This Privacy Policy explains how rm88 collects, uses, stores, shares, and protects your personal information. It applies to all individuals who register an account or use the rm88 online gaming platform in any capacity.
A plain-language summary of our key privacy practices. The full policy below governs in all cases.
rm88 collects personal data that is strictly necessary to operate your account, comply with Philippine gaming regulations, and prevent fraud. We do not collect data beyond what is required for these purposes.
Your personal information is never sold, rented, or transferred to third parties for commercial marketing purposes. Data is shared only where required by law, regulation, or for the direct operation of your rm88 account.
All personal data transmitted to and stored by rm88 is protected using industry-standard 256-bit SSL encryption. Sensitive data including payment credentials and identity documents is subject to additional security controls.
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, delete, and object to the processing of your personal data. Requests can be submitted to rm88 at any time through our support channels.
rm88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory obligations. Data is securely deleted upon expiry of the applicable retention period.
This Privacy Policy is governed by the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.
rm88 ("we," "us," or "the Company") is the operator of the online gaming platform accessible at rm88.bet, providing online casino games, sports betting, bingo, and related services to players in the Republic of the Philippines. rm88 acts as the data controller in respect of personal data collected through the rm88 Platform, as that term is understood under Republic Act No. 10173, the Data Privacy Act of 2012 (hereinafter "the DPA").
As a data controller, rm88 determines the purposes and means of processing your personal data. We are responsible for ensuring that such processing is conducted in accordance with the DPA and its Implementing Rules and Regulations, and in compliance with the requirements of PAGCOR as the relevant gaming regulatory authority.
This Privacy Policy applies to all personal data collected, processed, stored, or transferred by rm88 in connection with:
This Policy should be read in conjunction with the rm88 Terms & Conditions. By registering an rm88 account or using the Platform in any capacity, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.
rm88 collects the following categories of personal data, as necessary for the purposes set out in this Policy:
rm88 collects personal data through the following means:
rm88 processes your personal data on the following lawful bases under the Data Privacy Act of 2012:
| Lawful Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account registration and management; processing deposits and withdrawals; maintaining transaction records; providing customer support; game settlement and payment of winnings. |
| Legal Obligation | KYC identity verification; age verification (21+ requirement); anti-money laundering (AML) compliance; reporting obligations to PAGCOR; fraud investigation and reporting to relevant authorities. |
| Legitimate Interests | Platform security and fraud prevention; responsible gaming monitoring; improvement of Platform features and user experience; analysis of aggregate gaming behavior to detect problem gambling indicators. |
| Consent | Marketing communications via email or SMS (where you have opted in); optional cookies beyond strictly necessary categories; participation in voluntary surveys or feedback programs. |
rm88 uses the personal data collected for the following purposes:
rm88 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:
rm88 engages third-party service providers who process personal data on rm88's behalf under data processing agreements that require them to maintain appropriate security and confidentiality standards. These include:
rm88 may disclose your personal data to competent authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies in the Philippines, where required to do so by applicable law, court order, or regulatory directive. Such disclosures are made strictly to the extent required by the applicable legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of rm88's business operations, personal data held by rm88 may be transferred to the acquiring or successor entity, subject to that entity assuming equivalent data protection obligations. You will be notified of any such transfer where required by the DPA.
The rm88 Platform uses cookies and similar tracking technologies to operate the Platform, ensure security, and improve user experience. The following categories of cookies are used:
| Category | Consent Required | Purpose |
|---|---|---|
| Strictly Necessary | No | Session authentication, security tokens, account login state, load balancing. Required for the Platform to function — cannot be disabled. |
| Functional | No | Remembering account preferences, language settings, and responsible gaming tool configurations. Necessary for a coherent user experience. |
| Analytics | Yes | Aggregate, anonymized data on Platform usage patterns, page navigation, and feature engagement. Used to improve the Platform. No personal identification. |
| Marketing | Yes | Tracking engagement with rm88 promotional content. Only deployed where you have provided explicit consent to marketing communications. |
You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the rm88 Platform, including the ability to log in to your account.
rm88 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years following account closure, as required by PAGCOR regulations and AML obligations. |
| KYC verification documents | Duration of account plus 5 years following account closure, or longer if required by a specific regulatory directive. |
| Financial transaction records | 10 years from the date of transaction, in compliance with Philippine AML record-keeping requirements. |
| Gaming activity logs | 5 years from the date of activity, or as required by PAGCOR regulatory requirements. |
| Customer support communications | 3 years from the date of the communication, or until resolution of any associated dispute or regulatory inquiry. |
| Marketing consent records | Until consent is withdrawn, plus 3 years to evidence compliance. |
| Technical and device logs | 12 months from collection, unless retained longer for active fraud or security investigations. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with rm88's data retention and destruction procedures.
rm88 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in harm to affected individuals, rm88 will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the notification requirements of the DPA and its Implementing Rules.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by rm88. You may exercise these rights at any time by contacting rm88 support through the channels listed in Section 16.
Request a copy of the personal data rm88 holds about you, along with information on how it is being processed.
Request correction of any inaccurate, incomplete, or outdated personal data held in your rm88 account.
Request deletion of your personal data where it is no longer necessary for the purposes collected, subject to rm88's legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Request the suspension of processing of your personal data pending resolution of a dispute about the accuracy or lawfulness of the processing.
Request a structured, commonly used, machine-readable copy of your personal data to transfer to another service provider where technically feasible.
The rm88 Platform is strictly intended for individuals who are 21 years of age or older, in compliance with Philippine law governing online gambling. rm88 does not knowingly collect personal data from any individual under the age of 21. If rm88 becomes aware that an account has been registered by or on behalf of a person under 21, that account will be immediately closed and any personal data associated with it will be deleted, subject to any mandatory retention obligations under applicable law.
Parents and legal guardians are encouraged to use appropriate parental controls and monitoring tools to prevent underage access to online gambling platforms. If you believe a minor has registered an rm88 account, please contact rm88 support immediately.
rm88 may send you promotional communications about bonuses, new games, special events, and other rm88 Platform features by email or SMS, but only where you have explicitly opted in to receive such communications during account registration or subsequently through your account preferences settings.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal. Removal from marketing lists takes effect within a reasonable processing period, typically no longer than 7 business days. Please note that even after opting out of marketing communications, rm88 will continue to send you non-marketing transactional messages related to your account, including deposit confirmations, withdrawal notifications, security alerts, and mandatory policy updates.
rm88's primary operations are based in the Philippines and personal data is primarily processed and stored within the Philippines. Where rm88 engages third-party service providers whose data processing infrastructure is located outside the Philippines — for example, cloud hosting providers with data centers in other jurisdictions — rm88 ensures that appropriate safeguards are in place to protect your personal data in accordance with the standards required by the DPA.
Such safeguards include contractual clauses requiring the third-party processor to maintain data protection standards equivalent to those required under Philippine law, and, where applicable, reliance on the recipient country's recognition of adequate data protection standards as determined by the National Privacy Commission.
rm88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, rm88's data processing practices, or the scope of services offered on the Platform. Where amendments are material, rm88 will notify account holders through a prominent notice on the Platform or via email to the address registered on your account.
The effective date of the current version of this Privacy Policy is displayed at the top of this page. Continued use of the rm88 Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the amended terms, you should cease using the Platform and may request closure of your account.
rm88 recommends reviewing this Privacy Policy periodically to stay informed about how your personal data is being processed.
If you wish to exercise any of your data subject rights, have a question about this Privacy Policy, or wish to raise a concern about how rm88 has handled your personal data, please contact us through the following channels:
rm88 will acknowledge all privacy-related requests within 5 business days and aims to resolve requests within 30 calendar days. Complex requests, including those requiring regulatory consultation, may take longer to resolve. You will be kept informed of progress where a request cannot be completed within the initial 30-day window.
If you are not satisfied with rm88's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcement of the Data Privacy Act of 2012. Information on how to contact the NPC and file a complaint is available through official Philippine government channels.
This Privacy Policy was last reviewed and updated on 1 January 2026.
Create your rm88 account and play with confidence. Your personal data is encrypted, protected, and never sold. GCash deposits in seconds. 21+ only. Play responsibly.
Create Your rm88 Account