PHRich Privacy Policy – How We Protect Your Personal Data

1Who This Privacy Policy Covers

This Privacy Policy applies to all individuals who interact with PHRich at phrich.click — including registered members, individuals who have submitted a registration inquiry but not yet completed sign-up, and visitors who browse the PHRich website without creating an account.

By accessing phrich.click, registering an account, or submitting any personal information to PHRich through any channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2Personal Data We Collect

PHRich collects the minimum data necessary to provide you with a secure, functional, and personalized gaming experience. The categories of personal data we collect include:

2.1 Identity Information

• Full legal name
• Date of birth (for age verification purposes)
• Gender (optional, for personalization)
• Government-issued ID details (collected during KYC verification: ID type, ID number, expiry date)
• Photograph or selfie with ID (for identity verification where required)

2.2 Contact Information

• Philippine mobile number (used as primary account identifier)
• Email address
• Home address (collected during KYC verification and for certain withdrawal methods)

2.3 Financial Information

• GCash account number or Maya account number linked to your PHRich account
• Bank account details (for bank transfer withdrawals, where provided)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment methods
• Wallet balance and bonus balance at any given time

2.4 Gaming and Behavioral Data

• Betting history: game type, bet amounts, outcomes, timestamps
• Game preferences and play patterns
• Promotional activity: bonuses claimed, wagering progress
• Referral activity: number of referrals made and their status

2.5 Technical Data

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session duration, pages visited, and navigation patterns on phrich.click
• Cookie identifiers (see Section 8)

3How We Collect Your Data

PHRich collects your personal data through the following channels:

• Direct input: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automated collection: Technical data collected automatically when you access phrich.click, including via cookies, web beacons, and server logs. See Section 8 for full details on cookies.
• Third-party payment processors: Transaction confirmation data received from GCash, Maya, BDO, BPI, UnionBank, and other payment partners after you initiate a transaction.
• Identity verification services: Where PHRich uses a licensed third-party KYC provider to verify your identity documents, that provider may return verification results to PHRich as part of the process.
• Referral activity: If you were referred to PHRich by an existing member, PHRich receives confirmation of the referral link used at the time of your registration.

4Why PHRich Uses Your Data

PHRich uses your personal data only for purposes that are necessary, proportionate, and either consent-based or legally required. The specific purposes are:

PHRich does not use your data for any purpose not listed above without first obtaining your explicit consent.

5Legal Basis for Processing

PHRich processes your personal data under one or more of the following lawful bases as provided under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent: You have given PHRich your clear, informed, and freely-given consent for the specific processing activity — most commonly for receiving promotional communications.
• Performance of a contract: Processing is necessary to perform our obligations to you under the PHRich Terms and Conditions — for example, processing your deposits and payouts.
• Compliance with a legal obligation: Processing is required by Philippine law — for example, KYC verification, AML reporting, and responsible gaming obligations under PAGCOR regulations.
• Legitimate interest: Processing is necessary for PHRich's legitimate interests — such as fraud prevention, platform security, and product improvement — provided those interests are not overridden by your rights.

6Who PHRich Shares Your Data With

PHRich shares your personal data only in the following circumstances and only to the extent necessary for each purpose:

6.1 Payment Processors

PHRich shares the minimum data required with accredited Philippine payment providers — GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and Visa/Mastercard acquiring banks — to process your deposits and withdrawals. These providers are each subject to their own privacy policies and are regulated by the Bangko Sentral ng Pilipinas (BSP).

6.2 Identity Verification Providers

PHRich may use a licensed third-party KYC service to verify government-issued IDs. Your ID documents are shared with this provider solely for verification and are not retained by the provider beyond what is necessary for the verification process.

6.3 Regulatory Authorities

PHRich is legally required to report certain transaction data and suspicious activity reports to the Anti-Money Laundering Council (AMLC) and to provide player data to PAGCOR and other gaming regulators upon formal request. PHRich will not resist lawful regulatory requests for information.

6.4 Technology and Security Partners

PHRich uses reputable cloud infrastructure, cybersecurity, and fraud detection services. These providers operate under strict data processing agreements with PHRich and may not use your data for their own purposes.

6.5 No Sale of Data

PHRich does not sell, rent, license, or otherwise transfer your personal data to any third party for commercial or marketing purposes. Period.

7Data Retention

PHRich retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with Philippine legal requirements. The key retention periods are:

• Active account data: Retained throughout the duration of your PHRich membership.
• Transaction records: Retained for a minimum of five (5) years after the transaction date, as required under the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR regulations.
• KYC and identity documents: Retained for five (5) years from account closure or the date of the last transaction, whichever is later.
• Customer support correspondence: Retained for three (3) years from the date of the last correspondence.
• Marketing preferences and consent records: Retained for three (3) years from the date consent was given or withdrawn.

After the applicable retention period, PHRich securely deletes or anonymizes your personal data so that it can no longer be linked back to you.

8Cookies and Tracking Technologies

PHRich uses cookies and similar tracking technologies to make phrich.click function correctly, to improve your experience, and to ensure the security of your session. Below is a summary of the cookies PHRich uses:

You may disable non-essential cookies through your browser settings. Please note that disabling essential cookies may prevent PHRich from functioning correctly. PHRich does not use third-party advertising cookies or retargeting pixels.

9Your Rights Under Philippine Law

As a data subject under Republic Act 10173 (Data Privacy Act of 2012), you have the following rights regarding your personal data held by PHRich:

To exercise any of the above rights, contact PHRich's Data Protection Officer at privacy@phrich.click or through the live chat support available 24/7 on phrich.click. Please include your full name, registered mobile number, and a clear description of your request. PHRich will verify your identity before processing any data subject request.

10Security Measures

PHRich employs a layered approach to data security that combines technical, organizational, and procedural controls:

Technical Controls

• 256-bit SSL/TLS encryption on all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication required for all internal staff accessing production systems
• Web Application Firewall (WAF) protecting phrich.click from common attacks including SQL injection and cross-site scripting
• Automated intrusion detection and 24/7 security monitoring

Organizational Controls

• Strict role-based access control — staff only access data required for their specific job function
• All access to production data is logged and auditable
• Regular mandatory data privacy training for all PHRich staff
• Background screening for all staff with access to personal or financial data

Breach Response

PHRich maintains a documented incident response plan for personal data breaches. In the event of a breach that poses a real risk to affected individuals, PHRich will notify the National Privacy Commission and affected members within 72 hours of discovery in accordance with NPC Circular 16-03.

11Children's Privacy

PHRich is strictly an adult platform. The minimum age for registration is 21 years old in accordance with Philippine gaming regulations. PHRich does not knowingly collect or process personal data from individuals under 21 years of age.

If PHRich discovers that an account has been created by an individual under 21, the account will be immediately suspended, all balances will be withheld, and all personal data associated with the account will be deleted as soon as legally permissible. Parents or guardians who believe their minor child has accessed PHRich should contact support@phrich.click immediately.

12Updates to This Privacy Policy

PHRich may update this Privacy Policy from time to time to reflect changes in the platform, applicable Philippine law, or best practices in data protection. When PHRich makes material changes to this policy, registered members will be notified by email and/or in-app notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page always reflects the most recent revision. Continued use of phrich.click after the effective date of a policy update constitutes your acceptance of the revised policy. If you do not agree with the changes, you may close your PHRich account by contacting support@phrich.click before the effective date.

13Contact Us and Data Protection Officer

PHRich has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. For all privacy-related inquiries, data subject requests, or complaints, contact:

PHRich aims to respond to all privacy-related inquiries within five (5) Philippine business days. Formal data subject requests are processed within fifteen (15) business days. If a request requires more time due to complexity, PHRich will notify you and explain the reason for the extension.

If you are not satisfied with PHRich's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission at privacy.gov.ph.