rrph Privacy Policy

This Privacy Policy applies to all users of the rrph platform accessible at rrph.cam (the "Platform"), including all associated mobile interfaces, software applications, and services (collectively, the "Services"). By creating an rrph account, accessing the Platform, or using any of the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

rrph operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the applicable provisions of the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission of the Philippines. This Privacy Policy has been drafted to comply with these legal frameworks while ensuring our users understand their rights and our obligations regarding personal data protection.

1. Information We Collect

1.1 Information You Provide Directly

When you register for an rrph account, we collect the following categories of personal information:

• Identity Information: Full legal name as it appears on your government-issued identification document, date of birth, nationality, and gender.
• Contact Information: Philippine mobile number, email address, and residential address (including barangay, city/municipality, province, and postal code).
• Account Credentials: Username, password (stored in encrypted hash format only—rrph personnel cannot view your plaintext password), and security questions/answers.
• Verification Documents: Copies of government-issued identification (such as Philippine driver's license, passport, PhilSys national ID, voter's ID, or other PAGCOR-accepted identity documents) and proof of address documents when required for Know Your Customer (KYC) compliance.
• Financial Information: Details of your GCash, Maya, or bank account used for deposits and withdrawals, transaction history, deposit and withdrawal amounts, payment instrument details, and wallet balance information.
• Communication Data: Content of messages you send to rrph customer support via live chat, email, or other communication channels, including any attachments or files you provide.

1.2 Information Collected Automatically

When you access or use the rrph Platform, we automatically collect certain technical and behavioral data, including:

• Device Information: Device type (smartphone, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers (such as IP address and device ID), and device settings.
• Usage Data: Pages or screens viewed, games played, bets placed, time spent on specific pages, clickstream data, referring and exit pages, search queries within the Platform, and timestamps of your activities.
• Location Data: IP address-based geolocation to verify you are accessing the Platform from within the Philippines, as required by PAGCOR licensing restrictions. We do not collect precise GPS location unless you explicitly grant permission through your device settings.
• Session Data: Login times, logout times, session duration, browser session IDs, and authentication tokens.
• Performance and Diagnostic Data: Error logs, crash reports, page load times, API response times, and other technical diagnostic information to maintain and improve Platform performance.

1.3 Information from Third-Party Sources

In certain circumstances, rrph may receive personal information about you from third-party sources, including:

• Payment Providers: When you deposit funds via GCash, Maya, or bank transfer, we receive transaction confirmation data from these payment service providers, including transaction IDs, amounts, and timestamps.
• Identity Verification Services: We may use third-party identity verification services to validate the authenticity of the identification documents you provide as part of the KYC process.
• Anti-Fraud and Security Services: We work with third-party fraud detection and prevention services that may provide risk scores, fraud indicators, and device fingerprinting data to protect the Platform and its users from fraudulent activity.
• Regulatory Authorities: PAGCOR or other government agencies may provide us with information relevant to compliance investigations, self-exclusion lists, or other regulatory matters.

2. How We Use Your Information

rrph processes your personal information for the following purposes, all of which are necessary to provide you with access to our Services and comply with our legal and regulatory obligations:

2.1 Account Management and Service Delivery

• Creating, maintaining, and administering your rrph account.
• Processing deposits, withdrawals, and other financial transactions associated with your account.
• Providing access to sports betting, live casino, slots, bingo, and other gaming products available on the Platform.
• Maintaining your gaming history, transaction records, and account balance information.
• Facilitating communication between you and rrph customer support agents.
• Processing bonus claims, promotions, and loyalty program benefits.

2.2 Regulatory Compliance and Legal Obligations

• Verifying your identity and age to ensure compliance with the 21+ age restriction mandated by PAGCOR regulations.
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by Philippine law and PAGCOR directives.
• Detecting and preventing fraud, money laundering, terrorist financing, and other illegal activities on the Platform.
• Reporting suspicious transactions or activities to PAGCOR, the Anti-Money Laundering Council (AMLC), or other relevant authorities as legally required.
• Complying with court orders, subpoenas, or lawful requests from government agencies.
• Maintaining records for the statutory retention periods required under Philippine gaming and financial regulations.
• Enforcing responsible gaming measures, including deposit limits, self-exclusion requests, and session time-outs.

2.3 Platform Security and Fraud Prevention

• Monitoring account activity for unauthorized access attempts, suspicious betting patterns, bonus abuse, collusion, and other forms of fraudulent behavior.
• Implementing security measures to protect your account from hacking, phishing, and identity theft.
• Investigating and resolving disputes between users or between users and rrph.
• Blocking access from prohibited jurisdictions or sanctioned individuals.

2.4 Service Improvement and Personalization

• Analyzing usage patterns to improve Platform functionality, game offerings, user interface design, and overall user experience.
• Customizing content, promotional offers, and game recommendations based on your preferences and gaming history.
• Testing new features, A/B testing different user interface designs, and optimizing Platform performance.
• Conducting research and analytics to understand player behavior and preferences, always in aggregated and anonymized form where possible.

2.5 Marketing and Communications

• Sending you promotional emails, SMS messages, or push notifications about new games, bonuses, tournaments, and special offers (you may opt out of marketing communications at any time).
• Providing customer support responses, transactional notifications (such as deposit confirmations and withdrawal updates), and important account security alerts.
• Conducting customer satisfaction surveys to gather feedback on our Services.

3. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, rrph processes your personal data based on the following legal grounds:

• Consent: You provide explicit consent when you create an rrph account and accept this Privacy Policy. For certain types of data processing—such as marketing communications—we obtain separate, specific consent which you may withdraw at any time.
• Contractual Necessity: Processing your personal data is necessary to fulfill our contractual obligations to you under the Terms & Conditions, including providing access to gaming services, processing financial transactions, and maintaining your account.
• Legal Obligation: We are legally required to process certain personal data to comply wi th PAGCOR regulations, AML laws, and other applicable Philippine legislation governing online gaming operators.
• Legitimate Interests: Certain processing activities—such as fraud prevention, platform security monitoring, and service improvement—are conducted on the basis of rrph's legitimate interests, provided these interests do not override your fundamental privacy rights.

4. Data Sharing and Disclosure

rrph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

4.1 Service Providers and Processors

We engage trusted third-party service providers who process personal data on our behalf to help us deliver the Services. These include:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other Philippine banks and payment providers that facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers that verify the authenticity of identity documents and confirm user identities on our behalf.
• Fraud Prevention Services: Security and fraud detection vendors that analyze transaction and behavioral data to flag suspicious activity.
• Cloud Infrastructure Providers: Hosting and infrastructure providers that store and process Platform data, operating under strict data processing agreements that bind them to confidentiality and security obligations.
• Customer Support Platforms: Third-party live chat and support ticketing software used to deliver customer support services.

All third-party service providers are contractually bound to process personal data only for specified purposes, implement appropriate security measures, and comply with the Data Privacy Act of 2012.

4.2 Regulatory and Legal Disclosures

rrph may disclose your personal data to government authorities, regulatory bodies, and law enforcement agencies in the following situations:

• When required by PAGCOR as part of its regulatory oversight of our gaming license.
• When required by the Anti-Money Laundering Council (AMLC) in connection with suspicious transaction reporting.
• In response to a valid court order, subpoena, search warrant, or other lawful legal process issued by a Philippine court or competent authority.
• When we believe in good faith that disclosure is necessary to prevent imminent harm, fraud, or illegal activity affecting our users or the public.

4.3 Business Transfers

In the event that rrph undergoes a merger, acquisition, restructuring, or sale of substantially all of its assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and any material changes to this Privacy Policy that result from the transaction.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or business purposes. This type of data sharing does not constitute disclosure of personal information.

5. Data Retention

rrph retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with our legal and regulatory obligations. Specific retention periods include:

• Account Information: Retained for the duration of your account's active status, plus a minimum of five (5) years after account closure, as required by PAGCOR regulations and Philippine AML laws.
• Transaction Records: Financial transaction records, including deposits, withdrawals, and betting history, are retained for a minimum of five (5) years in compliance with AMLC record-keeping requirements.
• KYC Documents: Identity verification documents are retained for the period required by PAGCOR and relevant AML regulations, typically five (5) years from the date of submission or account closure, whichever is later.
• Communication Logs: Customer support interactions are retained for two (2) years to enable dispute resolution and improve service quality.
• Technical Logs: Server logs, access logs, and security logs are retained for up to twelve (12) months and then deleted or anonymized.
• Marketing Preferences: Records of your marketing consent or opt-out choices are retained indefinitely to ensure we honor your preferences.

When personal data is no longer required and the applicable retention period has expired, rrph will securely delete or anonymize the data in accordance with industry best practices and applicable data protection standards.

6. Your Privacy Rights

As a data subject under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by rrph:

• Right to Be Informed: You have the right to be informed about how your personal data is being collected and processed. This Privacy Policy fulfills that obligation.
• Right to Access: You have the right to request a copy of all personal data we hold about you. Requests can be submitted through the rrph Live Chat or by emailing our Data Protection Officer.
• Right to Rectification: You have the right to request correction of inaccurate, incomplete, or outdated personal data. You can update basic account information directly in your rrph account settings. For KYC-related corrections, contact support.
• Right to Erasure: You have the right to request deletion of your personal data, subject to our legal retention obligations. Requests to close your account and delete associated data will be processed within thirty (30) days.
• Right to Object: You have the right to object to the processing of your personal data for marketing purposes at any time. Objections to other forms of processing will be assessed on a case-by-case basis.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit this data directly to another data controller where technically feasible.
• Right to Lodge a Complaint: If you believe your privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 11. We will respond to all verifiable requests within fifteen (15) business days. In complex cases, we may extend this period by an additional fifteen (15) business days with prior notice to you.

7. Security Measures

rrph implements a comprehensive suite of technical, organizational, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the rrph Platform is encrypted using 256-bit SSL/TLS protocols. This applies to all login sessions, financial transactions, and form submissions.
• Encryption at Rest: Sensitive personal data stored in our databases—including passwords (hashed using industry-standard bcrypt), financial account details, and KYC documents—is encrypted using AES-256 encryption.
• Multi-Factor Authentication: rrph supports and encourages the use of one-time password (OTP) verification via SMS for account login, password resets, and financial transactions.
• Access Controls: Internal access to personal data is restricted using role-based access controls (RBAC). Only personnel who require access to perform their job functions can view sensitive user data, and all access is logged and audited.
• Regular Security Audits: Our Platform and data systems undergo regular security audits and penetration testing by qualified third-party security professionals to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, we will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and we will notify affected users without undue delay.

While we implement these robust security measures, no system is entirely impenetrable. We encourage you to use a strong, unique password for your rrph account, enable OTP verification, and never share your login credentials with anyone.

8. Cookies and Tracking Technologies

rrph uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit our website. We use the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core functionality such as session management, authentication, security, and load balancing. These cookies cannot be disabled without impairing the functionality of the Platform.
• Functional Cookies: These cookies remember your preferences—such as your preferred language, display settings, and game lobby filters—to provide a more personalized experience on rrph.
• Performance and Analytics Cookies: These cookies collect information about how visitors use the Platform, including which pages are visited most frequently and any error messages received. We use this data to improve Platform performance and user experience. Analytics data is collected in aggregated form.
• Responsible Gaming Cookies: We use cookies to remember your responsible gaming settings, including deposit limits, session time reminders, and temporary self-exclusion periods, to ensure these controls remain active across browser sessions.

You can control cookie settings through your browser's privacy settings. Note that disabling certain cookies may affect your ability to use some features of the rrph Platform, including maintaining your login session.

9. Third-Party Services

The rrph Platform may integrate with third-party services—such as game providers, live streaming technology vendors, and payment gateways—that have their own privacy policies governing their collection and use of data. While we carefully vet all third-party integrations and require contractual privacy and security commitments, rrph is not responsible for the privacy practices of independent third parties. We encourage you to review the privacy policies of any third-party services you interact with through the Platform.

rrph does not embed social media tracking pixels, third-party advertising networks, or behavioral retargeting technologies that would share your browsing behavior on our Platform with external advertising platforms.

10. Changes to This Privacy Policy

rrph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, Platform features, or legal and regulatory requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Send a notification to your registered email address or mobile number at least fourteen (14) days before the changes take effect, for material changes that significantly affect your rights.
• Display a notice on the rrph Platform homepage and login page announcing the updated policy.

Your continued use of the rrph Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you should cease using the Platform and may request account closure as described in Section 6.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact rrph's Data Protection Officer through the following channels:

• Email: [email protected] (subject line: "Privacy / Data Request")
• Live Chat: Available 24/7 inside your logged-in rrph account dashboard — fastest response channel for Filipino players
• Response Time: We aim to acknowledge all privacy-related inquiries within two (2) business days and to resolve them within fifteen (15) business days

If you believe we have not adequately addressed your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines via their official website at privacy.gov.ph (external link — not affiliated with rrph).