rh777 Privacy Policy

rh777, operating at rh777.club, is the Data Controller responsible for the personal data of players who register and use the rh777 online gaming platform. rh777 operates as a PAGCOR-licensed online gaming operator under the regulatory authority of the Philippines Amusement and Gaming Corporation.

As Data Controller, rh777 determines the purposes and means of processing personal data collected through the Platform. This Privacy Policy governs all personal data processing activities carried out by rh777 in connection with the operation of the Platform, including registration, account management, payment processing, identity verification, customer support, responsible gaming functions, and marketing communications (where consent has been granted).

rh777 has designated a Data Protection Officer (DPO) in compliance with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Contact details for the DPO are provided in Section 14 of this Policy.

rh777 collects the following categories of personal data from players and prospective players:

rh777 collects personal data through the following channels and methods:

3.1 Direct Collection. Information you provide directly to rh777 when you register an account, complete KYC verification, submit a deposit or withdrawal request, contact customer support, or respond to a promotion or survey.

3.2 Automated Collection. Technical data collected automatically when you access and use the rh777 Platform, including through cookies, log files, and similar tracking technologies. This includes IP address, session duration, pages visited, games played, and device fingerprint data. See Section 7 for detailed cookie information.

3.3 Third-Party Sources. In limited circumstances, rh777 may receive personal data from third-party sources including: identity verification service providers engaged for KYC processing; payment processors for transaction confirmation; fraud prevention and anti-money laundering screening databases; and PAGCOR's player registry for self-exclusion list checks.

3.4 Publicly Available Sources. rh777 may supplement player data with information lawfully available from public sources for fraud detection, identity verification, and compliance purposes.

rh777 processes your personal data for the following specific, legitimate purposes:

1. Account Registration and Management: Creating and maintaining your rh777 account, authenticating your identity at login, and managing your account settings and preferences.
2. Payment Processing: Processing deposits and withdrawals to and from your rh777 wallet via GCash, PayMaya, BPI, BDO, Metrobank, and any other accepted Philippine payment channels.
3. Identity Verification (KYC): Verifying your identity, date of birth, and address to comply with PAGCOR licensing conditions, the Philippine Anti-Money Laundering Act (AMLA), and age verification requirements. rh777 is legally required to verify that all players are 21 years of age or older.
4. Platform Operation and Game Provision: Delivering the gaming services you access on rh777, including game history, balance management, and real-time wager processing.
5. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, bonus abuse, and other prohibited conduct.
6. Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators, operating self-exclusion and deposit limit tools, and fulfilling PAGCOR's responsible gaming obligations.
7. Customer Support: Responding to your inquiries, complaints, and support requests, and maintaining records of communications for quality assurance and dispute resolution purposes.
8. Legal and Regulatory Compliance: Meeting rh777's obligations under PAGCOR regulations, the Data Privacy Act of 2012, the Anti-Money Laundering Act, and other applicable Philippine laws.
9. Marketing Communications (with consent only): Sending promotional offers, bonus notifications, and platform updates to players who have expressly opted in to receive such communications. You may withdraw consent at any time.
10. Platform Improvement: Analyzing aggregated, anonymized usage data to understand how Filipino players use the Platform and to improve game selection, user experience, and platform performance.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), rh777 processes personal data on the following lawful bases:

5.1 Performance of Contract. Processing your Identity Data, Contact Data, Financial Data, and Account Activity Data is necessary for the performance of the contract between you and rh777 (i.e., your rh777 account agreement and these Terms). Without this processing, rh777 cannot provide you with a functioning account, accept deposits, settle wagers, or process withdrawals.

5.2 Legal Obligation. KYC identity verification, transaction monitoring, age verification (21+), and anti-money laundering screening are performed because rh777 is legally required to do so under PAGCOR licensing conditions, Republic Act No. 9160 (Anti-Money Laundering Act) as amended, and relevant PAGCOR issuances.

5.3 Legitimate Interest. Fraud prevention, security monitoring, responsible gaming pattern analysis, and platform analytics are conducted on the basis of rh777's legitimate interests as a licensed gaming operator — where those interests are not overridden by your data protection rights. rh777 conducts legitimate interests assessments before relying on this basis.

5.4 Consent. Marketing communications and optional data collection activities (such as preference surveys) are processed based on your freely given, specific, and informed consent. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the legality of processing prior to withdrawal.

rh777 does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent strictly necessary:

6.1 Service Providers (Data Processors). rh777 engages third-party service providers who process data strictly on rh777's instructions under formal data processing agreements. These include: cloud hosting providers; KYC and identity verification services; payment processing gateways (GCash, bank APIs); fraud detection and anti-money laundering screening services; customer support platform operators; and IT security and monitoring services. These providers are prohibited from using your data for any purpose other than the specific service they deliver to rh777.

6.2 Regulatory Authorities. rh777 is required to share certain player data with PAGCOR and, where applicable, the Anti-Money Laundering Council (AMLC) in connection with its licensing obligations, player protection functions, and anti-money laundering reporting obligations. rh777 cannot refuse these disclosures.

6.3 Law Enforcement. Where rh777 receives a lawful order, warrant, or compulsory legal process from Philippine law enforcement agencies or courts, we will disclose the requested data to the extent required. rh777 will, where legally permissible, notify affected players of such a request.

6.4 Business Transfers. In the event of a merger, acquisition, or transfer of all or substantially all of rh777's assets to a successor entity, player data may be transferred as part of that transaction. rh777 will notify players of any such material change and ensure the successor is bound by this Privacy Policy or one of equivalent standard.

rh777 uses cookies and similar browser-based tracking technologies to operate the Platform, maintain your session, and improve your experience. A cookie is a small data file stored by your browser that allows the Platform to recognize your session and preferences.

7.1 Essential Cookies. These cookies are strictly necessary for the rh777 Platform to function. They maintain your login session, store your wallet balance display preferences, and enable core security functions including CSRF protection. These cookies cannot be disabled without significantly impairing Platform functionality.

7.2 Functional Cookies. These cookies remember your preferences — such as language settings and responsible gaming reminder frequency — to personalize your experience without requiring you to re-enter settings at each session.

7.3 Analytics Cookies. rh777 uses first-party analytics tools to understand aggregate usage patterns on the Platform. Analytics data is anonymized before analysis. rh777 does not use Google Analytics or similar third-party analytics tools that send data to external servers by default.

7.4 Security Cookies. Fraud prevention and bot detection systems may set cookies that analyze behavioral patterns to distinguish legitimate players from automated or malicious access attempts. These cookies are essential to Platform security.

7.5 Managing Cookies. You may configure your browser to refuse or delete cookies. Note that disabling essential cookies will prevent you from logging in and using the rh777 Platform. Disabling functional cookies will not prevent Platform access but may reduce personalization features.

rh777 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, and no longer than required under applicable law. The following retention periods apply:

When the applicable retention period expires, rh777 securely deletes or anonymizes the relevant data using industry-standard data destruction methods. Anonymized data may be retained indefinitely for aggregate statistical and analytical purposes.

rh777 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or disclosure. Key measures include:

9.1 Encryption. All data transmitted between your device and rh777's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive data stored on rh777's servers — including identity documents and financial records — is encrypted at rest using AES-256.

9.2 Access Controls. Access to personal data is restricted to rh777 personnel and authorized contractors who have a legitimate need to process it for the purposes described in this Policy. Access rights are granted on a least-privilege basis and reviewed regularly. All access to personal data systems is logged and audited.

9.3 Two-Factor Authentication (2FA). All rh777 administrative systems that access personal data require multi-factor authentication. Players are strongly encouraged to enable 2FA on their rh777 accounts to protect their own access.

9.4 Penetration Testing and Vulnerability Management. rh777 conducts regular security assessments including penetration testing by independent security firms and ongoing vulnerability scanning of Platform infrastructure.

9.5 Data Breach Response. rh777 maintains a documented data breach response procedure. In the event of a personal data breach affecting your rights and freedoms, rh777 will notify affected players and the National Privacy Commission (NPC) within the timeframes required under RA 10173 and its implementing rules.

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules, you have the following rights with respect to your personal data held by rh777:

1. Right to Be Informed. You have the right to be informed that your personal data is being processed, the purposes for which it is processed, the data controller's identity, and your rights as a data subject. This Privacy Policy fulfills that obligation.
2. Right to Access. You have the right to request a copy of the personal data rh777 holds about you and information on how it is being processed. rh777 will respond to verified access requests within thirty (30) calendar days.
3. Right to Rectification. You have the right to request correction of any inaccurate, incomplete, or outdated personal data rh777 holds about you. You may update certain account details directly in your rh777 account settings; other corrections must be submitted via support.
4. Right to Erasure. Subject to rh777's legal and regulatory retention obligations, you may request deletion of your personal data. Requests are assessed against applicable retention requirements before execution.
5. Right to Object. You have the right to object to the processing of your personal data on grounds relating to your particular situation where processing is based on legitimate interests. You may also object to direct marketing processing at any time, and rh777 will cease such processing immediately.
6. Right to Data Portability. You have the right to receive the personal data you have provided to rh777 in a structured, commonly used, machine-readable format, and to request transmission of that data to another controller where technically feasible.
7. Right to Lodge a Complaint. If you believe rh777 has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact rh777's Data Protection Officer as described in Section 14. rh777 may require identity verification before processing data subject rights requests.

rh777 is strictly prohibited from allowing participation by persons under twenty-one (21) years of age under PAGCOR regulations. Accordingly, rh777 does not knowingly collect or process personal data from any person under the age of 21.

Registration on the rh777 Platform requires affirmative declaration of age eligibility and is subject to KYC age verification before withdrawal privileges are activated. Where rh777 discovers that personal data has been collected from a person under 21 — whether through erroneous self-declaration or any other means — the account will be immediately suspended, the data will be flagged, and the matter will be handled in accordance with PAGCOR's underage gambling protocols.

The rh777 Platform may contain references to third-party game providers, payment services, and other partners in the course of Platform operation. rh777 does not control the data practices of third-party game providers whose game engines operate within the rh777 lobby under a technical integration. While rh777 imposes contractual data protection obligations on all third-party processors, each provider's own privacy practices are beyond rh777's direct control.

rh777 is not responsible for the privacy practices of third-party companies, and this Privacy Policy does not apply to information collected by third parties independent of rh777. You are encouraged to review the privacy notices of any third-party services you interact with in connection with your use of the rh777 Platform.

rh777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or platform functionality.

When material changes are made to this Policy — particularly changes that affect your rights as a data subject or the categories of data we collect — rh777 will notify registered players by email to the address registered on your account, and by displaying a prominent notification on the Platform upon your next login. The updated Policy will be published on this page with a revised "Last Updated" date.

Your continued use of the rh777 Platform following the publication of an amended Privacy Policy constitutes acknowledgment of the updated terms. If you do not agree with the changes, you must cease using the Platform and request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by rh777, please contact us through the following channel:

Data Protection Officer — rh777

Email: [email protected] — Please mark your message with the subject line "Privacy / DPO Request" and include your registered account email, the nature of your request, and any relevant account reference numbers. rh777 aims to acknowledge all data protection requests within 48 hours and to provide a substantive response within thirty (30) calendar days as required under RA 10173.

National Privacy Commission (NPC). If you are unsatisfied with rh777's response to a privacy concern or data subject rights request, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for enforcing RA 10173 in the Philippines and operates published complaint channels for data subjects.