RichPH Privacy Policy — How We Protect Your Data

1. About This Privacy Policy

This Privacy Policy describes how RichPH ("we", "us", "our"), the operator of the online gaming platform at richph.best, collects, uses, stores, and protects personal information belonging to registered players and platform visitors ("you", "your").

RichPH is fully committed to complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC). We take our responsibilities as a personal information controller seriously, and this policy reflects how those responsibilities translate into practical data handling practices on the platform.

By registering an account at RichPH or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree, please do not register or continue using the platform.

2. Personal Data We Collect

RichPH collects only the personal data that is necessary to operate the platform, comply with legal obligations, and deliver a safe, personalised experience for Filipino players. The categories of data we collect are outlined in the table below.

RichPH does not collect sensitive personal information as defined under RA 10173 (such as health data, political opinions, or religious beliefs) unless specifically required by applicable law and with your explicit consent.

3. How We Collect Your Data

RichPH collects personal data through the following channels:

• Direct submission: When you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or update your account settings.
• Platform activity: Automatically through your use of the platform — game sessions, bet placement, page navigation, session timing, and in-app actions are recorded as part of normal platform operation.
• Payment providers: When you transact via GCash, Maya, InstaPay, bank transfer, or card payment, we receive transaction confirmation data from the relevant payment intermediary. We do not receive your full card number, PIN, or e-wallet password.
• Cookies and tracking technologies: Session cookies, persistent cookies, and similar technologies collect technical data as described in Section 9 of this policy.
• Third-party verification services: When identity verification requires cross-referencing with a government ID database or third-party KYC provider, limited identity data may be shared with that provider for verification purposes only.

4. Why We Use Your Personal Data

RichPH uses your personal data for the following purposes:

• Account management: To create, maintain, and operate your RichPH account, including processing your login, tracking your balance, and managing your VIP Club status.
• Payment processing: To receive deposits, process withdrawal requests, verify payment details, and maintain accurate financial records of all transactions in Philippine Peso.
• Identity verification: To comply with our legal obligations under anti-money laundering regulations and confirm that players meet the 18+ eligibility requirement.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and maintain records of support interactions for quality and compliance purposes.
• Platform improvement: To analyse usage patterns, identify technical issues, optimise game performance, and develop new features based on how Filipino players actually use the platform.
• Security and fraud prevention: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Regulatory compliance: To meet our obligations under Philippine gaming regulations, anti-money laundering laws, tax reporting requirements, and NPC data governance standards.
• Marketing communications: To send promotional offers, VIP Club updates, and bonus notifications to players who have opted in to receive them. You can opt out at any time.
• Responsible gaming: To monitor for signs of problem gambling, administer self-exclusion requests, enforce deposit limits, and comply with responsible gaming obligations.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, every instance of personal data processing must have a lawful basis. The legal bases on which RichPH processes your personal data are:

• Contractual necessity: Processing required to fulfil your account agreement with RichPH — including operating your account, processing payments, and providing gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws — including AML regulations, gaming licence conditions, NPC directives, and tax reporting obligations.
• Legitimate interests: Processing necessary for RichPH's legitimate operational interests, such as platform security, fraud prevention, and product improvement — where these interests do not override your fundamental rights.
• Consent: Processing that is neither contractually necessary nor legally required — specifically, sending you marketing communications. You may withdraw this consent at any time without affecting other processing.

6. Sharing Your Personal Data

RichPH does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: GCash, Maya, InstaPay, PESONet, BDO, BPI, UnionBank, and card processors receive only the transaction data necessary to execute your deposit or withdrawal. They operate under their own data protection obligations.
• Identity verification providers: Certified third-party KYC providers receive limited identity data (name, ID number, date of birth) solely for the purpose of verifying your identity. This data is not used by these providers for any other purpose.
• Technology service providers: Platform hosting, security monitoring, and analytics tools may process technical data on our behalf under strict data processing agreements. These providers act only on our instructions.
• Regulatory and law enforcement authorities: RichPH is required by law to disclose certain information to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine gaming regulatory bodies, and law enforcement when legally compelled to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your personal data may be transferred to the acquiring entity. We will notify affected players before such a transfer takes effect.

In all cases where data is shared with third parties, RichPH requires that the recipient maintains data security standards consistent with or exceeding our own and uses the data only for the specified purpose.

7. How Long We Keep Your Data

RichPH retains personal data only for as long as necessary to fulfil the purpose for which it was collected, and to comply with applicable legal retention obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8. Data Security Measures

RichPH implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the RichPH platform.
• Encrypted database storage for all personal data at rest — account credentials are hashed using modern cryptographic standards and never stored in plaintext.
• Access controls: RichPH staff access to personal data is restricted on a need-to-know basis. Access logs are maintained and reviewed regularly.
• Payment security: Raw financial credentials (card numbers, e-wallet PINs, bank passwords) are never transmitted to or stored by RichPH. Payment transactions are processed through regulated intermediaries with their own PCI DSS or equivalent compliance.
• Regular security audits: Independent third-party security assessments are conducted periodically to identify and address potential vulnerabilities.
• Incident response: RichPH maintains a data breach response protocol. In the event of a breach that is likely to affect your rights, we will notify the NPC and affected players in accordance with RA 10173 timelines.

While RichPH takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You play a role in protecting your account by keeping your login credentials confidential, using a strong password, and notifying us immediately if you suspect unauthorised access.

9. Cookies and Tracking Technologies

The RichPH platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. Here is what each category of cookie does:

• Essential cookies: Required for the platform to function. These enable your login session to persist, keep your bet slip active, and maintain security tokens. You cannot opt out of essential cookies without disabling core platform functionality.
• Performance cookies: Collect aggregated, anonymised data about how players use the platform — which pages are visited most, where errors occur, and how long sessions last. This data is used to improve the platform. No individual player is identifiable from this data.
• Functional cookies: Remember your preferences — such as your language settings, preferred game lobby view, and whether you've acknowledged a notification banner — so you don't have to reconfigure them on every visit.

RichPH does not use advertising cookies or third-party tracking pixels that report your activity to external advertising networks. Your platform behaviour data stays with RichPH and is used exclusively for platform operation and improvement. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect your ability to use the platform.

10. Children's Privacy

The RichPH platform is strictly for adults aged 18 years and above. We do not knowingly collect, process, or retain personal data from anyone under 18. Our registration process includes an age declaration requirement, and we conduct identity verification checks that include date-of-birth confirmation.

If we become aware that personal data has been submitted by or on behalf of an individual under 18, we will immediately suspend the associated account, delete the data, and — where there is reason to believe the registration was deliberate — report the matter to the relevant authorities in accordance with applicable law. If you believe a minor has registered on our platform, please contact us immediately at support@richph.best.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights in relation to your personal data at RichPH:

• Right to be informed: To know what personal data we hold about you, why we process it, and to whom it may be disclosed.
• Right to access: To request a copy of the personal data RichPH holds about you in a structured, commonly used format.
• Right to rectification: To have inaccurate or incomplete personal data corrected. Most contact and profile data can be updated directly in your account settings.
• Right to erasure: To request deletion of your personal data. We will comply where there is no overriding legal obligation to retain the data (such as AML or gaming regulatory requirements).
• Right to object: To object to processing based on our legitimate interests, including profiling for marketing purposes. You can also object to direct marketing at any time.
• Right to data portability: To receive your personal data in a machine-readable format and transmit it to another controller where technically feasible.
• Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, contact our Data Protection Officer at support@richph.best with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and respond fully within 15 business days, or within the timelines prescribed by the NPC.

12. Marketing Communications

RichPH sends promotional communications — including bonus offers, VIP Club updates, new game announcements, and seasonal promotions — to players who have opted in during registration or subsequently through their account settings.

We send marketing communications via SMS to your registered mobile number and, where provided, by email. You can opt out of these communications at any time by:

• Updating your notification preferences in the RichPH account settings page.
• Replying STOP to any SMS message from RichPH.
• Contacting support@richph.best with the subject line "Unsubscribe".

Opting out of marketing communications does not affect transactional messages — you will still receive SMS or email notifications about your deposits, withdrawals, identity verification requests, and account security alerts, as these are operationally necessary and not marketing in nature.

13. Changes to This Privacy Policy

RichPH reviews this Privacy Policy regularly and updates it when our data practices change, when new regulations take effect, or when NPC guidance requires amendment. When we make material changes, registered players are notified by SMS or in-platform notification at least 7 days before the revised policy takes effect.

The effective date displayed at the top of this page is updated with each revision. We encourage you to review this policy periodically. Continued use of the RichPH platform after the effective date of an updated policy constitutes your acceptance of the revised terms. Previous versions of this policy are available on request from our Data Protection Officer.

14. Contact Our Data Protection Officer

RichPH has designated a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing our data governance practices, responding to data subject requests, and liaising with the National Privacy Commission.

If you are not satisfied with how RichPH has handled your personal data or responded to a data subject request, you have the right to escalate your concern to the National Privacy Commission of the Philippines. Information on filing a complaint is available on the NPC's official website.