rich9 Casino – Privacy Policy

rich9 Casino ("rich9", "we", "us", "our") is committed to protecting the privacy and security of the personal data of all players and visitors who use the rich9 Platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data in connection with the operation of the rich9 online casino platform.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC). By registering an account or using the rich9 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you do not agree with any part of this Privacy Policy, you should discontinue use of the rich9 Platform immediately. For questions or concerns, please contact our Data Protection Officer using the details provided in Section 14.

rich9 acts as the personal information controller in respect of the personal data collected through the Platform. As the personal information controller, rich9 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy laws.

rich9 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data privacy legislation. You may contact the DPO at the email address provided in Section 14 of this Policy.

rich9 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID
• Date of birth (for age verification — 21+ requirement)
• Nationality and country of residence
• Mobile number and email address
• Residential address

3.2 Identity Verification Data

• Government-issued ID type and number (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Selfie or facial image submitted for identity verification
• Source-of-funds documentation where required by anti-money laundering regulations

3.3 Financial Data

• GCash mobile number or PayMaya / Maya account reference
• Bank account details (account name, bank name, account number) for bank transfer transactions
• Debit card details (card number masked, expiry date) where applicable
• Transaction history including deposits, withdrawals, and wager records

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used
• Login timestamps and access logs
• Cookie and tracking technology data (see Section 10)

3.5 Communications Data

• Records of communications with rich9 customer support
• Feedback, survey responses, and promotional opt-in preferences

rich9 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, or contacting customer support.
• Automated collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from licensed KYC (Know Your Customer) service providers; fraud prevention data from anti-fraud service providers; payment confirmation data from payment processors including GCash, PayMaya / Maya, and partner banks.

rich9 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your rich9 player account.
• Identity verification: Verifying your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• Transaction processing: Processing deposits, withdrawals, and maintaining accurate financial records.
• Platform operation: Delivering game services, processing bets, calculating and paying out winnings, and maintaining game integrity.
• Customer support: Responding to your enquiries, complaints, and support requests.
• Legal compliance: Complying with applicable laws and regulations, including anti-money laundering (AML) obligations, PAGCOR reporting requirements, and tax obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and other prohibited conduct.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administering responsible gaming tools including self-exclusion.
• Platform improvement: Analysing usage data to improve the Platform's performance, features, and user experience.
• Marketing communications: Sending promotional offers and updates where you have opted in to receive such communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, rich9 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to when registering your account, including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing conditions, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

rich9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya / Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process deposits and withdrawals.
• Identity verification providers: Licensed KYC service providers engaged to verify player identity and age in compliance with regulatory requirements.
• Game software providers: Licensed game studios and live dealer providers, including Ezugi, who require certain technical data to deliver game services.
• Fraud prevention and security providers: Third-party services engaged to detect and prevent fraudulent activity on the Platform.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities where disclosure is required by law or regulation.
• Professional advisers: Lawyers, auditors, and accountants engaged by rich9 in connection with the operation of the Platform, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of rich9's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom rich9 shares personal data are required to process that data in accordance with applicable Philippine data privacy laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

rich9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing conditions and AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR regulations.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and usage data: Retained for up to twelve (12) months from collection, unless required for longer for security or fraud investigation purposes.
• Marketing preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with rich9's data disposal procedures.

rich9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and the rich9 Platform is encrypted using 256-bit SSL/TLS technology. Sensitive data at rest, including financial records and identity documents, is encrypted using industry-standard algorithms.
• Access controls: Access to personal data is restricted to authorised rich9 personnel and service providers on a strict need-to-know basis. All access is logged and subject to regular review.
• Two-factor authentication: rich9 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security.
• Regular security audits: The Platform undergoes regular penetration testing and security audits conducted by independent third-party security specialists.
• Incident response: rich9 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Data Privacy Act.

While rich9 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying rich9 immediately if you suspect unauthorised access to your account.

rich9 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse how the Platform is used.

The following categories of cookies are used on the rich9 Platform:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game display options to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players use the Platform, which pages are visited most frequently, and where errors occur. This data helps us improve the Platform.
• Marketing cookies: Used to deliver relevant promotional content to you based on your interests and gameplay activity, where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For marketing cookies, you may withdraw consent at any time through your account settings or by contacting support.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by rich9:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed — which this Privacy Policy fulfils.
• Right of access: The right to request a copy of the personal data rich9 holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 14. We will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.

The rich9 Platform is strictly intended for individuals who are at least 21 years of age. rich9 does not knowingly collect personal data from individuals under 21 years of age.

As part of the registration process, all players are required to confirm that they are 21 years of age or older. rich9 conducts identity and age verification checks on all accounts, and any account found to belong to a person under 21 years of age will be immediately closed. Any funds deposited by an underage player will be returned to the verified payment method on file after deducting any bonuses received.

If you believe that a minor has registered an account on the rich9 Platform or has accessed the Platform using your account, please contact us immediately at the details provided in Section 14 so that we can take appropriate action.

rich9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the Platform, with a minimum of seven (7) days' notice before the changes take effect, except where immediate amendment is required by law.

The most current version of this Privacy Policy will always be available on this page, with the effective date updated accordingly. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within 15 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila
• Website: privacy.gov.ph