ruby888 Privacy Policy

Who We Are

This Privacy Policy applies to the ruby888 online gaming platform, accessible at ruby888.one. ruby888 is the data controller for personal information collected through this platform and is responsible for determining the purposes and means of processing your personal data.

ruby888 operates under the regulatory framework of PAGCOR (Philippine Amusement and Gaming Corporation) and is subject to the data protection obligations of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

Questions or concerns about this Privacy Policy may be directed to ruby888's Data Protection Officer at [email protected].

Personal Data We Collect

ruby888 collects personal data through several channels: account registration, KYC verification submissions, payment processing, platform usage, and communications with support. The categories of data collected are described below.

ruby888 does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly required for identity verification and age confirmation in compliance with PAGCOR regulations.

How We Use Your Personal Data

ruby888 processes your personal data for the following purposes:

• Account Management — to create, maintain, and administer your ruby888 player account, including login authentication and account security.
• Identity Verification and Age Confirmation — to confirm that you are 21 years of age or older and are the person you represent yourself to be, in compliance with PAGCOR's KYC requirements. 21+
• Payment Processing — to facilitate deposits and process withdrawal requests to your registered GCash, PayMaya, or bank account.
• Fraud Prevention and Security — to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited activities.
• Regulatory Compliance — to fulfil ruby888's obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Customer Support — to respond to your inquiries, resolve disputes, and provide assistance through the ruby888 support channel.
• Platform Improvement — to analyse aggregate usage patterns and improve the performance, design, and game offering of the ruby888 platform. This analysis uses anonymised or aggregated data where possible.
• Responsible Gaming — to monitor player activity for signs of problem gambling and apply responsible gaming tools (deposit limits, self-exclusion) where appropriate.
• Marketing Communications — to send you information about ruby888 promotions and offers, where you have opted in to such communications. You may withdraw consent to marketing communications at any time through your account settings.

Legal Basis for Processing

ruby888 processes your personal data under the following legal bases as established by the Data Privacy Act of 2012:

• Contractual Necessity — processing required to perform the contract between you and ruby888 (i.e., to operate your account, process payments, and provide gaming services).
• Legal Obligation — processing required to comply with PAGCOR regulatory requirements, AMLA obligations, and other applicable Philippine law.
• Legitimate Interests — processing for fraud prevention, platform security, and aggregate usage analysis, where those interests do not override your fundamental rights.
• Consent — processing for marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing and Disclosure

ruby888 does not sell, rent, or trade your personal data to third parties. ruby888 may share your data with the following categories of recipients only to the extent strictly necessary:

• PAGCOR and Regulatory Authorities — ruby888 is required to provide player data to PAGCOR upon lawful request as part of its licensing obligations. This is a non-discretionary legal obligation.
• Payment Service Providers — GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Partners — third-party KYC verification service providers process identity documents and biometric data solely for the purpose of confirming your identity. These processors are contractually bound to process your data only under ruby888's instructions and in compliance with the Data Privacy Act.
• Game Content Providers — licensed game providers may receive limited technical data (session tokens, game outcomes) necessary for game operation. They do not receive your identity or financial data.
• Law Enforcement — where ruby888 is compelled by a valid court order, subpoena, or other lawful legal process to disclose player information to Philippine law enforcement or judicial authorities.

All third-party processors engaged by ruby888 are contractually required to implement appropriate data protection measures consistent with the Data Privacy Act of 2012 and its implementing regulations.

Data Retention

ruby888 retains personal data for the following periods:

• Active account data — retained for the duration of your account's active status plus a minimum of 5 years following account closure, in compliance with PAGCOR record-keeping requirements.
• KYC and identity documents — retained for a minimum of 5 years from the date of submission, consistent with AMLA record-keeping obligations.
• Transaction records — retained for a minimum of 5 years from the date of each transaction, in line with PAGCOR and AMLA requirements.
• Support communications — retained for 2 years following the resolution of the relevant support interaction, unless a longer period is required for dispute or legal proceedings.
• Technical and usage data — retained for up to 24 months for platform analytics and security monitoring purposes, after which it is anonymised or deleted.

Upon the expiry of the applicable retention period, ruby888 will securely delete or anonymise your personal data unless retention is required by applicable law or ongoing legal proceedings.

Data Security

ruby888 implements technical and organisational security measures appropriate to the risk level of the data processed. These measures include:

• TLS/SSL encryption for all data transmitted between player devices and ruby888 servers.
• Encryption at rest for sensitive data including identity documents and financial account identifiers.
• Role-based access controls restricting data access to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the ruby888 platform infrastructure.
• Multi-factor authentication requirements for staff access to systems containing player personal data.
• Incident response procedures for detecting, containing, and notifying relevant parties of data breaches in accordance with the Data Privacy Act's 72-hour breach notification requirement to the National Privacy Commission.

No security system is impenetrable. While ruby888 takes all reasonable measures to protect your data, we cannot guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their ruby888 accounts.

Cookies and Tracking Technologies

ruby888 uses the following categories of cookies and similar technologies on the platform:

• Strictly Necessary Cookies — required for the platform to function. These maintain your login session, remember your language preferences, and ensure security features operate correctly. These cannot be disabled.
• Functional Cookies — remember your game settings, preferred lobby view, and other personalisation options to improve your experience on ruby888.
• Analytics Cookies — collect anonymised data about how players navigate the platform, which pages are most visited, and where errors occur. This data is used in aggregate to improve platform performance and design.

ruby888 does not use third-party advertising or cross-site tracking cookies. You can manage cookie settings through your browser's privacy controls; however, disabling strictly necessary cookies will prevent the platform from functioning correctly.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ruby888:

• Right to be Informed — to receive clear information about how ruby888 processes your personal data, as set out in this Privacy Policy.
• Right of Access — to request a copy of the personal data ruby888 holds about you and information about how it is being used.
• Right to Rectification — to request correction of inaccurate or incomplete personal data in your ruby888 account.
• Right to Erasure — to request deletion of your personal data in circumstances where continued retention is no longer justified. Note that some data must be retained for the legally mandated periods described in Section 6, and erasure requests cannot override these retention obligations.
• Right to Data Portability — to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Object — to object to processing based on legitimate interests, including direct marketing communications.
• Right to Withdraw Consent — to withdraw consent for marketing communications at any time through account settings, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact ruby888's Data Protection Officer at [email protected]. ruby888 will respond to all data subject requests within 30 calendar days. If you believe your rights have been violated, you may also lodge a complaint with the National Privacy Commission of the Philippines.

Children and Minors

ruby888 strictly does not knowingly collect personal data from individuals under 21 years of age. 21+ The platform is intended solely for adult players who meet the PAGCOR age eligibility requirement of 21 years or older.

If ruby888 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed. Any deposits made by an underage player will be returned to the original payment source where technically possible; winnings will be forfeited.

Parents and guardians who believe a minor has registered on ruby888 should contact [email protected] immediately.

Third-Party Links

The ruby888 platform does not contain links to third-party websites beyond the payment and game provider integrations necessary for platform operation. This Privacy Policy applies solely to data collected and processed by ruby888 directly. ruby888 is not responsible for the privacy practices of any third-party service providers, whose own privacy policies govern the data they collect independently.

Changes to This Privacy Policy

ruby888 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform functionality. Material changes will be communicated to registered players via email notification or an in-platform notice before taking effect.

The "Last updated" date at the top of this page indicates when the most recent revision was made. Continued use of the ruby888 platform after a policy update constitutes acceptance of the revised Privacy Policy. Players who do not accept changes to this Policy should close their accounts before the revision takes effect.

Contact and Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the personal data ruby888 holds about you, please contact:

• Data Protection Officer, ruby888
• Email: [email protected]
• Live Chat: Available 24/7 through the ruby888 platform
• Support Page: /support

ruby888's Data Protection Officer will acknowledge privacy requests within 5 business days and aim to resolve them within 30 calendar days. Complex requests involving large volumes of data or third-party coordination may require additional time, in which case ruby888 will notify you of the extended timeline.