rich99 Privacy Policy

This Privacy Policy ("Policy") describes how rich99 ("rich99," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of users ("you," "Player," "Data Subject") who access or use the rich99 online gaming platform available at https://rich99.vip and any associated services (collectively, the "Platform").

rich99 is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. This Policy is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on rich99 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of rich99.

For the purposes of the Data Privacy Act of 2012 and this Policy, rich99 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the Platform.

As the PIC, rich99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data privacy regulations.

rich99 collects the following categories of personal data in connection with your use of the Platform:

rich99 does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly required for identity verification and regulatory compliance. Where sensitive data is collected (e.g., a copy of a government-issued ID), it is handled with heightened security controls.

rich99 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, log files, and similar technologies (see Section 8).
• Third-Party Sources: Identity and fraud-check data received from KYC verification providers, payment processors (e.g., GCash, PayMaya, Philippine banks), and regulatory databases where required by law.
• Publicly Available Sources: In limited circumstances, publicly available information may be used to verify identity or investigate suspected fraud or AML concerns.

rich99 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your rich99 player account, including verifying your identity and age (21+ requirement).
• Platform Operation: To provide access to games, process bets, calculate and pay out winnings, and deliver the core gaming services of the Platform.
• Financial Transactions: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers, and to maintain accurate financial records.
• Legal & Regulatory Compliance: To comply with obligations under the Data Privacy Act of 2012, the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and other applicable Philippine laws, including mandatory reporting requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming patterns, enforce self-exclusion and deposit limits, and identify players who may be at risk of gambling-related harm.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account-related matters.
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about rich99 offers.
• Platform Improvement: To analyse aggregate usage data and improve the functionality, performance, and user experience of the Platform.

rich99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate lawful basis for the new processing.

Under the Data Privacy Act of 2012, rich99 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine law, including AMLA reporting, PAGCOR regulatory requirements, and tax obligations.
• Legitimate Interests: Processing necessary for rich99's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent — for example, for marketing communications — you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

rich99 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party providers engaged to verify your identity and age as required by PAGCOR and AMLA regulations.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or regulatory directive.
• IT & Infrastructure Providers: Cloud hosting, database, and cybersecurity service providers engaged to operate and secure the Platform, subject to strict data processing agreements.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.
• Law Enforcement: Where required by a valid court order, subpoena, or other lawful legal process issued by a Philippine authority.

rich99 uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your rich99 account. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences (e.g., language settings, game display preferences) to improve your experience on return visits.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players use the Platform (e.g., most-visited pages, session duration). This data helps us improve the Platform. We do not use third-party advertising analytics networks.

rich99 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies on the Platform.

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to use the Platform. For analytics cookies, you may opt out by adjusting your browser settings to block or delete cookies.

rich99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

rich99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by rich99:

• Right to Be Informed: The right to be informed that your personal data is being collected and processed, and the purposes for which it is used — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data rich99 holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rich99's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. rich99 will respond to all data subject requests within 15 business days of receipt, in accordance with NPC guidelines. Complex requests may require additional time, and you will be informed of any extension.

The rich99 Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. rich99 does not knowingly collect personal data from individuals under the age of 21.

If rich99 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, void all transactions, and delete the personal data of the minor from our systems as promptly as practicable.

If you are a parent or guardian and believe that your child has registered on the rich99 Platform, please contact us immediately at [email protected] so that we can take appropriate action.

The rich99 Platform may contain links to third-party websites or services (for example, payment provider portals). This Privacy Policy applies solely to the rich99 Platform. rich99 is not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of rich99, particularly those of your chosen payment provider (e.g., GCash, PayMaya, or your Philippine bank).

rich99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email or via a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically to stay informed about how rich99 protects your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way rich99 handles your personal data, please contact our Data Protection Officer:

If you are not satisfied with rich99's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.