vipph Privacy
Policy

vipph is an online gaming platform operating at vipph.one, offering casino games, slots, bingo, and live dealer experiences to eligible players in the Philippines. For the purposes of this Privacy Policy, vipph acts as the Personal Information Controller (PIC) in respect of the personal data you provide when registering for and using our platform.

As a Personal Information Controller, vipph determines the purposes and means by which your personal data is processed. We take this responsibility seriously and have implemented appropriate technical and organizational measures to ensure your data is handled lawfully, fairly, and transparently at all times.

This Privacy Policy applies to all personal data collected through:

• The vipph website at vipph.one;
• The vipph account registration and login process;
• Customer support interactions via email or live chat;
• Promotional communications and marketing activities;
• Any other interaction you have with vipph as a platform or brand.

vipph collects only the personal data that is necessary for the purposes described in this Privacy Policy. We do not collect data beyond what is reasonably required to operate the platform, comply with legal obligations, and deliver a quality gaming experience to Filipino players.

The categories of personal data we collect include:

vipph collects personal data through the following channels:

• Direct collection: Data you provide when registering your vipph account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and interact with the vipph platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Publicly available sources: In limited circumstances, vipph may verify information against publicly available records for fraud prevention or regulatory compliance purposes.

vipph does not purchase personal data from data brokers or third-party marketing lists. All data collected is obtained through legitimate means and with a valid legal basis as described in Section 5 of this Policy.

vipph uses your personal data for the following specific purposes:

• Account creation and management: To register your vipph account, verify your identity, maintain your account profile, and provide you with access to the platform.
• Age and identity verification (KYC): To confirm that you meet the minimum age requirement of 21 years as required under Philippine gaming regulations, and to verify your identity in compliance with applicable law.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; to maintain accurate transaction records; and to reconcile your vipph wallet balance.
• Legal and regulatory compliance: To comply with the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws and regulations. This includes reporting obligations to the Anti-Money Laundering Council (AMLC) and PAGCOR where required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the platform.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyze usage patterns, identify technical issues, and improve the vipph platform's features, performance, and user experience.
• Responsible gaming: To monitor gaming behavior for signs of problem gambling and to administer self-exclusion, deposit limit, and other responsible gaming tools.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), vipph processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose — for example, opting in to receive marketing communications from vipph.
• Contractual necessity: Where processing is necessary for the performance of the contract between you and vipph — specifically, the Terms & Conditions you agreed to upon registration. This covers account management, payment processing, and game delivery.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to vipph, including KYC requirements, AML reporting obligations, and regulatory compliance with PAGCOR directives.
• Legitimate interests: Where processing is necessary for the legitimate interests of vipph, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, and analytics for service improvement.

Where vipph relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

vipph does not share your personal data with third parties except in the following circumstances:

• Service providers (Personal Information Processors): vipph engages trusted third-party service providers to assist in operating the platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, customer support software providers, and fraud detection services. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to vipph.
• Regulatory and law enforcement authorities: vipph may disclose personal data to PAGCOR, the AMLC, the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of vipph's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.
• With your consent: vipph may share your data with third parties in other circumstances where you have given your explicit prior consent.

vipph uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow vipph to recognize your browser, remember your preferences, and analyze how you use the platform.

The types of cookies used by vipph include:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your vipph account. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and game lobby filters to personalize your vipph experience.
• Analytics cookies: Collect anonymized data about how players use the vipph platform — which pages are visited most, how long sessions last, and where users encounter errors. This data helps us improve the platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts on the vipph platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the vipph platform. vipph does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

vipph retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, vipph will securely delete or anonymize your personal data in accordance with our internal data disposal procedures. Anonymized data that can no longer be linked to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by vipph:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data vipph holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data vipph holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to vipph's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

vipph takes the security of your personal data seriously. We have implemented a comprehensive set of technical and organizational security measures designed to protect your data against unauthorized access, disclosure, alteration, loss, or destruction.

Our security measures include:

• Encryption: All data transmitted between your device and the vipph platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including KYC documents and financial records, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized vipph personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Infrastructure security: The vipph platform is hosted on secure cloud infrastructure with regular security patching, intrusion detection systems, and 24/7 monitoring.
• Penetration testing: vipph conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All vipph personnel with access to personal data receive regular data privacy and security training.
• Incident response: vipph maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, vipph will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by the Data Privacy Act of 2012.

While vipph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your vipph account credentials and for notifying us immediately if you suspect unauthorized access to your account.

If vipph discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately:

• Suspend the associated account;
• Delete all personal data associated with that account from our systems;
• Void any transactions or winnings associated with the account;
• Report the incident to relevant regulatory authorities where required.

If you are a parent or guardian and believe that a minor has registered on the vipph platform or provided us with their personal data, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

vipph reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this document.

When material changes are made to this Privacy Policy, vipph will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect. For minor or non-material changes, the updated Policy will be published on this page without separate notification.

Your continued use of the vipph platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any changes to this Policy, you should stop using the platform and may request account closure by contacting vipph support.

We encourage you to review this Privacy Policy periodically to stay informed about how vipph protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vipph handles your personal data, please contact our Data Protection Officer (DPO). vipph has designated a DPO in accordance with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's guidelines.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that vipph has violated your data privacy rights. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.