Your privacy matters to us. This Privacy Policy explains how romaph collects, uses, stores, and protects your personal information in full compliance with the Philippine Data Privacy Act of 2012 and PAGCOR regulations.
1.1 romaph is committed to protecting the privacy and security of all personal information entrusted to us by our players and platform visitors. We recognize that privacy is a fundamental right under Philippine law, and we take our obligations as a personal information controller seriously.
1.2 This Policy applies to all personal data collected through the romaph website at romaph.net, the romaph mobile platform, customer support interactions, and any other channel through which you interact with romaph.
1.3 This Policy should be read together with romaph's Terms & Conditions, which govern your use of the platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.
1.4 romaph does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data is used solely for the purposes described in this Policy.
2.1 For the purposes of the Data Privacy Act of 2012, romaph acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and platform visitors.
2.2 romaph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the romaph DPO using the contact details provided in Section 15 of this Policy.
2.3 romaph operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with all applicable data privacy requirements imposed by PAGCOR and the National Privacy Commission.
3.1 romaph collects the following categories of personal data from players and platform users:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality | Yes |
| Contact Data | Email address, mobile number, home address | Yes |
| Verification Data | Government ID copies, selfie photos, proof of address | For KYC |
| Financial Data | GCash number, bank account details, transaction history | For payments |
| Account Data | Username, account preferences, login history | Yes |
| Gaming Data | Game history, bet amounts, win/loss records, session duration | Automatic |
| Technical Data | IP address, device type, browser, operating system | Automatic |
| Communications Data | Support chat logs, email correspondence, feedback | When provided |
3.2 romaph only collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy. We do not collect sensitive personal information beyond what is required for identity verification and regulatory compliance.
4.1 romaph collects personal data through the following channels:
4.2 romaph does not collect personal data from third-party data brokers or purchase data lists for marketing purposes.
5.1 romaph processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:
6.1 romaph does not sell or rent your personal data to third parties. We may share your personal data only in the following limited circumstances:
6.2 All third parties with whom romaph shares personal data are required to process that data only for the specified purpose and in accordance with applicable data privacy laws. romaph does not authorize third parties to use your data for their own independent marketing purposes.
7.1 romaph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation.
7.2 The following general retention periods apply:
7.3 Upon expiry of the applicable retention period, romaph will securely delete or anonymize your personal data in accordance with its data disposal procedures.
8.1 romaph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
8.2 In the event of a personal data breach that is likely to result in harm to affected data subjects, romaph will notify the National Privacy Commission and affected players in accordance with the timelines and requirements prescribed by the Data Privacy Act and NPC regulations.
9.1 romaph uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and analyze platform usage. The following types of cookies are used:
9.2 You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the romaph platform. Strictly necessary and security cookies cannot be disabled as they are essential to platform operation.
9.3 romaph does not use third-party advertising cookies or share cookie data with advertising networks for behavioral targeting purposes.
10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by romaph. To exercise any of these rights, please contact romaph's Data Protection Officer using the details in Section 15.
10.2 romaph will respond to all verified privacy rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days with prior notice to you.
10.3 romaph may need to verify your identity before processing a privacy rights request to ensure that personal data is not disclosed to unauthorized persons.
11.1 The romaph platform is strictly intended for persons aged twenty-one (21) years and above. romaph does not knowingly collect personal data from persons under the age of 21.
11.2 If romaph discovers that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated data will be deleted in accordance with applicable law, and any deposits will be returned to the payment source.
12.1 romaph primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or game software vendors — romaph ensures that such transfers are made only to countries or organizations that provide an adequate level of data protection.
12.2 All cross-border data transfers are governed by appropriate safeguards, including data processing agreements that incorporate the standard contractual clauses recognized by the National Privacy Commission, ensuring your personal data receives equivalent protection regardless of where it is processed.
12.3 romaph will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent, except where required by Philippine law.
13.1 The romaph platform may contain references to third-party services such as payment providers and game software suppliers. These third parties operate under their own privacy policies, and romaph is not responsible for their data practices.
13.2 romaph carefully selects third-party service providers and requires them to implement appropriate data protection measures. All third-party processors engaged by romaph are bound by data processing agreements that restrict their use of your personal data to the specific services they provide to romaph.
13.3 romaph does not integrate third-party social media plugins, advertising networks, or behavioral tracking tools that would share your personal data with external platforms without your knowledge.
14.1 romaph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
14.2 When material changes are made to this Policy, romaph will notify registered players via email or a prominent notice on the platform prior to the changes taking effect. Your continued use of the romaph platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
14.3 We encourage you to review this Policy periodically to stay informed about how romaph protects your personal data.
15.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by romaph, please contact our Data Protection Officer:
15.2 If you are not satisfied with romaph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official website.
15.3 For responsible gaming concerns, including self-exclusion requests, please visit our Responsible Gaming page or contact support directly.
A quick summary of the key privacy commitments romaph makes to every Filipino player on our platform.
Now that you know how romaph handles your personal data, you can play with full confidence. Join thousands of Filipino players who trust romaph for a secure, fair, and responsible gaming experience. Players must be 21 years of age or older.
PAGCOR-regulated | DPA 2012 Compliant | 🔞 21+ Only | Gambling is addictive. Know when to stop.