richphil Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how richphil ("richphil," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal data of users ("Player," "User," or "you") who access and use the richphil online gaming platform available at https://richphil.vip and any related services (collectively, the "Platform").

richphil is committed to protecting the privacy of Filipino players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines. richphil's data processing activities also comply with data privacy requirements imposed by the Philippine Amusement and Gaming Corporation (PAGCOR) as a condition of our operating license.

By creating a richphil account and using the Platform, you acknowledge that you have read this Policy in full and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the richphil Platform.

2 Personal Data We Collect

richphil collects personal data through various touchpoints across the Platform. The categories of personal data we collect include:

2.1 Registration Data

• Full legal name (as it appears on your Philippine government-issued ID);
• Date of birth (for age verification — you must be 21 or older);
• Philippine mobile number (used as your primary account identifier and for OTP verification);
• Email address;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., PhilSys National ID, passport, UMID, driver's license);
• Proof of address (e.g., utility bill, barangay certificate);
• Selfie or identity photograph for liveness verification;
• Proof of payment method ownership (e.g., GCash account screenshot).

2.3 Financial Transaction Data

• GCash account reference, PayMaya wallet details, or bank account information used for deposits and withdrawals;
• Transaction histories including deposit amounts, withdrawal amounts, dates, and reference numbers;
• PHP balance information.

2.4 Gaming Activity Data

• Game play history (games played, wager amounts, outcomes, session timestamps);
• Sports betting selections and results;
• Bonus usage and wagering progress data.

2.5 Technical & Device Data

• IP address and approximate geolocation (city/region level);
• Device type, operating system, and browser type;
• Session timestamps and Platform interaction logs;
• Cookie identifiers and similar tracking technologies.

2.6 Communications Data

• Support chat transcripts and email correspondence with richphil's customer service team;
• Survey responses and feedback submissions (where provided voluntarily).

3 How richphil Uses Your Personal Data

richphil uses the personal data collected for the following purposes:

• Account Management: To create, maintain, and operate your richphil account, including login authentication, balance management, and account settings.
• Payment Processing: To process GCash deposits, PayMaya transactions, BPI, BDO, and Metrobank transfers — and to verify that funds originate from payment accounts registered in your own name.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR licensing requirements and the Philippine Anti-Money Laundering Act (AMLA).
• Regulatory Compliance: To fulfill our legal obligations under Philippine law, including reporting requirements to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC).
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multiple account registrations, money laundering, and unauthorized account access.
• Responsible Gaming: To monitor player behavior for signs of problem gambling, enforce deposit limits and self-exclusion orders, and comply with PAGCOR responsible gaming requirements.
• Platform Improvement: To analyze usage patterns, fix bugs, and improve the richphil mobile experience for Filipino players.
• Customer Support: To respond to your inquiries, process complaints, and provide technical assistance via live chat and email.
• Marketing Communications: To send you richphil promotional offers, bonus notifications, and Platform updates — where you have provided consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, richphil processes your personal data on the following legal bases:

• Contract Performance: Processing is necessary to perform our contract with you — namely, the operation of your richphil account and the delivery of gaming services.
• Legal Obligation: Processing is required to comply with our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and other applicable Philippine laws.
• Legitimate Interests: Processing is necessary for richphil's legitimate interests in fraud prevention, platform security, and business analytics — provided those interests do not override your fundamental privacy rights.
• Consent: Where required by law (e.g., for certain marketing communications or optional data collections), richphil will seek and rely upon your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

richphil does not sell, rent, or trade your personal data to third-party marketers. We share your data only in the following circumstances:

• Regulatory Authorities: richphil is required to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission upon lawful request or as part of regular compliance reporting.
• Payment Processors: richphil shares transaction data with GCash, PayMaya, and partner banks (BPI, BDO, Metrobank) solely as necessary to process deposits and withdrawals on your behalf.
• Game Providers: richphil shares pseudonymized session identifiers with game providers (e.g., Pragmatic Play, PG Soft) to facilitate game delivery, RNG auditing, and dispute resolution. Game providers are contractually prohibited from using this data for any other purpose.
• KYC Service Providers: richphil may use third-party identity verification services to assist with document authentication and liveness checks. These providers process KYC data solely for verification purposes under richphil's data processing agreements.
• IT Infrastructure Providers: richphil's Platform is hosted on cloud infrastructure. Data center providers process your data on richphil's behalf under strict data processing agreements and are prohibited from independent use of your data.
• Law Enforcement: richphil may disclose personal data to Philippine law enforcement agencies where required by a valid court order, subpoena, or legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of richphil's business or assets, player personal data may be transferred to the successor entity. You will be notified of any such transfer as required by the Data Privacy Act.

6 Cookies & Tracking Technologies

richphil uses cookies and similar technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function, including maintaining your login session and remembering your authentication state across page loads. These cannot be disabled without impacting Platform functionality.
• Performance Cookies: Used to collect anonymized data about how players interact with richphil — which pages load slowly, which features are used most — to guide Platform improvements. This data is aggregated and does not identify individual players.
• Functional Cookies: Used to remember your Platform preferences (e.g., language settings, game lobby display preferences).

richphil does not use cross-site advertising cookies, behavioral tracking pixels, or third-party social media tracking scripts. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to log in to the richphil Platform.

7 Data Retention

richphil retains your personal data for as long as your richphil account is active and for such additional periods as are required by applicable Philippine law:

• Account Data: Retained for the duration of your richphil account, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA obligations.
• KYC Documents: Identity verification documents are retained for the period required by PAGCOR and AMLC, which is generally five (5) years from the end of the customer relationship.
• Support Communications: Chat transcripts and email correspondence are retained for three (3) years from the date of the communication for dispute resolution and quality assurance purposes.
• Marketing Data: Where you have consented to marketing communications, your marketing preference data is retained until you withdraw consent.

Upon expiry of the applicable retention period, richphil will securely delete or anonymize your personal data in accordance with NPC guidelines.

8 Data Security

richphil implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and richphil's servers;
• Encryption of sensitive data at rest, including KYC documents and financial credentials;
• Role-based access controls limiting staff access to personal data strictly to what is required for their job function;
• Two-factor authentication requirements for staff accessing player data systems;
• Regular security audits and penetration testing by qualified independent parties;
• Incident response procedures for detecting, reporting, and responding to personal data breaches in accordance with NPC notification requirements.

While richphil takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your richphil account credentials. Please contact richphil support immediately if you suspect unauthorized access to your account.

9 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by richphil:

To exercise any of these rights, please contact richphil's Data Protection Officer using the contact details in Section 13 of this Policy. richphil will respond to data rights requests within fifteen (15) days in accordance with NPC guidelines.

10 Children's Privacy & Age Restriction

The richphil Platform is strictly restricted to individuals who are 21 years of age or older, as required by PAGCOR. richphil does not knowingly collect personal data from persons under 21 years of age.

If richphil becomes aware that personal data has been collected from an individual under 21 years of age, the associated account will be immediately suspended, the personal data will be deleted as promptly as technically possible, and the matter will be reported to PAGCOR in accordance with our licensing obligations.

If you are a parent or guardian and believe your child under 21 has registered a richphil account, please contact richphil support immediately so that the account can be investigated and closed.

11 Cross-Border Data Transfers

richphil's Platform infrastructure and some third-party service providers (including certain game providers and cloud hosting services) may process your personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, richphil ensures that:

• The receiving jurisdiction provides an adequate level of data protection, as recognized by the NPC; or
• Appropriate safeguards are in place through contractual mechanisms (e.g., NPC-recognized standard contractual clauses) to protect your personal data.

richphil does not transfer personal data to jurisdictions where such transfers are prohibited by Philippine law or NPC regulation without prior NPC authorization where required.

12 Changes to This Privacy Policy

richphil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, richphil will provide notice to registered players via email to their registered address and/or via an on-Platform notification.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the richphil Platform following notification of material changes constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically.

13 Contact & Data Protection Officer

richphil has appointed a Data Protection Officer (DPO) as required by the Data Privacy Act of 2012. If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a potential data privacy concern, please contact:

richphil serves Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and the rest of the Philippines. All privacy-related communications are handled in English.