r2mlwin Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how r2mlwin ("r2mlwin," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the r2mlwin Casino website, mobile platform, and all related services (collectively, the "Platform").

r2mlwin is committed to protecting the privacy and security of your personal data. We operate in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC").

By registering an account on r2mlwin or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the Platform and contact us to close your account.

This Policy should be read together with r2mlwin's Terms and Conditions, which govern your use of the Platform and are incorporated herein by reference.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, r2mlwin acts as the personal information controller ("PIC") in respect of the personal data it collects from players and website visitors. r2mlwin determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

r2mlwin has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO at the details provided in Section 15 of this Policy.

3. Personal Data We Collect

r2mlwin collects the following categories of personal data from players and Platform users:

r2mlwin does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required for responsible gaming assessments or as mandated by applicable law.

4. How We Collect Your Data

r2mlwin collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Data collected automatically when you use the Platform, including IP addresses, device identifiers, session data, and cookies (see Section 11).
• Third-Party Sources: Data received from payment providers (GCash, PayMaya, BPI, BDO, Metrobank) to verify transactions; identity verification services used for KYC compliance; and fraud prevention partners.
• Regulatory Sources: Data received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

5. How We Use Your Personal Data

r2mlwin uses your personal data for the following purposes:

• To create, verify, and manage your r2mlwin player account.
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, and Philippine bank channels.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• To provide customer support and resolve disputes or complaints.
• To monitor gaming activity for responsible gaming purposes, including identifying signs of problem gambling and applying player-requested limits or exclusions.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities.
• To comply with legal and regulatory obligations, including reporting requirements under Philippine law.
• To send you transactional communications (account notifications, deposit confirmations, withdrawal updates).
• To send you promotional communications about r2mlwin bonuses and offers, where you have provided consent or where permitted by applicable law.
• To improve the Platform's performance, user experience, and game offerings based on aggregated usage data.
• To enforce r2mlwin's Terms and Conditions and protect the rights and safety of r2mlwin, its players, and third parties.

6. Legal Basis for Processing

r2mlwin processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and r2mlwin — including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for r2mlwin's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

r2mlwin does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, to facilitate deposits and withdrawals.
• Identity Verification Services: Third-party KYC and age verification providers used to confirm player identity and comply with regulatory requirements.
• Game Providers: Software providers whose games are hosted on the r2mlwin Platform may receive limited technical data (such as player session identifiers) necessary to operate their games.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory directive.
• Law Enforcement: Philippine law enforcement agencies, where r2mlwin is legally required or permitted to disclose data in connection with a criminal investigation or court order.
• Service Providers: Trusted third-party vendors who provide IT infrastructure, customer support tools, fraud detection, and analytics services to r2mlwin, under strict contractual data processing agreements.

All third parties with whom r2mlwin shares personal data are required to handle such data in accordance with applicable Philippine data privacy laws and r2mlwin's data protection standards.

8. Data Retention

r2mlwin retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR regulations and Philippine AML requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming Activity Data: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Communications Data: Support chat transcripts and email correspondence are retained for up to two (2) years.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.

Upon expiry of the applicable retention period, r2mlwin will securely delete or anonymise your personal data in a manner that prevents re-identification.

9. Data Security

r2mlwin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the r2mlwin Platform.
• Encryption of sensitive data at rest, including financial account details and government ID information.
• Role-based access controls ensuring that only authorised r2mlwin personnel can access personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data privacy obligations and secure data handling practices.

While r2mlwin takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, r2mlwin will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the DPA.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by r2mlwin:

To exercise any of the above rights, please contact r2mlwin's Data Protection Officer using the details in Section 15. r2mlwin will respond to all verified data subject requests within 15 business days, as required by the DPA IRR.

11. Cookies and Tracking Technologies

r2mlwin uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyse usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options to personalise your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the Platform to help r2mlwin improve performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content. These are only activated with your explicit consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the r2mlwin Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.

12. Minors and Age Restriction

The r2mlwin Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gambling regulations. r2mlwin does not knowingly collect personal data from individuals under the age of 21.

If r2mlwin becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the associated account, delete the data, and report the matter to the relevant regulatory authority where required. If you believe a minor has registered on r2mlwin, please contact us immediately at the details in Section 15.

Account holders are responsible for ensuring that no person under the age of 21 has access to their r2mlwin account or device. r2mlwin recommends the use of parental control software on shared devices.

13. Cross-Border Data Transfers

In certain circumstances, r2mlwin may transfer your personal data to recipients located outside the Philippines — for example, to international game providers or cloud infrastructure providers. Any such cross-border transfer will only be carried out where:

• The recipient country provides an adequate level of data protection as recognised by the NPC; or
• Appropriate safeguards are in place, such as contractual clauses approved by the NPC; or
• The transfer is necessary for the performance of your contract with r2mlwin or for the implementation of pre-contractual measures taken at your request.

r2mlwin will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent or a valid legal basis under the DPA.

14. Changes to This Privacy Policy

r2mlwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, r2mlwin will notify registered players via the mobile number or email address on file, or by displaying a prominent notice on the Platform prior to the changes taking effect.

The effective date of the current version of this Policy is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the r2mlwin Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by r2mlwin, please contact our Data Protection Officer:

• Live Chat: Available 24/7 on the r2mlwin Platform — the fastest way to reach our DPO team.
• Email: [email protected]

r2mlwin aims to acknowledge all data privacy requests within 3 business days and to resolve them within 15 business days, in accordance with the DPA IRR. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

This Privacy Policy was last updated on January 1, 2026. Previous versions are available upon request.