richphp Privacy
Policy

§ 01 Who We Are

richphp is an online gaming platform operating at richphp.net, offering live casino games, slots, bingo, and related gaming services to Filipino players aged 21 and above. richphp operates under the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Data Privacy Act of 2012, richphp acts as the Personal Information Controller (PIC) in respect of the personal data of registered players and platform visitors. richphp has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact the richphp Data Protection Officer via the contact details published on the richphp platform.

§ 02 Data We Collect

richphp collects personal data from you in the following categories, depending on how you interact with the platform:

richphp does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required for responsible gaming assessments or as mandated by applicable law.

§ 03 How We Use Your Data

richphp processes your personal data for the following purposes:

• Account Management: To register and maintain your richphp account, verify your identity and age (21+), and manage your login credentials and account preferences.
• Service Delivery: To provide access to richphp games, process deposits and withdrawals in Philippine Peso, and deliver customer support services.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and reporting requirements to the Anti-Money Laundering Council (AMLC).
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gaming behaviour, enforce player-set limits, identify at-risk players, and administer self-exclusion requests in accordance with PAGCOR responsible gaming standards.
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the richphp platform experience for Filipino players.
• Communications: To send transactional notifications (e.g., deposit confirmations, withdrawal updates), respond to support enquiries, and, where you have consented, send promotional communications about richphp offers.

richphp will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your consent or establishing a separate lawful basis for processing.

§ 04 Legal Basis for Processing

Under the Data Privacy Act of 2012, richphp relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and richphp — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, the AMLA, and the DPA itself.
• Legitimate Interests: Processing is necessary for richphp's legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided those interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending promotional communications or using non-essential cookies — richphp relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

§ 05 Data Sharing & Disclosure

richphp does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Regulatory Authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory obligation.
• Payment Service Providers: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to assist richphp in verifying player identity and age in compliance with PAGCOR requirements.
• Technology Service Providers: Cloud hosting, platform infrastructure, and cybersecurity providers engaged by richphp to operate and secure the platform, acting as Personal Information Processors (PIPs) under binding data processing agreements.
• Game Content Providers: Third-party game studios and live dealer operators whose games are made available on the richphp platform, to the extent necessary for game operation and integrity monitoring.
• Professional Advisers: Legal, accounting, and auditing firms engaged by richphp, subject to professional confidentiality obligations.

All third parties with whom richphp shares personal data are required to handle that data in accordance with the DPA and richphp's data protection standards. richphp remains accountable for the processing of your personal data by its Personal Information Processors.

§ 06 Cookies & Tracking

richphp uses cookies and similar tracking technologies on the richphp.net platform to enhance your experience, maintain session security, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the richphp platform, including session management, login authentication, and security functions. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limits, to provide a personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the richphp platform, enabling us to identify and resolve technical issues and improve the user experience. These cookies are only set with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the richphp platform. richphp does not use third-party advertising or tracking cookies.

§ 07 Data Retention

richphp retains your personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account Data: Retained for the duration of your active richphp account, plus five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and the AMLA.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and PAGCOR regulations.
• KYC and Identity Documents: Retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or regulatory purposes.
• Technical and Usage Logs: Retained for twelve (12) months from the date of collection, unless required for longer periods for security investigations.

Where richphp is required by law to retain data for a period longer than those stated above, the statutory retention period shall apply. Upon expiry of the applicable retention period, richphp will securely destroy or anonymise your personal data in accordance with NPC-approved data disposal procedures.

§ 08 Data Security

richphp implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and the richphp platform
• AES-256 encryption for sensitive personal data stored at rest
• Multi-factor authentication (MFA) for richphp staff accessing systems that process personal data
• Role-based access controls limiting data access to authorised personnel on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists
• 24/7 security monitoring and intrusion detection systems
• Regular staff training on data privacy and information security obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, richphp will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA and NPC Circular No. 16-03.

§ 09 Your Rights Under the DPA

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by richphp:

To exercise any of the above rights, please contact the richphp Data Protection Officer using the contact details available on the richphp platform. richphp will respond to all data subject rights requests within thirty (30) days of receipt, in accordance with NPC guidelines.

§ 10 Children & Minors

richphp is strictly an adult gaming platform. Access to and use of richphp is prohibited for individuals under the age of 21, consistent with PAGCOR regulations governing casino-style online gaming in the Philippines.

richphp does not knowingly collect personal data from individuals under the age of 21. If richphp becomes aware that personal data has been collected from an underage individual, we will immediately close the associated account, delete the personal data, and return any funds deposited, in accordance with our Terms and Conditions and applicable law.

If you believe that a minor has registered on or accessed the richphp platform, please contact richphp customer support immediately so that we can take appropriate action.

§ 11 Cross-Border Transfers

richphp primarily processes and stores personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or game content suppliers operating in other jurisdictions.

Where such cross-border transfers occur, richphp ensures that appropriate safeguards are in place to protect your personal data, including:

• Binding contractual clauses requiring overseas recipients to apply data protection standards equivalent to those required under the Philippine DPA
• Transfer only to countries or organisations that the NPC has determined provide an adequate level of data protection
• Your explicit consent to the transfer, where required by applicable law

richphp will not transfer your personal data to overseas recipients unless one of the above safeguards is in place. You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting the richphp Data Protection Officer.

§ 12 Amendments & Contact

richphp reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR regulations, or our data processing practices. Where changes are material, richphp will notify registered players via email or an on-platform notification prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the richphp platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how richphp protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by richphp, please contact our Data Protection Officer. Contact details are available on the richphp platform. richphp is committed to resolving all data privacy enquiries promptly and in good faith.

If you are not satisfied with richphp's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.