rivalry Privacy Policy

1. Introduction

rivalry ("rivalry," "we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who use the rivalry platform at rivalry.live ("Platform"). This Privacy Policy ("Policy") describes how rivalry collects, uses, stores, shares, and protects your personal data, and explains the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("IRR").

This Policy applies to all personal data processed by rivalry in connection with your use of the Platform, including account registration, gameplay, payment transactions, customer support interactions, and marketing communications. By registering a rivalry account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read together with the rivalry Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, rivalry is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. rivalry has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws.

You may contact the rivalry DPO at any time using the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

rivalry collects the following categories of personal data:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Nationality and country of residence
• Username and password (stored in encrypted form)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including barangay, city, province, and postal code)

3.3 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, PhilSys national ID, UMID, SSS ID, driver's licence, PRC ID, or voter's ID)
• Proof of address documents (e.g., utility bills, bank statements, or barangay certificates)
• Selfie photographs taken for identity verification purposes

3.4 Financial & Transaction Data

• Payment method details (e.g., GCash account name, PayMaya registered name, bank account name and last four digits)
• Deposit and withdrawal history
• Transaction amounts and timestamps
• Wagering history and game activity records

3.5 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps
• Pages visited and features used on the Platform
• Clickstream data and interaction logs

3.6 Communications Data

• Records of customer support interactions (chat logs, email correspondence)
• Feedback and survey responses
• Marketing communication preferences

rivalry does not collect sensitive personal information (as defined under RA 10173) such as health data, political opinions, or religious beliefs, except where strictly required by law (e.g., responsible gaming assessments).

4. How We Collect Your Data

rivalry collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the Platform (see Section 10 for details).
• From third parties — including identity verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, and regulatory authorities where required by law.

5. Purpose & Legal Basis for Processing

The table below sets out the purposes for which rivalry processes your personal data and the corresponding legal basis under the Data Privacy Act of 2012:

Where rivalry relies on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time by contacting rivalry support or updating your account preferences.

6. Data Sharing & Disclosure

rivalry does not sell, rent, or trade your personal data. rivalry may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers

rivalry engages trusted third-party service providers to assist in operating the Platform, including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, fraud detection services, and customer support platforms. These providers are contractually bound to process your data only on rivalry's instructions and in accordance with applicable data protection law.

6.2 Regulatory & Law Enforcement Authorities

rivalry may disclose personal data to Philippine regulatory authorities (including PAGCOR and the Anti-Money Laundering Council), law enforcement agencies, or courts where required by law, court order, or regulatory direction. rivalry will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of rivalry's business, your personal data may be transferred to the acquiring entity as part of that transaction. rivalry will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Policy.

6.4 With Your Consent

rivalry may share your personal data with other third parties where you have given your explicit consent to such sharing.

7. International Data Transfers

rivalry's primary operations and data storage are based in the Philippines. Where it is necessary to transfer personal data outside the Philippines (for example, to cloud infrastructure providers or game software licensors), rivalry will ensure that such transfers are made in compliance with the Data Privacy Act of 2012 and its IRR, including by implementing appropriate safeguards such as contractual data protection clauses.

rivalry will not transfer your personal data to a country that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

8. Data Retention

rivalry retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in accordance with AML regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing preferences: Retained until you withdraw consent or close your account.
• Technical and usage logs: Retained for up to twelve (12) months, unless required for longer periods for security or legal purposes.

Upon expiry of the applicable retention period, rivalry will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9. Security Measures

rivalry implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rivalry's servers.
• Encryption of sensitive data at rest, including passwords and financial information.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication for internal systems handling personal data.
• Staff training on data protection and information security best practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rivalry will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

10. Cookies & Tracking Technologies

rivalry uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language settings, preferred payment method) to improve your experience.
• Analytics Cookies: Help rivalry understand how players use the Platform so we can improve performance and usability. Data collected is aggregated and anonymised where possible.
• Security Cookies: Used for fraud detection and prevention, including identifying unusual login patterns or suspicious activity.

10.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate.

11. Minors & Age Policy

The rivalry Platform is strictly intended for persons who are 21 years of age or older, in accordance with Philippine gambling laws and PAGCOR regulations. rivalry does not knowingly collect personal data from individuals under the age of 21.

If rivalry becomes aware that personal data has been collected from a person under 21 years of age, rivalry will immediately suspend the relevant account, delete the personal data, and return any deposits in accordance with its underage gambling procedures.

If you believe that rivalry may have inadvertently collected personal data from a minor, please contact rivalry support immediately at [email protected].

12. Exercising Your Data Subject Rights

To exercise any of your rights under the Data Privacy Act of 2012 (as described in the "Your Rights" section above), please submit a written request to rivalry's Data Protection Officer using the contact details in Section 14.

Your request should include:

• Your full name and rivalry account username.
• A clear description of the right you wish to exercise and the specific data concerned.
• A copy of a valid government-issued ID for identity verification purposes.

rivalry will acknowledge your request within seventy-two (72) hours and will respond substantively within fifteen (15) business days of receiving all required information. Where a request is complex or rivalry receives a high volume of requests, this period may be extended by a further fifteen (15) business days, and rivalry will notify you accordingly.

rivalry will not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive, in which case rivalry may charge a reasonable administrative fee or decline to act on the request.

13. Changes to This Privacy Policy

rivalry reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, rivalry will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the rivalry Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree to the revised Policy, you must stop using the Platform and may close your account in accordance with the rivalry Terms & Conditions.

14. Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or rivalry's data processing practices, or if you wish to exercise your data subject rights, please contact rivalry's Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy / Data Protection Enquiry
• Response Time: Within 72 hours for acknowledgement; 15 business days for substantive response

If you are not satisfied with rivalry's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.

For general enquiries about rivalry, please visit our About Us page. For questions about responsible gaming, please visit our Responsible Gaming page.