1. Introduction
ric9 ("ric9", "we", "us", "our") is committed to protecting the privacy and personal data of all users of the ric9 platform at ric9.org ("Platform"). This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we collect and process it, the parties with whom we may share it, and the rights available to you as a data subject under applicable Philippine law.
This Policy applies to all visitors, registered account holders, and any other individuals who interact with the ric9 Platform, including through its website, customer support channels, and any related services. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside the ric9 Terms & Conditions and Responsible Gaming Policy, which together constitute the full agreement governing your use of the Platform.
2. Data Controller
ric9 acts as the data controller in respect of the personal information collected through the Platform. As data controller, ric9 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as any other applicable data protection legislation.
Questions, concerns, or requests relating to this Policy or the processing of your personal data may be directed to the ric9 Data Protection contact at: [email protected]
3. Personal Data We Collect
ric9 collects the following categories of personal data from and about you:
- Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number);
- Contact Data: Residential address, email address, and mobile phone number (Philippine or international);
- Financial Data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank, or other Philippine banks), transaction history, deposit and withdrawal records denominated in Philippine Pesos (₱ PHP), and payment card details where applicable;
- Account Data: Username, password (stored in hashed form), account preferences, two-factor authentication settings, and communication preferences;
- Gaming Data: Game session records, wagering history, win/loss summaries, responsible gaming limit settings, and self-exclusion status;
- Technical Data: IP address, device type and model, operating system, browser type and version, and session identifiers;
- Usage Data: Pages visited, features accessed, time and duration of Platform sessions, and click-path data;
- Communications Data: Records of correspondence with ric9 customer support, including live chat transcripts, email communications, and feedback submissions;
- Verification Data: Scanned or photographed copies of identity documents and proof of address documents submitted for KYC (Know Your Customer) purposes.
4. How We Collect Your Data
ric9 collects personal data through the following means:
- Direct provision: Information you provide when completing the ric9 registration form, submitting KYC verification documents, contacting customer support, or updating your account settings;
- Automated collection: Technical and usage data collected automatically as you browse and interact with the Platform, including through server logs, session tracking, and analytics tools;
- Payment processors: Financial data received from payment processing partners when you initiate a deposit or withdrawal transaction via GCash, PayMaya, or other supported payment channels;
- Third-party verification services: Identity and address verification data obtained from authorised third-party KYC service providers engaged to assist with PAGCOR regulatory compliance;
- Cookies and similar technologies: Data collected through cookies and similar tracking technologies as described in Section 11 of this Policy.
5. How We Use Your Personal Data
ric9 processes your personal data for the following purposes:
- To create, manage, and maintain your ric9 player account;
- To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine AML legislation;
- To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods;
- To provide access to games, promotions, and Platform features;
- To detect and prevent fraud, money laundering, underage gambling, and other prohibited activities;
- To administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods;
- To respond to customer support enquiries and resolve disputes;
- To send transactional communications (account confirmations, withdrawal notifications, security alerts);
- To send marketing communications where you have provided consent, including information about promotions, bonuses, and new games available on ric9;
- To analyse Platform usage patterns and improve the user experience;
- To comply with legal and regulatory obligations, including reporting requirements under PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA) of the Philippines.
6. Legal Basis for Processing
ric9 processes your personal data on the following legal bases under the Philippine Data Privacy Act and applicable regulations:
- Contractual necessity: Processing required to perform the contract with you, including account operation, payment processing, and game provision;
- Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, KYC requirements, and other applicable Philippine law;
- Legitimate interests: Processing necessary for fraud prevention, security monitoring, Platform improvement, and responsible gaming enforcement, where such interests are not overridden by your rights;
- Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent that may be withdrawn at any time.
7. Data Sharing and Disclosure
ric9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients in the circumstances described:
- Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your transactions;
- Game providers: Third-party game studios and live dealer operators who provide games on the ric9 Platform, who may receive technical session data necessary for game delivery;
- KYC and fraud prevention providers: Authorised identity verification and fraud detection service providers engaged to support PAGCOR compliance;
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government bodies, where disclosure is required by law or regulatory directive;
- Law enforcement: Philippine National Police (PNP), National Bureau of Investigation (NBI), or other competent authorities, where required by court order or applicable law;
- Professional advisers: Legal counsel, auditors, and compliance consultants engaged by ric9, subject to appropriate confidentiality obligations.
8. Data Retention
ric9 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. Specifically:
- Account data and gaming records are retained for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements;
- KYC and identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, in accordance with AMLA requirements;
- Financial transaction records are retained for a minimum of five (5) years for AML compliance purposes;
- Customer support communications are retained for a minimum of two (2) years;
- Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
9. Data Security
ric9 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the ric9 Platform;
- Encryption of sensitive data at rest, including payment credentials and identity documents;
- Access controls limiting employee access to personal data on a need-to-know basis;
- Two-factor authentication requirements for administrative access to data systems;
- Regular security assessments and penetration testing of Platform infrastructure;
- Incident response procedures for the detection and remediation of data breaches.
Notwithstanding the above, no method of electronic transmission or storage is completely secure. ric9 cannot guarantee absolute security of your data and encourages you to maintain strong account credentials and to notify ric9 immediately of any suspected unauthorised access to your account.
10. Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ric9:
- Right to be informed: The right to receive clear information about how your data is processed — which this Policy is designed to fulfil;
- Right of access: The right to request a copy of the personal data ric9 holds about you;
- Right to rectification: The right to request correction of inaccurate or incomplete personal data;
- Right to erasure: The right to request deletion of your personal data, subject to applicable legal retention requirements;
- Right to data portability: The right to receive your personal data in a structured, machine-readable format;
- Right to object: The right to object to processing based on legitimate interests, including direct marketing;
- Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact ric9 at: [email protected]. Requests will be processed within 30 days of receipt. We may request identity verification before fulfilling any data subject request.
12. Minors
The ric9 Platform is strictly for individuals aged 21 years and above. ric9 does not knowingly collect personal data from persons under 21. If ric9 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. If you believe a minor has provided personal data to ric9, please contact us at [email protected] so that we can take appropriate action.
13. Changes to This Policy
ric9 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. Where changes are material, we will notify registered players via email or an on-Platform notification prior to the changes taking effect. The date of the most recent revision is always displayed at the top of this Policy. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.
14. Contact and Complaints
For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ric9, please contact our Data Protection team at: [email protected]
If you believe that ric9 has processed your personal data in a manner that violates the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available on the NPC's official website.