Privacy Policy

rich9.ph is an online gaming platform operated under PAGCOR's regulatory framework and accessible at rich9ph.org. We are the data controller responsible for the personal information collected through the rich9.ph platform, including the website, mobile browser interface, and all associated services.

This Privacy Policy applies to all personal data processed by rich9.ph in connection with your use of the platform, whether you are a registered player, a visitor browsing the site, or a person who contacts our support team.

By using the rich9.ph platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we process your personal data, please discontinue use of the platform and contact us to request account closure.

rich9.ph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, browser information, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment confirmation data from GCash, PayMaya/Maya, and Philippine banking partners.

rich9.ph uses your personal data for the following purposes:

• Account management: Creating and maintaining your player account, verifying your identity, and managing your account settings.
• Service delivery: Processing deposits and withdrawals, providing access to games, crediting bonuses, and delivering customer support.
• Legal and regulatory compliance: Fulfilling our obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including KYC verification, transaction monitoring, and suspicious activity reporting.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior, administering self-exclusion and limit-setting tools, and complying with PAGCOR's responsible gaming requirements.
• Security and fraud prevention: Detecting and preventing unauthorized account access, bonus abuse, collusion, money laundering, and other prohibited conduct.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
• Communications: Sending account notifications, transaction confirmations, security alerts, and (where you have opted in) promotional communications.

Under the Philippine Data Privacy Act of 2012, rich9.ph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you as a registered player – including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, tax reporting requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional promotional communications, where you have given explicit consent. You may withdraw consent at any time by updating your communication preferences in Account Settings.

rich9.ph does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

• Service providers: Third-party vendors who assist in operating the platform, including KYC verification providers, payment processors (GCash, PayMaya/Maya, Philippine banks), IT infrastructure providers, and customer support tools. All service providers are bound by data processing agreements that restrict their use of your data to the services they provide to rich9.ph.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory directive.
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other legal process.
• Self-exclusion registry: PAGCOR's self-exclusion registry, where you have voluntarily enrolled in cross-operator self-exclusion.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of rich9.ph's business, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

rich9.ph uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyze usage patterns. The types of cookies we use include:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve the platform.
• Preference cookies: Store your platform preferences such as language settings and notification preferences.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your rich9.ph account.

rich9.ph retains personal data for the following periods, unless a longer retention period is required by Philippine law:

• Account and identity data: Retained for 5 years after account closure, as required by PAGCOR regulations and AMLA obligations.
• Financial transaction records: Retained for 5 years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• KYC documents: Retained for 5 years after account closure or the last transaction, whichever is later.
• Gaming history: Retained for 3 years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for 2 years from the date of the last interaction.
• Self-exclusion records: Retained for the duration of the exclusion period plus 5 years, to prevent re-registration during an active exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be linked to an identifiable individual.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by rich9.ph:

• Right to be informed: The right to know that your personal data is being collected and processed, and to receive clear information about how it is used – which this Privacy Policy provides.
• Right of access: The right to request a copy of the personal data rich9.ph holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly in Account Settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AMLA regulations.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing communications, we will cease that processing immediately.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe rich9.ph has violated your data privacy rights.

rich9.ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and the rich9.ph platform is encrypted using TLS 1.2 or higher. Sensitive data at rest, including financial records and KYC documents, is encrypted using AES-256.
• Access controls: Access to personal data is restricted to rich9.ph staff and service providers who require it to perform their functions. All access is logged and subject to regular review.
• Authentication: Player accounts are protected by password hashing, OTP verification on new device logins, and optional two-factor authentication.
• Security monitoring: rich9.ph operates 24/7 security monitoring, intrusion detection systems, and regular penetration testing to identify and remediate vulnerabilities.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, rich9.ph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

While we apply industry-standard security measures, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

The rich9.ph platform is strictly for individuals aged 21 years and above, in accordance with Philippine gambling regulations. rich9.ph does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data, and forfeit any associated balances in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered on the rich9.ph platform, please contact our Data Protection Officer immediately using the contact details in Section 14.

rich9.ph primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers located outside the Philippines – for example, cloud infrastructure providers or international KYC verification services – rich9.ph ensures that such transfers are subject to appropriate safeguards, including:

• Data processing agreements that require the recipient to apply data protection standards equivalent to those required under Philippine law.
• Transfer only to jurisdictions that the National Privacy Commission has recognized as providing adequate data protection.
• Your explicit consent, where required by applicable law.

rich9.ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the mobile number or email address on file at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Your continued use of the rich9.ph platform after the effective date of any revision constitutes your acceptance of the updated policy.

rich9.ph has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act of 2012. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact our DPO:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the chat widget on the rich9.ph platform

We will acknowledge your request within 3 business days and provide a substantive response within 15 business days. For complex requests, we may extend this period by a further 15 business days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.