rich09 Privacy Policy

rich09 ("we", "us", "our", "the Platform") operates the online casino and sports betting website at rich09.net (the "Website"), serving registered players across the Philippines. We are committed to protecting the privacy and personal data of every individual who interacts with our platform — whether you are a registered member, a visitor browsing the site, or someone who contacts our support team.

This Privacy Policy describes in detail what personal data we collect, the purposes for which we process it, the legal basis for each processing activity, how long we retain it, who we may share it with, and the rights you hold as a data subject under Philippine law. This policy applies to all services offered through the rich09 website, including casino games, sports betting, live dealer tables, promotional programmes, and customer support interactions.

Please read this policy carefully alongside our Terms & Conditions, which together form the complete framework governing your relationship with rich09. If you do not agree with any part of this Privacy Policy, you must stop using the rich09 platform.

For the purposes of the Data Privacy Act of 2012, rich09 acts as the personal information controller in respect of the data it collects from players and website visitors based in the Philippines. As the controller, rich09 determines the purposes and means of processing your personal data.

Where rich09 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or game software suppliers — those third parties act as personal information processors under a contractual obligation to handle your data securely and only for the specific purposes instructed by rich09.

rich09 collects several categories of personal data from players and users. The specific data points collected depend on the nature of your interaction with the platform.

3.1 Registration and Identity Data

When you register a rich09 account, we collect: your full legal name, date of birth, gender, nationality, residential address (including city — whether Manila, Cebu, Davao, Makati, Quezon City, or elsewhere in the Philippines), email address, and Philippine mobile number.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we collect copies of government-issued Philippine identification documents, which may include your PhilSys ID (national ID), passport, driver's licence, UMID, SSS ID, or PRC ID. We may also collect a selfie or live photo for biometric comparison purposes during the verification process.

3.3 Financial and Transaction Data

We collect details of all deposits and withdrawals made through your rich09 account, including transaction amounts in Philippine Peso (₱), dates, payment method references (e.g., GCash account references, bank account details for BPI, BDO, or Metrobank), and transaction status records. Full payment card or full bank account numbers are never stored directly on rich09 systems.

3.4 Gaming and Behavioural Data

We record your gameplay activity on the rich09 platform, including game sessions, bet amounts, game outcomes, bonus usage, session durations, and gaming pattern data. This data is used for account management, responsible gaming monitoring, and regulatory reporting purposes.

3.5 Technical and Device Data

We automatically collect technical data when you access the rich09 website or mobile platform, including your IP address, device type, operating system, browser type, screen resolution, time zone, and referring URL. This data helps us maintain platform security and optimise your experience.

3.6 Communications Data

We retain records of all communications between you and the rich09 support team, including live chat transcripts, email correspondence, and any documents or information you submit in connection with a support query or dispute.

rich09 collects personal data through the following channels and mechanisms:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, web beacons, log files, and analytics tools when you browse or interact with the rich09 website or mobile platform.
• From third-party providers — identity verification bureaus, payment processors (such as GCash and Maya), fraud detection services, and data analytics partners may provide or confirm data about you in connection with our compliance and security obligations.
• From public sources — where legally permitted, we may collect supplementary data from publicly available sources such as government registries or sanctions lists for anti-money laundering screening purposes.

rich09 uses the personal data we collect for the following specific purposes:

rich09 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

Under the Data Privacy Act of 2012, rich09 must have a lawful basis for every personal data processing activity. The legal bases we rely on are as follows:

• Contractual necessity: Processing your registration data, KYC information, and transaction records is necessary to perform the contract between you and rich09 — i.e., to provide you with a player account and gaming services.
• Legal obligation: We are required by Philippine gaming regulations, anti-money laundering laws, and tax legislation to collect, retain, and in some cases report certain personal data. Compliance with these obligations is a mandatory legal basis for certain processing activities.
• Legitimate interests: We process technical data, gaming behaviour data, and fraud signals on the basis of our legitimate interests in maintaining a secure, fair, and commercially viable platform — provided these interests are not overridden by your privacy rights.
• Consent: Where we send direct marketing communications or use non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rich09 does not sell your personal data to third parties. We may share your data with the following categories of recipients only where necessary and under appropriate safeguards:

7.1 Service Providers and Processors

We engage trusted third-party providers to support platform operations, including: payment gateway operators (GCash, Maya, InstaPay, BPI, BDO, Metrobank processors), identity verification service providers, game software suppliers (such as Jili Games, PG Soft, and Pragmatic Play), customer support platform providers, fraud detection and cybersecurity services, and cloud hosting and data storage providers. All processors are bound by data processing agreements requiring them to handle your data securely and only as instructed by rich09.

7.2 Regulatory and Law Enforcement Authorities

rich09 may be legally required to disclose personal data to Philippine government agencies, regulatory bodies (including those overseeing the PAGCOR-regulated market), the Anti-Money Laundering Council (AMLC), law enforcement authorities, or courts of competent jurisdiction in the Philippines. Such disclosures will only be made to the extent required by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the rich09 business, your personal data may be transferred to the successor entity. We will notify affected players via email prior to any such transfer and ensure that the recipient is bound by data protection obligations at least equivalent to those set out in this policy.

rich09 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• KYC documents: Retained for at least five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLC regulations.
• Gaming history and session data: Retained for up to three (3) years from the date of each gaming session, unless a longer retention period is required for a regulatory investigation or dispute.
• Communications and support records: Retained for up to three (3) years from the date of each interaction.
• Marketing preferences and consent records: Retained for the duration of your consent, plus one (1) year to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

rich09 uses cookies and similar tracking technologies on the rich09.net website to support platform functionality, remember your preferences, analyse site usage, and (where you have consented) deliver relevant promotional content.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the operation of the rich09 website. These enable core functions such as session management, login authentication, and security features. They cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limit configurations across sessions.
• Analytical cookies: Help us understand how players interact with the rich09 website, which pages are visited most, and where technical issues occur. This data is used in aggregated, anonymised form to improve platform performance.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotional content based on your gaming preferences and browsing behaviour on the rich09 platform.

You may adjust your cookie preferences at any time through your browser settings or the rich09 cookie consent tool. Disabling non-essential cookies will not affect your ability to log in, play games, or manage your account.

rich09 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and rich09 servers
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls ensuring that only authorised rich09 personnel can access personal data, and only to the extent required for their specific function
• Multi-factor authentication for internal systems that process personal data
• Regular security assessments, vulnerability scanning, and penetration testing of the rich09 platform
• Incident response procedures for detecting, managing, and notifying affected players of any personal data breach in accordance with NPC notification requirements

The rich09 platform is strictly intended for adults aged 21 years and above, in accordance with the minimum legal gambling age applicable in the Philippines. rich09 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21 — whether through a false declaration at registration or any other means — we will immediately close the associated account, delete the data to the extent permitted by law, and where applicable reverse any deposits made. Parents or guardians who believe a minor may have registered on the rich09 platform should contact our support team immediately via live chat.

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to the personal data rich09 holds about you:

• Right to be informed — to know what data we collect and how we use it (this policy fulfils that obligation).
• Right to access — to obtain a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to request deletion of your data where no longer necessary, subject to legal retention obligations.
• Right to restriction — to limit how we process your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing for direct marketing or on grounds relating to your particular situation.
• Right to complain — to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, contact our Data Protection Officer using the details in Section 14. We will acknowledge your request within five (5) business days and aim to resolve it within fifteen (15) business days, or within the timeframe required by applicable regulations. Identity verification will be required before any access or deletion request is actioned.

rich09 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or the services we offer. Where changes are material, we will notify registered players via their registered email address or through a prominent notice on the rich09 website prior to the changes taking effect.

The effective date at the top of this policy indicates when the current version was last updated. We encourage you to review this policy periodically. Your continued use of the rich09 platform following the posting of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rich09 handles your personal data, please contact us through the following channels:

rich09 is committed to resolving all privacy-related concerns promptly and transparently. Our DPO is available to guide you through the process of exercising your rights and will handle all requests with strict confidentiality.