1 Introduction
tmtplay operates the online gaming platform accessible at tmtplay.best and is committed to protecting the personal information of every registered player. This Privacy Policy sets out how tmtplay collects, uses, stores, and protects your personal data in connection with your use of the platform, including all games, payment transactions, promotional activities, and customer support interactions.
This Privacy Policy applies to all residents of the Philippines and other jurisdictions where tmtplay lawfully operates. Where Philippine law — including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing regulations — sets out specific requirements, tmtplay complies with those requirements in how it handles the personal data of Filipino players.
By registering an account, making a deposit, or otherwise using the tmtplay platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, please do not use the tmtplay platform.
Short version: tmtplay collects the data it needs to run your account, process your payments, keep the platform secure, and meet legal obligations. It does not sell your personal data. You have rights over your information and can exercise them at any time.
2 Personal Data We Collect
tmtplay collects personal data in order to provide its services. The categories of data collected depend on how you interact with the platform. Below is a complete breakdown:
| Category | Examples | Collected When |
|---|---|---|
| Identity data | Full name, date of birth, nationality, government ID number | Registration and KYC verification |
| Contact data | Email address, mobile number, residential address | Registration and profile updates |
| Financial data | GCash number, Maya wallet, bank account details, card details | Deposits and withdrawal requests |
| Transaction data | Deposit amounts, withdrawal history, game results, bonus activity | During platform use |
| Technical data | IP address, device type, browser, operating system, session duration | Automatically when you access tmtplay |
| Communications data | Support chat logs, email correspondence, complaint records | When you contact tmtplay |
| Verification documents | PhilSys ID, passport, UMID, driver's licence, proof of address | KYC verification requests |
tmtplay does not collect special categories of sensitive personal data (such as health, biometric, or political data) unless specifically required by applicable law or regulation for identity verification purposes.
3 How We Collect Your Data
tmtplay collects personal data through the following channels:
3.1 Directly From You
The majority of personal data tmtplay holds was provided by you at the time you registered your account, completed identity verification, made a payment, or contacted support. This includes all the information you entered into registration forms, KYC document uploads, payment screens, and support tickets.
3.2 Automatically Through the Platform
When you access tmtplay, certain technical data is collected automatically through your browser and device — including your IP address, device identifiers, browser type, and how you navigate the platform. This data is collected via cookies, server logs, and similar technologies described in Section 10.
3.3 From Third Parties
tmtplay may receive limited information from third parties including:
- Payment providers (e.g., GCash, Maya, InstaPay processors) confirming transaction status
- Identity verification services used to validate government-issued IDs
- Fraud prevention services that cross-reference account activity against known risk signals
- Regulatory bodies or law enforcement agencies where legally required
4 Legal Basis for Processing
tmtplay processes your personal data on one or more of the following legal grounds:
- Performance of a contract: Processing is necessary to provide you with your tmtplay account, process payments, settle game results, and deliver the services you signed up for.
- Legal obligation: tmtplay is required to collect and retain certain data to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, responsible gaming obligations, and applicable gaming licence conditions.
- Legitimate interests: tmtplay processes certain data to protect the security of the platform, detect fraud, prevent unauthorised access, improve services, and conduct business analytics — where these interests are not overridden by your rights.
- Consent: Where required by law, tmtplay will obtain your explicit consent before processing your data for a specific purpose, such as marketing communications. You may withdraw consent at any time.
5 How TMTPlay Uses Your Data
tmtplay uses your personal data for the following purposes:
5.1 Account Management
Your identity and contact data are used to create, manage, and secure your tmtplay account — including verifying your identity at registration, authenticating your logins, and communicating with you about your account status.
5.2 Payment Processing
Financial data is used to process deposits and withdrawals between your tmtplay balance and your chosen Philippine payment method. tmtplay requires that the payment account belongs to you — so name-matching against your verified tmtplay account is part of every payment process.
5.3 Regulatory Compliance
tmtplay is required to verify player identities, monitor transaction activity, and report certain activity to regulatory authorities under applicable AML and gaming regulations. Data collected for compliance purposes is handled with strict controls and retained for the legally required periods.
5.4 Fraud Prevention and Platform Security
Technical data and transaction records help tmtplay identify unusual activity, detect multi-accounting, prevent bonus abuse, and protect the platform from exploitation. This processing is essential to maintaining a fair environment for all players.
5.5 Customer Support
Communications data — including support tickets and chat logs — is used to resolve your queries, investigate complaints, and improve the quality of tmtplay's support service.
5.6 Responsible Gaming
Transaction and gaming activity data helps tmtplay identify patterns that may indicate a player is experiencing difficulty with gambling. This data is used to implement responsible gaming interventions and comply with self-exclusion requests.
5.7 Marketing (With Consent)
Where you have given consent, tmtplay may use your contact data to send you information about promotions, bonuses, and new games relevant to your activity. You can unsubscribe or withdraw consent at any time by contacting support or using the preference centre in your account.
6 Who We Share Your Data With
tmtplay does not sell your personal data to third parties. We share your data only in the following circumstances and with the following categories of recipient:
- Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, Visa, and Mastercard processors receive financial data necessary to process your transactions.
- Game providers: Certified third-party game providers may receive a limited account identifier to facilitate gameplay, but they do not receive your full identity or financial data.
- Identity verification services: Third-party KYC providers receive identity documents and personal details solely to verify your identity during account verification. These providers are contractually bound to process data for this purpose only.
- Fraud prevention services: Specialist risk and fraud detection services may receive technical and transaction data to help tmtplay identify suspicious activity.
- Regulatory authorities: Gaming regulators, tax authorities, and law enforcement agencies may receive data as required by applicable law, court order, or regulatory direction.
- Professional advisors: Lawyers, auditors, and compliance consultants engaged by tmtplay may access personal data where necessary for their work, under strict confidentiality obligations.
Important: tmtplay requires all third parties who receive your data to handle it in accordance with applicable data protection laws and to use it only for the specific purposes for which it was shared. We do not authorise any third party to use your data for their own marketing or unrelated purposes.
7 Data Retention
tmtplay retains personal data for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. The following general retention periods apply:
- Account and identity data: Retained for the lifetime of your tmtplay account plus a minimum of five years after closure, in accordance with AML record-keeping requirements.
- Transaction data: Retained for a minimum of five years from the date of each transaction, as required under applicable financial regulations.
- KYC documents: Retained for the legally required period following account closure, which is typically five years unless local law specifies otherwise.
- Support communications: Retained for three years from the date of the last interaction, or longer if related to an ongoing dispute or regulatory matter.
- Technical and cookie data: Retained for the shorter of the cookie's active duration or 13 months, unless required for a longer period for security or fraud investigation purposes.
When data is no longer needed for any lawful purpose, tmtplay securely destroys or anonymises it in accordance with its internal data destruction procedures.
8 How We Keep Your Data Secure
Protecting the personal data of Filipino players is a core operational priority at tmtplay. The following security measures are in place:
- Encryption in transit: All data transmitted between your device and tmtplay is encrypted using industry-standard TLS (Transport Layer Security) protocols.
- Encryption at rest: Sensitive stored data, including financial information and identity records, is encrypted in tmtplay's databases.
- Access controls: Personal data is accessible only to tmtplay staff who need it to perform their duties, and all access is logged and monitored.
- Regular security assessments: tmtplay's systems undergo periodic security reviews and vulnerability assessments to identify and address potential weaknesses.
- Payment security: tmtplay works only with PCI DSS-compliant payment processors for card transactions. tmtplay does not store full card numbers on its own systems.
- Incident response: tmtplay maintains a data breach response procedure. If a breach occurs that affects your personal data and requires notification under applicable law, tmtplay will notify affected players and the relevant authority within required timeframes.
While tmtplay takes every reasonable precaution, no online platform can guarantee absolute security. You also have a role to play in protecting your account — keep your password private, enable two-factor authentication where available, and contact tmtplay immediately if you suspect unauthorised access.
9 Your Data Rights as a Filipino Player
Under the Philippine Data Privacy Act of 2012 and tmtplay's own commitments, you have the following rights in relation to your personal data: