Privacy Policy

1. Introduction

This Privacy Policy describes how rajaph collects, processes, stores, and protects the personal information of players and visitors who interact with the rajaph platform. Whether you're a first-time visitor from Quezon City browsing our slots catalog, a registered player from Cebu managing your account, or a user from Davao completing KYC verification — this policy applies to you.

rajaph processes personal data only for specified, legitimate purposes and only to the extent necessary to fulfil those purposes. We do not sell your personal information to third parties for marketing purposes, and we do not engage in profiling that produces significant legal effects without your explicit consent.

By registering a rajaph account, completing KYC verification, or continuing to use the rajaph platform after being made aware of this Privacy Policy, you acknowledge that you have read, understood, and agree to the data practices described herein.

2. Data Controller

rajaph is the data controller responsible for the personal information of players registered on the rajaph platform. As data controller, rajaph determines the purposes and means of processing your personal data and is accountable under Republic Act No. 10173.

3. Personal Data We Collect

rajaph collects the following categories of personal data from players and platform visitors:

3.1 Registration and Identity Data

• Full legal name (as it appears on a government-issued ID)
• Date of birth (to verify the 21+ age requirement under Philippine law)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address in the Philippines

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, driver's license, UMID, PhilSys National ID, SSS/GSIS ID, voter's ID)
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
• Selfie or liveness verification image where required by PAGCOR KYC standards
• Source of funds declaration for high-value accounts

3.3 Financial Transaction Data

• Deposit and withdrawal records including amounts, dates, and payment method reference numbers
• GCash account name and registered number (where GCash is used as a payment method)
• Bank account details for BPI, BDO, or Metrobank transactions
• PayMaya account details where applicable

3.4 Gaming and Platform Activity Data

• Game session logs — which titles were played, session duration, wager amounts, win/loss outcomes
• Bonus activation and wagering history
• VIP tier status and loyalty points balance
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Customer support communication history

3.5 Technical and Device Data

• IP address and approximate geolocation at time of login
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Platform access timestamps and session duration

4. How We Collect Your Data

rajaph collects personal data through the following means:

• Direct collection: Information you provide when registering a rajaph account, completing KYC verification, making deposits or withdrawals, or contacting rajaph support.
• Automated collection: Technical data collected automatically through cookies, server logs, and platform analytics when you access the rajaph website.
• Third-party sources: Identity verification data from PAGCOR-approved KYC service providers; fraud detection signals from payment processing partners; anti-money laundering (AML) screening results from compliance database providers.

5. Purposes of Data Processing

rajaph processes personal data for the following specified and legitimate purposes:

Purpose	Data Used
Account registration and management	Registration and identity data
Age verification (21+ requirement)	Date of birth, KYC documents
Identity verification (KYC) per PAGCOR requirements	KYC data, selfie/liveness data
Processing deposits and withdrawals	Financial transaction data
Anti-money laundering (AML) compliance	Financial data, source of funds
Fraud prevention and platform security	Technical data, IP address, device data
Game provision and platform operation	Gaming activity data
Responsible gaming tool management	Gaming history, self-exclusion status
Customer support and dispute resolution	Communication history, account data
Regulatory reporting to PAGCOR and NPC	Identity, transaction, and gaming data
Platform analytics and improvement	Technical and anonymized gaming data

rajaph does not use your personal data for purposes beyond those listed above without first obtaining your explicit consent or as otherwise required by applicable Philippine law.

6. Legal Basis for Processing

rajaph processes personal data under the following legal bases as recognized by the Data Privacy Act of 2012 (Republic Act No. 10173):

• Contractual necessity: Processing required to perform the rajaph player agreement — account registration, KYC, game access, deposit and withdrawal processing.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Philippine AML laws (Republic Act No. 9160 as amended), and mandatory reporting obligations to the National Privacy Commission.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming enforcement, where such interests are not overridden by your data protection rights.
• Consent: Processing for non-essential communications and analytics, where you have given specific, informed consent. You may withdraw consent at any time by contacting rajaph support.

7. Data Sharing and Disclosure

rajaph does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• PAGCOR and Philippine regulatory authorities: As required by our gaming license conditions and applicable law.
• National Privacy Commission (NPC): In response to lawful requests, investigations, or mandatory breach notifications.
• KYC and identity verification service providers: Third-party providers used to process identity documents and liveness checks on behalf of rajaph, operating under strict data processing agreements.
• Payment processing partners: GCash, PayMaya, BPI, BDO, Metrobank, and other payment providers, to facilitate your deposits and withdrawals. Each provider operates under their own privacy policies and applicable financial regulations.
• AML and fraud screening providers: Compliance database services used to screen for sanctions, politically exposed persons (PEPs), and adverse media in accordance with Philippine AML requirements.
• Game software providers: Limited technical data shared with certified game providers as necessary to deliver game functionality and RNG certification auditing.
• Law enforcement: Where required by a valid court order, subpoena, or lawful request from Philippine law enforcement authorities.

All third-party recipients of rajaph player data are contractually bound to process personal data only for the specified purpose, to maintain appropriate security standards, and to comply with Republic Act No. 10173.

8. Data Retention

rajaph retains personal data for the following periods, after which data is securely deleted or anonymized unless a longer retention period is required by law:

• Account and KYC data: Retained for the duration of your rajaph account and for a minimum of five (5) years following account closure, in compliance with PAGCOR requirements and Philippine AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Republic Act No. 9160.
• Gaming activity logs: Retained for three (3) years from the date of each session for operational and dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of each interaction.
• Technical and cookie data: Retained for up to thirteen (13) months from collection, unless deleted earlier by user action.

9. Data Security

rajaph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the rajaph platform
• Encryption of sensitive stored data including passwords (hashed and salted) and identity documents
• Role-based access controls ensuring rajaph staff can only access player data necessary for their specific function
• Two-factor authentication (2FA) options for player accounts
• Regular security audits and penetration testing of rajaph platform infrastructure
• Automated monitoring for suspicious login activity and account takeover attempts
• Mandatory data protection training for all rajaph staff who handle personal data

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rajaph will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

10. Cookies and Tracking Technologies

rajaph uses cookies and similar technologies to operate and improve the platform. The types of cookies used are:

• Strictly necessary cookies: Required for the rajaph platform to function — session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login state. These improve your rajaph experience.
• Analytics cookies: Used to understand how players use the rajaph platform — which pages are visited most, where players encounter issues. Data collected is aggregated and anonymized.
• Security and fraud prevention cookies: Used to detect and prevent fraudulent account access and malicious bot activity.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality. rajaph does not place third-party advertising cookies on the platform.

11. Your Rights Under Republic Act No. 10173

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by rajaph:

• Right to be informed: The right to be notified of how rajaph collects and processes your personal data — as fulfilled by this Privacy Policy.
• Right of access: The right to request a copy of the personal data rajaph holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your rajaph account.
• Right to erasure: The right to request deletion of your personal data, subject to rajaph's legal obligation to retain certain data for regulatory compliance purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: The right to object to the processing of your personal data for legitimate interest purposes, including direct marketing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe rajaph has violated your data privacy rights.

To exercise any of these rights, please submit a written request to rajaph's Data Protection Officer at [email protected]. rajaph will respond within fifteen (15) business days of receiving a valid request.

12. Children and Minors

The rajaph platform is strictly for adults aged 21 years and above. rajaph does not knowingly collect personal data from individuals under 21 years of age. Age verification is enforced through mandatory KYC identity checks for all registered accounts.

If rajaph discovers that personal data has been collected from an individual under 21 years of age, the associated account will be immediately suspended, all data will be deleted from active systems, and PAGCOR will be notified in accordance with our licensing obligations. If you are a parent or guardian and believe a minor has registered a rajaph account, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

rajaph may update this Privacy Policy from time to time to reflect changes in our data practices, platform operations, or applicable Philippine law. When material changes are made, we will notify registered players via email to the address on file and/or by posting a prominent notice on the rajaph platform.

The date of the most recent revision is always displayed at the top of this page. Continued use of the rajaph platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any changes, you should discontinue use of the platform and request account closure.

14. Contact and Data Protection Officer

For any privacy-related queries, requests to exercise your data subject rights, or concerns about rajaph's data processing practices, please contact our Data Protection Officer: