ruby888 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ruby888 ("ruby888," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("Player," "User," or "you") who access or use the ruby888 online gaming platform available at ruby888.app and any associated web or mobile interfaces (collectively, the "Platform").

ruby888 is committed to protecting the privacy and personal data of all players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and all other applicable data protection legislation. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions, which govern your use of the ruby888 Platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2 Data We Collect

ruby888 collects personal data that you provide directly, data generated through your use of the Platform, and data received from third-party service providers. The categories of personal data we collect include:

ruby888 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (e.g., responsible gaming assessments).

3 How We Use Your Data

ruby888 uses the personal data we collect for the following purposes:

• Account Management: To create, verify, and maintain your ruby888 player account, including identity verification (KYC) as required by applicable regulations.
• Service Delivery: To provide access to games, process deposits and withdrawals in Philippine Peso (₱), and deliver the full range of ruby888 Platform features.
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations, age verification requirements (21+), and reporting obligations under Philippine gaming regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible Gaming: To monitor gaming behavior, identify at-risk players, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your inquiries, resolve disputes, and improve our support services.
• Marketing Communications: To send you promotional offers, bonus notifications, and fiesta campaign updates — only where you have provided explicit consent.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, security, and features of the ruby888 Platform.

4 Legal Basis for Processing

ruby888 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to upon registration — including account management, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, gaming licensing requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for ruby888's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your data protection rights.
• Consent: For marketing communications and certain optional data processing activities, ruby888 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

ruby888 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, solely to process your financial transactions.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist in verifying your identity and screening for financial crime risks.
• Game Content Providers: Licensed game studios and live dealer operators whose games are available on the ruby888 Platform, to the extent necessary for game delivery and integrity.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: Philippine government agencies, including PAGCOR and the Anti-Money Laundering Council (AMLC), where disclosure is required by law or regulatory order.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors where necessary to protect ruby888's legal rights or comply with legal obligations.

6 Cookies & Tracking Technologies

ruby888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the Platform.

The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options to personalize your experience.
• Analytics Cookies: Help us understand how players interact with the Platform, which pages are most visited, and where technical issues occur. Data collected is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the ruby888 Platform.

7 Data Retention

ruby888 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.

Specifically:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Retained for the period required by applicable Philippine regulations, typically five (5) years from the end of the business relationship.
• Support Communications: Retained for up to two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

When personal data is no longer required, ruby888 will securely delete or anonymize it in accordance with our data disposal procedures.

8 Data Security

ruby888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ruby888 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorized ruby888 personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform's infrastructure.
• Multi-factor authentication options for player accounts to prevent unauthorized access.
• Incident response procedures to detect, report, and address personal data breaches in a timely manner.

While ruby888 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ruby888 will notify you and the relevant Philippine regulatory authorities as required by law.

9 Your Data Protection Rights

Under the Data Privacy Act of 2012 and applicable regulations, you have the following rights with respect to your personal data held by ruby888:

• Right to be Informed: The right to be told how your personal data is being collected and used — which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data ruby888 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. ruby888 will respond to all verified requests within thirty (30) calendar days. We may need to verify your identity before processing your request.

10 Children's Privacy

The ruby888 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine regulations governing online gaming. ruby888 does not knowingly collect personal data from individuals under the age of 21.

If ruby888 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at the details provided in Section 13.

We strongly encourage parents and guardians to use parental control software and to monitor their children's online activities to prevent underage access to gaming platforms.

11 Third-Party Links

The ruby888 Platform may contain links to third-party websites or services for informational purposes. ruby888 has no control over the content, privacy practices, or data handling of these external sites and is not responsible for their privacy policies.

We encourage you to review the privacy policy of any third-party website you visit. The inclusion of a link on the ruby888 Platform does not constitute an endorsement of that website or its privacy practices.

12 Updates to This Policy

ruby888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or in-platform notification.

Your continued use of the ruby888 Platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how ruby888 protects your personal data.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ruby888 handles your personal data, please contact our Data Protection Officer (DPO):