, and detect fraudulent or suspicious activity. Here is a breakdown of the types of cookies we use:
Essential Cookies
These cookies are strictly necessary for the platform to function. They manage your login session, maintain your account state while you navigate the platform, and enable core security features. You cannot opt out of essential cookies without significantly impairing your ability to use the platform.
Functional Cookies
These cookies remember your preferences and settings – such as your preferred language, saved payment methods (in non-sensitive form), and the last games you played. They make your experience more convenient but are not strictly essential.
Analytics Cookies
We use analytics tools to understand how players use the platform – which pages they visit most, how long they spend on different sections, and where they encounter difficulties. This data is collected in aggregated, anonymised form and is used solely to improve the tmtplay co platform. It is never used to identify individual players for marketing purposes.
Security Cookies
These cookies help tmtplay co detect and prevent fraudulent activity, bot access, and account takeover attempts. They work in the background and are essential for maintaining platform integrity.
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though this may affect the functionality of certain platform features.
8 How We Protect Your Data
tmtplay co implements a multi-layered approach to data security. No single measure is relied upon alone – we combine technical, organisational, and procedural safeguards to protect your information from unauthorised access, disclosure, alteration, or destruction.
- SSL/TLS encryption: All data in transit between your browser or app and our servers is encrypted using TLS 1.2 or higher. This prevents interception of your data during transmission.
- Encrypted data storage: Sensitive account and financial data is stored in encrypted form on our servers. Encryption keys are managed separately from the encrypted data.
- Access controls: Access to personal data within tmtplay co is restricted to staff members who require it to perform their job functions. All access is logged and subject to regular review.
- Two-factor authentication: We offer two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised login.
- Regular security audits: Our systems and data handling practices are subject to periodic internal reviews and third-party security assessments.
- Incident response: In the unlikely event of a data breach that could affect your rights or freedoms, tmtplay co will notify the National Privacy Commission and affected players in accordance with the requirements of Republic Act No. 10173.
While we take every reasonable precaution, no online system can guarantee absolute security. We encourage all players to use strong, unique passwords and to enable two-factor authentication on their account.
9 Your Data Rights as a Filipino Player
Under the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by tmtplay co. We take these rights seriously and have processes in place to handle every request promptly.