Privacy Policy

1. Introduction

Welcome to the ruby888 Privacy Policy. ruby888 ("we," "us," "our," or the "Company") operates the online gaming platform accessible at ruby888.vip (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the Platform ("you," "Player," or "User").

This Privacy Policy describes how ruby888 collects, uses, stores, shares, and protects your personal information in connection with your use of the Platform. It also explains the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations.

By accessing or using the ruby888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the ruby888 Platform as a whole.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, ruby888 is the personal information controller responsible for your personal data collected through the Platform.

Our designated Data Protection Officer (DPO) oversees compliance with data protection obligations and can be reached through the contact details provided in Section 14 of this Policy. All data subject requests, privacy concerns, and data breach notifications should be directed to the DPO in the first instance.

3. Personal Data We Collect

ruby888 collects the following categories of personal data from Players and visitors to the Platform:

We do not collect sensitive personal information (as defined under the DPA) such as health records, political opinions, or religious beliefs, except where strictly required by law (e.g., responsible gaming self-exclusion records).

4. How We Collect Your Data

ruby888 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, Maya, and banking partners.
• Regulatory sources: Self-exclusion status from PAGCOR's responsible gaming registry or other recognized exclusion schemes.

5. How We Use Your Personal Data

ruby888 uses your personal data for the following purposes:

• To create, verify, and manage your ruby888 account, including age verification to confirm you are at least 21 years old as required under Philippine law.
• To process deposits and withdrawals through approved Philippine payment channels including GCash, Maya, and bank transfers.
• To provide access to games, live dealer tables, slots, bingo, and other Platform features.
• To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, including transaction monitoring and suspicious activity reporting.
• To enforce our Terms & Conditions, detect and prevent fraud, cheating, and other prohibited conduct.
• To operate responsible gaming tools including deposit limits, session alerts, and self-exclusion, and to monitor gaming patterns for signs of problem gambling.
• To communicate with you regarding your account, transactions, security alerts, and changes to our policies.
• To send you promotional offers, bonuses, and marketing communications where you have provided consent, and to manage your marketing preferences.
• To improve the Platform through analytics, A/B testing, and user experience research.
• To comply with applicable Philippine laws, regulations, and PAGCOR requirements, and to respond to lawful requests from regulatory and law enforcement authorities.

6. Legal Basis for Processing

ruby888 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, PAGCOR licensing requirements, and tax reporting.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

ruby888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other approved Philippine payment partners, for the purpose of processing your financial transactions.
• KYC and identity verification providers: Third-party services that assist with identity verification, age verification, and document authentication.
• AML and fraud screening providers: Compliance technology partners that assist with transaction monitoring, sanctions screening, and fraud detection.
• Game content providers: Software providers whose games are hosted on the ruby888 Platform, to the extent necessary for game operation and fairness auditing.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal compliance, dispute resolution, or corporate governance purposes.

All third-party service providers who process personal data on behalf of ruby888 are required to implement appropriate technical and organizational security measures and to process data only in accordance with our documented instructions.

8. Cookies & Tracking Technologies

ruby888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set.
• Analytics cookies: Help us understand how Players use the Platform, which pages are most visited, and where technical errors occur. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no consent is required as they are essential to service delivery.

9. Data Security

ruby888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorized personnel can access personal data, on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While ruby888 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your ruby888 account.

10. Data Retention

ruby888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (as amended).
• KYC and identity documents: Retained for five (5) years following account closure or the end of the business relationship, whichever is later.
• Support communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and usage logs: Retained for up to twelve (12) months for security monitoring and platform optimization purposes, after which they are anonymized or deleted.

When personal data is no longer required for any lawful purpose, ruby888 will securely delete or anonymize it in accordance with our internal data retention and disposal procedures.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ruby888:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access: You may request a copy of the personal data ruby888 holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account information directly through your ruby888 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling legitimate grounds.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified data subject requests within fifteen (15) calendar days of receipt, or within such extended period as permitted by applicable law, with prior notice to you.

Please note that certain rights are subject to limitations where processing is required for compliance with legal obligations, the exercise of legal claims, or the performance of a task carried out in the public interest.

12. Children and Minors

The ruby888 Platform is strictly intended for adults aged twenty-one (21) years and older, in accordance with Philippine law and PAGCOR regulations governing casino-style gambling. ruby888 does not knowingly collect personal data from individuals under the age of 21.

During registration, all Players are required to confirm their age and to submit government-issued identification for KYC verification. Where ruby888 discovers or has reasonable grounds to believe that a registered account belongs to a person under 21 years of age, we will immediately suspend the account, void any transactions, and securely delete the personal data of the underage individual in accordance with applicable law.

If you are a parent or guardian and believe that your child has registered on the ruby888 Platform, please contact us immediately using the details in Section 14 so that we can take prompt action.

⚠️ Gambling is addictive. Know when to stop.

13. Changes to This Privacy Policy

ruby888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered Players via the email address on file or through a prominent notice on the Platform prior to the changes taking effect. For non-material updates such as clarifications or formatting corrections, the revised Policy will be published on this page without separate notification.

Your continued use of the ruby888 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. We encourage you to review this page periodically to stay informed of how ruby888 protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ruby888 handles your personal data, please reach out to our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly within your ruby888 account dashboard — the fastest way to get a response.
• Email: [email protected] (plain text — not a clickable link)

For formal data subject requests (access, rectification, erasure, portability), please include your full name, registered email address, and a clear description of your request. We may require identity verification before processing your request to protect against unauthorized access to your data.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.