richyph Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "richyph," "we," "us," "our" — the richyph platform and its operating entity providing online casino and sports betting services at richyph.com.
• "Player," "you," "your" — any individual who accesses, registers, or uses the richyph platform in any capacity.
• "Personal Information" or "Personal Data" — any information from which an individual can be identified, directly or indirectly, including but not limited to name, date of birth, address, contact number, email address, government ID details, financial data, and device identifiers.
• "Sensitive Personal Information" — personal data relating to an individual's government ID numbers, financial account details, and any other category defined as sensitive under the Data Privacy Act of 2012 (RA 10173).
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, transfer, disclosure, and deletion.
• "Data Controller" — richyph, as the entity that determines the purposes and means of processing your personal data.
• "NPC" — the National Privacy Commission of the Philippines, the regulatory body responsible for the administration and enforcement of RA 10173.
• "KYC" — Know Your Customer; the identity and age verification process required by richyph before certain account functions are permitted.
• "Cookie" — a small text file placed on your device by the richyph platform for the purposes of session management, analytics, and personalization.

Data Controller

richyph acts as the Data Controller for all personal information collected through the richyph platform in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173). As Data Controller, richyph is responsible for determining the purposes for which, and the means by which, your personal data is processed. richyph has appointed a Data Protection Officer (DPO) who oversees all data privacy compliance matters. Contact details for the richyph DPO are provided in Section 15 of this Policy.

Data We Collect

richyph collects only the personal information reasonably necessary to provide a safe, compliant, and high-quality gaming experience. The categories of data we collect include the following:

3.1 Registration Data

• Full legal name as it appears on a Philippine government-issued ID
• Date of birth (to verify you meet the 21-year minimum age requirement)
• Residential address (province, city, barangay, ZIP code)
• Valid Philippine mobile number
• Email address
• Chosen username and encrypted password

3.2 KYC & Verification Data

• Copy of valid Philippine government-issued identification (e.g., PhilSys National ID, passport, UMID, SSS card, driver's license, PRC ID)
• Proof of address documentation where required
• Selfie or liveness verification image where required by richyph's KYC process

3.3 Financial Data

• GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph, or other registered payment account identifiers used for deposits and withdrawals
• Transaction history including deposit amounts, withdrawal requests, and timestamps
• Wallet balance records

3.4 Gaming & Activity Data

• Game session logs, wager history, and game outcomes
• Bonus and promotion usage records
• Login timestamps and session duration data
• Customer support interaction records

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Referring URL and on-site navigation patterns

How We Collect Data

richyph collects personal information through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — through cookies, session tracking technologies, and server logs when you browse or interact with the richyph platform.
• From third-party providers — including identity verification services, payment processors (e.g., GCash, Maya, BPI, BDO), and fraud detection partners, who may provide or verify personal data in connection with your richyph account.
• From public sources — where permitted by applicable law, richyph may supplement account information with data from publicly available government records or databases for the purposes of fraud prevention and regulatory compliance.

Purpose & Legal Basis for Processing

richyph processes your personal data on the following legal bases and for the following purposes, all of which are recognized under the Data Privacy Act of 2012 (RA 10173):

Data Sharing

richyph does not sell, rent, or trade your personal information to third parties for commercial marketing purposes. However, richyph may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph, Visa, Mastercard, and other payment providers, for the purpose of processing your financial transactions.
• KYC and identity verification providers: Third-party services engaged by richyph to verify the identity, age, and address of players as part of the KYC process.
• Fraud prevention and risk management services: Technology partners that assist richyph in detecting and preventing fraudulent activity, money laundering, and account abuse.
• Game content providers: Software providers whose game titles are available on the richyph platform, who may receive anonymized or pseudonymized game session data for technical and compliance purposes.
• Regulatory and government authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine authorities, where richyph is legally required to disclose information.
• Legal and professional advisors: Lawyers, auditors, and accountants engaged by richyph under strict confidentiality obligations.

All third parties with whom richyph shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate technical and organizational security measures, and to comply with applicable Philippine data protection law.

Data Retention

richyph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations and PAGCOR requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Game session and wagering logs: Retained for a minimum of three (3) years from the date of the session.
• Customer support records: Retained for two (2) years from the date of the interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained for the duration of your consent, plus one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, richyph will securely delete or anonymize your personal data in a manner that prevents reconstruction of the original information.

Cookies & Tracking Technologies

8.1 Types of Cookies Used

richyph uses the following categories of cookies and similar tracking technologies on the richyph platform:

• Strictly Necessary Cookies: Essential for the operation of the richyph platform, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics Cookies: Used to collect anonymized data about how players interact with the richyph platform, enabling richyph to improve the user experience. This data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the richyph platform.

8.2 Managing Cookies

You may configure your browser to refuse non-essential cookies or to alert you when cookies are being placed on your device. Please note that disabling certain cookies may impact the functionality of the richyph platform, including your ability to remain logged in or access certain features. richyph does not use third-party advertising cookies or tracking pixels for the purpose of serving targeted advertisements on external platforms.

Data Security

richyph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and the richyph platform.
• At-rest encryption for sensitive data stored in richyph databases, including financial account identifiers and KYC documents.
• OTP-based two-factor authentication (2FA) available to all registered players for account login.
• Role-based access controls ensuring that richyph staff can only access personal data on a strict need-to-know basis relevant to their job function.
• Regular security audits and penetration testing of the richyph platform infrastructure.
• Intrusion detection systems and 24/7 security monitoring of platform servers.
• Secure disposal protocols for physical and digital records containing personal data at the end of the applicable retention period.

Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by richyph. To exercise any of these rights, contact the richyph Data Protection Officer using the details provided in Section 15:

• Right to be Informed: You have the right to be notified of how your personal data is being collected and processed, which this Privacy Policy fulfils.
• Right of Access: You have the right to request a copy of the personal data richyph holds about you, along with information about the purposes of its processing.
• Right to Rectification: You have the right to request correction of any inaccurate, incomplete, or outdated personal data in your richyph account.
• Right to Erasure / Right to be Forgotten: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to richyph's legal retention obligations.
• Right to Data Portability: You have the right to receive a structured, commonly used copy of the personal data you have provided to richyph, in a format that allows you to transmit it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on richyph's legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe richyph has violated your data privacy rights under RA 10173.

richyph will respond to all verified data subject rights requests within fifteen (15) business days of receipt. Some requests may take longer depending on complexity; richyph will notify you if an extension is required.

Minors

The richyph platform is strictly prohibited to individuals under the age of 21 years, in accordance with Philippine gaming regulations. richyph does not knowingly collect, process, or retain personal data from persons under 21 years of age. If richyph discovers that personal data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted immediately, the associated account will be suspended, and any balances will be subject to investigation and potential forfeiture as required by applicable Philippine regulations. If you are a parent or guardian and believe that a minor has provided personal information to richyph, please contact us immediately at [email protected].

Third-Party Services

The richyph platform may integrate with or link to third-party service providers — including payment gateways, game software providers, and identity verification tools — whose own privacy practices govern the personal data they independently collect. richyph is not responsible for the privacy practices of third-party services beyond the contractual data processing obligations richyph imposes on its vendors. Players are encouraged to review the privacy policies of any third-party payment or service provider they interact with in connection with their richyph account.

Cross-Border Data Transfers

In the ordinary course of operations, some personal data processed by richyph may be transferred to, or accessed by, service providers or technology infrastructure located outside the Republic of the Philippines — for example, cloud hosting providers or internationally operating KYC verification services. Any such cross-border transfer is conducted only where:

• The destination country, territory, or organization provides an adequate level of data protection as recognized by Philippine law or the NPC; or
• richyph has implemented appropriate contractual safeguards (such as data processing agreements incorporating standard contractual clauses) that require the receiving party to protect personal data to a standard equivalent to RA 10173; or
• The transfer is necessary for the performance of the richyph player agreement or is otherwise permitted under RA 10173.

Policy Amendments

richyph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. When material changes are made, richyph will post a prominent notice on the richyph platform and update the "Last Updated" date at the top of this document. Where required by the Data Privacy Act of 2012, richyph will seek renewed consent from affected players before implementing changes that alter the basis on which their personal data is processed. Continued use of the richyph platform following the effective date of any amended Privacy Policy constitutes acceptance of the revised terms.

Contact & Data Protection Officer

For all data privacy inquiries, requests to exercise data subject rights, or to contact the richyph Data Protection Officer, please reach out through the following channels:

• Data Protection Officer (DPO): [email protected] — please include "Data Privacy Request" in the subject of your message.
• General Support: [email protected]
• VIP Account Inquiries: [email protected]
• Live Chat: Available 24/7 directly through the richyph platform for urgent account-related privacy concerns.

richyph aims to respond to all data privacy requests within fifteen (15) business days. For complaints that cannot be resolved directly with richyph, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC) through its official government channels.