Privacy Policy

r58com ("we", "us", "our", "the Platform") operates the online gaming platform accessible at r58com.app and associated services. We are committed to protecting the personal data of every player and visitor who interacts with our Platform, consistent with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

This Privacy Policy ("Policy") sets out our practices regarding the collection, use, storage, protection, and disclosure of personal data in connection with the r58com Platform. It applies to:

• All registered account holders on the r58com Platform;
• Visitors who browse r58com.app without registering;
• Individuals who contact r58com customer support via any channel;
• Participants in r58com promotions, tournaments, or affiliate programs.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference where applicable.

For the purposes of applicable data protection law, r58com is the data controller responsible for the personal data collected and processed in connection with the Platform and its services.

As data controller, r58com determines the purposes and means of processing your personal data. We are accountable for ensuring that personal data is handled in compliance with the Data Privacy Act of 2012 and all applicable subsidiary legislation and NPC issuances.

Our designated Data Protection Officer (DPO) oversees r58com's data privacy compliance program. You may contact our DPO through the support channels identified in Section 14 of this Policy. Inquiries directed to the DPO will be acknowledged within five (5) business days.

r58com collects personal data in the following categories, depending on how you interact with the Platform:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify the 21+ age requirement);
• Philippine mobile number (used as your primary login identifier and for OTP delivery);
• Email address (optional, for promotional communications where opted in);
• Username chosen at registration.

• Government-issued photo identification (e.g., UMID, Driver's License, PhilSys National ID);
• Proof of address documentation, where required;
• Selfie or live photograph where enhanced verification is required;
• Proof of ownership of registered payment methods.

• GCash account reference, Maya account reference, bank account details (account name and number), or other payment method identifiers used for deposits and withdrawals;
• Deposit and withdrawal transaction records including amounts, timestamps, and payment channel;
• Wagering history: games played, bet amounts, results, and session timestamps;
• Bonus and promotion usage records.

• IP address at time of login and during active sessions;
• Device identifiers (browser fingerprint, device type, operating system);
• Geolocation data at a country or regional level (not GPS precision);
• Session duration, pages visited, game interactions, and click-stream data;
• Browser type and version.

• Content of customer support conversations (live chat transcripts, written support requests);
• Responses to surveys, feedback forms, or promotional participation;
• Any personal data you voluntarily include in communications with r58com.

r58com uses the personal data we collect for the following purposes:

r58com does not use personal data for automated decision-making that produces legal effects without human oversight, except where such processing is required for AML or fraud detection, in which case a human review process is available upon request.

Under the Data Privacy Act of 2012, r58com processes personal data on the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and r58com (account registration, payment processing, game delivery).
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming tool management, and platform improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes such as marketing communications, promotional emails, and analytics-based personalization, where we have obtained your freely given, specific, and informed consent.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing communications, contact r58com support or adjust your account communication preferences.

r58com does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

r58com engages carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These include: payment processors (GCash, Maya, and partner banks), KYC verification technology providers, gaming software providers (who receive session and game result data), cloud infrastructure providers, and fraud detection service providers. All sub-processors are contractually required to maintain confidentiality and data security standards no less protective than those set out in this Policy.

r58com may disclose personal data to government authorities, law enforcement agencies, the National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), or courts of competent jurisdiction when required or permitted by law, including pursuant to lawful orders, warrants, or regulatory obligations under the AMLA, PAGCOR regulations, or other applicable legislation.

In the event of a merger, acquisition, restructuring, or sale of all or a material part of r58com's business or assets, personal data held by r58com may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections. Affected Players will be notified of any such transfer and the identity of the new data controller prior to any material change in how their data is processed.

r58com uses cookies and similar tracking technologies on the Platform to support its functionality, security, and performance. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and cookies required to maintain your login state. These cannot be disabled without preventing the Platform from operating.
• Functional Cookies: Remember your preferences such as language settings, last-visited game categories, and display preferences to personalize your experience.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Players navigate the Platform, which games are most played, and where technical issues occur. This data is used solely for Platform improvement and is not shared with advertising networks.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and suspicious login patterns. These are required for the Platform's fraud prevention systems.

r58com does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair or prevent your ability to use the Platform.

r58com retains personal data for the periods necessary to fulfill the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Data subject to an ongoing legal dispute, investigation, or regulatory inquiry may be retained beyond standard periods until the matter is resolved.

r58com implements technical and organizational security measures appropriate to the risk level of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the r58com Platform;
• Encrypted storage of sensitive personal data and KYC documents at rest;
• Access controls restricting internal access to personal data to authorized personnel with a demonstrated operational need;
• Two-factor authentication requirements for internal administrative access to production systems;
• Regular security assessments and vulnerability scanning of Platform infrastructure;
• Incident response procedures designed to detect, contain, and notify affected parties of personal data breaches within the timeframes required by the NPC under the Data Privacy Act.

Notwithstanding the above measures, no method of electronic transmission or storage is completely impenetrable. You are responsible for maintaining the security of your own device, credentials, and mobile number. If you suspect that your r58com account has been compromised, contact our support team immediately.

In the event of a personal data breach that creates a real risk of harm to affected individuals, r58com will notify the NPC and affected Players in accordance with NPC Circular 16-03 and applicable Data Privacy Act obligations.

Under the Data Privacy Act of 2012, you have the following rights in relation to the personal data that r58com holds about you. To exercise any of these rights, contact r58com through the channels described in Section 14. r58com will respond to rights requests within fifteen (15) business days, as required by applicable law.

r58com's registration process requires date of birth disclosure and is subject to identity verification. If r58com becomes aware that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all real-money balances will be returned to the original deposit method (less any bonus funds and winnings derived from bonus play), and all personal data associated with the underage account will be deleted or anonymized within a reasonable period following account closure, except to the extent retention is required by law.

If you believe that r58com has inadvertently collected personal data relating to a person under 21, please contact our Data Protection Officer immediately using the contact details in Section 14.

r58com's primary operations and data processing are conducted within the Philippines. However, certain service providers — including cloud infrastructure providers and gaming software licensors — may process some personal data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, r58com ensures that such transfers are conducted only to recipients that provide an adequate level of protection for personal data, consistent with the requirements of the Data Privacy Act of 2012. This is achieved through:

• Contractual clauses in data processing agreements requiring the receiving party to apply data protection standards at least equivalent to those required under Philippine law;
• Transfers to jurisdictions with data protection regimes recognized by the NPC as providing adequate protection; or
• Other lawful transfer mechanisms as may be recognized by the NPC from time to time.

If you would like further information about international data transfers affecting your personal data, contact our Data Protection Officer through the details provided in Section 14.

r58com reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform functionality. Material changes — those that affect your rights or the substantive ways in which we process your personal data — will be communicated to registered Players via SMS to the registered mobile number at least 7 calendar days before the revised Policy takes effect, and the updated Policy will be posted on this page with a revised effective date.

Your continued use of the r58com Platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree to a revised Policy, you may close your account before the effective date by contacting support. Outstanding verified balances will be returned as described in our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how r58com protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data r58com holds about you — including requests to exercise your data subject rights — please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link; for data privacy queries, please include "Privacy Request" in your message)
• Live Chat: Available 24/7 within your r58com account dashboard after login; for privacy requests, state "Data Privacy Request" at the start of your message
• Data Protection Officer: Reachable through the same support channels; DPO inquiries are escalated within 2 business days of receipt

r58com will acknowledge all privacy rights requests and complaints within five (5) business days and will provide a substantive response within fifteen (15) business days. In cases of particular complexity, this period may be extended with notice.

If you are not satisfied with r58com's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Contact details for the NPC are publicly available on the NPC's official website.