laroph Privacy Policy — Your Data, Handled With Care

This Privacy Policy ("Policy") is issued by the operator of the laroph platform ("laroph," "we," "us," or "the Operator") and describes how we collect, use, store, protect, share, and otherwise process the personal data of individuals ("you," "the Player," or "the Data Subject") who access or use the laroph online casino and sportsbook platform available at laroph.cam and all associated subdomains and mobile interfaces.

This Policy is published in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). Where laroph processes data of individuals in connection with its obligations under PAGCOR gaming regulations, those regulatory requirements also inform our data handling practices.

This Policy applies to all personal data processed by laroph in connection with your registration, account use, financial transactions, gameplay, support interactions, and any other activity on the laroph platform. It does not apply to the data practices of third-party game providers, payment processors, or other external parties whose services are accessed through the platform — those parties operate under their own privacy policies.

For the purposes of the Philippine Data Privacy Act, laroph acts as the personal information controller ("PIC") in respect of the personal data collected from players and processed in connection with platform operations. laroph has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Policy.

Where laroph engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, and customer support platforms — those parties act as personal information processors ("PIP") under documented data processing agreements that require them to apply data protection standards consistent with this Policy and the DPA.

Contact details for laroph's Data Protection Officer are provided in Section 15 of this Policy. Data subjects wishing to exercise their rights under the DPA, lodge a complaint, or seek clarification on any aspect of this Policy should direct their communication to the DPO.

laroph collects the following categories of personal data in connection with your use of the platform:

3.1 Identity and Registration Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (collected to verify the 21+ age requirement under Philippine gaming regulations)
• Government-issued ID type and number (for KYC verification)
• Email address used for account registration
• Philippine mobile number used for OTP verification and account recovery
• Username and encrypted account password
• Residential address in the Philippines

3.2 Financial and Transaction Data

• GCash account details linked for deposits and withdrawals
• PayMaya / Maya account details where linked
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank, and other Philippine banks)
• Deposit history, withdrawal history, and transaction timestamps
• Account wallet balance records
• Bonus claim and wagering history

3.3 Gaming and Behavioural Data

• Game session records including games played, wagers placed, and outcomes
• Sports bets placed, markets selected, and settlement records
• Session duration and frequency data
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

3.4 Technical and Device Data

• IP address at the time of login and key account actions
• Device type, operating system, and browser version
• Cookie identifiers and session tokens (see Section 8)
• Geolocation data at a city or region level (for compliance with Philippine-only access requirements)

3.5 Communications Data

• Records of support interactions via email or live chat
• Feedback, complaints, and dispute correspondence submitted through laroph's support channel
• Survey responses where voluntarily submitted

laroph collects personal data through the following mechanisms:

• Directly from you: Information you provide during account registration, KYC submission, deposit and withdrawal requests, support communications, and voluntary surveys.
• Automatically during platform use: Technical and device data, IP addresses, session data, gameplay logs, and cookie identifiers collected automatically when you access and use the laroph platform.
• From payment processors: Transaction confirmation data returned by GCash, PayMaya, and banking partners following deposit or withdrawal processing. laroph does not receive or store full payment credential details — only transaction reference data.
• From KYC verification providers: Identity verification results and document authenticity assessments returned by laroph's contracted KYC service provider following submission of your identification documents.
• From fraud prevention services: Risk signals and device fingerprinting data provided by contracted fraud detection partners to assist in identifying account security threats and prohibited conduct.

laroph processes your personal data for the following purposes:

• Account creation and management: To register your laroph account, verify your identity and age, maintain your account profile, and provide access to platform services.
• Transaction processing: To process deposits, withdrawals, bonus credits, and all financial movements within your laroph wallet in accordance with your instructions.
• Regulatory compliance: To fulfil laroph's obligations under Philippine gaming regulations administered by PAGCOR, anti-money laundering requirements under Republic Act No. 9160 (as amended), and the Data Privacy Act.
• Responsible gaming: To administer deposit limits, loss limits, session reminders, cool-down periods, and self-exclusion tools in accordance with your settings and regulatory requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, multi-accounting, and other prohibited conduct on the laroph platform.
• Customer support: To respond to your queries, process complaints, investigate disputes, and provide assistance in connection with your laroph account.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game offerings, and the overall player experience.
• Marketing communications: To send you relevant promotions, bonuses, and platform updates — only where you have provided valid consent and subject to an easy opt-out mechanism.

laroph processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to fulfil laroph's contractual obligations to you as a registered player — including account management, transaction processing, and provision of gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulatory requirements, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: Processing conducted for laroph's legitimate operational interests, including fraud prevention, platform security, and improvement of services — where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, conducted only where you have provided explicit, freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

laroph does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other contracted payment partners receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Your government-issued ID data and personal details are shared with laroph's contracted KYC provider solely for identity verification purposes in connection with account registration and withdrawal processing.
• Game providers: Your account identifier and session data are shared with third-party game providers to enable game delivery and session management. Game providers do not receive your full identity or financial data.
• Fraud prevention services: Technical identifiers and risk signals are shared with contracted fraud detection partners to maintain platform security and detect prohibited conduct.
• Regulatory and law enforcement authorities: laroph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine authorities where required by law, valid court order, or lawful regulatory instruction.
• Auditors and legal advisors: Personal data may be disclosed to laroph's contracted auditors, legal counsel, and compliance consultants under strict confidentiality obligations, where necessary for laroph to fulfil its legal and regulatory obligations.

All third parties receiving personal data from laroph are required to maintain data protection standards consistent with the Philippine Data Privacy Act and this Policy, under documented data processing or data sharing agreements.

laroph uses cookies and similar tracking technologies on the platform to support essential functions, improve performance, and — where you have consented — deliver relevant promotional content.

8.1 Types of Cookies Used

• Essential cookies: Required for core platform functions including login session management, security token validation, and wallet access. These cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Remember your preferences such as language settings and display configurations to personalise your platform experience.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and use the laroph platform. Used for platform improvement purposes only — not linked to individual identities in reporting.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of laroph's marketing — only where you have provided explicit consent.

8.2 Managing Cookie Preferences

You may adjust your cookie preferences at any time through your browser settings. Disabling non-essential cookies will not prevent you from accessing the laroph platform, though some personalisation features may be reduced. Withdrawing consent for marketing cookies will not affect your eligibility for promotions — it only affects the delivery of targeted promotional content.

laroph implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and laroph's servers
• Encryption of sensitive personal data fields at rest within laroph's database systems
• Passwords stored using industry-standard salted cryptographic hashing — laroph staff cannot view account passwords in plain text
• Two-factor authentication (2FA) available to all players for account login
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular independent security audits and penetration testing of platform infrastructure
• Intrusion detection and monitoring systems operating continuously on laroph's network
• Documented incident response procedures for personal data breaches, including mandatory NPC notification within 72 hours of breach discovery

While laroph maintains robust security measures, no online platform can guarantee absolute security against all possible threats. Players are responsible for maintaining the security of their own login credentials and should enable 2FA and use a unique, strong password for their laroph account.

laroph retains personal data for the periods necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data aggregated for analytics purposes does not constitute personal data and is not subject to deletion obligations under the DPA.

As a data subject under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by laroph. All requests should be submitted to the laroph Data Protection Officer as described in Section 15.

laroph will respond to all verifiable data subject rights requests within 15 business days of receipt. Where a request is complex or requires additional verification, laroph will notify you of the extension within the initial 15-day period. Identity verification may be required before processing sensitive data access or deletion requests to prevent unauthorised disclosure.

Where you are dissatisfied with laroph's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).

laroph strictly prohibits access to real-money gaming services by persons under the age of 21, in accordance with Philippine gaming regulations. laroph does not knowingly collect personal data from individuals below this age threshold.

If laroph becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, the affected account will be immediately suspended, all balances will be held pending investigation, and the personal data will be processed only to the extent required to fulfil laroph's legal and regulatory obligations before being securely deleted in accordance with the applicable retention schedule.

Parents or guardians who believe that a minor may have accessed or registered on the laroph platform should contact the laroph Data Protection Officer immediately. laroph takes all such reports seriously and will investigate and respond promptly.

In connection with the operation of the laroph platform, your personal data may be transferred to and processed by service providers located outside the Philippines — including game technology providers and infrastructure partners with servers in other countries. Where such transfers occur, laroph ensures that appropriate safeguards are in place to protect your personal data in accordance with the standards of the Philippine Data Privacy Act.

Safeguards for cross-border transfers include contractual data protection obligations in all data processing agreements with international partners, requirements for partner organisations to maintain security standards equivalent to or exceeding those required under the DPA, and regular assessments of the data protection frameworks of recipient jurisdictions.

laroph does not transfer your complete identity or financial data outside the Philippines except where strictly required for transaction processing or regulatory compliance, and only under the contractual safeguards described above.

laroph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform services, or applicable Philippine law. Material changes — including changes that affect the purposes for which your data is processed, the categories of data we collect, or your rights as a data subject — will be communicated to registered players via in-platform notification and email to your registered address at least 14 days before the changes take effect.

Minor amendments, including clarifications, typographical corrections, or updates to reflect minor operational changes that do not affect your rights, may be published without advance notice. The "Last Updated" date at the top of this page reflects when the current version was published.

Your continued use of the laroph platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you disagree with any amendment, you may request account closure by contacting laroph support before the effective date.

For all data privacy matters — including data subject rights requests, consent withdrawal, privacy complaints, or general enquiries about this Policy — please contact laroph's Data Protection Officer:

Data Protection Officer, laroph
Email: [email protected] (plain text — not a clickable link)
Subject line: "Data Privacy Request — [Your Registered Account Email]"

All data privacy communications are handled confidentially by the DPO and are not shared with laroph's general support or marketing teams. laroph aims to respond to all DPO communications within 5 business days of receipt, with full resolution of data subject rights requests within 15 business days.

If you are not satisfied with laroph's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC accepts complaints from data subjects whose rights under the Data Privacy Act have not been respected by a personal information controller.