Privacy Policy

1. About This Policy and the Data Controller

rpjl Casino ("rpjl," "we," "us," "our") operates the online gaming platform accessible at rpjl.club. For the purposes of the Data Privacy Act of 2012 (DPA) and its IRR, rpjl Casino acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform.

This Privacy Policy describes how rpjl collects, uses, discloses, stores, and protects the personal data of Players ("you," "your") and visitors to the rpjl website. By creating an rpjl account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you have questions about this Policy or wish to exercise any of your data rights, please contact our Data Protection Officer (DPO) at the address provided in Section 12.

2. Personal Data We Collect

rpjl collects personal data from you directly (when you register, deposit, withdraw, or contact support) and automatically (through your use of the Platform). The categories of personal data we collect include:

rpjl does not collect sensitive personal data (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance. rpjl does not knowingly collect data from persons under 21 years of age.

3. Legal Bases for Processing

rpjl processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the rpjl Terms & Conditions — including account management, game provision, payment processing, and withdrawal handling;
• Legal Obligation: Processing required to comply with applicable Philippine laws, including the AMLA, PAGCOR regulations, tax obligations, and data retention requirements mandated by law;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and service improvement — where such interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing, profiling for personalised offers, and non-essential cookies — where you have provided explicit, informed, and freely given consent that can be withdrawn at any time.

4. How We Use Your Personal Data

rpjl uses your personal data for the following purposes:

• To create, manage, and maintain your rpjl account and verify your identity through KYC procedures;
• To process deposits and withdrawals via GCash, Maya, and other supported Philippine payment methods;
• To provide access to games, bonuses, and all other Platform features;
• To enforce the 21+ age restriction and responsible gaming obligations, including operating self-exclusion and deposit limit tools;
• To comply with Anti-Money Laundering Act (AMLA) obligations, including transaction monitoring and reporting to the Anti-Money Laundering Council (AMLC) where required;
• To detect and prevent fraud, cheating, collusion, and other prohibited conduct;
• To provide customer support through live chat, email, and other channels;
• To send transactional communications including deposit confirmations, withdrawal notifications, and security alerts;
• To send marketing communications (promotions, bonuses, new game announcements) where you have opted in — you may withdraw this consent at any time from your account settings;
• To analyse Platform usage patterns, improve game selection, and personalise the lobby experience;
• To comply with any court order, regulatory demand, or law enforcement request issued under Philippine law.

rpjl does not use your personal data for automated decision-making that produces significant legal effects without human review. Responsible gaming tool activations (such as self-exclusion) are subject to manual review before taking effect.

5. Sharing and Disclosure of Personal Data

rpjl does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

• Payment Processors: GCash (GXI), Maya (PayMaya Philippines, Inc.), BPI, BDO, UnionBank, and other payment service providers receive the minimum data necessary to process your transactions. Each processor operates under its own privacy policy and is bound by data processing agreements with rpjl;
• Game Providers and Software Licensors: Certified RNG game providers may receive anonymised or pseudonymised session data necessary for game delivery and audit compliance. Identity data is not shared with game providers;
• KYC and Identity Verification Providers: Third-party verification services may process your submitted identity documents to confirm authenticity. These providers are contractually prohibited from using your data for any purpose other than KYC verification for rpjl;
• Regulatory and Law Enforcement Authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government authorities may receive data as required by law, court order, or regulatory mandate;
• Group Entities: rpjl may share data with affiliated entities within its corporate group for internal administrative purposes, subject to the same data protection standards applied by rpjl;
• Professional Advisers: Legal counsel, auditors, and compliance advisers operating under strict confidentiality obligations.

All third-party data processors engaged by rpjl are required to implement appropriate technical and organisational security measures consistent with the DPA and are prohibited from processing your data for purposes other than those specified by rpjl.

6. Cookies and Tracking Technologies

rpjl uses cookies and similar tracking technologies on the rpjl.club website for the following purposes:

• Strictly Necessary Cookies: Required for core Platform functionality — login session management, security tokens, and fraud prevention. These cannot be disabled;
• Performance Cookies: Collect anonymised data on page load times, error rates, and game performance to help rpjl identify and resolve technical issues;
• Analytical Cookies: Track aggregated, anonymised usage patterns to inform Platform improvements and content decisions;
• Preference Cookies: Remember your language selection, responsible gaming settings, and lobby layout preferences.

rpjl does not use third-party advertising cookies or tracking pixels that transmit your data to advertising networks. You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

7. Data Retention

rpjl retains your personal data for the following periods:

• Account data and KYC documents: For the duration of your active account plus five (5) years after account closure, as required by AMLA and PAGCOR regulations;
• Transaction and financial records: Ten (10) years from the date of transaction, in accordance with AMLA retention requirements;
• Gaming activity logs: Five (5) years from the date of the relevant session or wager;
• Support communications: Three (3) years from the date of the most recent communication;
• Marketing preference data: Until you withdraw consent or close your account, whichever occurs first;
• Server and access logs (technical data): Ninety (90) days, unless retained longer for active fraud investigation purposes.

Where retention beyond these periods is required by applicable law, rpjl will retain data for the minimum additional period legally required and will notify you where practicable.

8. Security of Your Personal Data

rpjl implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your device and rpjl's servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Access controls ensuring that personal data is accessible only to rpjl staff and systems with a legitimate, documented business need;
• Regular independent security audits and penetration testing of the Platform infrastructure;
• Incident response procedures ensuring that in the event of a personal data breach, affected players and the National Privacy Commission (NPC) are notified within seventy-two (72) hours of discovery, as required by the DPA;
• Two-factor authentication available to all Players for account login security;
• Automatic session timeout after a defined period of inactivity.

While rpjl takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying rpjl promptly of any suspected unauthorised access to your account.

9. Your Rights Under Philippine Privacy Law

Under the Data Privacy Act of 2012 and its IRR, you have the following rights in relation to your personal data held by rpjl:

• Right to be Informed: The right to be told what personal data rpjl collects and how it is used — this Policy fulfils that obligation;
• Right of Access: The right to request a copy of the personal data rpjl holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure or Blocking: The right to request deletion of your personal data where retention is no longer legally required or justified;
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format and to transmit it to another controller where technically feasible;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe rpjl has processed your data unlawfully.

To exercise any of these rights, submit a written request to the rpjl Data Protection Officer using the contact details in Section 12. rpjl will respond within fifteen (15) business days of receiving a valid request. We may ask you to verify your identity before processing your request.

10. Children and Minors

The rpjl Platform is strictly restricted to individuals who are 21 years of age or older. rpjl does not knowingly collect, use, or disclose personal data from persons under the age of 21. Any account found to have been created by or on behalf of a person under 21 will be immediately and permanently closed, all data will be deleted or anonymised to the extent permitted by applicable retention obligations, and the matter may be reported to relevant authorities.

If you believe that a minor under 21 has created an rpjl account or that rpjl has inadvertently collected personal data from such a person, please contact us immediately at the address in Section 12 so that appropriate action can be taken without delay.

11. Changes to This Privacy Policy

rpjl reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Material changes will be communicated to registered Players by email at least seven (7) days before the effective date of the change. Non-material updates (such as typographical corrections or clarifications that do not affect your rights) may be posted without prior notice.

The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the rpjl Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Platform and may close your account in accordance with the rpjl Terms & Conditions.

12. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact the rpjl Data Protection Officer through the following channels:

Data Protection Officer — rpjl Casino
Email: [email protected]
Live Chat: Available 24/7 via the rpjl Platform lobby (request to speak with the DPO team)
Response Time: Within 3 business days for general queries; within 15 business days for formal data rights requests

If you are not satisfied with rpjl's response to your complaint or data rights request, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.