rajaph Privacy Policy

This Policy applies to all personal data processed by rajaph in connection with your use of the Platform, including the website at rajaph.org and all associated services. It applies regardless of the device or method you use to access the Platform.

This Policy should be read in conjunction with the rajaph Terms & Conditions and the rajaph Responsible Gaming Policy, both of which are incorporated herein by reference. Where any inconsistency exists between this Policy and the Terms & Conditions regarding data privacy matters, this Policy shall prevail.

rajaph is the data controller responsible for the personal data collected and processed through the Platform. As data controller, rajaph determines the purposes and means of processing your personal data in compliance with the Philippine Data Privacy Act and other applicable laws.

Inquiries concerning this Policy and requests to exercise your data subject rights should be directed to the rajaph Data Privacy Officer via the contact channels set out in Section 15 of this Policy.

rajaph collects the following categories of personal data in connection with account registration, ongoing use of the Platform, and compliance obligations:

rajaph does not knowingly collect sensitive personal information such as racial origin, religious beliefs, political affiliations, or health information, except where required for KYC or responsible gaming compliance.

rajaph collects personal data through the following channels:

• Direct provision: Information you provide during account registration, KYC submission, deposit/withdrawal requests, and support interactions;
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including via cookies and server logs;
• Third-party sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, and bank partners; fraud screening data from security service providers;
• Publicly available sources: Where permitted by law, publicly available information used for fraud prevention and compliance screening.

rajaph processes your personal data for the following purposes:

• Creating and managing your rajaph account, including rajaph Login authentication;
• Processing deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment channels;
• Conducting identity verification (KYC) and ongoing due diligence as required under PAGCOR-aligned operating frameworks and AMLA obligations;
• Delivering customer support services through live chat, email, Messenger, and Viber;
• Detecting and preventing fraud, money laundering, cheating, and other prohibited activities;
• Administering bonuses, promotions, and the rajaph loyalty programme;
• Monitoring gameplay for responsible gaming purposes, including identifying patterns associated with problem gambling;
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts);
• Sending promotional communications where you have provided your consent;
• Improving Platform functionality, game performance, and user experience through aggregated analytics;
• Complying with legal and regulatory obligations under Philippine law.

rajaph processes your personal data on one or more of the following legal bases as recognised under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to perform the contract between you and rajaph, including operating your account and processing transactions;
• Legal obligation: Processing required to comply with PAGCOR-aligned regulations, AMLA requirements, KYC obligations, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement where these interests are not overridden by your data rights;
• Consent: Processing for marketing communications, optional personalisation features, and non-essential cookies, where you have given freely provided, specific, and informed consent. You may withdraw consent at any time.

rajaph does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Service providers: Third-party vendors who process data on our behalf under strict contractual data protection obligations, including KYC verification providers, payment processors (GCash, PayMaya, banks), IT infrastructure providers, and customer support platforms;
• Game providers: Aggregated or pseudonymised session data shared with JILI Games, PG Soft, Pragmatic Play, and other game studio partners for RNG auditing and game performance analysis;
• Regulatory authorities: Personal data disclosed to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities when required by law or court order;
• Fraud prevention: Data shared with fraud screening networks and interbank fraud prevention systems to protect all platform users;
• Business transfers: In the event of a merger, acquisition, or sale of business assets, your personal data may be transferred as part of that transaction, subject to equivalent data protection obligations.

All third-party service providers are required to implement appropriate technical and organisational security measures and are prohibited from using your data for purposes other than those specified by rajaph.

Some of rajaph's service providers — including game studio technology partners and cloud infrastructure providers — may process personal data outside the Republic of the Philippines. Where such transfers occur, rajaph ensures that appropriate safeguards are in place in accordance with the requirements of the Philippine Data Privacy Act, including contractual clauses that provide an equivalent level of data protection to that afforded under Philippine law.

By using the rajaph Platform, you acknowledge that your personal data may be transferred to servers or processors located outside the Philippines in accordance with this Policy.

rajaph retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: For the duration of the account relationship plus five (5) years following account closure, as required for AMLA compliance;
• Transaction records: Five (5) years from the date of each transaction, in line with AMLA record-keeping obligations;
• KYC documents: Five (5) years following the conclusion of the business relationship;
• Support communications: Two (2) years from the date of each interaction, unless a longer period is required for dispute resolution;
• Responsible gaming records: Five (5) years, including self-exclusion records, to prevent re-registration during exclusion periods.

Where personal data is no longer required and no legal basis exists for continued retention, rajaph will securely delete or anonymise such data.

rajaph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption on all data transmitted between your device and rajaph servers;
• Encrypted storage of sensitive personal data, including financial information and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security vulnerability assessments and penetration testing;
• Incident response procedures for personal data breaches, including notification to the National Privacy Commission within 72 hours of becoming aware of a reportable breach.

While rajaph takes all reasonable precautions, no internet transmission or digital storage system is fully impenetrable. You are also responsible for maintaining the security of your rajaph Login credentials and should notify rajaph support immediately if you suspect unauthorised access to your account.

rajaph uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The categories of cookies used are:

• Strictly necessary cookies: Required for rajaph Login sessions, security, and basic Platform functionality. These cannot be disabled.
• Functional cookies: Remember your language preference, game settings, and other personalisation choices.
• Analytics cookies: Aggregate, anonymised data on page views, game popularity, and user journeys used to improve Platform performance. No personally identifiable information is included.
• Security cookies: Used for fraud detection and bot prevention, including session integrity verification.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. rajaph does not use third-party advertising or retargeting cookies.

Under Republic Act No. 10173 (Philippine Data Privacy Act), you have the following rights with respect to your personal data held by rajaph:

• Right to be Informed: To be notified of the personal data being collected and the purposes of processing before or at the time of collection;
• Right of Access: To obtain a copy of your personal data held by rajaph and information about how it is being processed;
• Right to Rectification: To request correction of inaccurate, incomplete, or outdated personal data;
• Right to Erasure: To request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Object: To object to processing of your personal data for direct marketing, profiling, or where processing is based on legitimate interests;
• Right to Data Portability: To receive your personal data in a structured, commonly used format where technically feasible;
• Right to Withdraw Consent: To withdraw consent for consent-based processing at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to rajaph support via the contact channels listed in Section 15. rajaph will respond within thirty (30) days of receipt of a verifiable request. Identity verification may be required before processing your request.

The rajaph Platform is strictly for individuals who are 21 years of age or older in accordance with PAGCOR regulations. rajaph does not knowingly collect personal data from any person under the age of 21.

If rajaph becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account will be terminated immediately. If you believe that a minor has registered on the Platform, please contact rajaph support immediately at the address in Section 15 so that the matter can be investigated and remediated promptly.

rajaph reserves the right to update this Privacy Policy at any time. Where changes are material, rajaph will provide advance notice to registered players via email to the address on file and/or through a prominent in-platform notification. The "Effective Date" at the top of this document will be updated accordingly.

Your continued use of the rajaph Platform following the effective date of any revised Policy constitutes your acknowledgement of the updated terms. We encourage you to review this Policy periodically. Historical versions are available upon written request to rajaph support.

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a data privacy concern, please contact the rajaph Data Privacy Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the rajaph Platform
• Messenger / Viber: 8 AM – 12 AM PHT

rajaph will acknowledge receipt of privacy requests within five (5) business days and provide a substantive response within thirty (30) days. If you are dissatisfied with rajaph's handling of a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through its official channels.

For all data privacy queries, please include your registered email address and a brief description of your request. Do not include your full password, payment card numbers, or government ID scans in written correspondence unless specifically requested by our Data Privacy Officer through a secure channel.