r2mlwin Privacy Policy

1. About This Privacy Policy

This Privacy Policy applies to all personal data collected by r2mlwin through the r2mlwin website, mobile web platform, and any related services, communications, or interactions you have with r2mlwin as a registered player or site visitor.

By registering an account on r2mlwin, making a deposit, or otherwise using the r2mlwin platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with r2mlwin.

If you have questions about how r2mlwin handles your personal data, you may contact our Data Protection Officer (DPO) at any time using the contact details provided in Section 12 of this policy.

2. Personal Data We Collect

r2mlwin collects personal data through several channels, including account registration, identity verification (KYC), platform usage, payment transactions, and customer support interactions. The categories of personal data we collect include:

r2mlwin collects only the personal data that is necessary for the purposes described in this policy. We do not collect sensitive personal information beyond what is required for identity verification and regulatory compliance.

3. How We Use Your Personal Data

r2mlwin uses the personal data we collect for the following purposes:

• Account creation and management: To register your r2mlwin account, verify your identity, and maintain your account in good standing.
• Platform operation: To provide you with access to r2mlwin's games, features, and services, including processing deposits, withdrawals, and bonus claims.
• Regulatory compliance: To comply with our obligations under Philippine law, including PAGCOR regulations, the Data Privacy Act of 2012, and Anti-Money Laundering Act (AMLA) requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the r2mlwin platform.
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk of gambling-related harm, and to enforce responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance through our 24/7 support team.
• Communications: To send you account-related notifications, security alerts, and — where you have opted in — promotional communications about r2mlwin offers and updates.
• Platform improvement: To analyze usage patterns and improve the r2mlwin platform's performance, user experience, and game selection.

r2mlwin will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, r2mlwin processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our contract with you — i.e., to operate your r2mlwin account and provide the services you have registered for.
• Legal obligation: Processing is necessary to comply with r2mlwin's legal obligations under Philippine law, including PAGCOR licensing requirements, AMLA obligations, and tax reporting requirements.
• Legitimate interests: Processing is necessary for r2mlwin's legitimate interests in operating a secure, fair, and commercially viable online gaming platform — including fraud prevention, security monitoring, and platform analytics — provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending you promotional communications or using non-essential cookies — r2mlwin relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time.

5. Data Sharing & Disclosure

r2mlwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and liveness-check service providers who assist r2mlwin in verifying player identities.
• Game software providers: Licensed game studios and RNG certification bodies whose software powers r2mlwin's game library.
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulatory directive.
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other legal process.
• Professional advisers: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on r2mlwin's behalf under strict data processing agreements.

All third parties with whom r2mlwin shares personal data are required to handle that data in accordance with the Data Privacy Act of 2012 and r2mlwin's data protection standards.

6. Cookies & Tracking Technologies

r2mlwin uses cookies and similar tracking technologies on its platform to enhance your user experience, maintain session security, and analyze platform usage. The types of cookies we use include:

• Strictly necessary cookies: Essential for the r2mlwin platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and display options, to personalize your r2mlwin experience.
• Analytics cookies: Collect anonymized data about how players use the r2mlwin platform, helping us identify areas for improvement. Used only with your consent.
• Security cookies: Help r2mlwin detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the r2mlwin platform.

7. Data Retention

r2mlwin retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account data: Retained for the duration of your active r2mlwin account, plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLA obligations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, in accordance with AMLA requirements.
• Financial transaction records: Retained for a minimum of five (5) years, as required by Philippine tax and anti-money laundering regulations.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for two (2) years following the resolution of the relevant inquiry or dispute.
• Technical and security logs: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

When personal data is no longer required for any of the above purposes, r2mlwin will securely delete or anonymize it in accordance with our data disposal procedures.

8. Data Security

r2mlwin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the r2mlwin platform.
• AES-256 encryption for sensitive data stored in r2mlwin's databases, including financial data and KYC documents.
• Multi-factor authentication (MFA) for player accounts and all r2mlwin staff with access to personal data.
• Role-based access controls ensuring that r2mlwin staff can only access personal data that is necessary for their specific job function.
• 24/7 security monitoring and intrusion detection systems.
• Regular third-party security audits and penetration testing.
• Strict data processing agreements with all third-party service providers.

While r2mlwin takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, r2mlwin will notify you and the National Privacy Commission (NPC) in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by r2mlwin:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data r2mlwin holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data r2mlwin holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to r2mlwin's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data where r2mlwin relies on legitimate interests as the legal basis, or where your data is used for direct marketing purposes.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to withdraw consent: Where r2mlwin processes your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe r2mlwin has violated your data privacy rights.

To exercise any of the above rights, please contact r2mlwin's Data Protection Officer using the details in Section 12. r2mlwin will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10. Children's Privacy

The r2mlwin platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. r2mlwin does not knowingly collect personal data from individuals under the age of 21.

If r2mlwin discovers or has reasonable grounds to believe that a registered account belongs to a person under 21 years of age, we will immediately suspend the account, void any associated transactions, and securely delete the personal data of the underage individual in accordance with our data retention procedures.

If you are a parent or guardian and believe that your child has registered on r2mlwin, please contact our Data Protection Officer immediately using the contact details in Section 12 so that we can take prompt action.

11. Changes to This Privacy Policy

r2mlwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, r2mlwin will notify registered players via email to the address on file, or via a prominent notice on the r2mlwin platform, at least seven (7) days before the changes take effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how r2mlwin protects your personal data. Your continued use of the r2mlwin platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

12. Contact & Data Protection Officer

r2mlwin has appointed a Data Protection Officer (DPO) in accordance with the Data Privacy Act of 2012 and NPC requirements. If you have any questions, concerns, or requests relating to this Privacy Policy or r2mlwin's data processing practices, please contact our DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with r2mlwin's response to your data privacy concern.