rubyph Privacy Policy

1. Introduction and Consent

By registering an account with rubyph, accessing our website, or using any of our services, you acknowledge that you have read, understood, and consent to the collection, use, processing, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any provision of this Privacy Policy, you must immediately discontinue use of the rubyph platform.

rubyph Gaming Corporation is registered with the National Privacy Commission (NPC) of the Philippines as a Personal Information Controller (PIC) and adheres to the principles of transparency, legitimate purpose, and proportionality in all data processing activities. We implement reasonable and appropriate organizational, physical, and technical security measures to protect personal information against unauthorized access, destruction, alteration, disclosure, or loss.

2. Information We Collect

2.1 Personal Identification Information

When you register an account with rubyph, we collect personal identification information necessary to verify your identity, comply with regulatory requirements, and prevent fraud. This information includes:

• Full legal name as it appears on your government-issued identification document;
• Date of birth and age verification data;
• Gender and nationality;
• Residential address, including barangay, city or municipality, province, and postal code;
• Valid email address;
• Mobile phone number with country code;
• Government-issued identification documents, including Philippine Passport, Driver's License, UMID (Unified Multi-Purpose ID), SSS ID, Postal ID, or voter's ID;
• Selfie photographs holding your identification document (for enhanced verification);
• Proof of address documents, such as utility bills, bank statements, or government correspondence.

2.2 Financial and Transaction Information

To process deposits and withdrawals, we collect financial information including:

• Payment method details (GCash account number, PayMaya account number, bank account numbers, cryptocurrency wallet addresses);
• Transaction history, including deposit amounts, withdrawal amounts, dates, times, and payment methods used;
• Payment processor transaction IDs and confirmation receipts;
• Source of funds documentation for transactions exceeding regulatory thresholds, as required under anti-money laundering (AML) regulations.

rubyph does not store complete credit card numbers or CVV codes. All payment card information is tokenized and processed through PCI DSS Level 1 compliant payment gateways operated by our licensed payment service providers.

2.3 Gameplay and Betting Information

We collect and store information related to your gaming activity on the rubyph platform, including:

• Game titles played, bet amounts, win and loss records, and gameplay timestamps;
• Sports betting wagers, selections, odds, stake amounts, and settlement results;
• Bonus claims, wagering progress, and promotional participation;
• Account balance history and internal wallet transactions;
• Responsible gaming settings, including deposit limits, loss limits, session time limits, and self-exclusion periods.

2.4 Technical and Device Information

When you access rubyph, our systems automatically collect technical information about your device and internet connection, including:

• IP address, geolocation data (country, region, city), and timezone;
• Device type (desktop, mobile, tablet), operating system (Windows, macOS, iOS, Android), and browser type and version;
• Screen resolution, language settings, and device identifiers;
• Cookies, session tokens, and local storage data;
• Website navigation patterns, pages visited, links clicked, time spent on pages, and referral sources;
• Error logs, crash reports, and performance metrics.

2.5 Communications and Customer Support

When you contact rubyph customer support via live chat, email, or phone, we collect and retain:

• The content of your messages, inquiries, complaints, and feedback;
• Customer support ticket numbers, timestamps, and resolution status;
• Call recordings (with your consent) for quality assurance and training purposes;
• Attachments, screenshots, or documents you provide to support your inquiry.

3. How We Use Your Information

3.1 Account Management and Service Delivery

We use your personal information to create and maintain your rubyph account, process your bets and transactions, manage your account balance, deliver customer support, and provide you with access to our casino games, live dealer tables, sports betting markets, and other gaming services.

3.2 Identity Verification and Regulatory Compliance

rubyph is required by law to verify the identity of all players and comply with PAGCOR regulations, anti-money laundering (AML) laws (Republic Act No. 9160, as amended by Republic Act No. 10365), and counter-terrorism financing (CTF) regulations. We use your identification documents, address verification, and source of funds documentation to fulfill these legal obligations and prevent underage gambling, fraud, identity theft, and financial crimes.

3.3 Payment Processing

We use your financial information to process deposits, withdrawals, refunds, and other payment transactions through our licensed payment service providers, including GCash, PayMaya, banks, and cryptocurrency payment processors. Transaction data is used to reconcile accounts, investigate disputes, and generate financial reports required by regulatory authorities.

3.4 Fraud Prevention and Security

rubyph employs advanced fraud detection systems, artificial intelligence algorithms, and manual review processes to detect and prevent fraudulent activity, including multi-accounting, bonus abuse, collusion, match-fixing, use of stolen payment instruments, and money laundering. We analyze gameplay patterns, betting behavior, IP addresses, device fingerprints, and transaction anomalies to identify suspicious activity.

3.5 Personalization and Marketing

With your consent, we use your gameplay history, preferences, and demographic information to personalize your experience on rubyph, including customized game recommendations, targeted promotional offers, bonus notifications, and email marketing communications. You may opt out of marketing communications at any time by adjusting your account settings or clicking the unsubscribe link in our emails.

3.6 Responsible Gaming and Player Protection

We use your gameplay data, deposit patterns, and betting behavior to monitor for signs of problem gambling and implement responsible gaming interventions. This includes enforcing deposit limits, sending reality check notifications, identifying players who may benefit from self-exclusion, and providing access to professional gambling support services.

3.7 Legal Compliance and Dispute Resolution

We may use and disclose your personal information to comply with legal obligations, respond to lawful requests from government authorities, enforce our Terms and Conditions, resolve disputes, investigate complaints, cooperate with regulatory audits, and protect the rights, property, and safety of rubyph, our employees, and other players.

4. How We Share Your Information

4.1 Third-Party Service Providers

rubyph shares your personal information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: GCash, PayMaya (Maya), BPI, BDO, UnionBank, Metrobank, Landbank, and cryptocurrency payment gateways;
• Game Providers: Pragmatic Play, JILI Gaming, PG Soft, Evolution Gaming, Asia Gaming, and other licensed software suppliers;
• Identity Verification Services: Third-party KYC and AML screening providers that verify identity documents and conduct background checks;
• Cloud Hosting and Data Storage: Secure data centers and cloud infrastructure providers that host our servers and databases;
• Customer Support Software: Live chat platforms, help desk ticketing systems, and communication tools;
• Marketing and Analytics: Email service providers, analytics platforms, and advertising networks (with your consent).

All third-party service providers are contractually obligated to protect your personal information, use it only for the specific purposes for which it was disclosed, and comply with applicable data protection laws.

4.2 Regulatory Authorities and Law Enforcement

We may disclose your personal information to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), the Philippine National Police (PNP), the National Bureau of Investigation (NBI), courts, and other government agencies when required by law, court order, subpoena, or regulatory request.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of rubyph's assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.

4.4 No Sale of Personal Data

rubyph does not sell, rent, or trade your personal information to third parties for their marketing purposes. We will never share your data with unrelated third parties without your explicit consent, except as required by law or as described in this Privacy Policy.

5. Data Security and Protection

5.1 Technical Security Measures

rubyph implements industry-standard technical security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, or loss. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and our servers;
• Secure HTTPS protocol for all website pages and API endpoints;
• Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to monitor and block malicious traffic;
• Data encryption at rest using AES-256 encryption for databases and file storage;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent cybersecurity firms;
• Multi-factor authentication (MFA) for employee access to sensitive systems and administrative controls.

5.2 Organizational Security Measures

In addition to technical safeguards, rubyph maintains organizational security policies and procedures, including:

• Access controls limiting employee access to personal information on a need-to-know basis;
• Confidentiality agreements and privacy training for all employees with access to player data;
• Incident response plans and data breach notification procedures;
• Regular backups and disaster recovery protocols to ensure business continuity;
• Secure disposal of personal information when no longer required for legal or business purposes.

5.3 Player Responsibilities

While rubyph takes extensive measures to protect your personal information, you are responsible for maintaining the confidentiality of your account credentials (username and password). Do not share your login details with anyone, and always log out after using shared or public computers. If you suspect unauthorized access to your account, contact our customer support team immediately.

6. Data Retention

rubyph retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, enforce our agreements, and maintain accurate financial and business records.

Specifically, we retain:

• Account Information: Retained for the duration of your account and for six (6) years after account closure, as required by PAGCOR regulations and tax laws;
• Transaction Records: Retained for ten (10) years after the transaction date, as required by anti-money laundering laws (Republic Act No. 9160, as amended);
• Identification Documents: Retained for six (6) years after the last transaction or account closure;
• Gameplay and Betting Records: Retained for a minimum of six (6) months for dispute resolution, and up to six (6) years for regulatory compliance;
• Customer Support Communications: Retained for three (3) years after the last interaction;
• Marketing Consent Records: Retained until you withdraw your consent, plus three (3) years for legal compliance.

After the applicable retention period, personal information is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

7. Your Rights Under Philippine Law

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal information:

7.1 Right to Access

You have the right to request access to your personal information held by rubyph, including the categories of data collected, the purposes for which it is processed, and the third parties with whom it has been shared. You may request a copy of your personal data by contacting our Data Protection Officer.

7.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You may update most of your account information directly through your account settings. For changes requiring verification (such as name or date of birth corrections), please contact customer support with supporting documentation.

7.3 Right to Erasure or Blocking

You have the right to request deletion or blocking of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when the processing is unlawful. However, this right is subject to limitations where retention is required by law or necessary for legal claims, regulatory compliance, or legitimate business purposes.

7.4 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes at any time. You may opt out of marketing communications by adjusting your account settings or clicking the unsubscribe link in our emails.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another data controller, where technically feasible.

7.6 Right to Lodge a Complaint

If you believe rubyph has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact details for the NPC are available at privacy.gov.ph.

7.7 Exercising Your Rights

To exe rcise your data privacy rights, please contact our Data Protection Officer (DPO) using the contact information provided in Section 11 of this Privacy Policy. We will respond to all requests within fifteen (15) days, as required by law.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the rubyph website. Cookies allow us to recognize your device, remember your preferences, analyze website traffic, and improve your user experience.

8.2 Types of Cookies We Use

rubyph uses the following types of cookies:

• Essential Cookies: Required for the website to function properly, including session management, security features, and payment processing. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use our website, such as which pages are visited most often and whether error messages are displayed. This data helps us improve website performance.
• Functionality Cookies: Remember your preferences (such as language settings, screen size, and favorite games) to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity across websites to deliver targeted advertisements and promotional offers. These cookies require your consent and may be disabled through your account settings or browser controls.

8.3 Managing Cookies

You may control or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the rubyph platform and prevent you from accessing certain features. Most browsers allow you to block third-party cookies while still accepting first-party cookies from the websites you visit directly.

9. International Data Transfers

While rubyph primarily operates within the Philippines and stores data on servers located in Philippine data centers, some of our third-party service providers may process your personal information outside the Philippines. In such cases, we ensure that adequate safeguards are in place through contractual agreements requiring the service provider to comply with Philippine data protection standards or through certification under recognized international frameworks such as ISO 27001.

10. Children's Privacy

rubyph does not knowingly collect, use, or disclose personal information from individuals under the age of twenty-one (21). Our services are intended exclusively for adults who meet the legal gambling age requirement. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete such information and terminate the associated account. Parents or guardians who believe their child has provided personal information to rubyph should contact us immediately.

11. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise your data privacy rights, please contact our Data Protection Officer (DPO):

• Data Protection Officer: rubyph Gaming Corporation
• Email: [email protected]
• Customer Support Email: [email protected]
• Mailing Address: rubyph Gaming Corporation, Data Protection Office, Bonifacio Global City, Taguig, Metro Manila, Philippines

We will respond to all inquiries within fifteen (15) calendar days as required by Philippine law.

12. Changes to This Privacy Policy

rubyph reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Any material changes will be communicated to you via email or prominent notice on our website at least seven (7) days before the changes take effect. Your continued use of the rubyph platform after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.