RRPH Privacy Policy

RRPH ("we," "us," or "our") operates the online gaming platform accessible at rrph.best. As a PAGCOR-licensed gaming operator serving Filipino players across the Philippines, we understand that your personal information is important to you and that you have a right to know exactly what happens to it.

This Privacy Policy explains how RRPH collects, stores, uses, and protects personal data in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules. By registering an account and using the RRPH platform, you acknowledge that you have read and understood this policy.

This policy applies to all information gathered through the RRPH website, mobile application, customer support channels, and any other service operated by RRPH. It covers both registered players and visitors who browse the RRPH website without creating an account.

RRPH collects only the personal data necessary for operating a licensed online gaming platform. The categories of data we collect are:

RRPH does not collect sensitive personal information such as health records, religious beliefs, political affiliations, or biometric data beyond what is submitted voluntarily as part of identity verification (e.g., a photo ID).

RRPH collects personal data through the following methods:

• Direct submission: Information you provide when registering, completing KYC verification, making a deposit, requesting a withdrawal, or contacting customer support.
• Automatic collection: Technical data collected automatically when you access the RRPH website or app, including IP address, device fingerprint, browser data, and session activity logs.
• Payment processors: Transaction data shared with RRPH by payment providers such as GCash, Maya, and Philippine banks when you initiate a deposit or withdrawal.
• Cookies and similar technologies: Data collected via cookies, pixels, and local storage as described in Section 7 of this policy.
• Third-party game providers: Aggregate gaming data from certified game providers whose content is hosted on the RRPH platform, used for game performance monitoring and responsible gaming purposes.

RRPH uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your RRPH player account, verifying your identity, and securing account access.
• Payment processing: Processing deposits, verifying payment method ownership, and executing withdrawal requests to your registered GCash, Maya, or bank account.
• Regulatory compliance: Meeting PAGCOR licensing obligations, Anti-Money Laundering Act (AMLA) requirements, and other applicable Philippine regulations, including Know Your Customer (KYC) and suspicious transaction reporting.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent account activity, multiple account creation, bonus abuse, and unauthorised access.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns, applying player-set deposit and time limits, and enforcing self-exclusion requests.
• Customer support: Responding to account queries, resolving disputes, and maintaining support interaction records.
• Platform improvement: Analysing aggregated usage data to improve the RRPH website, app, and game offerings — this analysis is performed on anonymised or pseudonymised data wherever possible.
• Promotions and communications: Sending you information about RRPH promotions, bonuses, and account updates, where you have consented or where this is necessary for account operation. You may opt out of marketing communications at any time from your account settings.

RRPH does not use personal data for purposes beyond those listed above without first obtaining your explicit consent or as required by applicable Philippine law.

Under the Philippine Data Privacy Act of 2012 (RA 10173), RRPH processes personal data based on the following lawful grounds:

• Consent: For marketing communications, optional profile features, and any processing activity where we have explicitly requested and received your consent. You may withdraw consent at any time without affecting the legality of processing that occurred before withdrawal.
• Contractual necessity: For processing required to fulfil our obligations under the RRPH Terms and Conditions — including account management, deposits, withdrawals, and game access.
• Legal obligation: For KYC verification, anti-money laundering screening, suspicious transaction reporting, and other activities required by PAGCOR, BSP, AMLC, and other Philippine regulatory bodies.
• Legitimate interests: For fraud detection, platform security, abuse prevention, and aggregate analytics, where these interests are balanced against and do not override your privacy rights.

RRPH does not sell, rent, or trade your personal information to third parties for commercial purposes. We share data only in the following specific circumstances:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and other payment providers require transaction data to process your deposits and withdrawals. Data shared is limited to what is technically necessary for the transaction.
• PAGCOR and regulatory authorities: RRPH is required to share player data with PAGCOR and other Philippine regulatory bodies upon request as part of its licensing obligations. This includes compliance with AMLC reporting requirements under the Anti-Money Laundering Act.
• Identity verification services: KYC verification may involve third-party identity verification providers who process your ID documents and selfie to confirm your identity. These providers are contractually bound to data protection standards consistent with RA 10173.
• Game content providers: Aggregate, anonymised gaming data may be shared with RRPH's game content partners for technical support and game performance monitoring. Individual player identities are not disclosed to game providers.
• Fraud and security services: RRPH works with fraud detection partners who may process certain technical data (such as IP addresses and device identifiers) to identify suspicious activity patterns.
• Law enforcement: RRPH will disclose personal data to law enforcement authorities when required by a valid court order, subpoena, or other legal process under Philippine law.

The RRPH website and mobile application use cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. Here is a breakdown of what RRPH uses and why:

• Essential cookies: Required for the RRPH platform to function. These include session authentication cookies, security tokens, and game state cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, last-used payment method, and game filter selections. These improve your experience but are not essential.
• Analytics cookies: Aggregate, anonymised data about how Filipino players navigate and use the RRPH platform — which pages are visited most, where players drop off in the registration flow, and similar insights used to improve the service.
• Security cookies: Used for fraud detection and to identify unusual login patterns that may indicate unauthorised account access attempts.

When you first visit the RRPH website, you will be presented with a cookie consent notice. You may accept all cookies or manage your preferences to allow only essential and security cookies. Note that disabling functional or analytics cookies will not prevent you from using RRPH, but some personalisation features may not work as expected.

RRPH does not use cookies to track your behaviour across third-party websites or to serve you targeted advertising on external platforms.

RRPH retains personal data only for as long as is necessary for the purposes described in this policy, or as required by law. The following retention periods apply:

• Active account data: Retained for the duration of your RRPH account plus a post-closure period of five years, as required by PAGCOR licensing conditions and the Philippine Anti-Money Laundering Act.
• Transaction records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five years from the date of the transaction in compliance with AMLC requirements.
• KYC documents: Identity verification documents are retained for five years from the date of submission or from account closure, whichever is later.
• Customer support communications: Chat and email records are retained for three years to assist with dispute resolution and service quality monitoring.
• Technical and analytics data: Anonymised aggregate data may be retained indefinitely for platform improvement purposes. Identifiable technical data such as IP logs is retained for 12 months.

When personal data is no longer required and no legal retention obligation applies, RRPH securely deletes or anonymises the data so that it can no longer be linked to an individual player.

RRPH implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and RRPH servers is encrypted using TLS (Transport Layer Security). Sensitive stored data, including payment details and ID documents, is encrypted at rest.
• Access controls: Personal data is accessible only to RRPH staff and contractors with a legitimate operational need. Access is role-based, logged, and regularly audited.
• OTP authentication: Account login and sensitive operations (such as password changes and withdrawal requests) require OTP verification sent to your registered mobile number.
• Fraud monitoring: Automated systems continuously monitor RRPH account activity for signs of unauthorised access, unusual transaction patterns, or fraudulent behaviour.
• Regular security reviews: RRPH conducts periodic security assessments and vulnerability testing on its platform infrastructure.

While RRPH takes all reasonable precautions to protect your data, no online system can guarantee absolute security. You also play a role in keeping your account safe — never share your RRPH password or OTP with anyone, including people claiming to be RRPH staff. RRPH will never ask for your OTP through any channel.

The Philippine Data Privacy Act gives you specific rights over your personal data held by RRPH. These rights are real and enforceable, and RRPH is committed to honouring them. Here is what you are entitled to:

• Right to be Informed: You have the right to know what personal data RRPH holds about you, how it is used, and who it has been shared with. This Privacy Policy is our primary fulfilment of this right.
• Right to Access: You may request a copy of the personal data RRPH holds about your account. Requests are processed within 15 business days.
• Right to Correction: If any personal data RRPH holds about you is inaccurate or incomplete, you have the right to request correction. Update requests for contact and profile data can often be made directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to RRPH's legal retention obligations.
• Right to Object: You have the right to object to certain types of data processing, particularly direct marketing. You may opt out of RRPH marketing communications at any time from your account settings or by contacting support.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to File a Complaint: If you believe RRPH has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, contact the RRPH Data Privacy Officer at support@rrph.best with the subject line "Data Privacy Request." Please include your registered mobile number or email address for identity verification purposes. RRPH will respond within the timeframes required by RA 10173.

RRPH is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. The RRPH registration process includes an age declaration requirement, and KYC verification confirms age through government-issued identification.

If RRPH discovers that personal data has been collected from a minor, the account will be immediately suspended, all funds will be frozen pending investigation, and the data will be deleted after any legally required reporting obligations are fulfilled. Parents or guardians who believe a minor has registered with RRPH should contact support@rrph.best immediately.

Some of RRPH's third-party service providers — such as certified game content providers and fraud detection services — may be located outside the Philippines. When personal data is transferred internationally, RRPH ensures that appropriate safeguards are in place as required by RA 10173, including:

• Contractual data processing agreements requiring the recipient to uphold standards equivalent to Philippine data privacy requirements
• Transfer only to jurisdictions with adequate data protection frameworks
• Minimisation of personal data transferred internationally — only the data strictly necessary for the specific service is shared

RRPH will not transfer your personal data to countries or entities that cannot provide adequate protection consistent with your rights under RA 10173.

RRPH may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. When material changes are made, RRPH will notify registered players by push notification or message to the registered mobile number or email address on file.

The "Last updated" date at the top of this page will always reflect when the policy was most recently revised. We encourage you to review this policy periodically. Your continued use of the RRPH platform after an updated policy is posted constitutes acceptance of the revised terms.

For any privacy-related questions, data access requests, correction requests, or complaints related to RRPH's handling of your personal information, please contact:

• Email: support@rrph.best (subject: "Data Privacy Request")
• Response language: Filipino or English
• Response time: Within 15 business days for formal data rights requests

For general account questions, our 24/7 live chat support is available through the RRPH platform. For platform policies and responsible gaming, visit the Responsible Gaming, Terms and Conditions, and About Us pages.

If you are not satisfied with RRPH's response to a data privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.