richph
Privacy Policy

This Privacy Policy ("Policy") is issued by richph ("richph," "we," "us," "our") and applies to all personal data processed in connection with your access to and use of the richph online gaming platform accessible at richph.cam ("Platform"), including all casino games, sports betting, bingo rooms, and account management services offered therein.

richph is committed to protecting the privacy and personal data of all players, including those accessing the Platform from Manila, Cebu, Davao, Quezon City, Makati, and across the wider Philippine archipelago. This Policy is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an Account on richph, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register on or use the richph Platform.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, richph acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and website visitors. richph determines the purposes and means of the personal data processing described in this Policy.

richph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Policy. The DPO may be contacted through the support details provided in Section 15 of this Policy. richph is registered with the National Privacy Commission as required under applicable Philippine data protection regulations.

richph collects the following categories of personal data in connection with the operation of the Platform and the delivery of gaming services to Filipino players:

richph does not collect sensitive personal information as defined under the DPA (such as health records, political affiliations, or biometric data) except where expressly required by law — for example, biometric data included within a government-issued ID submitted for KYC verification purposes. In such cases, only the information strictly necessary for identity verification is extracted and retained.

richph collects personal data through the following means:

• Account Registration: When you create a richph Account, you provide your mobile number, email address, and other registration details directly to richph.
• KYC Verification: When you submit identity documents to complete the KYC process, including uploads of government-issued Philippine IDs, selfies, or proof of address.
• Financial Transactions: When you make deposits via GCash, Maya, or bank transfer, or when you request withdrawals, payment processor systems share the transaction data necessary to process the transfer.
• Platform Use: richph's systems automatically collect technical and usage data as you navigate the Platform, play games, and interact with account features.
• Cookies and Tracking Technologies: richph uses cookies and similar technologies on the Platform as described in Section 8 of this Policy.
• Customer Support Interactions: When you contact richph via live chat or email, the content of those communications is recorded and retained as part of your account history.
• Third-Party Sources: In limited circumstances, richph may receive personal data from fraud prevention agencies, AML screening services, or payment processors where necessary to verify your identity or comply with legal obligations.

richph processes your personal data for the following purposes:

• Account Management: Creating, maintaining, securing, and closing your richph Account, including processing login authentication and two-factor verification.
• Identity Verification (KYC): Verifying your age (21+), identity, and eligibility to use the richph Platform in compliance with PAGCOR requirements and Philippine law.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, InstaPay, bank transfer, and other accepted payment methods in Philippine Peso.
• Regulatory Compliance: Meeting anti-money laundering (AML) obligations under the Anti-Money Laundering Act of 2001 (AMLA), PAGCOR reporting requirements, and NPC data protection obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, and other conduct prohibited under richph's Terms and Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing assistance with account and payment issues.
• Responsible Gaming: Administering deposit limits, session timers, cooling-off periods, and self-exclusion requests; monitoring for indicators of problem gambling behaviour.
• Platform Improvement: Analysing aggregated and anonymised usage patterns to improve the richph Platform, optimise game performance, and enhance the overall player experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates to players who have opted in to receive such communications. Players may withdraw consent at any time.

Under the Data Privacy Act of 2012, richph processes your personal data on the following legal grounds:

• Consent: Where you have freely given, specific, and informed consent to a particular processing activity — for example, opting in to receive promotional communications from richph.
• Contractual Necessity: Where processing is necessary to perform the contract between you and richph — including operating your Account, processing transactions, and delivering gaming services.
• Legal Obligation: Where processing is necessary for richph to comply with applicable Philippine law, including KYC requirements, AML obligations, PAGCOR reporting, and NPC data protection requirements.
• Legitimate Interests: Where processing is necessary for richph's legitimate business interests — such as fraud detection, security monitoring, and Platform improvement — provided those interests do not override your fundamental privacy rights.

richph does not sell, rent, or trade your personal data to any third party for that party's own independent commercial purposes. richph may share your personal data with the following categories of recipients strictly to the extent necessary for the purposes described in this Policy:

• Game Providers: Certified third-party game studios (including Evolution Gaming, Playtech, Pragmatic Play, and PG Soft) receive limited technical data necessary to deliver their games within the richph Platform. These providers operate under data processing agreements with richph.
• Payment Processors: GCash (GXI), Maya (Voyager Innovations), BancNet, and other payment service providers receive financial data necessary to process your deposits and withdrawals in Philippine Peso.
• Identity Verification Services: Third-party KYC and AML screening providers receive identity documents and biographic data to the extent required for player verification and compliance screening.
• Regulatory Authorities: richph discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory and law enforcement bodies where required by law, court order, or regulatory directive.
• Professional Advisers: Legal, accounting, and compliance advisers who are bound by confidentiality obligations and require access to certain data to provide professional services to richph.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of richph's business, your personal data may be transferred to the successor entity, subject to the same protections as described in this Policy.

richph uses cookies and similar tracking technologies on the Platform to ensure its proper functioning, enhance your player experience, and gather analytics data that helps us improve our services.

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state, security tokens, and load balancing cookies. These cannot be disabled without affecting the basic operation of the Platform.
• Functional Cookies: Used to remember your preferences, such as your language setting and game display preferences, to personalise your richph experience across sessions.
• Analytics Cookies: Used to collect anonymised data on how players interact with the richph Platform, including pages visited, features used, and session duration. This data helps richph identify areas for improvement and optimise Platform performance.
• Security Cookies: Used to support fraud detection and account security monitoring, including device fingerprinting used to identify suspicious login activity from unrecognised devices or locations.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the richph Platform, including your ability to maintain an authenticated session. richph does not use third-party advertising cookies or track your browsing activity on websites other than richph.cam.

richph implements a multi-layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, and accidental loss. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and richph servers.
• Encrypted storage of sensitive personal data including passwords (hashed), financial data, and identity documents.
• Multi-factor authentication options for account login, including SMS OTP to your registered Philippine mobile number.
• Role-based access controls limiting richph staff access to personal data to those with a genuine operational need.
• Automated threat detection systems monitoring for anomalous login patterns, failed authentication attempts, and suspicious transaction activity.
• Regular security assessments and penetration testing conducted by independent cybersecurity specialists.
• Data breach response procedures aligned with the NPC's Personal Data Breach Management guidelines, including mandatory notification timelines.

While richph implements robust security measures, no system can guarantee absolute security. You also have a role in protecting your own data — including keeping your richph login credentials confidential, enabling two-factor authentication, and logging out of your Account when using shared or public devices.

richph retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act and Bangko Sentral ng Pilipinas regulations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer where a dispute or regulatory matter is unresolved.
• Technical and Usage Data: Aggregated analytics data may be retained indefinitely in anonymised form. Identifiable technical data (such as IP logs) is retained for up to twelve (12) months for security purposes.
• Marketing Consent Records: Retained for the duration of the consent and for three (3) years thereafter as evidence of the consent given.

At the end of applicable retention periods, richph will securely delete or anonymise personal data so that it can no longer be linked to an identifiable individual.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by richph. You may exercise any of these rights by contacting richph's support team or Data Protection Officer through the channels listed in Section 15:

• Right to Access: You have the right to obtain confirmation of whether richph holds personal data about you, and to receive a copy of that data together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by richph. Certain data (such as your registered mobile number) may require re-verification before amendment.
• Right to Erasure: You have the right to request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to richph's legal obligation to retain certain records under Philippine law.
• Right to Object: You have the right to object to the processing of your personal data for marketing purposes. You may withdraw consent to receive promotional communications at any time through your Account settings or by contacting support.
• Right to Block or Restrict Processing: You may request that richph temporarily restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: If you believe richph has not handled your personal data in accordance with the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

richph will respond to all valid data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case richph will notify you of the extension and the reasons for it within the initial 30-day period.

The richph Platform is strictly intended for use by individuals who are at least 21 years of age. richph does not knowingly collect personal data from persons under the age of 21. The collection of personal data from minors is categorically prohibited under richph's policies and constitutes a serious violation of applicable Philippine law governing both data protection and online gaming.

richph enforces mandatory KYC age verification for all registered accounts. Any Account found to be operated by an individual under 21 years of age will be immediately closed, all personal data associated with that Account will be deleted or anonymised to the extent permitted by law, and any funds held in the Account will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and believe that your child under 21 has registered on richph and provided personal data without your knowledge, please contact richph's support team immediately using the contact details in Section 15. richph will investigate and take appropriate action, including account closure and data deletion, as promptly as possible.

Certain third-party service providers engaged by richph — including game providers such as Evolution Gaming and Playtech — may process personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, richph ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations on cross-border data transfers.

Safeguards employed by richph for cross-border transfers include data processing agreements incorporating standard contractual clauses, contractual requirements for the recipient to implement equivalent data protection standards, and transfer impact assessments where required. richph will not transfer your personal data to jurisdictions that do not provide an adequate level of personal data protection without implementing appropriate compensating measures.

richph reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or richph's data processing practices. Material changes to this Policy will be communicated to registered players through notice on the richph Platform at next login, via SMS to your registered Philippine mobile number, or by other appropriate means.

The effective date displayed at the top of this Policy reflects the date on which the most recent version came into effect. Continued use of the richph Platform following notification of a material change to this Policy constitutes your acknowledgement of the updated terms. If you do not accept a material change to this Policy, you should contact richph to request Account closure. richph will process any withdrawal of verified real-money funds upon receipt of a valid closure request.

richph recommends that you review this Policy periodically. The most current version of the richph Privacy Policy is always available at richph.cam/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by richph, you may contact us through the following channels. Our Data Protection Officer is available to address all data privacy enquiries.

richph aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 15 working days of receipt. For data subject rights requests — including access, rectification, erasure, and portability requests — richph will respond within 30 days as required under the Data Privacy Act. If you remain dissatisfied with richph's response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which may be contacted through its official government channels.