Privacy Policy

Effective date: 3 November 2026 (updated for version 2.8) · Controller: Raffle Royale, Philippines · App: Raffle Royale (Android & iOS) · Website: raffleroyale.online

This policy explains what Raffle Royale ("we", "us") collects when you use the app or website, why, and the choices you have. We do not sell your personal data.

1. What we collect

• Your profile: the name you type when you start the app, your mobile number, your language choice (English or Tagalog), and a random user ID we create (for example U-7K3QXA). We do not send you SMS and do not ask for your email to use the app.
• Google / Apple sign-in (optional): if you continue with Google or Apple, we receive the account ID they give us and, if you share it, your email address and name. Apple may give us a private relay email. We use them only to sign you in; we never receive your Google or Apple password. When you delete your account we also unlink Sign in with Apple at Apple.
• Rewards program: who invited you (their user ID), the people you invited, the credits you earned or used and why (for example "reward from Ben's payment"). Your invitees see only your first name; you see only their first names.
• Influencers only: the bank or e-wallet name, account name, account number, Taxpayer Identification Number (TIN) and registered address you give us for payouts, whether we have your sworn declaration or you are VAT-registered, and your withdrawal history with the tax withheld. Only the developer and authorised staff can see them; we use them to pay you and for the tax reporting Philippine law requires (BIR Forms 2307, 1601-EQ and the alphalist of payees filed with the BIR). Payout and tax records are kept for as long as the tax law requires (generally several years), even after you delete your account.
• Backup code: a code shown once when you sign up so you can move your account to a new phone. We store only a scrambled (hashed) version.
• A device identifier: to enforce one entry per phone per event and one account per phone (anti-cheat), the app reads your phone's app-specific ID (Android ID / iOS "identifier for vendor"). We store only a scrambled (hashed) version on our server, never the raw ID.
• Raffle activity: events you create or join, your answers to an event's entry questions (if the organizer adds any, e.g. company or barangay), receipt or ticket numbers you enter, prizes, draw results, whether you claimed a prize in time, and when a prize ticket was handed over.
• Pictures organizers upload: prize photos and event logos (shown to everyone viewing the event).
• Payments for organizer plans and sponsor ads: the plan, amount, the payment method you used (for example GCash), the reference number and, if you send it, a screenshot of your receipt. Screenshots are stored privately and only we can see them. We never receive your bank or e-wallet password or card details. Sponsors who book an ad on our website also give their business name, contact name, email, mobile number and ad picture.
• Push notification token: if you allow notifications, a token from Apple/Google (through Expo's push service) so we can tell you when you win, remind you before an event you joined, pass on organizers' messages about their event, and confirm your payment. Turn notifications off any time in your phone settings.
• Crash reports: if the app crashes, it sends us the error message, app version, phone model, operating-system version and your user ID, so we can fix the problem.
• Support messages and bug reports: what you write, plus the email address you give (optional for bug reports), your user ID, the app version, phone model and operating-system version, so we can reply and fix problems. A bug report can also include a screenshot you choose to add and, unless you switch it off, diagnostics: screen size, language, time zone, connection type, the screen you were on, and the last few errors and failed requests in the app (you can see exactly what is sent before sending). Diagnostics never include passwords, backup codes, tokens, your mobile number or your messages. Screenshots and diagnostics are only visible to the developer.
• Payment confirmation: to confirm GCash / Maya / bank payments faster, we may compare the reference number and amount you send with the payment notification our own account receives. That notification may show the first letters of your name and part of your mobile number; we keep it for up to 6 months. PayPal: if you pay with PayPal, PayPal handles your card or PayPal details under its own privacy policy; we receive the order and capture IDs, the amount and its status. Crypto payments: if you pay with USDT or BNB, we keep the wallet address you paid from, the transaction hash, the token and amount. These are on the public BNB Smart Chain anyway and anyone can look them up; we use them only to confirm your payment (we read the transaction from a public blockchain node) and keep them with your payment records. Online payments made through our payment provider (PayMongo) and purchases through Google Play or the App Store are handled by them under their privacy policies; we receive the payment status and a reference, never your card or wallet details.
• Chat with us: the messages you send in Help → Chat with us and the team's replies, with the time and your user ID, so we can help you. Only the developer and the support staff they authorise can read them.
• Camera: used only to scan QR codes. Images are processed on your phone in real time and are never stored or uploaded.
• Basic server logs: like any website, our host records IP addresses and request times for security. To prevent spam we keep a scrambled (hashed) form of IP addresses for rate limiting.

2. Advertising

Raffle Royale shows ads so the app can stay free:

• Google AdMob may collect your device's advertising ID, IP address and basic device information to show and measure ads. Where the law requires it (for example in the EEA, UK and some US states), the app asks for your consent first using Google's consent form, and you can change your choice later from the same form. On iPhone you may also be asked for tracking permission; you can say no and still use the app. Ads are limited to content rated PG. Learn more at https://policies.google.com/technologies/partner-sites.
• Google AdSense (web app at raffleroyale.online/app only): Google and its partners may use cookies and similar technologies to show and measure ads, including personalised ads based on your visits to this and other websites. Where the law requires it, a consent message (Google's) asks you first. You can turn off personalised ads at https://adssettings.google.com, and learn how Google uses this data at https://policies.google.com/technologies/partner-sites.
• Direct sponsor ads are images we host ourselves. We count how many times each sponsor ad is shown and tapped, as anonymous daily totals only - not linked to you.
• Users on a paid or gifted plan may not see ads.

3. How we use information

To run raffles (entries, live results, prize tickets, winner claim times, reminders), stop cheating (including comparing entrants' names and mobile numbers to catch the same person entering twice), process plan and sponsor payments, run the rewards program (credits and influencer payouts), send you a thank-you message after a payment, let organizers manage staff, answer support requests, fix bugs, show ads and keep the service secure. We use your information only for these purposes.

4. Who can see it

• Event organizers and their staff see, for their own events, the name, mobile number, user ID, answers to entry questions and receipt numbers of everyone who joined, and who won. They can print or download this in a results report. Organizers must use it only to run their event and contact winners.
• Everyone viewing an event's winners board sees the winners' names. The organizer's stage display (for a projector) shows entrants' first names and last initials, and winners' names.
• Service providers: PayPal (for PayPal payments), Google and Apple (to check a Google / Apple sign-in), our web host (which stores the data on servers for raffleroyale.online), Google (for AdMob ads) and Expo, Apple and Google (to deliver push notifications - only the token and the message).
• Legal reasons: if the law requires it, or to protect people's safety.

5. How long we keep it

Account data is kept until you delete your account. Event data is kept until the organizer deletes the event. Support messages (with any screenshots and diagnostics), chat messages and crash reports are kept up to 24 months; chat messages are deleted with your account. Payment records and influencer payout records (including the TIN given for a payout) are kept for as long as Philippine tax and accounting rules require (generally up to 10 years); receipt screenshots are deleted after 24 months. Ad statistics are anonymous totals. Daily backups of the database are kept for 14 days.

6. Your choices and rights

• Change your name, mobile number or language any time under Profile.
• Notifications: allow or block them in your phone's settings.
• Delete your account in the app: Profile → Delete my account. This removes your profile, your entries, any events you own, your credits and your payout details from our server immediately. Winner names in other organizers' past events may remain as part of their records.
• Ask us for a copy of your data, a correction, or deletion by emailing raffleroyale.win@gmail.com. Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) you have the right to be informed, to access, to object, to correct, to erase or block, to data portability, and to file a complaint with the National Privacy Commission (https://privacy.gov.ph). People in other places (for example under the EU/UK GDPR) may have similar rights.

7. Children

Raffle Royale is made for a general audience and is not directed at children under 13. Children under 13 may take part in an event only through a parent or guardian, using the parent's phone and account. If you believe a child under 13 has given us personal data, contact us and we will delete it.

8. Security

Data travels over encrypted HTTPS connections. Login keys and backup codes are stored only in scrambled (hashed) form on our server, and login keys are kept in your phone's secure storage. Payment screenshots and backups are stored in a private area of our server that only the admin can open, and the admin panel uses two-step login. No system is 100% secure, but we work to protect your information.

9. Changes

If we change this policy we will update the date above and, for important changes, tell you in the app.

10. Contact

Raffle Royale Support - raffleroyale.win@gmail.com - https://raffleroyale.online/support/