Privacy Policy

This Privacy Policy ("Policy") describes how rajaph ("rajaph," "we," "us," "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you," "your," "data subject") who access or use the rajaph online gaming platform at rajaph.net and all associated services, mobile interfaces, and support channels.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission ("NPC") of the Philippines. Where applicable PAGCOR regulatory requirements impose additional data handling obligations, those obligations are also incorporated into our practices.

This Policy applies to all personal data processed by rajaph in connection with your rajaph account, your gameplay, your financial transactions on the platform, and your communications with the rajaph support team.

rajaph acts as the Personal Information Controller in respect of personal data collected through rajaph.net, as defined under Section 3(h) of the Data Privacy Act. As the controller, rajaph determines the purposes for which and the means by which personal data are processed.

Where rajaph engages third-party service providers — including game studios, payment processors, identity verification services, and analytics providers — those entities act as Personal Information Processors under the DPA and are bound by written data processing agreements that restrict their use of your data to the specific purposes authorised by rajaph.

rajaph collects only the personal data that is necessary for the purposes described in Section 5 of this Policy. The categories of data we collect are set out below.

rajaph does not collect sensitive personal information — such as health data, religious beliefs, or political affiliations — unless specifically required by applicable law or regulation and with your explicit consent.

rajaph collects personal data through the following means:

• Directly from you — when you register a rajaph account, complete KYC verification, make a deposit or withdrawal, set responsible gaming limits, update your account profile, or contact rajaph support.
• Automatically during platform use — through server logs, session tracking, and cookies when you browse rajaph.net or engage in gameplay. See Section 7 for details on cookies.
• From payment providers — GCash, PayMaya, BPI, BDO, and Metrobank provide rajaph with transaction confirmation data necessary to credit your account and process withdrawals.
• From identity verification partners — where rajaph engages a third-party KYC provider to verify government-issued identification documents, that provider returns a verification result and relevant document metadata to rajaph.
• From regulatory bodies — PAGCOR and other competent Philippine authorities may share information with rajaph as part of ongoing licensing compliance and AML monitoring obligations.

rajaph processes your personal data only for the purposes listed below and only where a lawful basis exists under the Data Privacy Act of 2012:

• Account creation and management — to register your rajaph account, verify your identity, and maintain your player profile. Legal basis: performance of a contract.
• Age verification and eligibility — to confirm that you meet the 21-year minimum age requirement mandated by PAGCOR guidelines. Legal basis: legal obligation; legitimate interest.
• Processing deposits and withdrawals — to credit your rajaph account balance and process your withdrawal requests via GCash, PayMaya, or Philippine banking channels. Legal basis: performance of a contract.
• Anti-money laundering (AML) compliance — to monitor transactions for suspicious patterns and fulfill reporting obligations under Philippine AML legislation. Legal basis: legal obligation.
• Responsible gaming management — to administer your self-imposed deposit limits, loss limits, session alerts, and self-exclusion requests. Legal basis: legitimate interest; legal obligation.
• Customer support — to respond to your support requests, resolve disputes, and maintain records of support interactions. Legal basis: performance of a contract; legitimate interest.
• Platform security and fraud prevention — to detect and prevent unauthorized access, account fraud, bonus abuse, and other prohibited conduct. Legal basis: legitimate interest; legal obligation.
• Legal and regulatory compliance — to respond to orders, subpoenas, or lawful requests from PAGCOR, the NPC, or other competent Philippine authorities. Legal basis: legal obligation.
• Marketing communications — to send you information about rajaph promotions, bonuses, and new games where you have consented to receive such communications. Legal basis: consent. You may withdraw consent at any time.
• Platform analytics and improvement — to analyse aggregate usage patterns and improve the rajaph platform experience. Legal basis: legitimate interest.

rajaph does not sell, rent, or commercially transfer your personal data to any third party. We may share your data with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors — GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers — third-party KYC partners receive copies of your government-issued ID to perform verification checks on behalf of rajaph.
• Game studio providers — JILI, PG Soft, Pragmatic Play, and other licensed providers receive a session token and pseudonymous player identifier to serve game content. They do not receive your full name or financial details.
• Fraud and security service providers — risk management vendors receive technical data (IP address, device fingerprint, session data) to assess fraud risk.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies may receive data in response to lawful orders, regulatory audits, or mandatory AML reports.
• Professional advisers — rajaph's legal counsel, auditors, and compliance consultants may access your data as necessary for the performance of their professional services, subject to professional confidentiality obligations.

All third-party processors engaged by rajaph are bound by data processing agreements that require them to process your data only on rajaph's documented instructions, to implement adequate technical and organisational security measures, and to delete or return your data upon termination of the engagement.

rajaph uses cookies and similar tracking technologies on rajaph.net to operate the platform, remember your session, and understand how players use the site. The types of cookies used on rajaph are described below:

• Strictly Necessary Cookies: These are essential for the rajaph platform to function. They maintain your authenticated session after rajaph login, store your temporary game state, and facilitate secure payment flow redirects. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These remember your preferences — such as your preferred language, responsible gaming settings, and display preferences — across sessions.
• Analytics Cookies: rajaph uses aggregated analytics data to understand which games and features are most used, how players navigate the lobby, and where technical issues occur. Analytics data is processed at aggregate level and does not identify individual players by name.
• Security Cookies: These support fraud detection and session integrity by storing anonymised identifiers that allow rajaph's security systems to recognise your device across sessions.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent rajaph from functioning correctly. rajaph does not use third-party advertising or retargeting cookies.

rajaph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The general retention periods applicable to rajaph player data are:

• Account and identity data: Retained for the duration of your active rajaph account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML obligations under the AMLA.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine AML legislation and BSP regulations applicable to payment service providers.
• Gameplay data: Retained for three (3) years from the date of the gaming session, for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Communications and support records: Retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your active marketing consent plus two (2) years after consent is withdrawn, to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, rajaph will securely delete or anonymise your personal data unless a longer retention period is required by a specific legal obligation or is necessary to defend against pending legal proceedings.

rajaph implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 / 256-bit SSL encryption on all data transmitted between player devices and rajaph servers;
• Encrypted storage of sensitive fields — including identification document data and payment method references — at rest using AES-256 encryption;
• Role-based access controls limiting internal access to personal data to employees with a specific operational need;
• Multi-factor authentication requirements for all rajaph staff accessing systems that process player personal data;
• Regular penetration testing and vulnerability assessments of the rajaph platform by independent security firms;
• Automated anomaly detection on login activity and financial transactions to identify and respond to suspicious patterns in real time; and
• Documented incident response procedures meeting NPC breach notification requirements under Section 20 of the DPA.

While rajaph employs industry-standard security practices, no platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your rajaph login credentials and for ensuring that your device is secure.

Some of rajaph's third-party service providers — including certain game studio platforms and cloud infrastructure providers — may operate servers located outside the Philippines. Where personal data is transferred outside the Philippines, rajaph takes steps to ensure that the transfer is lawful and that your data is afforded a level of protection consistent with the Data Privacy Act of 2012.

These steps include requiring overseas recipients to: (a) be situated in a country with data protection laws deemed adequate by the NPC; or (b) enter into binding data transfer agreements with rajaph that incorporate NPC-prescribed standard contractual clauses; or (c) be subject to binding corporate rules or equivalent accountability mechanisms.

You may request details of the specific safeguards applied to cross-border transfers of your personal data by contacting the rajaph Data Privacy Officer at [email protected].

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by rajaph. To exercise any of these rights, contact the rajaph Data Privacy Officer at [email protected] with the subject line "Data Rights Request" and include your registered rajaph account mobile number or username for identification purposes. rajaph will respond within fifteen (15) business days of verifying your identity.

rajaph does not knowingly collect personal data from individuals under the age of 21 years. In compliance with PAGCOR regulatory requirements, access to rajaph is restricted to players aged 21 years old and above. Age verification is a mandatory step in the rajaph account registration process.

If rajaph becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the account, return any deposited funds through the original payment method, and delete all personal data associated with that account from our active systems within the shortest practicable timeframe consistent with our legal obligations.

If you believe that a minor may have created a rajaph account, please notify us immediately at [email protected] so that we may investigate and take appropriate action.

rajaph may send you promotional communications — including information about new games, bonus offers, reload promotions, and VIP programme updates — via SMS to your registered Philippine mobile number or via email, where you have expressly consented to receive such communications at the time of registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the rajaph account settings page;
• Clicking the unsubscribe link included in any rajaph marketing email; or
• Contacting rajaph support at [email protected] with the subject line "Marketing Opt-Out."

Withdrawing marketing consent does not affect rajaph's ability to send you service-related communications — such as transaction confirmations, account security alerts, or important policy updates — as these communications are sent on the basis of contract performance or legal obligation, not marketing consent.

The rajaph platform integrates content and services from licensed third-party game studios and payment providers. While rajaph takes care to engage only reputable third-party processors bound by data processing agreements, this Policy does not cover the data practices of those third parties acting in their own capacity as independent data controllers.

rajaph is not responsible for the privacy practices of third-party game providers, payment networks (including the GCash app, PayMaya app, and Philippine bank portals), or any other external service you interact with in connection with your rajaph account. We encourage you to review the privacy policies of these third-party services independently.

rajaph reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever a change is made.

Where a proposed change materially affects your rights or the manner in which rajaph processes your personal data, rajaph will provide advance notice — of not less than fourteen (14) days — via your registered mobile number or email address before the change takes effect. For non-material changes, the updated Policy will take effect upon publication at rajaph.net/privacy-policy.

Your continued use of the rajaph platform after a revised Privacy Policy takes effect constitutes your acknowledgement of the revised Policy. If you do not accept the changes, you should cease using rajaph and may request account closure as described in the rajaph Terms & Conditions.

For all data privacy matters — including requests to exercise your data subject rights, questions about this Policy, or to report a suspected data privacy concern — please contact the rajaph Data Privacy Officer:

If you are not satisfied with rajaph's response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC accepts complaints from data subjects regarding alleged violations of the Data Privacy Act of 2012. Information about the NPC complaint process is available on the NPC's official website.

When contacting the rajaph Data Privacy Officer, please include your registered rajaph account mobile number or username, a clear description of your request or concern, and any relevant reference numbers. This helps our team locate your account and process your request as efficiently as possible.