Your privacy matters to us. This policy explains exactly what personal data richphil collects, why we collect it, how we protect it, and what rights you have under Philippine law.
Privacy at a Glance
richphil does not sell, rent, or trade your personal information to third-party marketers. Your data is shared only where required to deliver services, meet legal obligations, or comply with PAGCOR regulations — nothing else.
richphil processes all personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173). Your rights as a Filipino data subject — including access, correction, and deletion — are enforceable under Philippine law.
You have the right to access the personal data richphil holds about you, correct inaccurate records, request deletion where legally permissible, and withdraw marketing consent at any time — all without charge or prejudice to your account.
This Privacy Policy ("Policy") describes how richphil ("we", "us", "the Platform") collects, uses, stores, shares, and protects personal information obtained from individuals ("you", "Player", "User") who access or use the richphil website at richphil.app and its associated services. This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines of the National Privacy Commission (NPC) of the Philippines. By creating a richphil account or using the Platform, you acknowledge that you have read and understood this Policy.
richphil is committed to protecting the privacy and personal data of all Filipino players and site visitors. As an online gaming operator regulated by the Philippine Amusement and Gaming Corporation (PAGCOR), richphil is required to collect and process certain categories of personal data to operate a lawful, safe, and compliant gaming service. This Policy governs all such processing activities and applies to data collected through the richphil website, mobile-browser interface, customer support channels, and any other touchpoint through which you interact with richphil.
This Policy should be read alongside the richphil Terms & Conditions and Responsible Gaming page, which together form the full framework governing your relationship with the richphil platform.
richphil is the data controller responsible for the personal information collected through the richphil platform. As data controller, richphil determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with the Data Privacy Act of 2012 and applicable PAGCOR regulatory requirements.
richphil has designated a Data Protection Officer (DPO) as required under the Data Privacy Act. The DPO is responsible for overseeing compliance with this Policy and the DPA, and may be contacted through the details provided in Section 16 of this Policy.
richphil collects the following categories of personal data, depending on how you interact with the platform:
| Category | Data Types | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID number, photograph | During KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Account registration & KYC |
| Financial Data | GCash account reference, bank account details (last 4 digits), deposit/withdrawal transaction records | Payment processing |
| Gaming Data | Game history, session duration, bet amounts, win/loss records, bonus usage | During all gaming sessions |
| Technical Data | IP address, device type, browser type and version, operating system, session identifiers | Automatically on platform access |
| Usage Data | Pages visited, features used, click patterns, referral source | Automatically via cookies and analytics |
| Communications Data | Support chat transcripts, emails, feedback submissions | When contacting richphil support |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, session reminder configurations | When responsible gaming tools are used |
Sensitive Personal Information: Government ID details and financial account data are classified as sensitive personal information under the Data Privacy Act. richphil applies enhanced security measures and strict access controls to all sensitive personal information categories.
richphil collects personal data through the following means:
richphil processes personal data only for specific, legitimate purposes and only where a valid legal basis exists under the Data Privacy Act of 2012. The following table summarises the primary processing activities:
| Purpose | Legal Basis |
|---|---|
| Account registration, identity verification (KYC), and account management | Performance of contract; legal obligation (PAGCOR KYC requirements) |
| Processing deposits and withdrawals via GCash, PayMaya, and bank transfers | Performance of contract |
| Delivering gaming services, maintaining game history, and calculating balances | Performance of contract |
| Anti-money laundering (AML) monitoring and suspicious activity reporting | Legal obligation (AMLA, PAGCOR regulations) |
| Responsible gaming monitoring, deposit limit enforcement, self-exclusion management | Legal obligation; legitimate interests (player protection) |
| Customer support, dispute resolution, complaint handling | Performance of contract; legitimate interests |
| Platform security, fraud detection, and abuse prevention | Legitimate interests; legal obligation |
| Sending promotional communications and bonus notifications | Consent (you may withdraw at any time — see Section 12) |
| Platform analytics, UX improvement, and performance optimisation | Legitimate interests |
| Compliance with PAGCOR audit requests and regulatory reporting | Legal obligation |
richphil does not sell your personal data. We share personal information with third parties only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:
All third parties with whom richphil shares personal data are required to process it in compliance with applicable data protection laws and richphil's data processing requirements. richphil does not permit third parties to use your data for their own marketing or commercial purposes.
richphil uses cookies and similar tracking technologies to operate the platform, maintain your session after login, remember your preferences, analyse platform usage, and detect fraudulent activity. The following types of cookies are used:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the richphil platform from functioning correctly and will prevent you from logging in to your account.
richphil does not use advertising tracking cookies or retargeting pixels that monitor your activity outside of the richphil.app domain. The tracking technologies deployed by richphil are limited to first-party operational and security purposes.
richphil retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. The following general retention principles apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | PAGCOR compliance, AML obligations |
| Financial transaction records | 10 years from transaction date | AMLA requirements, tax obligations |
| Game history & session logs | 5 years from session date | Dispute resolution, PAGCOR audits |
| Customer support records | 3 years from last interaction | Quality assurance, dispute resolution |
| Marketing consent records | Duration of consent + 2 years | Compliance with DPA consent requirements |
| Security & fraud investigation logs | 5 years from incident date | Legal proceedings, law enforcement cooperation |
At the end of the applicable retention period, richphil securely destroys or anonymises personal data in accordance with recognised data destruction standards.
richphil implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Data Breach Notification: In the event of a personal data breach that is likely to give rise to a real risk of serious harm to affected Players, richphil will notify the National Privacy Commission and affected individuals within 72 hours of becoming aware of the breach, as required under NPC Circular No. 16-03.
Under the Data Privacy Act of 2012, you have the following rights with respect to the personal data richphil holds about you. You may exercise any of these rights by contacting richphil through the details in Section 16 of this Policy. richphil will respond to all verified requests within 15 business days.
You have the right to be informed of how richphil collects and uses your personal data. This Privacy Policy constitutes richphil's primary disclosure of that information.
You have the right to request a copy of the personal data richphil holds about you, along with information about the purposes and recipients of that data.
You have the right to have inaccurate or incomplete personal data corrected. For account details, many corrections can be made directly through Account Settings after logging in.
You may request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to richphil's legal retention obligations under PAGCOR and AMLA requirements.
You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. Objections to marketing are acted upon within 5 business days.
You have the right to receive a structured, machine-readable copy of the personal data you provided to richphil, where technically feasible, for transfer to another controller.
If richphil's processing of your personal data causes you damage through unlawful or negligent processing, you have the right to compensation and to file a complaint with the National Privacy Commission.
The richphil platform is strictly intended for individuals aged 21 years and above. richphil does not knowingly collect personal data from persons under the age of 21. The minimum age for real-money online gaming in the Philippines is 21 years under PAGCOR regulations, and richphil enforces this requirement through its KYC verification process.
If richphil discovers that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all personal data associated with that account will be securely deleted or returned to the individual's parent or guardian as appropriate, and no winnings generated on the account will be paid out.
If you believe that a person under the age of 21 has created a richphil account, please contact richphil support immediately through the details in Section 16. richphil takes underage gaming violations extremely seriously and cooperates fully with PAGCOR on related enforcement matters.
richphil may, with your consent, send you promotional communications about new games, bonus offers, platform updates, and promotions relevant to Filipino players — including seasonal promotions tied to PBA Finals, major holidays, and special events. Your contact details will not be shared with third-party marketers.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent does not affect the processing of personal data for other lawful purposes such as account management, payment processing, KYC compliance, and responsible gaming monitoring.
The richphil platform does not contain links to third-party websites for commercial or advertising purposes. Game content is embedded within the richphil platform from licensed providers and does not redirect players to external sites. richphil is not responsible for the privacy practices of any external platform or service that you access independently of richphil.app.
Where richphil engages certified game software providers, KYC verification partners, or technology infrastructure suppliers based outside the Philippines, personal data may be transferred to and processed in countries other than the Philippines. richphil ensures that all such cross-border transfers comply with Section 21 of the Data Privacy Act and NPC requirements, including:
richphil does not transfer financial transaction data, KYC identity documents, or responsible gaming records outside the Philippines unless required by law or expressly necessary for the delivery of a regulated service under the PAGCOR license.
richphil reviews and updates this Privacy Policy periodically to reflect changes in law, regulatory requirements, or platform practices. The effective date at the top of this page indicates the date of the most recent revision.
For material changes — including new purposes of processing, new categories of data collected, or significant changes to your rights — richphil will notify registered players via account email and display a prominent notice on the platform login page at least 7 days before the changes take effect. Your continued use of the richphil platform after the effective date of any updated Policy constitutes your acknowledgment of the changes.
To exercise any of your data subject rights, submit a privacy concern, or contact richphil's Data Protection Officer, please use the following channels:
richphil will acknowledge all privacy requests within 2 business days and provide a substantive response within 15 business days. For complex or sensitive requests, an extension of up to an additional 15 business days may apply, in which case richphil will notify you of the extended timeline.
If you are unsatisfied with richphil's handling of a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority responsible for enforcing the Data Privacy Act and may be contacted through its official channels at privacy.gov.ph (accessible independently of this document).
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the richphil Privacy Policy. In the event of any conflict between this Policy and a translated version, the English-language version shall prevail.
Why It Matters
richphil never stores your full GCash wallet credentials or mobile number beyond what's needed for payment reconciliation. Your e-wallet PIN and full account access remain exclusively with your GCash provider.
Government ID images and identity documents submitted for KYC are stored in encrypted form with restricted access. They are used only for age and identity verification — never shared for marketing or commercial purposes.
Your bet history, session data, and win/loss records are retained to serve your account — for dispute resolution, balance verification, and responsible gaming monitoring. richphil does not profile or sell this data externally.
Every richphil promotional email includes a clear unsubscribe link. Marketing opt-outs are processed within 5 business days. Opting out of marketing has no effect on your account or gaming access.
Live chat transcripts and email support records are stored securely and accessed only by the support team handling your query or their supervisors for quality assurance purposes — never by third parties for unrelated purposes.
richphil's data processing activities are registered with the National Privacy Commission of the Philippines as required under NPC Circular No. 17-01. Your rights are backed by the full enforcement powers of the NPC.
You've read the full richphil Privacy Policy. Now you know your data is protected under Philippine law, your GCash details stay private, and you're in full control of your personal information at every step.
21+ only. richphil is regulated by PAGCOR. Data processed under RA 10173.