🔒 laroph Privacy Policy

📋 1. Introduction

This Privacy Policy ("Policy") describes how laroph ("the Company," "we," "us," or "our") collects, uses, stores, and discloses personal information relating to individuals ("you" or "your") who access or use the laroph online casino and sports betting platform available at laroph.app and any associated applications (collectively, "the Platform").

laroph is committed to protecting the privacy and personal data of all users, including Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and the rest of the Philippines. This Policy is designed to comply with applicable Philippine data protection legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering an account on the laroph Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the laroph Platform.

This Policy should be read together with the laroph Terms & Conditions, which govern your use of the Platform generally.

📂 2. Data We Collect

laroph collects the following categories of personal data from registered players and Platform visitors:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Email address, mobile phone number, and residential address (including barangay, city/municipality, province, and postal code).
• Financial Data: GCash mobile number, PayMaya account details, bank account information (BPI, BDO, Metrobank, UnionBank), and card details (Visa/Mastercard) used for deposits and withdrawals. laroph does not store full card numbers — payment card data is processed by PCI-DSS certified payment processors.
• Account Data: Username, encrypted password, account preferences, responsible gaming settings, and communication preferences.
• Transaction Data: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and promotional activity on your laroph account.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and session duration.
• Usage Data: Pages visited on the laroph Platform, game sessions, click patterns, search queries, and feature interactions.
• Communications Data: Records of your interactions with laroph customer support, including live chat transcripts, email correspondence, and support ticket history.
• Verification Data: Copies of identity documents, selfies, and proof of address submitted during the KYC (Know Your Customer) verification process.

🔍 3. How We Collect Data

laroph collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically when you access the laroph Platform, through cookies, web beacons, server logs, and similar tracking technologies.
• Third-Party Sources: Data received from payment processors (e.g., GCash, PayMaya, BPI), identity verification service providers, fraud prevention agencies, and regulatory databases where laroph is required to conduct due diligence checks.
• Publicly Available Sources: In limited circumstances, laroph may supplement your profile with data from publicly available sources for the purpose of fraud prevention or regulatory compliance.

🎯 4. Purpose of Processing

laroph processes your personal data for the following purposes:

• Account Management: To create, maintain, and manage your laroph account, including processing your laroph login and authenticating your identity on each session.
• Service Delivery: To provide access to laroph's games, sports betting, live dealer, bingo, sabong, and all other Platform features.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, Visa, and Mastercard.
• KYC & AML Compliance: To verify your identity, age (21+), and source of funds in compliance with Philippine anti-money laundering regulations and PAGCOR requirements.
• Responsible Gaming: To monitor gaming activity, enforce deposit and loss limits, process self-exclusion requests, and identify players who may be at risk of problem gambling.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats.
• Customer Support: To respond to your enquiries, resolve complaints, and provide 24/7 support via live chat.
• Marketing & Promotions: To send you information about laroph promotions, bonuses, and new games, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the laroph Platform experience for Filipino players.
• Legal Compliance: To comply with applicable Philippine laws, regulatory requirements, court orders, and lawful requests from government authorities.

⚖️ 5. Legal Basis for Processing

laroph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and laroph (i.e., the laroph Terms & Conditions), including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC, AML, and PAGCOR compliance obligations.
• Legitimate Interests: Processing necessary for laroph's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

🤝 6. Data Sharing

laroph does not sell your personal data to third parties. laroph may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, Visa, Mastercard, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by laroph to verify your identity and age.
• Fraud Prevention Agencies: Agencies and databases used by laroph to detect and prevent fraud, money laundering, and other financial crimes.
• Game Providers: Licensed game studios and software providers whose games are available on the laroph Platform, to the extent necessary to deliver game services.
• Regulatory Authorities: PAGCOR and other Philippine regulatory authorities, law enforcement agencies, and courts, where laroph is legally required to disclose your data.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers engaged by laroph to operate and secure the Platform.
• Customer Support Providers: Third-party customer support platforms used to manage live chat and support ticket systems.

All third-party service providers engaged by laroph are contractually required to process your personal data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

🗓️ 7. Data Retention

laroph retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Accounts: Personal data associated with active laroph accounts is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, laroph retains personal data for a minimum of five (5) years in compliance with Philippine AML regulations and PAGCOR record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years in compliance with applicable Philippine financial regulations.
• Marketing Data: Where you have consented to marketing communications, your contact details are retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, laroph will securely delete or anonymise your personal data in accordance with its data disposal procedures.

🛡️ 8. Data Security

laroph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and the laroph Platform is encrypted using 256-bit SSL/TLS encryption. Data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within laroph's systems is restricted to authorised personnel on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: laroph supports two-factor authentication (2FA) for player accounts to provide an additional layer of security at laroph login.
• PCI-DSS Compliance: Payment card data is processed by PCI-DSS Level 1 certified payment processors. laroph does not store full card numbers on its own systems.
• Penetration Testing: laroph's security team conducts regular penetration tests and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response: laroph maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, laroph will notify the National Privacy Commission and affected players in accordance with applicable Philippine law.

While laroph takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your laroph login credentials and for notifying laroph immediately if you suspect unauthorised access to your account.

✅ 9. Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by laroph:

• Right to Be Informed: The right to be informed about how laroph collects and processes your personal data — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data that laroph holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to laroph's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that laroph has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of your rights, please contact laroph's Data Protection Officer via live chat or by emailing [email protected]. laroph will respond to all data rights requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

🍪 10. Cookies

laroph uses cookies and similar tracking technologies to enhance your experience on the Platform, to remember your preferences, and to analyse Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential cookies required for the Platform to function, including session management, laroph login authentication, and security features. These cookies cannot be disabled.
• Functional Cookies: Cookies that remember your preferences, such as language settings, responsible gaming limits, and display preferences, to provide a more personalised experience.
• Analytics Cookies: Cookies used to collect anonymised data about how players use the laroph Platform, including pages visited, time spent, and features used. This data helps laroph improve the Platform experience for Filipino players.
• Marketing Cookies: Cookies used to deliver relevant promotional content and to measure the effectiveness of laroph's marketing campaigns. These cookies are only set with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the laroph Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate.

🔞 11. Minors

The laroph Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law and PAGCOR regulations governing online gambling. laroph does not knowingly collect personal data from individuals under the age of 21.

If laroph discovers that personal data has been collected from a person under 21 years of age, laroph will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with its responsible gaming policy and applicable Philippine law.

If you are a parent or guardian and believe that your child has registered on the laroph Platform, please contact laroph support immediately via live chat so that the account can be closed and the data removed without delay.

🌏 12. International Data Transfers

laroph's primary operations and data storage are based in the Philippines. However, some of laroph's third-party service providers — including cloud infrastructure providers, game studios, and payment processors — may process your personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, laroph ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses that require the recipient to maintain standards equivalent to those required under the Data Privacy Act of 2012.

By using the laroph Platform, you consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

✏️ 13. Policy Changes

laroph reserves the right to update or amend this Privacy Policy at any time. Where changes are material, laroph will notify registered players via email or an on-platform notification prior to the changes taking effect. The updated Policy will be published on this page with a revised "Last Updated" date.

Your continued use of the laroph Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure by contacting laroph support.

laroph encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected.

📬 14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to laroph's handling of your personal data, please contact laroph's Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on the laroph Platform

laroph's support team includes Filipino-speaking agents available around the clock to assist players across Manila, Cebu, Davao, Quezon City, Makati, and the rest of the Philippines. All data privacy enquiries are handled with strict confidentiality and in accordance with the Data Privacy Act of 2012.