rh365 Privacy Policy

1 Introduction

rh365 is an online gaming platform operating at rh365.vip, offering live casino games, slot games, bingo, sports betting, golf wagering, and related services to eligible players in the Philippines. As a platform that handles real-money transactions and is subject to PAGCOR regulatory oversight, rh365 is required to collect and process certain categories of personal data to operate lawfully and responsibly.

rh365 takes its obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations ("IRR") seriously. We are committed to processing your personal data fairly, transparently, and only for legitimate purposes. This Policy applies to all personal data collected through the rh365 website, mobile platform, customer support channels, and any other touchpoints through which you interact with rh365.

2 Personal Data We Collect

rh365 collects the following categories of personal data, depending on the nature of your interaction with the platform:

2.1 Registration and Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — 21+ requirement)
• Gender
• Residential address (including barangay, city/municipality, province)
• Email address
• Mobile number (Philippine mobile number, e.g., Globe, Smart, DITO)
• Username and encrypted password

2.2 KYC and Verification Data

• Government-issued photo ID (e.g., Philippine passport, driver's license, SSS ID, UMID, PhilSys National ID)
• Proof of address documents (e.g., utility bill, barangay certificate, bank statement)
• Selfie or live photo for identity verification purposes
• Source of funds documentation where required by AMLC regulations

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash account name, PayMaya registered number, bank account name — note: full card or account numbers are never stored by rh365)
• Transaction amounts, dates, and reference numbers
• Wagering history and game activity records

2.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, login timestamps, and activity logs
• Pages visited, features used, and navigation patterns within the platform
• Cookies and similar tracking technologies (see Section 7)

2.5 Communications Data

• Records of live chat conversations with rh365 support
• Email correspondence with rh365
• Feedback, complaints, and dispute records
• Responses to surveys or promotional communications (where you have opted in)

3 How We Collect Your Data

rh365 collects personal data through the following channels and methods:

3.1 Directly From You

The majority of personal data rh365 holds is provided directly by you during the following interactions:

• Account Registration: When you create your rh365 account, you provide your name, date of birth, address, email, and mobile number.
• KYC Verification: When you submit identity documents and proof of address to complete the verification process required before withdrawals.
• Deposits and Withdrawals: When you initiate financial transactions through the rh365 Cashier, payment method details are collected.
• Customer Support: When you contact rh365 via live chat or email, the content of those communications is recorded.
• Responsible Gaming Tools: When you set deposit limits, cooling-off periods, or self-exclusion preferences, these settings are recorded against your account.

3.2 Automatically

Certain technical data is collected automatically when you access the rh365 platform, including your IP address, device information, browser type, and session activity. This data is collected through server logs, cookies, and similar technologies as described in Section 7.

3.3 From Third Parties

In limited circumstances, rh365 may receive personal data about you from third parties, including:

• Payment processors (e.g., GCash, PayMaya, BPI, BDO) confirming transaction status
• Identity verification service providers used to assist with KYC processing
• Fraud prevention and anti-money laundering screening services
• PAGCOR or other regulatory authorities, where required by law

4 How We Use Your Personal Data

rh365 uses your personal data for the following purposes:

5 Legal Basis for Processing

Under the Philippine Data Privacy Act, rh365 processes your personal data on the following legal bases:

5.1 Contract Performance

Processing is necessary to perform the contract between rh365 and you as a registered Player — including creating and managing your account, processing deposits and withdrawals, and delivering gaming services.

5.2 Legal Obligation

rh365 is subject to legal obligations under PAGCOR regulations, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and the Philippine Data Privacy Act itself. Processing for KYC verification, AML screening, and regulatory reporting is required by law and cannot be waived by the Player.

5.3 Legitimate Interest

rh365 processes certain data on the basis of legitimate interest, including fraud prevention, platform security, responsible gaming monitoring, and anonymized analytics to improve the platform. Where legitimate interest is relied upon, rh365 has assessed that its interests do not override your fundamental rights and freedoms.

5.4 Consent

Where rh365 relies on your consent as the legal basis for processing — such as for marketing communications or the use of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing and Disclosure

rh365 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

6.1 Service Providers

rh365 engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment partners — for transaction processing only
• KYC and identity verification providers: For automated document verification and age confirmation
• Fraud prevention and AML screening services: To detect and prevent financial crime
• Cloud hosting and infrastructure providers: For secure data storage and platform operation
• Customer support platform providers: For live chat and ticketing system operation

All service providers are contractually required to process your data only as instructed by rh365, to maintain appropriate security measures, and to comply with applicable Philippine data protection law.

6.2 Regulatory and Legal Authorities

rh365 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. rh365 will notify affected Players of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of rh365's assets, your personal data may be transferred to the acquiring entity as part of that transaction. rh365 will notify registered Players of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.

6.4 With Your Consent

rh365 may share your personal data with third parties in circumstances not described above where you have provided your explicit prior consent to such sharing.

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the rh365 platform. They allow the platform to recognize your device, remember your preferences, maintain your login session, and collect usage analytics. rh365 also uses similar technologies such as web beacons, pixel tags, and local storage objects.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymized data about how Players use the platform — which pages are visited most, where users drop off, and how features are used. This data helps rh365 improve the platform experience.
• Security and Fraud Prevention Cookies: Help rh365 detect and prevent fraudulent activity, unauthorized account access, and bot activity.

7.3 Managing Cookies

You can manage non-essential cookies through the cookie preference center accessible from the rh365 platform footer. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the rh365 platform. Note that rh365 does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

8 Data Retention

rh365 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and Philippine AML law.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in compliance with AMLC record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer where a dispute or regulatory matter is ongoing.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.
• Technical and Usage Logs: Retained for up to twelve (12) months in identifiable form, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with rh365's data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing until deletion is possible.

9 Data Security

rh365 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and rh365 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized rh365 personnel on a strict need-to-know basis. All internal access is logged and audited.
• Multi-Factor Authentication: rh365 systems require multi-factor authentication for all staff accessing production data environments.
• Penetration Testing: rh365 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: rh365 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, rh365 will notify the National Privacy Commission within 72 hours and will notify affected Players without undue delay, as required by the Philippine DPA.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by rh365:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data rh365 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by rh365. You may update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rh365's legal retention obligations under PAGCOR and AMLC regulations.
• Right to Object: You have the right to object to the processing of your personal data where rh365 relies on legitimate interest as the legal basis, and where your individual circumstances justify such objection.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe rh365 has processed your personal data in violation of the Philippine DPA.

To exercise any of the above rights, please contact the rh365 Data Protection Officer via live chat or by email at privacy@rh365.vip. rh365 will respond to all data rights requests within thirty (30) days of receipt, as required by the DPA IRR.

11 Children's Privacy and Age Restriction

The rh365 platform is strictly restricted to individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. rh365 does not knowingly collect personal data from individuals under the age of 21.

If rh365 discovers or has reason to believe that a registered Player is under the age of 21, the account will be immediately suspended, all personal data associated with the account will be deleted (subject to any mandatory legal retention obligations), and any funds deposited will be returned to the original payment source. Any winnings generated by an underage Player will be forfeited.

If you are a parent or guardian and believe that a minor under your care has registered on the rh365 platform, please contact our support team immediately via live chat so that we can take prompt action.

12 Third-Party Links

The rh365 platform may contain links to third-party websites or services, such as payment provider portals (e.g., GCash, PayMaya) or regulatory body websites (e.g., PAGCOR). These third-party sites operate under their own privacy policies, which rh365 does not control and is not responsible for.

rh365 recommends that you review the privacy policy of any third-party site you visit before providing personal information. The inclusion of a link to a third-party site on the rh365 platform does not constitute an endorsement of that site's privacy practices.

13 Updates to This Privacy Policy

rh365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, rh365 will notify registered Players by email and/or by displaying a prominent notice on the platform prior to the changes taking effect.

The effective date of the current version of this Policy is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how rh365 protects your personal data. Your continued use of the rh365 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

14 Contact Us & Data Protection Officer

rh365 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing rh365's compliance with the DPA and this Privacy Policy, and serves as the primary point of contact for data privacy matters.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat widget on the rh365 platform — the fastest way to reach us
• Data Privacy Email: privacy@rh365.vip (plain text — not a clickable link)
• General Support Email: support@rh365.vip (plain text — not a clickable link)
• Response Time: Data rights requests are acknowledged within 3 business days and resolved within 30 days