RPJL Privacy Policy

1 Introduction

RPJL ("RPJL," "we," "us," or "our") operates the online gaming platform accessible at rpjl.app. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, visitors, and prospective users.

This Privacy Policy describes how RPJL collects, uses, stores, shares, and protects personal data in connection with the operation of the RPJL platform. It also sets out the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

This Privacy Policy should be read together with RPJL's Terms & Conditions, which govern your use of the platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

If you have any questions about this Privacy Policy or how RPJL handles your personal data, please contact our Data Protection Officer using the details provided in Section 14 of this Policy.

2 Personal Data We Collect

RPJL collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

RPJL collects only the minimum personal data necessary for the purposes described in this Policy. We do not collect sensitive personal information such as racial or ethnic origin, political opinions, or health data, except where required by law or expressly provided by you in connection with a responsible gaming request.

3 How We Collect Your Data

RPJL collects personal data through the following means:

• Direct interactions: Data you provide when registering for an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the RPJL platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and browsing behavior on the platform.
• Third-party sources: Data received from payment processors (such as GCash and PayMaya), identity verification providers, fraud prevention services, and regulatory bodies, where necessary to verify your identity, process transactions, or comply with legal obligations.
• Publicly available sources: In limited circumstances, RPJL may supplement your data with information from publicly available sources for the purpose of verifying your identity or detecting fraudulent activity.

4 How We Use Your Personal Data

RPJL uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your RPJL player account, including verifying your identity and eligibility to use the platform.
• Service delivery: To process your deposits and withdrawals, provide access to games, and deliver the features and functionality of the RPJL platform.
• Legal and regulatory compliance: To comply with PAGCOR's licensing requirements, the Philippine Data Privacy Act, anti-money laundering (AML) regulations, and other applicable laws. This includes conducting Know Your Customer (KYC) checks and reporting obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the platform and its users.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and apply deposit or session limits set by you or required by regulation.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the RPJL platform.
• Marketing communications: To send you promotional offers, bonuses, and updates about RPJL, where you have consented to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

RPJL processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing conditions, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing necessary for RPJL's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

RPJL does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements.
• Technology service providers: Cloud hosting, data analytics, customer support software, and cybersecurity providers who process data on RPJL's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other government bodies, where disclosure is required by law or regulatory obligation.
• Professional advisers: Legal counsel, auditors, and compliance consultants, where necessary for the conduct of RPJL's business.

7 Cookies & Tracking Technologies

RPJL uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and analyze platform performance. The types of cookies we use include:

• Strictly necessary cookies: Essential for the operation of the RPJL platform, including maintaining your login session and enabling secure transactions. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect anonymized data about how players use the platform, such as pages visited and features used, to help RPJL improve its services.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the RPJL platform. RPJL does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

8 Data Security

RPJL implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the RPJL platform.
• Secure password hashing — RPJL does not store your password in plain text and cannot retrieve it.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the RPJL platform.
• Incident response procedures to detect, contain, and report data breaches in accordance with the requirements of the National Privacy Commission.

While RPJL takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. RPJL cannot guarantee the absolute security of data transmitted over the internet. You are responsible for maintaining the confidentiality of your RPJL account credentials and for notifying us immediately if you suspect unauthorized access to your account.

9 Data Retention

RPJL retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a period of at least five (5) years following account closure, in compliance with PAGCOR's record-keeping requirements and AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer where required for dispute resolution or legal proceedings.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted or anonymized within a reasonable period.
• Technical and usage data: Retained in anonymized or aggregated form for platform analytics purposes, with no fixed retention limit.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with RPJL's data disposal procedures.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by RPJL:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed — which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data RPJL holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by RPJL.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to RPJL's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe RPJL has not handled your personal data in accordance with applicable law.

11 Minors & Age Restriction

The RPJL platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR's online gaming regulations. RPJL does not knowingly collect personal data from persons under the age of 21.

If RPJL becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be handled in accordance with RPJL's Terms & Conditions and applicable regulatory requirements.

If you are a parent or guardian and believe that your child has registered on RPJL or provided personal data to us, please contact our support team immediately so that we can take appropriate action.

12 Third-Party Links

The RPJL platform may contain links to third-party websites or services, including payment provider portals and regulatory body websites. This Privacy Policy applies solely to the RPJL platform and does not extend to any third-party websites or services.

RPJL is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit through links on the RPJL platform before providing any personal data to those sites.

13 Changes to This Privacy Policy

RPJL reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, RPJL will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the platform.

The date of the most recent revision is displayed at the top of this page. Your continued use of the RPJL platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree to the amended Policy, you must cease using the platform and may request account closure by contacting RPJL support.

RPJL recommends that you review this Privacy Policy periodically to stay informed of any changes that may affect how your personal data is handled.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or RPJL's handling of your personal data, please contact our Data Protection Officer. Our team is available 24 hours a day, 7 days a week.

You may reach us through the live chat feature available on the RPJL platform, or by writing to us at the following email address (plain text — not a clickable link):

For general support inquiries, you may also contact our customer support team at support@rpjl.app.

If you are not satisfied with RPJL's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC's complaint process is available through official Philippine government channels.

RPJL's gaming operations are subject to the oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). Players who wish to raise a gaming-related regulatory concern may do so through PAGCOR's established complaint channels.