vipphp Casino — Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how vipphp Casino ("vipphp Casino," "we," "us," or "our"), the operator of the online gaming platform available at vipphp.app (the "Platform"), collects, uses, stores, shares, and protects the personal information of users ("Player," "User," or "you") who access or use the Platform.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC"). By registering an account on vipphp Casino or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to data privacy, this Policy shall prevail.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, vipphp Casino is the personal information controller responsible for your personal data collected through the Platform. As the personal information controller, vipphp Casino determines the purposes and means of processing your personal data.

vipphp Casino has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact our DPO using the contact details provided in Section 16 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create a vipphp Casino account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• City and province of residence within the Philippines

3.2 Identity Verification (KYC) Data

As part of our regulatory Know Your Customer (KYC) obligations, we may collect:

• Copies of government-issued Philippine photo identification (e.g., PhilSys National ID, passport, driver's license, SSS ID, UMID, PRC ID, voter's ID)
• Proof of address documents (e.g., utility bills, bank statements dated within three months)
• Selfie photographs for identity verification purposes
• Proof of payment method ownership (e.g., GCash or PayMaya account screenshots)

3.3 Financial Data

We collect transaction-related information including deposit amounts, withdrawal requests, payment method details (account names and masked account numbers — we do not store full payment credentials), and transaction history on the Platform.

3.4 Gaming Activity Data

We collect records of your gaming activity on vipphp Casino, including games played, wager amounts, session durations, win/loss records, and bonus usage. This data is used for regulatory compliance, responsible gaming monitoring, and Platform improvement.

3.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Device type, operating system, and browser type and version
• Session timestamps and duration
• Pages visited and features used on the Platform
• Referring URL (the page you visited before arriving at vipphp Casino)

3.6 Communications Data

If you contact our customer support team, we retain records of your communications, including chat transcripts, email correspondence, and support ticket history, for quality assurance and dispute resolution purposes.

4. How We Collect Your Data

vipphp Casino collects personal data through the following means:

• Directly from you: Information you provide during registration, KYC verification, deposit and withdrawal requests, customer support interactions, and promotional opt-ins.
• Automatically: Technical and device data collected through cookies, web beacons, and server logs when you access and use the Platform.
• From third parties: Identity verification data from KYC service providers; fraud detection signals from payment processors; and, where applicable, information from regulatory bodies or law enforcement agencies pursuant to legal obligations.

5. How We Use Your Personal Data

vipphp Casino processes your personal data for the following purposes:

• Account management: Creating, maintaining, and managing your vipphp Casino player account.
• Identity verification: Verifying your identity and age (21+) in compliance with Philippine gaming regulations and our KYC obligations.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card.
• Regulatory compliance: Meeting our obligations under Philippine gaming regulations, anti-money laundering laws (Republic Act No. 9160, as amended), and the Data Privacy Act of 2012.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: Monitoring gaming activity to identify potential problem gambling behavior and administering responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Platform improvement: Analyzing usage patterns and technical data to improve the functionality, performance, and user experience of vipphp Casino.
• Marketing communications: Sending you promotional offers, bonus notifications, and Platform updates — only where you have provided consent or where permitted by applicable law. You may opt out of marketing communications at any time.
• Legal proceedings: Establishing, exercising, or defending legal claims involving vipphp Casino.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, vipphp Casino processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including gaming regulations, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming purposes, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

vipphp Casino does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, and banking partners), cloud hosting and infrastructure providers, customer support platform providers, and fraud detection and cybersecurity services. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

7.2 Game Providers

To facilitate gameplay, certain technical data (such as session tokens and game activity records) may be shared with our licensed game software providers. These providers do not receive your full personal profile and are bound by data processing agreements.

7.3 Regulatory and Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of vipphp Casino's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer.

8. Cookies & Tracking Technologies

vipphp Casino uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze Platform usage.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience.
• Analytics cookies: Collect anonymised data about how players use the Platform to help us understand usage patterns and improve functionality. Analytics data is aggregated and does not identify individual users.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns. These are only set with your consent.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when cookies are being set. Please note that disabling strictly necessary cookies may affect the functionality of the vipphp Casino Platform. For detailed instructions on managing cookies, refer to your browser's help documentation.

9. Data Retention

vipphp Casino retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with anti-money laundering regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity records: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes.

10. Data Security

vipphp Casino implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records, using industry-standard encryption algorithms.
• Role-based access controls ensuring that only authorized personnel with a legitimate need can access personal data.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Secure data centers with physical access controls, environmental monitoring, and redundant systems.
• Staff training on data protection obligations and security best practices.

10.1 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vipphp Casino will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vipphp Casino:

• Right to be informed: The right to be notified of how your personal data is being collected and processed — which this Policy fulfills.
• Right of access: The right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 16. We will respond to all valid data subject requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

12. Children's Privacy and Age Restriction

vipphp Casino is strictly an adult gaming platform. In compliance with Philippine gaming regulations, access to the Platform is restricted to individuals who are at least 21 years of age. We do not knowingly collect personal data from persons under 21 years of age.

During registration, all users are required to confirm that they are 21 or older, and we verify age as part of our KYC process. If vipphp Casino becomes aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the personal data, and void any associated transactions.

If you are a parent or guardian and believe that a minor has registered on vipphp Casino, please contact us immediately at the details provided in Section 16 so that we can take prompt action.

13. International Data Transfers

vipphp Casino primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software vendors operating internationally.

Where personal data is transferred outside the Philippines, vipphp Casino ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012. We will not transfer your personal data to countries or organizations that do not provide an adequate level of data protection without your explicit consent or a valid legal basis.

14. Third-Party Links

The vipphp Casino Platform may contain links to third-party websites or services, such as payment provider portals (GCash, PayMaya) or game provider information pages. This Privacy Policy applies solely to the vipphp Casino Platform. We are not responsible for the privacy practices of third-party websites, and we encourage you to review the privacy policies of any third-party sites you visit.

The inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices by vipphp Casino.

15. Updates to This Privacy Policy

vipphp Casino may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect, where reasonably practicable.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. The current version of this Policy is always available at vipphp.app/privacy-policy. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

16. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by vipphp Casino, please contact our Data Protection Officer:

We are committed to resolving all data privacy concerns promptly and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines: