Privacy Policy

Who we are

This Privacy Policy explains how RAN Online Catalyst ("we") handle personal data when you play the game, use rancatalystph.com, top up, cash out RocPoints or post on the community board.

We run the Service from the Philippines. For privacy questions or requests, use the Help Center or email the support address on that page.

What we collect

• Account: username, password hash and PIN check on the game server (we do not store your raw password on the website).
• Website session: a signed cookie (roc_session) after you log in, kept for about four hours.
• Contact: email you type for a top-up receipt, and any name, email, character name and message you send through the Help Center (that mail lives in our inbox, not in a website database).
• Payments: JoePay / Xendit handle cards and e-wallets. We receive payment status, an email for the receipt and which package you bought. We do not see your full card or wallet secrets.
• RocPoints payout: GCash or Maya account name and mobile number you save, plus cash-out requests and staff notes.
• Community: posts, comments, votes and images you upload, shown under your main character name.
• Technical: IP address, browser type and time of requests, used for login lockout, captcha after failed logins, rate limits and abuse handling.
• Game data: characters, inventory, chat needed for play, and anti-cheat signals (including that the client compared running programs on your PC against a list of known cheat tools).

Why we use it

• To run the game, website login, Item Mall, top-up, Premium, RocPoints and the community board.
• To take payment, credit E-Points, pay cash-outs and look into missing credits.
• To keep the campus fair (anti-cheat, bans, report posts) and to keep the website from being flooded.
• To send a receipt when you top up, and to answer Help Center mail.
• To comply with Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173).

Cookies

The website uses a first-party session cookie after login. We do not set advertising cookies and we do not run third-party analytics pixels on these pages.

Who else sees data

JoePay (Joe Solutions) and Xendit, for checkout.

Our hosting providers (website, game servers, object storage for community images), only as needed to run the Service.

Staff who handle support, cash-outs and discipline.

Other players see what you choose to show: character names, equipment on the Market, and community posts (Report posts are kept out of public link previews).

We do not sell your personal data.

How long we keep it

Game accounts last until you stop playing, we close them for a rules break, or we wipe them (including the beta wipe).

Website sessions expire after about four hours.

Payment and cash-out records are kept as long as we need them for accounting, fraud review and law.

Community posts stay until you delete them or staff remove them.

Help Center emails stay in our mailbox until we finish the request, then follow our normal mail retention.

Your choices

You can stop using the Service, delete your own community posts, and change payout details on the RocPoints page (cash-outs then wait out a hold).

You may ask us for a copy of the personal data we hold, a correction, or deletion, subject to what we must keep for security, payments and law. During beta, a full wipe is already planned for every account.

Send those requests from the Help Center so we can match them to your character.

Security and children

We use HTTPS, signed sessions, PIN checks on sensitive actions, rate limits and captcha after repeated failed logins. No method is perfect. Tell us quickly if you think your account was taken.

The Service is not aimed at children under 13. If you believe we have data from a child that young, contact us and we will delete it where the law allows.

Changes

We may update this policy. The date at the top is the latest version. Continued use after a change means you accept it.