Raffify ("we", "us") runs an online platform where hosts run free raffles and people join them. This notice explains what personal information we collect, why, how long we keep it, who we share it with, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
Who we are. Raffify, [to be added]. Data Protection Officer: [email protected].
1. What we collect
If you create an account: your name, email address, password (stored only as a one-way hash), and optionally an alias and profile photo. If you host raffles, also your mobile number (verified by a one-time code) and, for business verification, the business details and document you upload.
If you join a raffle: the details the raffle asks for — your name, and your email address and/or mobile number — or your account details if you join while signed in. If you enter with a printed stub or voucher code, we store which stub or code you used.
If you win: which prize you won, when it was drawn, and whether it was claimed and handed over.
Automatically: a record of each consent you give (what you agreed to, the document version, the time, a scrambled version of your IP address that can't be read back, and your browser type), security logs, and basic device information needed to keep the service working and safe.
We do not ask for government ID numbers, bank details or payment card numbers from participants. Participants never pay to join. Hosts' card and e-wallet details are handled by our payment provider, not by us.
2. Why we use it (and our legal basis)
- To run raffles you join: record your entry, include it in the draw, show results, and let the host contact winners — to perform the service you asked for.
- To send you messages about your entries: confirmations, draw reminders (you can turn these off), winner notifications and claim reminders — to perform the service.
- To verify hosts and keep raffles safe: phone and business verification, fraud and abuse prevention, reports and moderation — our legitimate interest in a safe platform, and legal obligations.
- To prove every draw was fair: the draw records and audit log — legitimate interest and accountability.
- Host marketing: only if you tick the box to hear from a host, that host may contact you about future raffles. You can withdraw this at any time — your consent.
- To process host payments and receipts — contract and legal obligations (tax, accounting).
3. What others can see
Public raffle pages show winners masked (for example "M***a S.") or by the alias you chose, with the prize and ticket number. Your email address and mobile number are never shown publicly. The host of a raffle you joined can see your entry; they see your contact details only if you won or agreed to hear from them.
4. Who we share it with
We share information only with the host of a raffle you join (as described above) and with service providers who process it for us under contract:
- hosting and server infrastructure; file storage (Cloudflare R2);
- email delivery (such as Resend, ZeptoMail or Amazon SES) and SMS verification codes (such as Semaphore or Twilio);
- payments for hosts (PayMongo);
- error monitoring (Sentry) and privacy-friendly, cookieless page statistics (Cloudflare Web Analytics);
- bot protection on sign-up, entry and report forms (Cloudflare Turnstile), which checks your browser and IP address to tell people from automated abuse;
- optional AI writing helpers for hosts, when enabled — and never with participant names, emails or phone numbers.
Some providers process data outside the Philippines; we use providers that protect it with contracts and security measures at least as strong as the law requires. We do not sell personal information. We disclose it to authorities only when the law requires.
5. How long we keep it
- Entries that didn't win: contact details are anonymized 90 days after the draw, unless you agreed to hear from the host.
- Winners: kept until 90 days after the prize is handed over, or 180 days after the draw if it never is.
- Business verification documents: deleted 30 days after review.
- Accounts: until you delete them. Deleting starts a 30-day grace period (signing in cancels it). After that we erase your name, email, phone number, alias, photo, password and two-factor settings, and anonymize your entries. An anonymous record with only an internal ID stays, so platform statistics, past draws and payment records still add up; it can't be linked back to you. Your email and phone number can then be used again.
- Host payment records (passes and Host Packs bought) are kept for the period tax and accounting law requires, linked only to that anonymous ID once an account is deleted.
- Consent records, draw records and the audit log are kept for as long as needed to prove what happened, with personal details removed or reduced where possible.
- Blocked accounts: if we block an account for abuse, we keep a one-way fingerprint of its email and phone number (not the actual values) so it can't simply sign up again.
- Backups are kept for 14 days. Deleted information disappears from backups when they expire, and we never restore deleted accounts from a backup.
6. Your rights
You have the right to be informed, to access your data, to correct it, to object to processing, to have it erased or blocked, to data portability, to claim damages, and to complain to the National Privacy Commission (privacy.gov.ph).
From your account you can download your data, stop marketing from any host, stop reminders, and delete your account. If you joined without an account, use the private link in your confirmation email. For anything else, contact our Data Protection Officer at [email protected]. We reply within 15 days.
7. Security
Contact details are encrypted at rest, passwords are hashed, connections use HTTPS, admin access requires two-factor authentication, and access to personal data is limited and logged. If a breach is likely to put you at risk, we will notify you and the National Privacy Commission as the law requires.
8. Cookies
We use only cookies needed to run the site: your sign-in session, a security token for forms, your light/dark preference, and — at door check-in — a cookie that remembers your ticket on that phone. Our page statistics don't use cookies.
9. Children
Hosts must be 18 or older. Some raffles may be open to minors where the host allows it; a parent or guardian should help a child join and claim any prize.
10. Changes
When we change this notice we publish a new version with its date here, and tell you by email or in the app if the change affects you significantly.