Privacy Policy — r85aa Casino

r85aa Casino operates the online gaming platform accessible at r85aa.vip (the "Platform"). As a PAGCOR-regulated gaming operator serving Filipino players across the Philippines — from Metro Manila to Cebu, Davao, Quezon City, and every province in between — r85aa collects and processes certain personal information in the course of providing its services.

This Privacy Policy describes: the categories of personal data r85aa collects; the purposes for which that data is processed; the legal bases on which processing is carried out; the third parties with whom data may be shared; the measures taken to protect your data; and the rights you hold as a data subject under Philippine law.

This Privacy Policy should be read together with r85aa's Terms and Conditions and Responsible Gaming Policy, all of which are accessible on the r85aa Platform and form part of the complete agreement between you and r85aa.

For the purposes of the Philippine Data Privacy Act of 2012, r85aa Casino is the personal information controller responsible for the personal data collected through the r85aa Platform. r85aa has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and responding to data subject requests.

Contact details for the r85aa Data Protection Officer are provided in Section 14 of this Privacy Policy. All data subject requests, privacy complaints, and data-related inquiries should be directed to the DPO using the contact information provided.

r85aa collects personal data through several channels, including account registration, identity verification, platform use, payment processing, and customer support interactions. The categories of personal data r85aa may collect include:

• Identity Data: Full legal name, date of birth, nationality, gender, and government-issued identification document details (e.g., passport number, driver's license number, SSS/PhilHealth/UMID card details).
• Contact Data: Philippine mobile number, email address, and residential address.
• Financial Data: Payment method details including GCash mobile wallet numbers, bank account numbers (BPI, BDO, UnionBank, Metrobank), cryptocurrency wallet addresses, deposit and withdrawal transaction records.
• Account Data: r85aa username, account creation date, login history, session durations, game history, wagering records, bonus participation, and responsible gaming tool settings.
• Technical Data: IP address, device identifiers, browser type and version, operating system, referring URLs, and approximate geolocation data derived from IP address.
• Communications Data: Records of your interactions with r85aa customer support, including live chat transcripts, email correspondence, and any information you voluntarily provide in those communications.
• KYC Verification Data: Photographs, selfies, and scanned copies of identity documents submitted during the Know Your Customer verification process.

r85aa collects only the minimum personal data necessary for the purposes described in this Privacy Policy. r85aa does not collect special categories of personal data (such as health, religious, or political information) except where strictly required by regulation and with your explicit consent.

r85aa processes your personal data for the following specific, legitimate purposes:

• Account Registration and Management: To create, verify, and maintain your r85aa player account and to authenticate your identity on each login.
• KYC and Regulatory Compliance: To verify your identity and eligibility to use the r85aa Platform, including confirming that you meet the minimum age requirement of 21 years, in compliance with PAGCOR regulations and Philippine anti-money-laundering laws.
• Payment Processing: To process deposits, withdrawals, and refunds through your nominated Philippine payment methods, and to maintain accurate transaction records.
• Service Delivery: To provide you with access to r85aa's games, promotions, loyalty programs, and all other features of the Platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, bonus fraud, and other prohibited conduct on the r85aa Platform.
• Responsible Gaming: To administer and monitor the responsible gaming tools in your r85aa account, including deposit limits, self-exclusion requests, and session time alerts.
• Customer Support: To respond to your inquiries, resolve disputes, and improve the quality of r85aa's customer service.
• Legal and Regulatory Obligations: To comply with applicable Philippine laws, PAGCOR regulatory requirements, court orders, and lawful requests from government authorities.
• Platform Improvement: To analyse usage patterns and technical data for the purpose of improving the r85aa Platform's performance, features, and user experience.
• Marketing Communications: To send you relevant promotional communications about r85aa bonuses and offers, subject to your marketing preferences and applicable law. You may opt out at any time.

r85aa processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing your identity, contact, financial, and account data is necessary for r85aa to perform its obligations under the Terms and Conditions you accepted upon registration.
• Legal Obligation: Processing for KYC verification, AML compliance, tax reporting, and responding to regulatory requests is required by Philippine law and PAGCOR regulations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement is carried out on the basis of r85aa's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications is based on your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

r85aa does not sell, rent, or trade your personal data to third parties for commercial purposes. r85aa may share your personal data with the following categories of recipients where necessary and lawful:

• KYC and Identity Verification Providers: Third-party identity verification services engaged to assist with document authentication and identity screening.
• Payment Processors: Philippine payment gateways and financial institutions (including GCash, Maya, BPI, BDO, and others) required to process your deposits and withdrawals.
• Game Software Suppliers: Licensed game providers whose software powers games on the r85aa Platform may receive pseudonymised game participation data for technical and audit purposes.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies as required by law or regulation.
• Professional Advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations, where engagement is necessary for r85aa's legal or regulatory obligations.
• Law Enforcement: Competent Philippine law enforcement agencies, where r85aa is required to disclose information by court order or applicable law.

All third-party service providers with whom r85aa shares personal data are contractually required to process that data only on r85aa's instructions, to maintain appropriate technical and organisational security measures, and to comply with applicable Philippine data privacy laws.

r85aa retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and Transaction Records: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later, as required by Philippine AML regulations.
• KYC Documents: Retained for a minimum of five (5) years from the date of account closure.
• Customer Support Records: Retained for two (2) years from the date of the interaction.
• Marketing Preferences: Retained until you withdraw your marketing consent or close your r85aa account.

Upon expiry of the applicable retention period, r85aa will securely delete or anonymise your personal data in a manner that renders it irrecoverable.

r85aa implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the r85aa Platform.
• Encryption of sensitive personal data at rest using industry-standard encryption protocols.
• Two-factor authentication (2FA) available on all r85aa player accounts.
• Role-based access controls limiting r85aa staff access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of r85aa's infrastructure.
• Secure, access-controlled data centres with physical security measures.
• Mandatory data privacy and security training for all r85aa personnel who handle personal data.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by r85aa:

• Right to Be Informed: The right to be informed about how your personal data is being collected and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data r85aa holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your r85aa account.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to r85aa's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, without providing any justification.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe r85aa has processed your personal data unlawfully.

To exercise any of these rights, please contact r85aa's Data Protection Officer using the contact details provided in Section 14. r85aa will respond to verified data subject requests within the timeframes prescribed by the Data Privacy Act of 2012. r85aa may require proof of identity before processing your request.

The r85aa Platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, analyse Platform usage, and detect fraudulent activity. The categories of cookies r85aa uses are:

• Strictly Necessary Cookies: Essential for the r85aa Platform to function. These include session cookies required for secure login, transaction processing, and platform navigation. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and saved login details (if you elect the "Remember me" option).
• Analytics Cookies: Collect pseudonymised data about how players interact with the r85aa Platform, enabling r85aa to identify and fix technical issues and improve usability.

r85aa does not use third-party advertising or behavioural targeting cookies on the Platform. You can control cookie settings through your browser's privacy settings; however, disabling strictly necessary cookies will impair the functionality of the r85aa Platform.

The r85aa Platform is strictly intended for adults aged 21 years and above, as required by PAGCOR regulations. r85aa does not knowingly collect personal data from any person under the age of 21. r85aa's KYC process is specifically designed to verify that all registered players meet the minimum age requirement before they can access real-money gaming.

If r85aa becomes aware that it has collected personal data from a person under the age of 21, it will immediately terminate the associated account, return any deposited funds where lawfully required, and securely delete all personal data associated with that account without undue delay.

Some of r85aa's third-party service providers — including certain game software suppliers and technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred to a recipient in a country that does not provide an equivalent level of data protection to the Philippine Data Privacy Act, r85aa will ensure that appropriate safeguards are in place, such as contractual data processing agreements incorporating the standard clauses approved by the National Privacy Commission.

r85aa will not transfer your personal data to any jurisdiction where such a transfer is prohibited under Philippine law or where adequate safeguards cannot be put in place.

r85aa reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, r85aa's data processing practices, or the structure of the r85aa Platform. The date of the most recent revision is always displayed at the top of this page.

Material changes to this Privacy Policy will be communicated to registered r85aa players via email notification to their registered address, or via a prominent notice on the r85aa Platform, at least fourteen (14) days before the changes take effect. Your continued use of the r85aa Platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or r85aa's processing of your personal data, please contact r85aa's Data Protection Officer through the following channels:

• Email: [email protected] (Subject line: "Privacy / DPO Request" — plain text, not a clickable link)
• Live Chat: Available 24/7 within your logged-in r85aa account dashboard
• Languages: English and Tagalog

r85aa aims to acknowledge all data subject requests within five (5) business days and to resolve them within thirty (30) calendar days, or within the extended timeframe permitted under the Data Privacy Act of 2012 for complex requests, in which case r85aa will notify you of the extension and the reasons for it.

If you are not satisfied with r85aa's response to your privacy request or complaint, you have the right to file a complaint with the National Privacy Commission of the Philippines.