Privacy Policy

When you interact with Rally District PH — whether booking a court, joining an Open Play session, or creating an account — we collect information you provide directly:

• Identity & contact: your full name, email address, and mobile number.
• Account details: your skill level, nickname, birthday (optional), and profile photo (optional).
• Booking data: the courts, dates, time slots, and number of players you select.
• Open Play data: session registrations, match results, and game statistics generated during sessions.
• Payment references: proof-of-payment upload references and payment method used. We do not store raw card or bank account numbers.

We also collect limited data automatically when you use our website, such as your browser type, pages visited, and referring URL. This is used solely to keep the site working correctly.

We use the information we collect to:

• Process and confirm your court rental bookings and Open Play registrations.
• Send booking confirmations, reminders, and session updates by email.
• Manage in-session queues, court rotations, and game tracking through our Rally Match and Open Play tools.
• Calculate and display your points balance, tier status, and match history.
• Issue and track Rally Credits when applicable.
• Respond to your questions and support requests.
• Improve our facilities and services based on aggregated usage patterns.
• Send promotional content — only if you have opted in, and you may opt out at any time.

We do not sell your personal information to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects on you.

Online payments are processed through PayMongo, a PCI-DSS certified payment processor licensed by the Bangko Sentral ng Pilipinas. When you pay via GCash, Maya, QR Ph, or card, your payment details are transmitted directly to PayMongo and are not stored on our servers.

We retain only a reference to the transaction (source ID or reference number) sufficient to confirm and reconcile your booking. PayMongo's own privacy policy governs how they handle your payment data.

Our site uses a small number of cookies and browser storage technologies to operate:

• Session cookie: keeps you signed in to your customer account during a visit.
• Booking cart: stores your selected time slots locally so your cart persists while you browse.

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics that profile you across the web. You can clear cookies and local storage at any time through your browser settings, though doing so will sign you out and clear any unsaved cart data.

We share your information only with service providers who help us operate the platform:

• PayMongo — payment processing, as described above.
• Resend / email providers — to deliver transactional and booking emails on our behalf.
• Neon / hosting infrastructure — database and application hosting. Data is stored in secure cloud environments.

All service providers are contractually required to handle your data in a manner consistent with this policy. We do not share your information with marketing partners, data brokers, or unrelated third parties.

We keep your account and booking data for as long as your account is active and for a reasonable period afterward to resolve disputes, maintain records required for legal or tax purposes, and provide customer support. Open Play match history and point transaction logs are retained for up to three years. If you request that your account be deleted, we will remove your personal information within 30 days, except where retention is required by applicable law.

Under the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information at any time through your account settings or by emailing us.
• Object to or withdraw consent for processing not required to fulfil your bookings.
• Erasure — request deletion of your account and personal data, subject to any lawful retention obligations.
• Portability — receive a copy of your data in a structured, machine-readable format.

To exercise any of these rights, contact our Data Protection Officer at bookings@rallydistrictph.com. We will respond within 15 business days.

We implement industry-standard measures to protect your data: HTTPS encryption on all pages, hashed passwords (bcrypt), token-based authentication, and role-based access controls for administrative functions. No system is completely immune to breach, however. If we discover a security incident that affects your data, we will notify you in accordance with our obligations under applicable law.

Our services are not directed at persons under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information without parental consent, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated by email to registered account holders. Continued use of our services after the effective date of any change constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your data, please reach us at: