rahaph Privacy Policy

1.1 rahaph is committed to protecting the privacy and personal information of all players using the rahaph platform. We understand that Filipino players place a high degree of trust in the services they use, and we take that responsibility seriously.

1.2 This Policy applies to all personal information collected by rahaph through the rahaph.cam website, mobile browser interface, customer support channels, and any other digital touchpoint operated by rahaph. It applies to all registered players, visitors, and prospective players who interact with any part of the rahaph platform.

1.3 This Policy should be read alongside the rahaph Terms & Conditions and the rahaph Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with rahaph.

2.1 rahaph collects personal data in several ways: directly from you during registration and ongoing use, automatically through the technical operation of the platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include:

Registration & Identity Data

Financial & Transaction Data

Technical & Usage Data

2.2 rahaph may also collect sensitive personal information where required for responsible gaming compliance — including information voluntarily shared by a player regarding problem gambling or self-exclusion requests. Such sensitive data is handled with the highest level of protection and used only for player welfare purposes.

2.3 You are not obligated to provide all requested personal information, but failure to provide certain mandatory data (such as identity documents for KYC verification) may limit your ability to access all features of the rahaph platform, including withdrawals.

3.1 rahaph uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and administer your rahaph player account, including processing registrations, managing login sessions, and providing account-level settings and tools.
• Identity verification (KYC): To verify that you are who you claim to be, that you are of legal gambling age (21+), and that you are eligible to use the rahaph platform under applicable Philippine regulations.
• Transaction processing: To process deposits, withdrawals, bonus credits, and other financial transactions within your rahaph account, using the payment methods you have registered.
• Regulatory compliance: To meet obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws, including reporting to relevant regulatory bodies where required.
• Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal or prohibited conduct on the rahaph platform.
• Responsible gaming: To monitor player activity for signs of problem gambling, to enforce deposit and loss limits, to process self-exclusion requests, and to refer players to support resources where appropriate.
• Platform improvement: To analyze usage patterns, game performance, and player behavior in aggregate (anonymized) form to improve the rahaph product and player experience.
• Customer support: To respond to your enquiries, complaints, and support requests through rahaph's customer support channels.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.

4.1 rahaph processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing is necessary for the performance of the contract between you and rahaph — i.e., to provide you with access to the rahaph platform, process transactions, and manage your account.
• Legal obligation: Processing is required to comply with PAGCOR licensing requirements, Philippine anti-money laundering obligations, tax reporting requirements, and the Data Privacy Act itself.
• Legitimate interests: Processing is necessary for rahaph's legitimate business interests, including fraud prevention, security monitoring, platform optimization, and responsible gaming enforcement — provided these interests are not overridden by your rights.
• Consent: For certain processing activities — such as marketing communications and optional analytics cookies — rahaph relies on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.1 rahaph does not sell, rent, or trade your personal data to third parties. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

5.2 In all cases of data sharing, rahaph ensures that appropriate contractual safeguards, including data processing agreements consistent with Philippine data protection law, are in place with all third-party recipients.

6.1 rahaph uses cookies, web beacons, pixel tags, and similar tracking technologies to operate the platform, improve your experience, and analyze usage patterns. Cookies are small text files stored on your device that allow rahaph to recognize your browser across sessions.

6.2 The types of cookies used by rahaph include:

• Strictly necessary cookies: Essential for the operation of the rahaph platform. These enable your login session, wallet access, and core navigation. They cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to understand how players navigate rahaph — which games are popular, how long sessions last, and where users encounter friction. This data is aggregated and anonymized.
• Functional cookies: Store your preferences, such as language settings, display preferences, and recently played games, so that rahaph can provide a more personalized experience on your return visits.
• Marketing cookies (consent required): Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of rahaph's marketing campaigns. These may be set by rahaph or by trusted analytics partners.

6.3 You can manage and delete cookies through your browser settings at any time. Please note that disabling non-essential cookies will not prevent you from accessing the rahaph platform, but may affect certain personalization features.

7.1 rahaph retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to overriding legal, regulatory, and contractual requirements.

7.2 The following general retention periods apply:

• Account data: Retained for the duration of your active rahaph account plus a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and Philippine AML obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer retention period is required by an ongoing dispute or regulatory matter.
• Technical and usage logs: Typically retained for twelve (12) months, after which they are anonymized or deleted unless required for an ongoing investigation.

7.3 Where data is no longer required for any purpose and no legal retention obligation applies, rahaph will securely delete or anonymize the data in a manner that prevents reconstruction.

8.1 rahaph employs a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and rahaph servers.
• Encryption of sensitive data at rest, including financial account information and identity documents.
• Role-based access controls ensuring that only authorized rahaph personnel can access personal data, and only to the extent necessary for their role.
• Two-factor authentication options available on all player accounts to prevent unauthorized login.
• Regular independent security audits and penetration testing of the rahaph platform.
• Comprehensive incident response procedures, including notification protocols for data breaches in accordance with NPC guidelines.
• Staff training on data privacy obligations and information security best practices.

8.2 While rahaph takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your rahaph login credentials and for notifying rahaph immediately if you suspect unauthorized access to your account.

8.3 In the event of a personal data breach that poses a significant risk to the rights and freedoms of affected players, rahaph will notify the National Privacy Commission and affected individuals in accordance with the timelines prescribed by the Data Privacy Act.

9.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by rahaph. You may exercise any of these rights by contacting the rahaph Data Protection Officer at [email protected].

9.2 rahaph will respond to all data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or voluminous, rahaph may extend this period by a further thirty (30) days, with prior notice provided to you.

9.3 rahaph will not charge a fee for exercising your data subject rights unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10.1 The rahaph platform is strictly for adults. rahaph does not knowingly collect personal data from individuals under the age of 21. The minimum age to register and use rahaph is 21 years, in accordance with PAGCOR regulations governing casino-style gaming in the Philippines.

10.2 If rahaph becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended and all associated personal data will be deleted in accordance with applicable law.

10.3 If you are a parent or guardian and believe that a minor under your care has registered an account on rahaph, please contact us immediately at [email protected] so that we can take appropriate action.

11.1 rahaph's primary operations and data storage are oriented towards the Philippine market. However, certain service providers used by rahaph — such as game content providers, cloud infrastructure providers, and fraud prevention services — may process data in jurisdictions outside the Philippines.

11.2 Where personal data is transferred outside the Philippines, rahaph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by Philippine law. These safeguards may include:

• Contractual data protection clauses binding the receiving party to Philippine data privacy standards.
• Transfers only to jurisdictions recognized as providing adequate data protection by the National Privacy Commission.
• Binding corporate rules for intra-group transfers within the rahaph corporate structure.

11.3 You may request further information about the safeguards applicable to any international transfer of your personal data by contacting the rahaph Data Protection Officer.

12.1 The rahaph platform does not contain links to external third-party websites as part of its standard navigation. However, certain game providers whose content is embedded within the rahaph platform may operate under their own independent privacy policies.

12.2 rahaph is not responsible for the privacy practices of third-party game providers or any external websites. We encourage you to review the privacy policies of any third-party service with which you interact in connection with your use of the rahaph platform.

13.1 rahaph reviews and updates this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or the services we offer. The "Effective" and "Last Reviewed" dates at the top of this Policy indicate when the most recent version was published.

13.2 Where material changes are made to this Policy, rahaph will notify registered players via their registered email address and/or by a prominent notice on the rahaph platform at least seven (7) days before the changes take effect.

13.3 Your continued use of the rahaph platform following notification of Policy changes constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you may close your rahaph account in accordance with the Terms & Conditions.

14.1 rahaph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. The DPO is your primary point of contact for all privacy-related enquiries, data subject rights requests, and concerns.

14.2 You may contact the rahaph Data Protection Officer as follows:

14.3 If you are not satisfied with rahaph's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at [email protected] or by visiting the NPC's official website.

14.4 For general account support, including non-privacy-related enquiries, please contact rahaph customer support at [email protected], available 24 hours a day, 7 days a week.