royalclub Privacy Policy

This Privacy Policy applies to all personal information collected by royalclub through the royalclub Platform accessible at royalclub.bio, including its website, mobile browser interface, account management system, customer support channels, and any promotional communications issued by royalclub.

royalclub acts as the Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012. royalclub is responsible for determining the purposes for which, and the manner in which, your personal information is processed. All inquiries regarding this Privacy Policy or the exercise of your data subject rights should be directed to royalclub's Data Protection Officer via the contact details in Section 12.

This Policy does not apply to third-party websites or services that may be referenced on the royalclub Platform, such as payment processors or game providers. Those third parties operate under their own privacy policies, and royalclub is not responsible for their data practices.

royalclub collects the following categories of personal data, depending on how you interact with the Platform:

Registration and Identity Data:

• Full legal name as it appears on a valid government-issued identification document.
• Date of birth (for age verification — 21+ requirement under Philippine law).
• Registered email address and Philippine mobile number (+63).
• Residential address (province, city, barangay).
• Government-issued ID type and number (for KYC verification, collected at withdrawal stage).

Financial and Transaction Data:

• GCash account reference, Maya account reference, bank account details, or other payment method identifiers associated with deposits and withdrawals.
• Transaction history: deposits, withdrawals, game wagers, and bonus activity within your royalclub Account.
• Source-of-funds documentation where required by anti-money laundering regulations.

Technical and Usage Data:

• IP address and approximate geographic location (province/city level).
• Device type, operating system, and browser type.
• Session logs, login timestamps, and pages visited within the royalclub Platform.
• Game activity logs, including games played, wager amounts, and session durations.

Communications Data:

• Live chat transcripts and support ticket records.
• Email correspondence between you and royalclub.
• Responses to surveys or promotional communications where you have opted to participate.

royalclub processes your personal data for the following purposes:

• Account Creation and Management: To register your royalclub Account, verify your identity, and maintain your account profile and preferences.
• Age Verification: To confirm that you meet the 21+ age requirement mandated by Philippine law and PAGCOR regulations before permitting access to gambling services.
• Service Delivery: To provide access to casino games, sports betting markets, sabong, bingo, and all other royalclub Platform features; to process deposits and withdrawals; and to operate your royalclub Wallet.
• Regulatory Compliance: To fulfil obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including Know Your Customer (KYC) verification and suspicious transaction reporting.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account abuse, and other prohibited conduct as defined in royalclub's Terms and Conditions.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to enforce deposit limits, loss limits, and self-exclusion requests in accordance with Section 7 of royalclub's Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of royalclub's support services.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting royalclub's support team.
• Platform Improvement: To analyse aggregate usage patterns and improve the features, performance, and user experience of the royalclub Platform.

royalclub processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary for the performance of the royalclub Terms and Conditions to which you are a party, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required for compliance with applicable Philippine laws, including PAGCOR regulations, AMLA, and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for royalclub's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided such interests do not override your fundamental rights.
• Consent: Processing of your data for marketing communications and non-essential analytics, conducted only where you have given freely given, specific, informed, and unambiguous consent.

royalclub does not sell your personal data to third parties. royalclub may share your personal data with the following categories of recipients where necessary for the purposes described in this Policy:

• Payment Processors: GCash (GXI), Maya (PayMaya Philippines Inc.), BPI, BDO, and other payment service providers involved in processing your deposits and withdrawals. These processors are bound by their own privacy policies and applicable Philippine financial regulations.
• Game Providers: Licensed game software providers such as JILI, Pragmatic Play, PG Soft, and Ezugi, to the extent necessary to provide game services and resolve disputes. Game providers receive only the minimum data required for game delivery.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or court order.
• Identity Verification Services: Third-party KYC and identity verification service providers used to verify government-issued identification documents during account verification and withdrawal processing.
• IT Service Providers: Cloud hosting, cybersecurity, and technical support providers engaged by royalclub who process data on our behalf under data processing agreements consistent with the Data Privacy Act.

royalclub retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for no shorter a period than that required by applicable Philippine law:

• Account registration and identity verification records are retained for a minimum of five (5) years following account closure, in compliance with PAGCOR regulations and AMLA requirements.
• Transaction records (deposits, withdrawals, wager history) are retained for a minimum of five (5) years following the date of the transaction.
• Customer support communications are retained for a minimum of two (2) years following the resolution of the relevant matter.
• Marketing consent records are retained for as long as you remain an active royalclub subscriber, and for one (1) year following any withdrawal of consent.

Following the expiry of the applicable retention period, royalclub will securely delete or anonymise your personal data in accordance with its data disposal procedures.

royalclub implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the royalclub Platform.
• AES-256 encryption at rest for sensitive personal and financial data stored on royalclub servers.
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by qualified cybersecurity professionals.
• Multi-factor authentication requirements for royalclub administrative systems.
• Incident response procedures aligned with the data breach notification requirements of the Philippine National Privacy Commission.

In the event of a personal data breach that is reasonably likely to give rise to serious harm to affected data subjects, royalclub will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected users without undue delay.

royalclub uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit royalclub. royalclub uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function, including session management and login authentication. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings and responsible gaming limits.
• Analytics Cookies: Used to collect aggregate data about how users navigate the royalclub Platform, helping us improve site structure and performance. Analytics data is anonymised and does not identify individual users.
• Security Cookies: Used to detect fraudulent login attempts and protect the integrity of your royalclub Account.

You may adjust your browser settings to refuse or delete cookies. Please note that disabling certain cookies may impact the functionality of the royalclub Platform, particularly login and session management features.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by royalclub:

• Right to be Informed: The right to know whether royalclub holds personal data about you, the purposes for which it is processed, and how it is used.
• Right of Access: The right to obtain a copy of the personal data royalclub holds about you.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to royalclub's legal retention obligations under PAGCOR regulations and AMLA.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the Philippine National Privacy Commission if you believe royalclub has violated your data privacy rights.

To exercise any of the above rights, please contact royalclub's Data Protection Officer as specified in Section 12. royalclub will respond to all verified data subject requests within fifteen (15) business days of receipt.

If you believe that a person under 21 has registered for a royalclub Account or that their personal data is held by royalclub, please contact our Data Protection Officer immediately at [email protected] so that appropriate action can be taken without delay.

royalclub reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or royalclub's data processing practices. Material changes will be communicated to registered users via email notice or a prominent banner on the royalclub Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. Your continued use of the royalclub Platform following any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and may request Account closure by contacting royalclub's support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by royalclub, please contact our Data Protection Officer:

royalclub aims to resolve all data privacy enquiries and requests promptly. If you are not satisfied with royalclub's response, you have the right to escalate your complaint to the Philippine National Privacy Commission (NPC) at privacy.gov.ph.