Legal · Data Protection
rexgames ("rexgames," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who registers and plays on the rexgames online gaming platform at rexgames.org (the "Platform"). This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.
This Policy is issued in compliance with Republic Act No. 10173, also known as the Philippine Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC") of the Philippines. By accessing or using the rexgames Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read together with our Terms and Conditions and Responsible Gaming Policy, both of which are available on the rexgames Platform. Capitalised terms not defined in this Policy have the meanings given to them in the rexgames Terms and Conditions.
Your Consent: By creating a rexgames account or continuing to use the Platform after this Policy has been updated, you confirm your consent to the data processing practices described in this Policy. You may withdraw consent at any time, subject to the limitations described in Section 11.
For the purposes of the Philippine Data Privacy Act of 2012, rexgames acts as the personal information controller ("PIC") in respect of the personal data collected through the Platform. As PIC, rexgames determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.
rexgames has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 15 of this Policy.
National Privacy Commission: The NPC is the independent government body responsible for administering and implementing the Data Privacy Act in the Philippines. If you believe your data rights have been violated, you have the right to lodge a complaint with the NPC at privacy.gov.ph.
rexgames collects the following categories of personal data from players and Platform visitors. We only collect data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed.
| Data Category | Examples | Required? |
|---|---|---|
| Identity & Contact | Name, email, mobile number, date of birth | Mandatory |
| KYC / Verification | Government ID, selfie photo | Mandatory (for withdrawals) |
| Financial | GCash number, bank account, transaction history | Mandatory |
| Gaming & Behavioural | Bet history, session data, bonus usage | Automatic |
| Technical & Device | IP address, browser type, access logs | Automatic |
rexgames collects personal data through the following means:
Accuracy: You are responsible for ensuring that all personal data you provide to rexgames is accurate, complete, and up to date. Providing false or misleading information is a violation of the rexgames Terms and Conditions and may result in account suspension.
rexgames uses your personal data only for the purposes described in this Policy. We do not use your data for purposes that are incompatible with those for which it was originally collected without first obtaining your consent or establishing another lawful basis.
We use your identity and contact data to create and manage your rexgames account, verify your eligibility to use the Platform (including age verification), process your deposits and withdrawals, deliver the games and features you access, and communicate important account-related information to you.
rexgames is subject to Philippine gaming regulations administered by PAGCOR and anti-money laundering obligations under Republic Act No. 9160 (the Anti-Money Laundering Act) and its amendments. We use your identity, financial, and transaction data to comply with these obligations, including conducting Know Your Customer (KYC) checks, monitoring transactions for suspicious activity, and reporting to the Anti-Money Laundering Council (AMLC) where required by law.
We use technical, device, and behavioural data to detect and prevent fraud, account takeover, bonus abuse, money laundering, and other prohibited conduct. This includes automated monitoring systems that flag unusual account activity for review by our security team.
We use your gaming and behavioural data to monitor for signs of problem gambling and to administer responsible gaming tools you have activated, including deposit limits, session timers, cooling-off periods, and self-exclusion. This processing is carried out in the interest of player welfare and in compliance with responsible gaming standards.
We use your contact and account data to respond to your enquiries, resolve disputes, and provide technical assistance. Support interactions are recorded and retained for quality assurance and dispute resolution purposes.
With your consent, rexgames may use your contact data to send you information about promotions, bonuses, new games, and other rexgames offers via email or SMS. You may withdraw your marketing consent at any time by updating your account notification preferences or contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.
We use aggregated and anonymised data derived from gaming and technical data to analyse Platform performance, improve game offerings, and enhance the overall player experience. Where possible, this analysis is conducted on data that cannot be used to identify individual players.
Under the Philippine Data Privacy Act of 2012, rexgames relies on the following legal bases for processing your personal data:
Sensitive Personal Information: Where rexgames processes sensitive personal information as defined under the DPA (such as government ID numbers), we do so only to the extent strictly necessary for identity verification and legal compliance, and with appropriate safeguards in place.
rexgames does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
rexgames engages trusted third-party service providers who process personal data on our behalf under written data processing agreements. These include:
All service providers are contractually required to process personal data only on rexgames's documented instructions, to implement appropriate security measures, and to comply with applicable data protection law.
rexgames may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), Philippine law enforcement agencies, or courts of competent jurisdiction where required or permitted by applicable Philippine law. Such disclosures are made only to the extent necessary to comply with the relevant legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of rexgames's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect, where reasonably practicable.
No Unauthorised Sharing: rexgames will never share your personal data with advertisers, data brokers, or unrelated third parties for marketing purposes without your explicit prior consent. If you receive unsolicited communications purporting to be from rexgames, please report them to our support team immediately.
rexgames retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | Legal / AML obligation |
| KYC documents | Duration of account + 5 years after closure | PAGCOR / AMLC requirement |
| Financial transaction records | 10 years from transaction date | BIR / AMLC requirement |
| Gaming history | Duration of account + 3 years after closure | Legitimate interest / dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interest |
| Marketing consent records | Until consent withdrawn + 3 years | Legal obligation (proof of consent) |
| Technical / access logs | 12 months from creation | Security / fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with rexgames's data disposal procedures. Where data is anonymised rather than deleted, the resulting anonymised data is no longer personal data and may be retained indefinitely for analytical purposes.
rexgames implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
While rexgames takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect that your rexgames account has been compromised, contact our support team immediately via live chat.
rexgames uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain your session, and analyse Platform usage. A cookie is a small text file placed on your device by a website you visit. The following categories of cookies are used on the rexgames Platform:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | No — essential for Platform operation |
| Functional | Remembering your language and display preferences | No — enhances core functionality |
| Analytics | Aggregated usage statistics to improve Platform performance | Yes — consent required |
| Marketing | Tracking promotional campaign effectiveness | Yes — consent required |
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may affect the functionality of the rexgames Platform, including your ability to log in and play games.
rexgames does not use cookies to serve third-party advertising on the Platform. Analytics cookies, where used, process data in aggregated and anonymised form wherever possible.
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by rexgames. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15. rexgames will respond to all data rights requests within thirty (30) days of receipt, or within such other period as permitted by applicable law.
Your Rights Under RA 10173
The Philippine Data Privacy Act gives you meaningful control over your personal information. Here is what you can ask rexgames to do.
Request a copy of the personal data rexgames holds about you, along with information about how it is being processed and the purposes for which it is used.
Request correction of any inaccurate or incomplete personal data rexgames holds about you. You can update most account details directly from your account settings.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rexgames's legal retention obligations.
Object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
Request a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible, so you can transfer it to another service provider.
If you believe rexgames has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
The rexgames Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. rexgames does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register for or use the rexgames Platform.
If rexgames becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the rexgames Platform, please contact our support team immediately using the details in Section 15.
Age Verification: rexgames uses automated and manual age verification procedures during the registration and KYC process. Providing false information about your age is a serious violation of the rexgames Terms and Conditions and may constitute a criminal offence under Philippine law.
rexgames primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, to cloud hosting providers or KYC verification services — rexgames ensures that such transfers are made only to countries or organisations that provide an adequate level of data protection, or subject to appropriate contractual safeguards such as standard contractual clauses approved by the National Privacy Commission.
By using the rexgames Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above. rexgames will not transfer your personal data to jurisdictions that do not provide adequate data protection without first obtaining your explicit consent or establishing another lawful transfer mechanism.
rexgames reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, rexgames will notify registered players by email or by posting a prominent notice on the Platform at least seven (7) days before the changes take effect, where reasonably practicable.
The "Effective Date" at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to stay informed about how rexgames protects your personal data. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes.
Previous versions of this Privacy Policy are available upon request by contacting our Data Protection Officer.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by rexgames, please contact our Data Protection Officer:
rexgames aims to respond to all data rights requests and privacy enquiries within thirty (30) calendar days of receipt. For complex requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.
If you are not satisfied with rexgames's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.
Effective Date: This Privacy Policy is effective as of January 1, 2026, and supersedes all previous versions. rexgames is committed to protecting your personal data and upholding your rights under Philippine law.
Our Privacy Commitments
Beyond the legal text, here is what rexgames does every day to keep your personal information safe and your privacy respected.
Every data processing activity at rexgames is mapped against the requirements of Republic Act No. 10173. We maintain a data processing register and conduct privacy impact assessments for high-risk processing activities.
All data in transit between your device and rexgames is protected by TLS encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256, the same standard used by major Philippine banks.
Your personal data is accessible only to rexgames staff and service providers who genuinely need it to do their jobs. Access is governed by role-based controls, and all access events are logged and audited regularly.
In the unlikely event of a personal data breach, rexgames will notify affected players and the National Privacy Commission within the timeframes mandated by the DPA — no delays, no cover-ups, full transparency.
rexgames collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect data speculatively or hold it longer than required. When retention periods expire, data is securely deleted.
rexgames has a dedicated Data Protection Officer available to handle your privacy requests and concerns. Reach out via email or live chat — all privacy enquiries are handled confidentially and responded to within 30 days.
Your Privacy. Your Game.
Now that you know how rexgames protects your data, you can focus on what matters — enjoying 1,000+ games, instant GCash payouts, and 24/7 live dealer action. Must be 21 years or older.