phrich Privacy Policy

phrich is a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines. In providing our services — including Color Game, live casino, sports betting, slots, bingo, Star Fishing, and all other gaming products accessible through the phrich platform — we necessarily collect and process personal data relating to our Users.

We recognize that the privacy of our Users is a fundamental right, not a compliance formality. This Policy is designed to be transparent, readable, and genuinely informative. We want every Filipino phrich player — whether in Metro Manila, Cebu City, Davao, Cagayan de Oro, or anywhere across the archipelago — to understand clearly what happens to their data when they use phrich services.

By registering an account on phrich or by continuing to access the phrich platform after the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act, phrich is the personal information controller in respect of the personal data it collects from Users of the phrich platform. phrich determines the purposes and means of processing your personal data.

phrich has appointed a Data Protection Officer ("DPO") responsible for overseeing phrich's compliance with the Data Privacy Act and this Policy. The phrich DPO can be contacted at the details provided in Section 16 of this Policy.

Where phrich engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or cloud hosting providers), those parties act as personal information processors under the DPA and are bound by written data processing agreements that require them to process personal data only on phrich's instructions and to maintain appropriate security measures.

phrich collects the following categories of personal data:

3.1 Registration and Identity Data

• Full legal name as it appears on a government-issued Philippine ID
• Date of birth (collected for age verification — all phrich Users must be 21 or older)
• Gender
• Registered email address
• Philippine mobile phone number
• Username and encrypted password
• Residential address in the Philippines

3.2 KYC Verification Data

• Government-issued identification documents (e.g., Philippine National ID, Passport, Driver's License, SSS/GSIS ID, UMID)
• Proof of address documents (e.g., utility bills, bank statements issued in the Philippines)
• Selfie or facial biometric data for identity verification where required by PAGCOR KYC standards
• Source of funds declarations where applicable

3.3 Financial and Transaction Data

• GCash account number (mobile number) and PayMaya account reference
• BPI, BDO, Metrobank, or other Philippine bank account details where bank transfers are used
• Cryptocurrency wallet addresses (for USDT and Coins.ph transactions)
• Deposit and withdrawal history, including amounts, timestamps, and payment methods used
• phrich wallet balance and transaction log

3.4 Gaming Activity Data

• Full history of bets placed, games played, and outcomes recorded on phrich
• Session duration, login timestamps, and logout times
• Bonus and promotion usage, including wagering activity against bonus requirements
• Responsible gaming tool settings and usage (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geographic location at time of access
• Device type, operating system, and browser information
• Cookies and similar tracking technologies (see Section 8)
• Platform access logs, error reports, and performance analytics

3.6 Communications Data

• Records of communications with phrich customer support via live chat, email, or other channels
• Responses to phrich surveys or feedback requests
• Marketing communication preferences and interaction history

phrich collects personal data through the following channels and methods:

• Direct registration: Information you provide when creating your phrich account through the phrich Login registration page, including your name, date of birth, email, and mobile number.
• KYC submissions: Identity documents and biometric data you upload during the identity verification process required for account activation and withdrawals.
• Payment transactions: Financial data collected when you make deposits or withdrawals using GCash, PayMaya, BPI, BDO, Metrobank, Coins.ph, or USDT.
• Platform usage: Gaming activity, session logs, and behavioral data automatically generated when you play games, place bets, or navigate the phrich platform.
• Cookies and tracking technologies: Technical data collected automatically by phrich's website when you visit phrich.org (see Section 8).
• Customer support interactions: Information you share when contacting phrich's support team via live chat, email, or other communication channels.
• Third-party verification providers: Where phrich engages licensed KYC and anti-fraud service providers, additional identity verification data may be obtained from those providers to supplement your submitted documentation.

Under the Philippine Data Privacy Act, phrich processes personal data on the following legal bases:

phrich uses the personal data it collects for the following purposes:

• Creating and managing your phrich account, including identity verification and maintaining your gaming profile.
• Providing access to phrich Gaming Services, including Color Game, live casino, slots, bingo, sports betting, Star Fishing, and all other phrich games.
• Processing deposits and withdrawals to and from your phrich wallet via GCash, PayMaya, BPI, BDO, Metrobank, Coins.ph, USDT, and other supported Philippine payment methods.
• Conducting KYC and ongoing identity verification in compliance with PAGCOR's requirements for licensed online gaming operators.
• Monitoring transactions and gaming activity for anti-money laundering compliance under Republic Act No. 9160 (Anti-Money Laundering Act), as amended.
• Providing responsible gaming support, including monitoring for signs of problem gambling and delivering responsible gaming interventions where appropriate.
• Detecting, investigating, and preventing fraud, account abuse, multi-accounting, and other prohibited conduct as defined in phrich's Terms & Conditions.
• Providing customer support and resolving disputes submitted to phrich or escalated to PAGCOR.
• Communicating with you about your phrich account, transactions, security alerts, and material policy changes.
• Sending you marketing communications about phrich promotions, bonuses, and new games, subject to your consent and opt-out preferences.
• Improving, testing, and developing the phrich platform through anonymized usage analytics.
• Complying with all applicable Philippine laws, PAGCOR directives, court orders, and regulatory obligations.

phrich does not sell, rent, or trade your personal data to third parties. phrich may share your personal data only in the following circumstances:

7.1 Regulatory and Legal Disclosures

phrich is legally required to share certain personal data and transaction information with:

• PAGCOR — as phrich's gaming regulator, including for audit, licensing compliance, and player dispute resolution purposes.
• Anti-Money Laundering Council (AMLC) — where transactions are reportable under Republic Act No. 9160, as amended, including suspicious transaction reports and covered transaction reports.
• National Privacy Commission (NPC) — in connection with data breach notifications or regulatory inquiries.
• Philippine courts or law enforcement — where phrich receives a valid legal order, subpoena, or warrant requiring disclosure.

7.2 Service Providers (Data Processors)

phrich engages the following categories of third-party service providers who process personal data on phrich's behalf, bound by written data processing agreements:

• KYC and identity verification providers
• Payment processors and e-wallet integration partners (GCash, Maya, BPI, BDO, Metrobank, Coins.ph)
• Cloud hosting and data storage providers
• Game software providers (who may process session data for game delivery)
• Live casino studio operators (who process video stream data for live dealer games)
• Fraud detection and cybersecurity service providers
• Customer support platform providers

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of phrich's business or assets, your personal data may be transferred to the acquiring entity. phrich will provide notice of any such transfer and will ensure the acquiring entity is bound by obligations no less protective than those in this Policy.

phrich uses cookies and similar tracking technologies when you access phrich.org. Cookies are small text files placed on your device that enable phrich to recognize your browser, remember your preferences, maintain your login session, and collect usage analytics.

phrich uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the phrich platform, including maintaining your logged-in session after phrich Login, storing your language preferences, and enabling core security features. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Enable phrich to remember your preferences (such as game display settings, responsible gaming limit configurations, and communication preferences) so you don't need to reconfigure them on each visit.
• Analytics Cookies: Allow phrich to understand how Users interact with the platform — which games are most popular, where Users experience difficulty, and how navigation flows are used. Analytics data is aggregated and anonymized. phrich does not use third-party advertising analytics cookies.
• Security Cookies: Used to detect and prevent fraudulent account access, including session fingerprinting for unusual login detection.

You may manage cookie settings through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use the phrich platform effectively, including preventing successful phrich Login.

phrich retains personal data for the periods necessary to fulfill the purposes for which it was collected, as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

Upon expiry of the applicable retention period, phrich will securely delete or anonymize your personal data in accordance with its data destruction procedures. Data that is subject to ongoing legal proceedings, regulatory investigations, or audit requirements may be retained beyond the standard periods until those proceedings are concluded.

phrich implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• Encryption: AES-256 encryption for all personal data at rest; TLS 1.3 for all data in transit between your device and phrich servers.
• Access Controls: Role-based access control (RBAC) ensuring that phrich personnel can only access the personal data necessary for their specific job functions. All access is logged and audited.
• Network Security: Firewalls, intrusion detection systems (IDS), and regular penetration testing of phrich's infrastructure.
• Two-Factor Authentication: Available to all phrich Users for account security, and mandatory for phrich staff accessing internal systems containing personal data.
• Secure Data Centers: phrich's personal data is hosted in data centers with appropriate physical security controls, including restricted access, CCTV monitoring, and environmental protections.
• Vendor Due Diligence: All third-party processors are assessed for security compliance before engagement and are contractually required to maintain appropriate security standards.
• Staff Training: All phrich staff who handle personal data receive regular training on data privacy obligations, phishing awareness, and secure data handling practices.

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to your personal data held by phrich:

To exercise any of the above rights, contact phrich's Data Protection Officer at [email protected]. phrich will respond to data subject requests within fifteen (15) business days. Identity verification will be required before processing any data request. Requests may be subject to applicable fees as permitted by NPC regulations.

If you are not satisfied with phrich's response, you have the right to file a complaint with the National Privacy Commission of the Philippines.

phrich is strictly an adult gaming platform. phrich does not knowingly collect personal data from individuals under the age of 21. Philippine gaming law prohibits persons under 21 years of age from participating in any form of gambling, including online gaming on phrich.

If phrich becomes aware that it has inadvertently collected personal data from a person under the age of 21, phrich will immediately suspend the associated account, delete the personal data, and return any deposits to the originating payment method.

phrich may send you marketing communications about promotions, bonuses, new games, and platform updates. phrich will only send marketing communications where you have provided your consent to receive them, either during registration or subsequently through your phrich account settings.

Marketing communications from phrich may be delivered via:

• Email to your registered phrich email address
• SMS to your registered Philippine mobile number
• Push notifications within the phrich platform (if enabled)

You may opt out of phrich marketing communications at any time by:

• Clicking the "unsubscribe" link in any phrich marketing email
• Updating your communication preferences in your phrich account settings
• Contacting phrich support and requesting removal from marketing lists

Opting out of marketing communications will not affect your receipt of transactional messages (such as deposit confirmations, withdrawal processing notifications, or security alerts), which are sent as part of phrich's contractual obligations to you.

The phrich platform may contain references to or links within game descriptions or promotional content to third-party websites or services. phrich is not responsible for the privacy practices or content of any third-party websites.

This Privacy Policy applies exclusively to personal data collected and processed by phrich through the phrich platform at phrich.org. phrich encourages Users to review the privacy policies of any third-party websites they visit.

phrich reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this Policy, phrich will:

• Update the "Last Updated" date at the top of this page.
• Where practicable and where required by law, notify registered phrich Users of material changes via their registered email address at least fourteen (14) days before the changes take effect.
• Where consent is the legal basis for a new or changed processing activity, seek fresh consent from affected Users before commencing that processing.

Your continued use of the phrich platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using phrich and may request account closure in accordance with phrich's Terms & Conditions.

The current version of this Privacy Policy is always accessible via the phrich website footer link. phrich recommends that Users review this Policy periodically to stay informed of how their data is handled.

For all privacy-related inquiries, data subject rights requests, data breach notifications, or complaints regarding phrich's handling of your personal data, please contact phrich's Data Protection Officer:

For information about our Terms of Service, please see our Terms & Conditions. For responsible gaming tools and support, please visit our Responsible Gaming page.