royalclub Privacy Policy

royalclub ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the royalclub platform at royalclub.live. This Privacy Policy has been prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and the implementing rules and regulations issued by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected, processed, stored, and used by royalclub in connection with your registration, use of our gaming services, financial transactions, customer support interactions, and any other activity conducted through the royalclub platform. It applies to all registered players and visitors to the royalclub website, regardless of the device or method used to access the platform.

By registering an account with royalclub or by continuing to use the royalclub platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the royalclub platform immediately.

For the purposes of the Data Privacy Act of 2012 and its implementing rules, royalclub acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and platform visitors. As the PIC, royalclub determines the purposes and means by which your personal data is processed.

royalclub has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data privacy regulations. The DPO can be contacted through the royalclub support team using the contact details provided in Section 15 of this Privacy Policy.

Where royalclub engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and customer support platforms — those providers act as Personal Information Processors (PIPs) and are contractually bound to process personal data only in accordance with royalclub's instructions and applicable law.

royalclub collects the following categories of personal data from players and platform visitors. We collect only what is necessary for the purposes described in this Privacy Policy.

royalclub collects personal data through the following channels and methods:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the royalclub platform, including through cookies, web beacons, and server logs. See Section 8 for more details on cookies.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification providers, payment processors, and fraud prevention services engaged by royalclub to fulfill its legal and regulatory obligations.
• Public Sources: In limited circumstances, royalclub may verify information against publicly available sources, such as government databases, for the purpose of AML compliance and fraud prevention.

royalclub does not collect personal data from social media platforms or third-party data brokers for marketing purposes without your explicit consent.

royalclub uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and manage your royalclub player account, including verifying your identity and eligibility to use the platform.
• Service Delivery: To provide access to royalclub's gaming services, process your deposits and withdrawals, and deliver the features and functionality of the platform.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with Know Your Customer obligations under Philippine gaming and financial regulations.
• Anti-Money Laundering (AML) Compliance: To monitor transactions, detect suspicious activity, and fulfill royalclub's reporting obligations under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance with account-related issues.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce responsible gaming limits and self-exclusion requests, and comply with PAGCOR responsible gaming requirements.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the platform and its players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may withdraw this consent at any time.
• Analytics and Improvement: To analyze platform usage patterns, improve the quality and performance of royalclub's services, and develop new features and game offerings.
• Legal Compliance: To comply with applicable Philippine laws, regulations, court orders, and regulatory directives, including those issued by PAGCOR and the NPC.

Under the Data Privacy Act of 2012, royalclub processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and royalclub — specifically, to provide you with access to the royalclub gaming platform and to process your financial transactions.
• Legal Obligation: Processing is required to comply with royalclub's legal and regulatory obligations under Philippine law, including KYC requirements, AML obligations, and PAGCOR licensing conditions.
• Legitimate Interests: Processing is necessary for royalclub's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, security monitoring, and platform analytics, provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities — particularly the sending of marketing communications and the use of non-essential cookies — royalclub relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

royalclub does not sell your personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the financial data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• KYC and Identity Verification Providers: Third-party identity verification services receive copies of your identification documents and personal details solely for the purpose of completing KYC verification on royalclub's behalf.
• Fraud Prevention and Security Services: royalclub may share technical and usage data with fraud detection and cybersecurity service providers to protect the platform and its players from fraudulent activity.
• Regulatory and Law Enforcement Authorities: royalclub will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or courts when required to do so by applicable Philippine law, regulation, or valid legal process.
• Professional Advisors: royalclub's legal counsel, auditors, and other professional advisors may access personal data on a need-to-know basis, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of royalclub's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected players will be notified in advance of any such transfer.

royalclub uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. A cookie is a small text file placed on your device when you visit the royalclub website.

royalclub uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the royalclub platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Performance and Analytics Cookies: These cookies collect anonymized information about how players use the royalclub platform — such as which pages are visited most frequently and how long sessions last — to help us improve platform performance and user experience.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language and display options, to provide a more personalized experience on the royalclub platform.
• Marketing Cookies: With your consent, royalclub may use cookies to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These cookies are only activated where you have provided explicit consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the royalclub platform. For strictly necessary cookies, no consent is required as they are essential to the operation of the service.

royalclub retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with royalclub, plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, for dispute resolution and service quality purposes.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and Usage Data: Retained for up to two (2) years from collection, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, royalclub will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is possible.

royalclub implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the royalclub platform is encrypted using SSL/TLS protocols. Sensitive data stored in royalclub's systems is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to royalclub personnel and authorized third-party processors who have a legitimate need to access such data in the performance of their duties. All access is logged and audited.
• Firewalls and Intrusion Detection: royalclub's infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for and respond to security threats in real time.
• Regular Security Audits: royalclub conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in its systems and processes.
• Staff Training: All royalclub personnel who handle personal data receive regular training on data privacy obligations and security best practices.
• Incident Response: royalclub maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, royalclub will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by royalclub. To exercise any of these rights, please contact the royalclub Data Protection Officer using the details in Section 15.

royalclub will respond to all data subject rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified of any such extension. royalclub will not charge a fee for processing rights requests unless they are manifestly unfounded or excessive.

The royalclub platform is strictly intended for adults aged 21 years and above, in accordance with Philippine regulations governing casino-style gambling. royalclub does not knowingly collect personal data from individuals under the age of 21.

If royalclub discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the following actions will be taken immediately:

• The associated account will be suspended pending investigation.
• All personal data collected from the underage individual will be securely deleted from royalclub's systems.
• Any deposits made will be returned to the originating payment method after verification.
• Any winnings accumulated will be forfeited in accordance with royalclub's Terms & Conditions.

royalclub primarily processes and stores personal data within the Republic of the Philippines. However, in certain circumstances — such as when using internationally based technology infrastructure, cloud services, or third-party service providers — your personal data may be transferred to and processed in countries outside the Philippines.

Where such international transfers occur, royalclub ensures that adequate safeguards are in place to protect your personal data, including:

• Transferring data only to countries that have been recognized as providing an adequate level of data protection under applicable Philippine law or international standards.
• Implementing contractual clauses with international service providers that require them to protect personal data to standards equivalent to those required under the Data Privacy Act of 2012.
• Conducting due diligence on international service providers to verify their data protection practices before engaging their services.

By using the royalclub platform, you acknowledge and consent to the transfer of your personal data to other countries where royalclub or its service providers operate, subject to the safeguards described above.

royalclub reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this document.

When material changes are made to this Privacy Policy, royalclub will notify registered players by sending a notification to the email address associated with their account at least fourteen (14) days before the changes take effect. For minor or non-material changes, royalclub may update the Privacy Policy without prior notice, and the revised version will be effective immediately upon publication on the royalclub platform.

Your continued use of the royalclub platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you must cease using the platform and may request account closure by contacting our support team.

royalclub encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected and used.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by royalclub, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 through the royalclub platform after login

royalclub will acknowledge all privacy-related inquiries within two (2) business days and will endeavor to provide a substantive response within thirty (30) days of receipt.

If you are not satisfied with royalclub's response to your privacy inquiry or complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 and can be reached through its official government channels.