rich09 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, use, storage, disclosure, and protection of personal information by rich09 ("Company," "we," "us," or "our"), operating the online gaming platform accessible at rich09.cam and related mobile applications, services, and platforms (collectively, the "Platform").

This Policy applies to all users ("you," "your," or "User") who access or use the rich09 Platform, including registered account holders, visitors, and individuals who interact with our services, customer support, marketing communications, or promotional activities. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection and processing of your personal information as described in this Policy.

rich09 is committed to protecting your privacy and ensuring the security of your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and applicable issuances of the National Privacy Commission (NPC) of the Philippines. This Policy should be read in conjunction with our Terms and Conditions, which are incorporated herein by reference.

2. Data Controller and Contact Information

For the purposes of the Data Privacy Act of 2012, rich09 is the data controller responsible for the collection and processing of your personal information. If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer:

• Data Protection Officer: rich09 DPO
• Email: [email protected]
• Alternative Contact: [email protected]
• Response Time: We will respond to privacy-related inquiries within fifteen (15) business days of receipt.

3. Personal Information We Collect

3.1 Information You Provide Directly

When you register an account, use our services, or communicate with us, we collect the following categories of personal information that you provide directly:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (as required for verification purposes)
• Contact Information: Email address, mobile phone number, residential address, postal code
• Account Credentials: Username, password (encrypted and hashed), security questions and answers
• Financial Information: Payment method details (GCash account name, Maya account information, bank account numbers for BPI/BDO/UnionBank transfers, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records
• Verification Documents: Government-issued identification (passport, driver's license, UMID, Postal ID, national ID), proof of address (utility bills, bank statements), proof of payment method ownership (screenshots showing account holder name)
• Communication Records: Customer support inquiries, live chat transcripts, email correspondence, feedback submissions
• Marketing Preferences: Consent to receive promotional communications, newsletter subscriptions, preferred communication channels

3.2 Information Collected Automatically

When you access or use the rich09 Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, advertising ID, device fingerprint)
• Connection Information: IP address, internet service provider (ISP), approximate geographic location (country, region, city level based on IP address), time zone settings
• Usage Data: Pages visited, games played, session duration, click patterns, navigation paths, feature usage, time and date stamps, referring URLs
• Gaming Activity: Bets placed, wagers made, game selections, win/loss records, bonus utilization, loyalty program activity
• Performance Data: Load times, error reports, crash logs, technical issues encountered

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment method validation, anti-fraud checks from GCash, Maya, bank partners, and cryptocurrency payment processors
• Identity Verification Services: Age verification, identity authentication, document validation from third-party verification providers
• Game Providers: Game performance data, RNG results, gaming statistics from licensed game content providers such as JILI, Evolution Gaming, Pragmatic Play, and other suppliers
• Affiliate Partners: Referral information, affiliate tracking data, marketing attribution

4. Legal Basis and Purpose of Processing

rich09 processes your personal information on the following legal grounds as permitted under the Data Privacy Act of 2012:

4.1 Performance of Contract

Processing is necessary for the performance of our Terms and Conditions and to provide the services you have requested, including:

• Creating and managing your user account
• Processing deposits, withdrawals, and financial transactions
• Enabling gameplay and wagering activities
• Administering bonuses, promotions, and loyalty rewards
• Providing customer support and resolving disputes
• Communicating essential account-related information

4.2 Legal Compliance

Processing is necessary to comply with legal obligations imposed on rich09, including:

• Verifying your age and identity to ensure compliance with age restriction requirements (21 years and above)
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations under the Anti-Money Laundering Act of 2001 (RA 9160), as amended
• Maintaining transaction records and financial audit trails as required by gaming regulators
• Responding to lawful requests from regulatory authorities, law enforcement agencies, or courts
• Fulfilling tax reporting obligations under Philippine tax laws
• Implementing responsible gaming measures and self-exclusion requirements

4.3 Legitimate Interests

Processing is necessary for the legitimate interests pursued by rich09, provided such interests are not overridden by your rights and freedoms:

• Detecting and preventing fraud, cheating, collusion, money laundering, and other prohibited activities
• Ensuring platform security, preventing unauthorized access, and protecting against cyber threats
• Analyzing usage patterns to improve service quality, game offerings, and user experience
• Conducting internal audits, risk assessments, and compliance monitoring
• Protecting our legal rights and defending against claims or legal proceedings
• Managing business operations, including system administration and technical support

4.4 Consent

For certain processing activities, we rely on your explicit consent, which you may withdraw at any time:

• Sending marketing communications, promotional offers, newsletters, and personalized recommendations
• Placing non-essential cookies and tracking technologies for analytics and advertising purposes
• Sharing personal information with third-party marketing partners (where applicable)
• Processing sensitive personal information beyond what is required for service provision

5. How We Use Your Personal Information

rich09 uses your personal information for the following purposes:

5.1 Service Provision and Account Management

• Creating, maintaining, and authenticating your user account
• Processing gaming transactions, including bets, wins, deposits, and withdrawals
• Enabling access to casino games, live dealer tables, slot machines, bingo, fishing games, and other gaming products
• Administering bonus offers, free spins, cashback programs, and VIP rewards
• Providing technical support and resolving account-related issues
• Sending transactional notifications, account alerts, and service updates

5.2 Verification and Compliance

• Verifying your age to ensure you are 21 years or older as required by law
• Authenticating your identity through document verification processes
• Conducting Know Your Customer (KYC) checks and enhanced due diligence for high-value transactions
• Monitoring transactions for suspicious activity, money laundering, and fraud prevention
• Implementing responsible gaming measures, including self-exclusion and deposit limits
• Complying with regulatory reporting obligations to gaming authorities

5.3 Security and Fraud Prevention

• Detecting and preventing fraudulent transactions, account takeover attempts, and payment fraud
• Identifying collusion, bonus abuse, multi-accounting, and other prohibited activities
• Monitoring for software exploits, hacking attempts, and unauthorized access
• Implementing security measures such as two-factor authentication and session management
• Conducting security audits and vulnerability assessments

5.4 Platform Improvement and Analytics

• Analyzing user behavior, game preferences, and engagement patterns
• Measuring platform performance, loading times, and technical efficiency
• Conducting A/B testing to optimize user interface and user experience
• Identifying popular games, peak usage times, and user demographics
• Developing new features, games, and services based on user feedback
• Generating aggregated, anonymized statistics for business intelligence

5.5 Marketing and Communications

• Sending promotional emails, SMS messages, and push notifications about new games, bonuses, and special offers (with your consent)
• Personalizing marketing content based on your gaming preferences and activity history
• Conducting customer satisfaction surveys and requesting product feedback
• Managing affiliate and referral programs, including tracking referred users
• Advertising rich09 services on social media and third-party websites

6. Data Sharing and Disclosure

rich09 does not sell your personal information to third parties. However, we may share your personal information with the following categories of recipients for the purposes described in this Policy:

6.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya (PayMaya), banking partners (BPI, BDO, UnionBank), cryptocurrency payment gateways to process financial transactions
• Game Providers: JILI Games, Evolution Gaming, Pragmatic Play, and other licensed game content suppliers who provide gaming software and RNG services
• Identity Verification Services: Third-party KYC providers who verify age, identity, and document authenticity
• Cloud Hosting Providers: Infrastructure and data storage services that host the Platform and databases
• Customer Support Tools: Live chat platforms, help desk software, and CRM systems used to provide customer service
• Analytics Providers: Web analytics services (e.g., Google Analytics) that help us understand platform usage and performance
• Marketing Platforms: Email service providers, SMS gateways, and advertising networks used for promotional communications (with your consent)

6.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, regulatory bodies, law enforcement, or courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Cooperate with investigations by the National Privacy Commission, Anti-Money Laundering Council (AMLC), or gaming regulators
• Enforce our Terms and Conditions and protect our legal rights
• Prevent fraud, illegal activities, or threats to public safety
• Protect the rights, property, or safety of rich09, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, corporate restructuring, or bankruptcy proceeding involving rich09, your personal information may be transferred to the acquiring entity or successor organization. You will be notified of any such change in ownership or control of your personal information via email or prominent notice on the Platform.

6.4 Affiliate and Referral Partners

If you were referred to rich09 by an affiliate partner or used a referral code, we may share limited information about your registration and activity with the referring partner for commission calculation purposes. Such information is shared in aggregated or pseudonymized form where possible.

7. Data Security Measures

rich09 implements industry-standard technical, organizational, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, loss, or destruction:

7.1 Technical Security

• Encryption: All data transmissions between your device and our servers are encrypted using 256-bit SSL/TLS protocols
• Password Protection: Passwords are hashed using bcrypt or similar one-way cryptographic algorithms and are never stored in plain text
• Firewall Protection: Network firewalls and intrusion detection systems monitor and block unauthorized access attempts
• Database Security: Databases are encrypted at rest and protected by access controls, authentication mechanisms, and audit logging
• Secure Payment Processing: Payment card data is tokenized and processed through PCI DSS compliant payment gateways
• Regular Security Audits: Penetration testing, vulnerability scanning, and security assessments conducted by independent third parties

7.2 Organizational Security

• Access Controls: Personal information is accessible only to authorized employees and contractors on a need-to-know basis
• Employee Training: All staff members receive data privacy and security training as part of onboarding and ongoing education
• Confidentiality Agreements: Employees, contractors, and service providers are bound by strict confidentiality obligations
• Data Minimization: We collect and retain only the personal information necessary for the purposes stated in this Policy
• Incident Response Plan: Procedures are in place to detect, respond to, and notify affected parties of data breaches within 72 hours as required by law

7.3 User Responsibilities

While we implement robust security measures, you also play a role in protecting your personal information:

• Use strong, unique passwords and change them regularly
• Enable two-factor authentication (2FA) if available
• Do not share your login credentials with anyone
• Log out after each session, especially on shared or public devices
• Keep your device's operating system and security software up to date
• Immediately notify us if you suspect unauthorized access to your account

8. Data Retention and Deletion

8.1 Retention Periods

rich09 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Personal information is retained for the duration of your account's active status
• Closed Accounts: After account closure, personal information is retained for a minimum of five (5) years to comply with anti-money laundering regulations, tax laws, and gaming license requirements
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years as required by Philippine banking and gaming regulations
• Communication Records: Customer support inquiries and correspondence are retained for up to three (3) years for quality assurance and dispute resolution purposes
• Marketing Data: Contact information used for marketing purposes is retained until you withdraw consent or the data is no longer relevant

8.2 Deletion and Anonymization

After the applicable retention period expires, personal information is either securely deleted or anonymized such that it can no longer be associated with an identifiable individual. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

9. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal information:

9.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal information, including the purposes, legal basis, recipients, and retention periods. This Privacy Policy serves as notification of such processing activities.

9.2 Right to Access

You have the right to obtain confirmation from rich09 as to whether your personal information is being processed, and if so, to access such information along with details about the processing activities. You may request a copy of your personal data by contacting our Data Protection Officer.

9.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You may update your account information directly through your account settings or by contacting customer support.

9.4 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal information under certain circumstances, including:

• The personal information is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• The personal information was unlawfully processed
• Erasure is required to comply with a legal obligation

Please note that we may be unable to delete certain information if retention is required by law or necessary for the establishment, exercise, or defense of legal claims.

9.5 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes at any time. You may opt out of marketing communications by clicking the unsubscribe link in emails, adjusting your account preferences, or contacting us directly.

9.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit such data to another controller where technically feasible.

9.7 Right to File a Complaint

If you believe your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission of the Philippines. Contact details for the NPC are available at their official website.

9.8 Exercising Your Rights

To exercise any of the above rights, please submit a written request to our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) business days. Valid requests will be fulfilled free of charge, except in cases of manifestly unfounded or excessive requests, in which case we may charge a reasonable administrative fee or refuse to act on the request.

10. Cookies and Tracking Technologies

10.1 Use of Cookies

rich09 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content and advertisements. Cookies are small text files stored on your device that allow us to recognize your browser and capture certain information.

10.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including session management, authentication, and security features. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the Platform, such as pages visited and errors encountered, to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences, language settings, and customization choices to provide a personalized experience.
• Advertising Cookies: Used to deliver relevant advertisements and track advertising campaign effectiveness. These cookies may be set by third-party advertising networks.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, but please note that disabling essential cookies may affect the functionality of the Platform. For more information about managing cookies, consult your browser's help documentation.

11. International Data Transfers

Your personal information is primarily stored and processed in data centers located in the Philippines. However, some of our service providers and business partners may be located in other countries. In such cases, we ensure that appropriate safeguards are in place to protect your personal information in accordance with Philippine data protection standards, including:

• Execution of Standard Contractual Clauses or Data Processing Agreements with third-party processors
• Verification that recipient countries provide adequate data protection as recognized by the National Privacy Commission
• Implementation of supplementary security measures such as encryption and pseudonymization

12. Children's Privacy

The rich09 Platform is intended exclusively for individuals aged twenty-one (21) years or older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete such information from our systems. Parents or guardians who believe their child has provided personal information to rich09 should contact us immediately.

13. Changes to This Privacy Policy

rich09 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated to you through email notification or prominent notice on the Platform at least thirty (30) days before the changes take effect. Your continued use of the Platform after the effective date of the revised Privacy Policy constitutes acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

14. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal information, please contact:

• Data Protection Officer: rich09 DPO
• Email: [email protected]
• General Support: [email protected]
• Response Time: Within fifteen (15) business days

For complaints regarding data privacy violations, you may also file a complaint with the National Privacy Commission of the Philippines through their official website or helpline.