rainbey Privacy Policy

1. Introduction

rainbey ("rainbey", "we", "us", "our") operates the online gaming platform accessible at rainbey.net (the "Platform"). We are committed to protecting the privacy and security of the personal information of every player who uses our Platform. This Privacy Policy ("Policy") describes how rainbey collects, uses, stores, shares, and protects your personal data when you access or use the rainbey Platform, including when you register an account, make a deposit or withdrawal, participate in promotions, or contact our support team.

This Policy applies to all players who are residents of the Philippines or who access the rainbey Platform from within the Philippines. It should be read alongside rainbey's Terms & Conditions and Responsible Gaming Policy.

By registering a rainbey account or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, rainbey is the personal information controller in respect of the data collected through the Platform. This means rainbey determines the purposes for which, and the means by which, your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our designated Data Protection Officer (DPO) at any time:

• Email: [email protected]
• Live Chat: Available on every page of the rainbey Platform, 24 hours a day

3. Data We Collect

rainbey collects personal information that is necessary for the operation of the Platform, compliance with Philippine regulatory requirements, and the delivery of a safe and enjoyable gaming experience. The categories of personal data we collect include:

3.1 Identity and Contact Information

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify that you are 21 years of age or older);
• Residential address, including city (e.g., Manila, Cebu, Davao, Quezon City, Makati);
• Email address and mobile phone number;
• Government-issued identification documents submitted for KYC verification (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS ID, Voter's ID, PRC ID).

3.2 Financial Information

• GCash, Maya, BPI, BDO, Metrobank, or other payment account details used for deposits and withdrawals;
• Transaction history, including deposit amounts, withdrawal requests, and balances;
• Source of funds information where required by PAGCOR or AMLC regulations.

3.3 Account and Gaming Activity

• Account username and encrypted password;
• Login history, including timestamps and IP addresses;
• Game play history, wager amounts, wins, losses, and session duration;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, self-exclusion status).

3.4 Technical and Device Information

• IP address and approximate geolocation;
• Device type, operating system, and browser type and version;
• Cookies and similar tracking technologies (see Section 8);
• Referring website or source through which you accessed the Platform.

3.5 Communications

• Records of your communications with rainbey's customer support team, including live chat transcripts and email correspondence;
• Responses to surveys, feedback forms, or promotional campaigns you voluntarily participate in.

4. How We Collect Your Data

rainbey collects your personal information through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion;
• Automatically — through cookies, web beacons, and server logs when you browse or interact with the Platform;
• From third-party payment processors — such as GCash, Maya, BPI, BDO, and other financial institutions, when you initiate a transaction;
• From identity verification providers — when we use third-party KYC tools to verify the authenticity of your identification documents;
• From regulatory or government sources — where permitted by Philippine law, such as from PAGCOR or the AMLC, in connection with our compliance obligations.

5. How We Use Your Data

rainbey uses your personal information for the following specific purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and login data
Age and identity verification (KYC)	Date of birth, government ID documents
Processing deposits and withdrawals	Financial and payment account data
Providing gaming services and game history	Account and gaming activity data
Preventing fraud, cheating, and money laundering (AML)	Financial, gaming, and device data
Regulatory compliance and reporting to PAGCOR / AMLC	Identity, financial, and activity data
Responsible gaming monitoring and intervention	Gaming activity and account settings
Customer support and dispute resolution	Communications and account data
Platform improvement and analytics	Technical and device data (anonymised where possible)
Sending promotional communications (where you have opted in)	Contact information and preferences

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, rainbey processes your personal data on the following legal bases:

• Performance of a contract — processing that is necessary to provide you with the gaming services you have registered for, including account management, transactions, and game delivery;
• Legal obligation — processing required to comply with PAGCOR licensing conditions, AMLC anti-money laundering obligations, and other applicable Philippine laws;
• Consent — where you have given your explicit consent, such as for receiving marketing communications or for certain types of data sharing;
• Legitimate interests — processing carried out for rainbey's legitimate business interests, such as fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.

7. Sharing Your Data

7.1 Service Providers

rainbey shares your personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, GrabPay, 7-Eleven CLiQQ), KYC and identity verification providers, game software suppliers, IT infrastructure and cloud hosting providers, and customer support technology providers. All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to rainbey.

7.2 Regulatory and Law Enforcement Authorities

rainbey may disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction in the Philippines where required by law, court order, or regulatory directive, or where rainbey has a good-faith belief that such disclosure is necessary to prevent fraud or illegal activity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of rainbey's business assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and your rights under this Policy will continue to be protected.

7.4 No Sale of Data

rainbey does not sell, rent, or otherwise commercially exploit your personal data to third parties for their own independent marketing or commercial purposes.

8. Cookies & Tracking Technologies

rainbey uses cookies and similar technologies (such as web beacons and pixel tags) to operate the Platform, remember your preferences, analyse usage patterns, and deliver a more personalised experience. The types of cookies we use include:

• Strictly necessary cookies — required for the Platform to function, including session management and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game lobby layout.
• Analytics cookies — collect anonymised data about how players interact with the Platform, used to identify areas for improvement.
• Marketing cookies — used to deliver relevant promotions and track campaign performance. These are only deployed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the rainbey Platform. By continuing to use the Platform without changing your cookie settings, you consent to our use of cookies as described above.

9. Data Retention

rainbey retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by Philippine law. The following general retention periods apply:

• Active account data — retained for the duration of your account registration plus five (5) years after account closure, in compliance with PAGCOR record-keeping requirements;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by the AMLA and PAGCOR regulations;
• KYC and identity verification documents — retained for five (5) years following account closure or the end of the business relationship;
• Customer support communications — retained for three (3) years from the date of the last communication;
• Marketing consent records — retained until you withdraw your consent plus one (1) year for audit purposes.

Once the applicable retention period expires, rainbey will securely delete or irreversibly anonymise your personal data.

10. Security Measures

rainbey implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including payment account details and government ID records;
• Role-based access controls ensuring that only authorised rainbey personnel can access personal data on a need-to-know basis;
• Multi-factor authentication requirements for internal systems handling personal data;
• Regular security audits, vulnerability assessments, and penetration testing;
• Incident response procedures compliant with NPC breach notification requirements under RA 10173.

While rainbey takes every reasonable precaution to safeguard your data, no method of transmission over the internet or electronic storage is completely secure. In the event of a personal data breach that affects your rights and freedoms, rainbey will notify the National Privacy Commission and affected players in accordance with applicable Philippine law and NPC regulations.

11. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by rainbey:

• Right to be informed — you have the right to be informed about how your personal data is collected, used, and shared, which is the purpose of this Policy;
• Right of access — you have the right to request a copy of the personal data rainbey holds about you;
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to rainbey's legal retention obligations;
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability — you may request that rainbey provide your personal data in a structured, commonly used format;
• Right to damages — you have the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or via live chat. We will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing certain requests.

If you believe your data privacy rights have been violated, you also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12. Minors

The rainbey Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations. rainbey does not knowingly collect personal data from persons under 21 years of age. If rainbey becomes aware that a person under 21 has provided personal data, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

13. Changes to This Policy

rainbey reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players by email and by posting a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the rainbey Platform following notification of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

14. Contact & Complaints

For any questions, requests, or concerns regarding this Privacy Policy or rainbey's data handling practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available on every page of the rainbey Platform, 24 hours a day, 7 days a week, in English and Filipino

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. For more information about your rights under RA 10173, visit the official NPC website.