Resorts World
Privacy Policy

This Privacy Policy applies to all registered users of the Resorts World platform, including anyone who has created an account on the website or the mobile app, as well as visitors who interact with the platform without registering.

This policy covers personal data collected and processed by Resorts World in connection with the operation of the platform and the services provided to players in the Philippines. By using the Resorts World platform, you agree to the collection and use of your information as described in this policy.

Resorts World collects personal data in the following categories:

We do not collect unnecessary personal data. Financial data is limited to what is needed to process your transactions and verify your account – we do not store full bank account numbers or full card details on our servers.

The personal data we collect is used for the following purposes:

• Account creation and management – Setting up and maintaining your Resorts World account, including authentication via OTP and managing your preferences.
• KYC identity verification – Confirming your identity and age (21+) before processing your first withdrawal, as required to operate a responsible gaming platform.
• Payment processing – Processing deposits and withdrawals in Philippine Peso through GCash, Maya, and bank transfer. Payout account names are verified against your registered identity.
• Fraud prevention and security – Detecting suspicious activity, preventing unauthorised account access, and identifying potential money laundering or multi-account abuse.
• Platform improvement – Analysing usage patterns to improve the platform, optimise performance on Philippine networks, and fix technical issues.
• Account communications – Sending transactional notifications (deposit confirmations, withdrawal updates, OTP messages) and important account-related announcements.
• Responsible gaming – Monitoring usage patterns to identify signs of problem gambling behaviour and facilitating responsible gaming tools such as deposit limits and self-exclusion.

We do not use your personal data for unsolicited third-party marketing without your consent.

Resorts World processes personal data on the following legal bases:

• Contractual necessity – Processing your data is required to fulfil the account agreement between you and Resorts World, including operating your account, processing transactions, and providing access to the platform.
• Consent – Where you have provided consent, such as for certain communications or optional data uses. You may withdraw consent at any time.
• Legitimate interests – We process certain data (such as usage analytics and fraud detection signals) based on the legitimate interest of operating a secure and compliant platform.
• Legal obligation – We process identity and financial data as required to meet applicable obligations, including anti-money laundering requirements and age verification.

Resorts World does not sell personal data to third parties. We share data only where necessary to operate the platform:

• Payment service providers – GCash, Maya, and Philippine bank partners, to process deposits and withdrawals in PHP. These providers have their own privacy policies governing how they handle payment data.
• KYC and identity verification services – Third-party verification providers used to confirm your identity documents against Philippine government-issued ID standards.
• Platform and infrastructure providers – Hosting, security, and technical service providers who support the operation of the Resorts World platform.
• Game content providers – Game developers whose titles are available on the platform may receive anonymised session data for analytics purposes.
• Legal and compliance – We may disclose data to authorities or legal bodies where required by law or in response to a valid legal process.

All third-party providers we work with are required to handle personal data securely and in accordance with applicable data protection requirements.

Resorts World implements the following security measures to protect your personal data:

• SSL/TLS encryption on all connections between your device and the Resorts World platform
• OTP (one-time password) verification for account login, withdrawals, and sensitive account changes
• Access controls that restrict personal data to authorised personnel only, on a strict need-to-know basis
• Secured server infrastructure with regular security monitoring and vulnerability assessments
• Data minimisation – we only retain data that is necessary for the stated purposes

While we take all reasonable measures to protect your data, no system is completely immune to risk. You are responsible for keeping your own login credentials confidential. If you suspect your account has been accessed without your authorisation, contact support immediately.

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.

In practice, this means:

• Account and identity data is retained for the duration of your account and for a period after closure to meet legal record-keeping obligations.
• Transaction records, including deposit and withdrawal history in PHP, are retained for the period required for financial and compliance record-keeping.
• Support communications are retained for a reasonable period to allow for follow-up or dispute resolution.

When data is no longer needed, it is deleted or anonymised in a way that prevents re-identification.

The Resorts World website and app use cookies and similar technologies. Here is how they are used:

• Essential cookies – Required for the platform to function. These maintain your login session and enable core features. They cannot be disabled without affecting how the platform works.
• Preference cookies – Remember your settings and preferences across sessions, such as language and display preferences.
• Analytics cookies – Help us understand how the platform is used, which pages are visited most, and where technical issues occur. Data collected is aggregated and does not identify individual users.
• Security cookies – Used to detect and prevent fraudulent or unusual account activity.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect how some parts of the platform work. The Resorts World app may use equivalent device-based identifiers to perform similar functions.

As a Resorts World account holder, you have the following rights over your personal data:

• Right of access – You may request a copy of the personal data we hold about you.
• Right to correction – If any of your personal data is inaccurate or incomplete, you may request that we correct it.
• Right to deletion – You may request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to object – You may object to certain uses of your personal data, including data processed on the basis of legitimate interests.
• Right to withdraw consent – Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to data portability – You may request your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact our support team at [email protected]. We will respond to requests within a reasonable timeframe. Identity verification may be required before we can process certain requests.

The Resorts World platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21.

Age verification is required during KYC, and Resorts World reserves the right to suspend any account where the account holder cannot confirm their age. If you believe a minor has accessed or registered on the platform, please contact support immediately so we can investigate and take appropriate action.

Resorts World may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable law, or to provide greater clarity. When material changes are made, you will be notified via the platform or by email to your registered address.

The date at the top of this page shows when the policy was last updated. We encourage you to review this page periodically. Continued use of the platform after an update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, how your personal data is handled, or if you want to exercise your data rights, please reach out to our support team:

Email: [email protected]

For questions about your account terms, see our Terms & Conditions. For responsible gaming resources, visit our Responsible Gaming page. For frequently asked questions, visit the FAQ page.