This Privacy Policy explains how rm88 collects, uses, stores, protects, and discloses the personal data of Filipino players who use the rm88 platform at rm88.bio. We process your information in compliance with the Philippine Data Privacy Act (Republic Act No. 10173) and applicable AMLA requirements. Please read this policy carefully before registering.
Six commitments that govern how rm88 handles your personal data
rm88 collects only the personal data that is genuinely necessary for account operation, identity verification, regulatory compliance, and the delivery of our gaming services to Filipino players.
rm88 tells you clearly what data we hold, why we hold it, and how long we retain it. There are no hidden databases, no undisclosed uses, and no sharing of your information without a lawful basis.
Player data at rm88 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel with a documented, legitimate need.
Filipino players have the right to access, correct, delete, and port their rm88 personal data at any time. rm88 will respond to all data subject requests within the timeframes required by RA 10173.
rm88 does not sell, rent, or commercially transfer your personal data to any third party for their own marketing purposes. Your data is used to serve you — not to generate revenue from advertising brokers.
rm88 retains personal data only for as long as is required by law, regulation, or legitimate business purpose. Once the retention period expires, data is securely deleted or anonymised.
For the purposes of the Philippine Data Privacy Act (RA 10173) and this Privacy Policy, the data controller responsible for your personal data is rm88, operating through the online gaming platform accessible at rm88.bio (hereinafter referred to as "rm88", "we", "us", or "our").
rm88 is the entity that determines the purposes and means of processing personal data submitted by Filipino players and visitors to the platform. Our designated Data Protection Officer (DPO) can be contacted using the details provided in Section 15 of this policy.
rm88 processes the personal data of Filipino players and platform visitors in compliance with the following legal instruments:
Where any provision of this Privacy Policy conflicts with applicable Philippine law, the applicable law shall prevail to the extent of the inconsistency.
rm88 collects personal data from you through several channels: information you provide directly during registration and KYC verification; information generated automatically by your use of the platform; and information received from third-party payment providers in connection with deposit and withdrawal transactions.
| Data Category | Specific Data Points | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration / KYC |
| Contact Data | Email address, mobile phone number (Philippine format) | Registration |
| Address Data | Residential address (city, province, postal code) | KYC Verification |
| Identity Documents | Government-issued ID images (PhilSys ID, passport, driver's license, UMID, voter's ID) | KYC Verification |
| Financial Data | GCash account reference, bank account details for withdrawal, USDT wallet address | Cashier / Withdrawal |
| Security Data | Username, hashed password, security questions (if set) | Registration / Account Settings |
rm88 may receive the following data from third-party service providers in connection with the operation of the platform:
rm88 uses personal data collected from Filipino players and platform visitors for the following purposes:
Under the Data Privacy Act (RA 10173), rm88 must have a lawful basis for processing your personal data. The grounds on which rm88 relies are:
rm88 uses cookies and similar tracking technologies on the rm88.bio platform to maintain session continuity, remember your login preferences, detect fraud signals, and analyse platform usage. The following types of cookies may be set:
rm88 does not sell your personal data to any third party. However, we share your data with the following categories of recipients where necessary and lawful:
All third-party recipients of rm88 player data are required to handle that data in accordance with RA 10173 and, where applicable, equivalent international data protection standards.
Some of the third parties with whom rm88 shares data (particularly cloud infrastructure and game software providers) may process data outside the Philippines. Where personal data is transferred internationally, rm88 ensures that:
rm88 does not transfer personal data to jurisdictions that do not offer an equivalent level of protection without appropriate safeguards as described above.
rm88 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. The following retention periods apply:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AMLA / PAGCOR requirement |
| KYC / identity documents | 5 years post account closure | AMLA RA 9160 |
| Transaction records | 5 years from transaction date | AMLA / tax compliance |
| Game play history | 3 years from last activity | Legitimate interest / dispute resolution |
| Support conversation logs | 3 years from conversation date | Legitimate interest / dispute resolution |
| Session / login logs | 12 months from session date | Security / fraud prevention |
| Marketing consent records | Until consent withdrawn + 3 years | RA 10173 consent obligations |
Upon expiry of the applicable retention period, personal data is securely deleted from rm88 systems using industry-standard data destruction protocols, or rendered permanently anonymous so that it can no longer be attributed to any individual.
Under the Data Privacy Act (RA 10173), Filipino players and rm88 platform visitors have the following rights in respect of their personal data:
You have the right to be informed about how rm88 collects, uses, and shares your personal data. This Privacy Policy is our primary mechanism for fulfilling that obligation.
You may request a copy of all personal data rm88 holds about you. We will respond to access requests within 30 days of receipt of a valid request through the channels specified in Section 15.
If any personal data rm88 holds about you is inaccurate or incomplete, you may request correction through the account settings dashboard or by contacting support. We will update incorrect data within 15 days of a valid request.
You may request deletion of your personal data where it is no longer necessary for the purpose collected, where consent is withdrawn, or where processing is unlawful. Erasure may be limited where retention is required by AMLA or PAGCOR regulations.
You may object to certain types of data processing, including marketing communications. You may also request restriction of processing where accuracy is contested or processing is unlawful but you do not wish erasure.
Where processing is based on your consent or contract performance, you may request your personal data in a structured, commonly used, machine-readable format for transmission to another service provider.
If you believe rm88 has not handled your personal data lawfully, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
rm88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Notwithstanding these measures, no online system can guarantee absolute security. You are responsible for maintaining the security of your own rm88 account credentials, including using a strong, unique password and not sharing your login details with any third party.
The rm88 platform is strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR's minimum age requirements for online gaming in the Philippines. rm88 does not knowingly collect, store, or process the personal data of any individual under the age of 21.
If rm88 becomes aware that personal data has been collected from an individual below the age of 21, all such data will be deleted promptly, the account will be closed, and any deposited funds will be returned to the original payment source following an investigation. If you believe a minor has registered an rm88 account, please contact our support team immediately.
rm88 is subject to the Anti-Money Laundering Act (RA 9160), as amended, and the regulations of the Anti-Money Laundering Council (AMLC). In order to comply with these obligations, rm88 will:
rm88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via email notification to the registered address and/or via a prominent notice displayed on the rm88 platform upon login.
Updated policies will be effective 7 days after notification unless a longer period is required by law. The effective date at the top of this policy will be updated to reflect each revision. Your continued use of rm88 after the effective date of a revised policy constitutes acceptance of the updated terms. If you do not accept a material change, you must cease using the platform and contact support to close your account.
This policy was last revised on 1 January 2026. The current version is always available at rm88.bio/privacy-policy.
For all data privacy enquiries, data subject right requests, or complaints relating to rm88's handling of your personal data, please contact the rm88 Data Protection Officer using the following channels:
If you are not satisfied with rm88's response to your data privacy request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which has jurisdiction over data privacy matters under RA 10173.
Over 500,000 Filipino players trust rm88 with their personal and financial information every day. Your data is encrypted, never sold, and handled in full compliance with Philippine law. Now that you know how we protect your privacy, come and play. Must be 21 years old or above.
21+ only. Gambling involves financial risk. Please play responsibly.
21+ Only. All real-money gaming at rm88 is strictly restricted to players aged 21 and above per PAGCOR requirements. Visit Responsible Gaming for self-exclusion and player protection tools.