Privacy Policy

Scope & Data Controller

This Privacy Policy applies to all personal data collected by tambet through the tambet.bio website, mobile browser experience, customer support channels, and any other service operated under the tambet brand. It applies to all registered players and to visitors who interact with the tambet platform without creating an account.

tambet acts as the data controller in respect of all personal data processed pursuant to this Policy, meaning tambet determines the purposes and means of processing your data. Where tambet engages third-party processors — such as payment providers, game studios, and fraud detection services — those processors act under tambet's instruction and are bound by written data processing agreements.

This Policy is governed by and construed in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable issuances of the National Privacy Commission (NPC).

Personal Data We Collect

tambet collects personal data across the following categories depending on your level of engagement with the platform:

tambet does not knowingly collect sensitive personal information beyond what is required for identity verification, unless specifically required by law or regulatory obligation. tambet does not collect payment card numbers directly — card processing is handled exclusively by licensed payment processors who are PCI-DSS compliant.

Lawful Basis for Processing

tambet processes personal data only where a lawful basis exists under the Philippine Data Privacy Act. The applicable bases for tambet's processing activities are as follows:

• Contractual Necessity: Processing required to open and operate your tambet account, execute deposits and withdrawals, settle bets, and provide customer support. Without this processing, tambet cannot deliver the services you have requested.
• Legal Obligation: Processing required to comply with Philippine law, including KYC obligations under the Anti-Money Laundering Act (AMLA), reporting requirements to PAGCOR, and retention obligations for financial records.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and system analytics — where tambet's legitimate interests are not overridden by your data protection rights.
• Consent: Processing for optional activities such as direct marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

How tambet Uses Your Personal Data

tambet uses the personal data it collects for the following specific purposes:

1. Account Management: Creating, verifying, and maintaining your tambet account, including processing login authentication and two-factor verification.
2. KYC and Age Verification: Verifying your identity and confirming that you meet the 21-year minimum age requirement before processing your first withdrawal.
3. Payment Processing: Processing deposits from and withdrawals to your GCash, Maya, BPI, BDO, or other registered payment method in Philippine Peso.
4. Game Delivery and Bet Settlement: Delivering games, settling bets, recording game outcomes, and maintaining your gaming activity history.
5. Fraud Prevention and Security: Monitoring account activity for signs of unauthorized access, money laundering, bonus abuse, and other fraudulent or prohibited conduct.
6. Regulatory Compliance: Meeting tambet's obligations under Philippine gaming law, AMLA, and PAGCOR operational requirements, including the filing of suspicious transaction reports where required.
7. Responsible Gaming: Monitoring player activity patterns to identify potential problem gambling behavior and administering responsible gaming tools including deposit limits and self-exclusion.
8. Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions.
9. Platform Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
10. Marketing (with consent): Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications.

tambet does not use personal data for automated decision-making that produces legal effects or similarly significant consequences without human review.

Data Sharing & Disclosure

tambet does not sell, rent, or trade your personal data to third parties. tambet shares personal data only in the following circumstances and with the following categories of recipients:

• Licensed Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BancNet, and other payment service providers receive the financial data necessary to execute deposit and withdrawal transactions. These providers process data under their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
• Game Content Providers: JILI, PG Soft, Evolution Gaming, Pragmatic Play, and other licensed game studios receive technical session data necessary to deliver and settle game rounds. Personal identity data is not shared with game providers.
• Fraud Prevention Services: tambet may share technical data (IP addresses, device fingerprints, behavioral signals) with fraud detection and AML screening services to identify prohibited conduct and protect the platform.
• Regulatory Authorities: tambet is required by Philippine law to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement authorities where required by lawful order, warrant, or regulatory obligation.
• Professional Advisors: tambet may share data with legal counsel, auditors, and compliance consultants under strict confidentiality obligations where necessary for the operation or legal defence of the business.
• Business Transfers: In the event of a merger, acquisition, or sale of tambet's business or assets, player data may be transferred to the acquiring entity. Players will be notified prior to any such transfer and will be given the opportunity to delete their accounts if they do not consent to processing by the new entity.

International Data Transfers

The tambet platform serves Philippine players and processes data primarily within the Philippines. However, certain service providers — including game studios, fraud detection services, and cloud infrastructure providers — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, tambet ensures that adequate safeguards are in place, including:

• Contractual clauses imposing data protection obligations equivalent to those required under Philippine law;
• Transfer only to jurisdictions that the National Privacy Commission has recognized as providing adequate data protection;
• Where neither of the above applies, transfer only with the explicit informed consent of the data subject.

Players may request details of the specific safeguards in place for any particular international transfer by contacting tambet's Data Protection Officer at the address provided in Section 15.

Data Retention

tambet retains personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following retention periods apply:

• Account data and KYC documents: Retained for a minimum of five years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations applicable to covered institutions.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the last interaction or the resolution of any related dispute, whichever is later.
• Marketing consent records: Retained for the duration of your consent and for three years thereafter to demonstrate compliance with consent obligations.
• Technical and security logs: Retained for 12 months, except where a security incident requires extended retention for investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with tambet's data destruction procedures. Anonymized and aggregated data that cannot identify individual players may be retained indefinitely for platform analytics purposes.

Security Measures

tambet implements a range of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, and disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and tambet's servers is encrypted using TLS 1.2 or higher. The tambet platform operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data — including KYC documents and financial account details — is encrypted when stored using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted to tambet staff and authorized processors who require it to perform their duties. Role-based access control and multi-factor authentication are enforced for all administrative systems.
• Regular security assessments: tambet conducts periodic security reviews and vulnerability assessments of its platform infrastructure.
• Incident response procedures: tambet maintains documented incident response and data breach notification procedures in accordance with NPC requirements.

While tambet takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their tambet accounts and to enable two-factor authentication as an additional layer of account protection.

Cookies & Tracking Technologies

tambet uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your tambet account during a session. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences — such as language settings and game lobby filters — to provide a more personalized experience. These may be disabled without affecting core platform access.
• Analytics Cookies: Used to collect anonymized data on how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used internally to improve platform performance and does not identify individual players.
• Marketing Cookies (consent-based): Used to deliver relevant promotional content to players who have opted in to marketing communications. These cookies may track your activity across the tambet platform to assess the effectiveness of promotions.

You may control non-essential cookie categories through your browser settings. Disabling strictly necessary cookies will prevent you from remaining logged in to your tambet account. tambet does not use cookies to track your activity on third-party websites.

Minors & Age Verification

The tambet platform is strictly restricted to individuals who are at least 21 years of age. tambet does not knowingly collect personal data from individuals under 21. Age verification is enforced through KYC identity document checks before any withdrawal is processed.

If tambet becomes aware that personal data has been collected from an individual under 21, tambet will immediately suspend the associated account, delete or anonymize the personal data to the extent not required to be retained for legal or regulatory purposes, and return any deposited funds.

Parents and guardians are responsible for monitoring their dependents' access to devices and browsers that may have active tambet sessions. tambet strongly recommends that device-level passcodes and parental controls be used where minors share access to devices used for tambet.

Marketing Communications

tambet may send promotional emails, SMS messages, and in-platform notifications to players who have given explicit consent to receive marketing communications at the time of registration or subsequently via their account settings.

Opting Out. You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in the tambet Account Settings;
• Clicking the unsubscribe link included in any tambet marketing email;
• Contacting tambet support via live chat or at [email protected] to request removal from all marketing lists.

Opting out of marketing communications does not affect transactional communications that tambet is required to send for account management purposes, such as deposit confirmations, withdrawal notices, KYC status updates, and security alerts.

Third-Party Services & Linked Content

The tambet platform may contain links to information pages, game provider documentation, or regulatory resources that are hosted externally. tambet's Privacy Policy does not apply to third-party websites or services. tambet is not responsible for the privacy practices, content, or security of any third-party platform accessed through a link on tambet.

Where tambet integrates third-party game content through iframes or embedded players, the game studio's software may collect technical data (such as session identifiers and game interaction logs) necessary to deliver and settle the game. This data collection is governed by the respective studio's data processing agreement with tambet.

tambet's payment processors — including GCash, Maya, and InstaPay-connected banks — operate under their own privacy policies and are independently regulated by the Bangko Sentral ng Pilipinas. tambet recommends reviewing the privacy policies of your chosen payment provider for information on how they handle transaction data.

Personal Data Breach Procedures

tambet maintains documented procedures for detecting, reporting, and responding to personal data breaches. In the event of a breach that is likely to result in a risk to the rights and freedoms of affected players, tambet will:

1. Notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Philippine Data Privacy Act;
2. Notify affected players without undue delay, providing a description of the nature of the breach, the categories and approximate number of data subjects affected, and the measures tambet is taking to address the breach and mitigate its effects;
3. Conduct an internal investigation to determine the cause of the breach and implement appropriate remediation measures to prevent recurrence.

Notifications to affected players will be sent to the email address or mobile number registered on the player's tambet account. Where a breach involves login credentials, tambet will force a password reset on all affected accounts as a precautionary measure.

Amendments to This Privacy Policy

tambet reserves the right to update this Privacy Policy at any time to reflect changes in tambet's data processing activities, applicable law, or regulatory guidance from the National Privacy Commission.

Where amendments are material — meaning they change the type of data collected, the purpose for which it is used, or the rights available to players — tambet will notify registered players via email or in-platform notification at least 14 days before the amended Policy takes effect.

Non-material amendments, such as corrections to typographical errors or clarifications that do not change the substance of how tambet processes data, may be made without advance notice. The date of the most recent update is displayed at the top of this page. Continued use of the tambet platform following any amendment constitutes acceptance of the revised Policy.

Contact & Data Protection Officer

tambet has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act for organizations processing personal data at scale. The DPO is responsible for overseeing tambet's data protection compliance and serves as the primary point of contact for data subject requests and privacy-related inquiries.

To exercise your data rights, submit a privacy complaint, or ask any question about this Policy, you may contact tambet through the following channels:

• Email: [email protected] — mark the subject line as "Privacy / Data Subject Request" for priority routing to the DPO.
• Live Chat: Available 24/7 on all tambet pages. For formal data requests, email is preferred to ensure a proper written record.

tambet will acknowledge data subject requests within five business days and aim to resolve them within 30 calendar days. Complex requests may take up to 60 days, in which case tambet will notify you of the extension and the reason.

If you are not satisfied with tambet's response to a data subject request or privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph.