Privacy Policy

This Privacy Policy ("Policy") is issued by rh356 Casino ("rh356," "we," "us," "our"), the operator of the online gaming platform accessible at rh356.cam ("Platform"). rh356 Casino is licensed and regulated by the Philippine Amusement and Gaming Corporation ("PAGCOR").

This Policy describes how rh356 collects, uses, stores, shares, and protects the personal information of individuals ("Data Subjects," "you," "Players") who access or use the Platform, including visitors who browse without creating an account. It also sets out the rights you hold under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC").

By accessing the Platform, creating an account, or providing any personal information to rh356, you acknowledge that you have read and understood this Policy. This Policy is incorporated by reference into rh356's Terms and Conditions and should be read together with that document.

For the purposes of this Policy, the following definitions apply as defined under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

rh356 collects personal data that is adequate, relevant, and limited to what is necessary in relation to the specific purposes for which it is processed. The categories of personal data we collect include:

3.1 Identity and Contact Information:

• Full legal name as it appears on your government-issued Philippine identification document;
• Date of birth (for age verification in compliance with PAGCOR's 21+ requirement);
• Registered email address;
• Philippine mobile number (used for account verification, 2FA, and support communications);
• Residential address within the Philippines.

3.2 Identity Verification (KYC) Documents:

• Copy of a valid government-issued Philippine identification document (e.g., PhilSys National ID, Passport, Driver's License, UMID, Voter's ID, PRC ID);
• Selfie or liveness verification image for biometric matching where required;
• Proof of address documentation where required for enhanced due diligence.

3.3 Financial Information:

• GCash number or PayMaya account registered in your name;
• Philippine bank account details (BPI, BDO, Metrobank, or other InstaPay-connected accounts) used for withdrawal processing;
• Transaction history including deposit amounts, withdrawal requests, wagering history, and bonus redemptions — all denominated in PHP.

3.4 Technical and Usage Data:

• IP address and approximate geographic location at time of login;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features accessed on the Platform;
• Game play logs including game titles accessed, bet amounts, and session timestamps.

3.5 Communications Data:

• Records of customer support interactions including live chat transcripts and support ticket content;
• Feedback, survey responses, and promotional opt-in preferences.

rh356 collects personal data through the following channels:

• Direct submission during registration — Information you provide when creating your rh356 account, including name, date of birth, contact details, and chosen credentials;
• KYC verification submission — Identity documents and supporting materials you submit to complete account verification as required by PAGCOR;
• Payment processing — Financial account details submitted when conducting deposits or withdrawal requests via GCash, PayMaya, or Philippine bank transfer;
• Platform usage — Technical data automatically generated as you browse and interact with the Platform, collected through cookies, server logs, and analytics tools (see Section 10);
• Customer support interactions — Information you provide when contacting rh356 support via live chat or email;
• Third-party verification services — Identity and age verification data returned by KYC service providers contracted by rh356 to assist with document authentication.

rh356 processes personal data for the following specific, legitimate purposes:

• Account registration and management — Creating, maintaining, and administering your rh356 account, including processing login authentication and account security;
• Identity and age verification (KYC) — Confirming that account holders meet the minimum age requirement of 21 years and verifying identity as required by PAGCOR regulations and the Anti-Money Laundering Act (AMLA);
• Transaction processing — Processing deposits, withdrawal requests, bonus credits, and all financial activity within your rh356 wallet in PHP;
• Regulatory compliance — Meeting obligations under PAGCOR licensing conditions, the AMLA (RA 9160 as amended), the DPA, and any directives issued by applicable Philippine government authorities;
• Fraud prevention and security — Detecting and preventing fraudulent transactions, unauthorized account access, bonus abuse, money laundering, and other prohibited activities;
• Customer support — Responding to account queries, resolving disputes, processing complaints, and providing assistance in English and Tagalog;
• Responsible gaming compliance — Monitoring gaming behaviour to identify indicators of problem gambling and enforcing self-exclusion or limit settings configured by the player;
• Platform improvement — Analyzing aggregated, anonymized usage data to improve the performance, stability, and user experience of the Platform;
• Marketing communications — Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications, with a clear opt-out mechanism provided in every communication.

rh356 does not use personal data for purposes beyond those listed above without obtaining renewed consent or establishing a fresh lawful basis for the new processing activity.

rh356 processes personal data under the following legal bases as recognized by the Data Privacy Act of 2012:

• Consent — For marketing communications, optional data sharing, and processing activities not strictly necessary for account operation. You may withdraw consent at any time without affecting the lawfulness of prior processing;
• Contractual necessity — For processing required to fulfill the agreement between rh356 and the Player, including account management, transaction processing, and game access;
• Legal obligation — For processing necessary to comply with PAGCOR licensing conditions, AMLA requirements, NPC regulations, and other applicable Philippine legal obligations;
• Legitimate interests — For fraud prevention, platform security monitoring, and analytics activities that are necessary for the safe operation of the Platform and do not override the fundamental rights and freedoms of Data Subjects.

7.1 Categories of Recipients. rh356 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• PAGCOR — As required by rh356's gaming license conditions, PAGCOR may receive player account data, transaction reports, and compliance documentation upon lawful request;
• Anti-Money Laundering Council (AMLC) — Transaction data and suspicious activity reports as mandated by the AMLA and its implementing regulations;
• National Privacy Commission (NPC) — In the event of a data breach requiring mandatory notification, or in response to lawful NPC inquiries and investigations;
• KYC and identity verification providers — Third-party services contracted to assist with document authentication and biometric identity verification, operating under data processing agreements with rh356;
• Payment processing partners — GCash, PayMaya, and Philippine banking partners receive financial data necessary to execute deposit and withdrawal transactions;
• Game content providers — Licensed game providers (Pragmatic Play, PG Soft, JILI, Evolution Gaming, and others) may receive anonymized or session-level data necessary to render game content and maintain audit trails;
• IT and platform service providers — Cloud hosting, security monitoring, and analytics service providers operating under data processing agreements that impose DPA-equivalent protections.

7.2 Legal Disclosures. rh356 may disclose personal data to law enforcement agencies, courts, or other Philippine government bodies where required to do so by applicable law, court order, or to protect the rights, property, or safety of rh356, its players, or the public.

rh356 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to overriding legal and regulatory retention requirements. The following general retention schedules apply:

• Account and identity data — Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations;
• Financial transaction records — Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and relevant PAGCOR circulars;
• KYC documentation — Retained for five (5) years following Account closure or the completion of the business relationship, in accordance with AMLA implementing rules;
• Customer support records — Retained for three (3) years from the date of the support interaction or final resolution of the relevant matter;
• Technical and usage logs — Retained for a maximum of twelve (12) months for operational and security monitoring purposes, after which they are deleted or anonymized;
• Marketing preference data — Retained until you withdraw your consent to receive marketing communications, at which point your preferences are updated within 72 hours.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

Under the Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by rh356. These rights may be exercised by contacting rh356 customer support or the Data Protection Officer (see Section 15):

rh356 will respond to all data subject rights requests within fifteen (15) business days of receipt, or within such extended period as may be required for complex requests, in which case you will be notified of the expected timeframe. Identity verification will be required before any request is processed to protect against unauthorized disclosure.

rh356 uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The following categories of cookies are used:

• Strictly necessary cookies — Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without affecting core Platform functionality;
• Functional cookies — Remember your preferences such as language settings, responsible gaming limits display, and game category selections to provide a consistent experience across sessions;
• Analytics cookies — Collect anonymized data about how players use the Platform, including which game categories are most visited and how navigation paths flow, to assist rh356 in improving the Platform. No personally identifiable data is included in analytics reports;
• Security cookies — Support fraud detection and login security mechanisms, including detection of unusual access patterns or session anomalies.

rh356 does not use advertising or third-party profiling cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to access the Platform. A cookie consent notice is displayed on your first visit to rh356.cam.

rh356 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and rh356 servers;
• AES-256 encryption for personal and financial data stored at rest;
• Multi-factor authentication requirements for all rh356 system administrator access;
• Role-based access controls limiting staff access to personal data to the minimum required for their specific function;
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified information security professionals;
• Intrusion detection and 24/7 security monitoring of Platform infrastructure;
• Formal data breach response procedures including NPC notification protocols and player notification procedures.

The rh356 Platform is strictly intended for individuals aged twenty-one (21) years and older, in compliance with PAGCOR regulations governing online gaming in the Philippines. rh356 does not knowingly collect, process, or store personal information from individuals under 21 years of age.

Age verification is conducted as a mandatory step during account registration through the submission of a valid government-issued Philippine identification document. Where rh356 becomes aware, following account activation, that a registered account holder is under the age of 21, the Account will be immediately closed and any associated Balance will be retained pending regulatory review in accordance with PAGCOR requirements.

If you believe that rh356 may have inadvertently collected personal data from an individual who does not meet the age requirement, please contact rh356's Data Protection Officer immediately using the contact details in Section 15.

rh356 operates primarily within the Philippines. Certain service providers and game content partners may be located outside the Philippines, which may necessitate the transfer of personal data to servers or facilities in other jurisdictions.

Where cross-border transfers of personal data occur, rh356 ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act and the NPC's implementing rules on cross-border data transfers. This includes ensuring that the receiving entity provides a comparable level of data protection to that required under Philippine law, through contractual arrangements, approved transfer mechanisms, or adequacy determinations applicable to the receiving jurisdiction.

rh356 will not transfer your personal data to jurisdictions that do not offer an adequate level of data protection without your explicit informed consent, or without an appropriate legal mechanism as recognized under the DPA.

rh356 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR requirements. When material changes are made, rh356 will provide notice to registered Players via the email address on record, or through a prominent notice displayed on the Platform, no less than fourteen (14) days prior to the changes taking effect — unless a shorter period is required to comply with a regulatory obligation.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue your use of the Platform and may request Account closure pursuant to the Terms and Conditions.

rh356 Casino has designated a Data Protection Officer ("DPO") in compliance with Section 21(a) of the Data Privacy Act of 2012 and the NPC's Circular on Data Protection Officers. The DPO is responsible for overseeing rh356's compliance with the DPA, its IRR, and NPC issuances, and for serving as the primary point of contact for data subjects exercising their rights under this Policy.

To exercise your data subject rights, submit a data privacy query, raise a concern, or report a suspected data breach, please contact rh356 using the following details:

If you are not satisfied with rh356's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through their official channels.