rm88 Privacy Policy

1. Who We Are

rm88 ("rm88," "we," "us," or "our") operates the online gaming platform accessible at rm88.lat. rm88 is a PAGCOR-regulated entity providing online gaming services — including slots, live casino, sabong, bingo, and esports betting — to eligible Filipino players. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), rm88 is the personal information controller in respect of all player data processed through the rm88 platform.

2. Personal Data We Collect

rm88 collects only the personal data necessary to operate the platform lawfully and provide services to Filipino players. The categories of data we collect are:

rm88 does not collect sensitive personal information such as biometrics, health data, or political affiliations unless specifically required by PAGCOR regulatory directive for anti-money laundering (AML) purposes.

3. How We Collect Your Data

rm88 collects personal data through the following channels:

• Direct registration: When you create your rm88 account, you provide identity, contact, and initial account data directly.
• Identity verification (KYC): When you submit government-issued ID documents to verify your age and identity as required under PAGCOR regulations and Philippine AML laws.
• Payment transactions: When you deposit or request a withdrawal, rm88 processes the financial data necessary to execute the transaction through GCash, Maya, or other payment channels.
• Platform usage: rm88's systems automatically log technical data and gaming activity whenever you access and use the platform.
• Customer support interactions: When you contact rm88 support via live chat or email, the content of those interactions is recorded for quality assurance and dispute resolution purposes.
• Cookies and tracking technologies: As described in Section 7 of this Policy.

4. Purposes of Processing

rm88 processes your personal data for the following purposes:

• Account creation and management: To create, maintain, and secure your rm88 player account.
• Identity verification and age compliance: To verify that you are at least 21 years of age in compliance with PAGCOR requirements, and to fulfil Know Your Customer (KYC) obligations under Philippine AML regulations.
• Payment processing: To process deposits and withdrawals through your designated Philippine payment method (GCash, Maya, InstaPay, etc.).
• Gaming operations: To record and settle bets, calculate winnings, and maintain accurate game and transaction histories for each rm88 account.
• Regulatory compliance: To comply with PAGCOR licensing conditions, Philippine AML laws (RA 9160 as amended), National Privacy Commission requirements, and other applicable regulations.
• Customer support: To respond to inquiries, resolve disputes, and process responsible gaming requests (deposit limits, self-exclusion, etc.).
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling and to facilitate intervention where appropriate under rm88's duty of care.
• Platform security: To detect, prevent, and investigate fraud, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Communications: To send you account-related notifications, promotional offers (where you have consented), and regulatory updates.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the rm88 platform's performance, design, and game selection for Filipino players.

rm88 does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on players, except where required for fraud prevention or PAGCOR compliance.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act (RA 10173), rm88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the gaming services you have contracted for by registering an rm88 account and accepting our Terms and Conditions.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Philippine AML laws, NPC regulations, and other mandatory legal requirements applicable to rm88.
• Consent: For processing that is not strictly necessary for contract performance or legal compliance — such as sending you promotional communications or using non-essential cookies — rm88 relies on your freely given, specific, and informed consent, which you may withdraw at any time.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and the protection of rm88's legal rights, provided that such interests do not override your fundamental privacy rights.

6. Data Sharing & Third Parties

rm88 does not sell your personal data to any third party. rm88 shares personal data only in the following limited circumstances:

• Payment processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), and other licensed Philippine payment service providers receive the minimum financial data necessary to process your transactions.
• Game providers: Licensed game studios (such as JILI Games, PG Soft, and Pragmatic Play) receive session data necessary to run the games you play. These providers operate under data processing agreements with rm88.
• PAGCOR and Philippine authorities: rm88 is legally required to provide player and transaction data to PAGCOR upon request, and to the AMLC (Anti-Money Laundering Council) and other Philippine law enforcement bodies when required by law.
• Service providers: rm88 engages third-party technology and support service providers (cloud hosting, customer support platforms, KYC verification services) who process data on rm88's behalf under contractual data processing agreements that prohibit them from using your data for their own purposes.
• Legal proceedings: rm88 may disclose personal data where required by Philippine court order, regulatory direction, or to enforce rm88's legal rights.

7. Cookies & Tracking Technologies

rm88 uses cookies and similar tracking technologies on rm88.lat to operate the platform and improve the experience for Filipino players. The types of cookies rm88 uses are:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your rm88 account. These cannot be disabled.
• Functional cookies: Store your preferences such as language, game lobby filters, and display settings to personalise your rm88 experience across sessions.
• Analytics cookies: Collect anonymised data about how players navigate and use rm88.lat — which games are most popular, which pages have the highest exit rate, and similar aggregated metrics. This data is used to improve the platform. rm88 uses privacy-compliant analytics tools that do not identify individual players.
• Security cookies: Help rm88 detect fraudulent login attempts, multi-accounting, and other security threats.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the rm88 platform.

8. Data Retention

rm88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required under Philippine AML regulations (RA 9160) and PAGCOR licensing conditions.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming history: Retained for the duration of your active rm88 account plus five (5) years following closure.
• Support communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Marketing data: Retained until you withdraw consent or unsubscribe, whichever is earlier.

Following the applicable retention period, rm88 will securely delete or anonymise your personal data so that it can no longer be associated with you.

9. Data Security

rm88 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and rm88.lat.
• AES-256 encryption for sensitive data stored in rm88's databases, including financial account details.
• Hashing of player passwords — rm88 never stores passwords in plain text.
• Role-based access controls ensuring that only rm88 staff with a legitimate operational need can access player personal data.
• Regular security audits and penetration testing of the rm88 platform by qualified information security professionals.
• Multi-factor authentication options for player accounts, including mobile OTP.

In the event of a personal data breach that is likely to result in harm to affected players, rm88 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay via their registered mobile number or email address.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by rm88:

• Right to be informed: The right to know what personal data rm88 holds about you and how it is processed — which this Privacy Policy addresses.
• Right of access: The right to request a copy of the personal data rm88 holds about you, including your account data, gaming history, and KYC records.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your rm88 account.
• Right to erasure: The right to request deletion of your personal data, subject to rm88's legal retention obligations (see Section 8). Note that data required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to data portability: The right to receive your personal data in a structured, commonly used format, where technically feasible.
• Right to object: The right to object to processing based on legitimate interests, and to opt out of direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time — this does not affect the lawfulness of processing prior to withdrawal.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe rm88 has violated your data privacy rights.

To exercise any of these rights, contact rm88's Data Protection Officer at [email protected]. rm88 will respond to all data rights requests within thirty (30) calendar days of receipt.

11. Minors & Age Restriction

The rm88 platform is strictly for persons who are 21 years of age or older in accordance with PAGCOR's licensing requirements. rm88 does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted at the point of registration and during the KYC process.

If rm88 discovers that an account was registered by a person under the age of 21, that account will be immediately suspended, all funds returned to the payment source where feasible, and the personal data of the minor deleted or anonymised as soon as PAGCOR reporting obligations permit.

If you believe a minor has registered on rm88, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

rm88 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in Philippine law, or changes in PAGCOR licensing requirements. When material changes are made, rm88 will update the "Last Updated" date at the top of this Policy and notify registered players via their registered mobile number or email address at least fourteen (14) days before the changes take effect.

Your continued use of the rm88 platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised Policy. If you do not agree with the changes, you may close your rm88 account by contacting our support team.

13. Contact & Data Protection Officer

rm88 has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. For all privacy-related inquiries, data rights requests, or complaints, please contact:

• Data Protection Officer, rm88
• Email: [email protected] (plain text — not a clickable link)
• Platform: rm88.lat
• Response time: Within 30 calendar days for data rights requests; within 72 hours for security breach notifications to regulators.

If you are not satisfied with rm88's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). rm88 will cooperate fully with any NPC investigation.