rpjl Casino – Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by rpjl Casino Philippines ("rpjl," "we," "us," or "our"), the operator of the online gaming platform at rpjl.asia ("the Platform"). This Policy describes how rpjl processes personal data relating to individuals who register accounts, use the Platform's services, contact our support team, or otherwise interact with rpjl in any capacity ("Data Subjects" or "you").

rpjl is committed to processing personal data in a manner consistent with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). By registering an rpjl account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Categories of Personal Data We Collect

rpjl collects the following categories of personal data, depending on the nature of your interaction with the Platform:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., PhilSys ID, passport, UMID, driver's license).
• Contact Data: Registered email address, Philippine mobile number, and residential address (including city, province, and postal code).
• Financial Data: GCash account details, Maya wallet details, bank account information (BPI, BDO, Metrobank, and others), transaction records including deposits, withdrawals, wagers, and winnings denominated in Philippine Peso (₱).
• Account Data: Username, encrypted password, account status, login timestamps, session duration, and device identifiers.
• Technical Data: IP address, browser type and version, operating system, screen resolution, referring URL, and mobile device model.
• Usage Data: Game history, betting patterns, bonus activity, session logs, and navigation paths within the Platform.
• Communications Data: Records of correspondence with rpjl customer support, including live chat transcripts and email exchanges.
• Verification Data: Documents submitted during the Know Your Customer ("KYC") process, including scanned government IDs and proof of address documents.

3. How We Collect Your Personal Data

rpjl collects personal data through the following channels and methods:

• Direct submission: Data you provide when registering an rpjl account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access or use the rpjl Platform.
• Payment providers: Financial transaction data received from GCash, Maya, BPI, BDO, Metrobank, and other payment processors when you conduct financial transactions on the Platform.
• Third-party verification services: Identity verification data obtained from third-party KYC and AML compliance service providers engaged by rpjl to fulfill its regulatory obligations.

4. Purposes of Data Processing

rpjl processes your personal data for the following purposes:

• To create and manage your rpjl player account, including account authentication and security.
• To process financial transactions, including GCash and bank deposits, and to facilitate withdrawal of winnings to your nominated account.
• To conduct identity verification (KYC) and anti-money laundering (AML) checks as required under Philippine regulatory obligations, including those set by PAGCOR.
• To provide, maintain, and improve all rpjl gaming services, including live casino, slots, sports betting, sabong, bingo, Monster Mine, and Golf.
• To administer bonuses, promotions, loyalty programs, and VIP rewards associated with your rpjl account.
• To communicate with you regarding your account status, transactions, security alerts, and platform updates.
• To monitor for and prevent fraudulent activity, unauthorized access, collusion, and other conduct prohibited under rpjl's Terms and Conditions.
• To comply with applicable Philippine laws and regulations, including tax reporting obligations and PAGCOR compliance requirements.
• To support responsible gaming functions, including the administration of deposit limits, cooling-off periods, and self-exclusion requests.
• To conduct platform analytics for the purpose of improving user experience, optimizing game offerings, and enhancing Platform performance.

5. Legal Basis for Processing

rpjl processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have provided express consent, including at account registration and for direct marketing communications.
• Contractual necessity: Processing necessary to perform the contractual relationship between rpjl and the Player, as governed by rpjl's Terms and Conditions.
• Legal obligation: Processing required to comply with rpjl's obligations under Philippine law, including PAGCOR regulations, AML requirements, and tax obligations.
• Legitimate interests: Processing for rpjl's legitimate interests in fraud prevention, platform security, and business analytics, where such interests are not overridden by your rights and interests.

6. Disclosure and Sharing of Personal Data

rpjl does not sell your personal data to third parties. rpjl may share your personal data with the following categories of recipients, strictly for the purposes set out in this Policy:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other payment providers, to facilitate your financial transactions on the Platform.
• KYC and AML service providers: Third-party identity verification and compliance service providers engaged to assist rpjl in meeting its regulatory obligations.
• Game technology providers: Game studios and platform software providers that supply gaming content and infrastructure used by rpjl, where technically necessary for service delivery.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities, where disclosure is required by applicable law or regulation.
• Professional advisers: Legal counsel, auditors, and other professional advisers where disclosure is necessary for the conduct of rpjl's business.

All third-party service providers engaged by rpjl are contractually required to process personal data in accordance with the DPA and rpjl's data protection standards.

7. Cookies and Tracking Technologies

rpjl uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit rpjl.asia. rpjl uses the following types of cookies:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security features. These cannot be disabled.
• Functional cookies: Remember your preferences and settings, such as language and login status, to improve your rpjl experience.
• Analytics cookies: Collect aggregated, anonymized data about Platform usage to help rpjl understand how players interact with the site and identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity and unauthorized access attempts on the rpjl Platform.

You may configure your browser to decline non-essential cookies; however, doing so may affect the functionality of certain rpjl services. Your first visit to the Platform will present you with a cookie consent notice through which you may manage your preferences.

8. Data Retention

rpjl retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR requirements and Philippine AML regulations.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process, or longer where required by applicable law.
• Communications records: Customer support records are retained for three (3) years following the closure of each support interaction.
• Technical and usage data: Retained for up to twenty-four (24) months from collection for analytics and security purposes.

Upon expiry of the applicable retention period, rpjl will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9. Data Security

rpjl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the rpjl Platform.
• Bcrypt hashing for stored account passwords — rpjl never stores passwords in plain text.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Two-Factor Authentication (2FA) available for all rpjl player accounts.
• Regular security assessments and penetration testing of the Platform's infrastructure.
• Incident response procedures enabling prompt detection, containment, and notification of personal data breaches in accordance with NPC requirements.

Notwithstanding these measures, no method of data transmission or storage is entirely secure. rpjl cannot guarantee absolute data security, and Players use the Platform at their own risk.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by rpjl:

• Right to be informed: The right to know that your personal data is being collected and processed, and the purposes for such processing.
• Right of access: The right to request a copy of the personal data rpjl holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data in circumstances where processing is no longer necessary or where consent has been withdrawn, subject to rpjl's legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: The right to object to processing based on rpjl's legitimate interests, including direct marketing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe rpjl has violated your rights under the DPA.

To exercise any of these rights, please contact rpjl's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." rpjl will respond within thirty (30) days of receipt.

11. Children's Privacy

The rpjl Platform is strictly intended for adults who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. rpjl does not knowingly collect personal data from individuals under the age of 21. If rpjl discovers that personal data has been collected from an individual below the minimum age, such data will be deleted immediately and the associated account closed without notice. Parents or guardians who believe a minor may have registered an rpjl account should contact [email protected] immediately.

12. Cross-Border Data Transfers

Where rpjl shares your personal data with service providers located outside the Philippines — including certain game technology providers and cloud infrastructure partners — such transfers are conducted in compliance with Section 21 of the DPA and the NPC's applicable circulars on cross-border data transfers. rpjl implements appropriate contractual and technical safeguards to ensure that your personal data receives an equivalent level of protection regardless of where it is processed.

13. Updates to This Privacy Policy

rpjl may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered Players via email to their registered rpjl address, with a minimum of fourteen (14) days' advance notice before the revised Policy takes effect. The most current version of this Policy will always be available at rpjl.asia/privacy-policy. Continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the changes.

14. Contact and Data Protection Officer

For privacy-related inquiries, data subject rights requests, or to report a suspected data breach, please contact:

• Data Protection Officer, rpjl Casino Philippines
• Email: [email protected]
• Platform: rpjl.asia