vviph Privacy Policy

Data Controller

vviph operates the online gaming platform accessible at vviph.app and acts as the Data Controller for the personal data of all registered players and website visitors. As Data Controller, vviph determines the purposes and means by which personal data is processed, and is responsible for ensuring that such processing is conducted in accordance with applicable Philippine privacy law.

For data protection matters, players may contact the vviph Data Protection Officer (DPO) at [email protected], marking the subject line "Data Privacy Request." Our team responds to all substantive privacy enquiries within five (5) business days.

Scope of This Policy

This Privacy Policy applies to all personal data collected and processed by vviph in connection with:

• Registration and creation of a vviph player account.
• Use of any game, feature, or service on the vviph platform, including live casino, slots, bingo, sabong, and sports betting.
• Deposits, withdrawals, and all financial transactions conducted through the platform.
• Interactions with vviph customer support via live chat, email, or any other channel.
• Participation in promotions, bonuses, tournaments, or loyalty programmes.
• Visits to vviph.app regardless of whether the visitor holds a registered account.

This Policy does not apply to the privacy practices of third-party game providers, payment processors, or other external services that operate under their own separate privacy policies. Where vviph integrates third-party services, we have contractual data protection obligations in place with those providers, but cannot be responsible for their independent data handling practices.

Data We Collect

vviph collects personal data from players through multiple channels: data provided directly during registration and account use, data collected automatically during platform interactions, and data received from third-party verification services. The categories of data collected are described in the table below.

How We Use Your Data

vviph processes personal data only for specific, legitimate purposes. The principal purposes for which we use player data are:

• Account Creation and Management — registering your vviph account, verifying your identity and age (21+ requirement), maintaining your account profile, and processing account changes or closures.
• Platform Services Delivery — enabling you to access and use all game sections, managing your wallet balance, processing deposits and withdrawals through GCash, PayMaya, and other approved payment channels.
• Regulatory Compliance — fulfilling our obligations under PAGCOR licensing conditions, anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and the Data Privacy Act of 2012. We are legally required to retain certain player data for audit and inspection purposes.
• Fraud Prevention and Security — detecting and investigating fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct as defined in the vviph Terms and Conditions.
• Responsible Gaming — monitoring gaming activity for indicators of problem gambling, enforcing self-imposed player limits, processing self-exclusion requests, and complying with PAGCOR responsible gaming requirements.
• Customer Support — responding to enquiries, resolving disputes, processing complaints, and providing technical assistance related to your vviph account and gaming experience.
• Service Improvement — analyzing aggregated, anonymized platform usage data to improve game offerings, payment flows, interface design, and overall service quality.
• Marketing Communications — sending promotional emails, bonus notifications, and platform updates to players who have opted in. Players who have not consented to marketing communications will not receive them, and consent may be withdrawn at any time via account settings.

Legal Basis for Processing

Under the Data Privacy Act of 2012, vviph processes personal data based on the following legal grounds:

• Contractual Necessity — processing required to perform the contract between vviph and the player (i.e., the vviph Terms and Conditions), including account management, deposits, withdrawals, and game access.
• Legal Obligation — processing required to comply with PAGCOR licensing obligations, anti-money laundering legislation, tax reporting obligations, and other applicable Philippine laws.
• Legitimate Interests — processing necessary for vviph's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by the player's fundamental privacy rights.
• Consent — processing based on your freely given, specific, and informed consent, principally for direct marketing communications. Consent-based processing may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

vviph does not sell, rent, or trade personal player data. Data sharing is limited to the following categories of recipients and circumstances:

• PAGCOR and Regulatory Authorities — vviph is required by law to share player identity, transaction, and gaming activity data with PAGCOR and other competent Philippine government authorities upon lawful request or as part of routine regulatory reporting obligations.
• Payment Service Providers — GCash (G-Xchange Inc.), PayMaya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and other approved payment processors receive the minimum financial data necessary to process deposits and withdrawals. These providers operate under separate privacy policies and are contractually bound to protect shared data.
• Identity Verification Services — Third-party KYC providers receive identity documents and personal details for the purpose of age verification, document authenticity checks, and AML screening. All KYC partners are bound by strict data processing agreements.
• Fraud Prevention Services — Aggregated and limited personal data is shared with fraud detection and prevention service providers to identify suspicious account activity and protect the integrity of the vviph platform.
• Game Content Providers — Some game session data (excluding personally identifiable information) is shared with third-party game studios to support RNG auditing, technical issue resolution, and game performance monitoring.
• Law Enforcement — vviph will disclose personal data to law enforcement agencies, courts, or other competent authorities where legally required to do so, including in connection with anti-money laundering investigations or criminal proceedings.

Data Retention

vviph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:

• Active Account Data — retained for the duration of the player account and for a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and the Anti-Money Laundering Act of the Philippines.
• Financial Transaction Records — deposit and withdrawal records are retained for ten (10) years from the date of the transaction, in compliance with Philippine tax and financial record-keeping requirements.
• KYC Documentation — identity documents submitted for KYC verification are retained for five (5) years following account closure or the last verified transaction, whichever is later.
• Customer Support Records — communication and complaint records are retained for three (3) years from the date of the last interaction, for dispute resolution and audit purposes.
• Marketing Consent Records — records of marketing consents and opt-out requests are retained indefinitely as evidence of compliance with consent obligations.
• Technical and Log Data — server logs and session data are retained for twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with vviph's data disposal procedures.

Data Security

vviph implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption — all data transmitted between players and vviph servers is protected by 256-bit Transport Layer Security (TLS) encryption. Sensitive data stored in vviph databases is encrypted at rest using AES-256 encryption.
• Access Controls — access to player personal data within vviph is restricted to personnel with a demonstrated operational need. Role-based access control (RBAC) is enforced across all internal systems.
• Two-Factor Authentication — 2FA is available to all players for their vviph accounts and is enforced for all vviph staff accessing production systems containing player data.
• Security Monitoring — vviph operates continuous security monitoring of platform infrastructure, with automated alerts and human review processes for detected anomalies.
• Vulnerability Management — regular security assessments, penetration testing, and patch management processes are maintained to identify and remediate security vulnerabilities before they can be exploited.
• Staff Training — all vviph personnel with access to personal data receive regular data protection and security training as a condition of their role.

Cookies & Tracking Technologies

vviph uses cookies and similar tracking technologies on the vviph.app website to enable essential platform functionality, improve the user experience, and support security monitoring. The types of cookies used by vviph are described below:

• Strictly Necessary Cookies — essential for the platform to function correctly, including session management, authentication, and security tokens. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies — used to remember your preferences such as language settings, game view options, and account display configurations to personalize your experience across sessions.
• Analytics Cookies — used to collect aggregated, anonymized data about how players navigate and use the vviph platform, enabling us to identify usability improvements and optimize performance.
• Security Cookies — used to detect and prevent fraudulent activity, unauthorized account access, and bot activity on the platform.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from using some features of the vviph platform. vviph does not use third-party advertising cookies or permit third-party advertisers to set cookies on the vviph platform.

Your Privacy Rights

Under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data processed by vviph:

To exercise any of these rights, contact the vviph Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond within thirty (30) days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Minors & Age Restriction

The vviph platform is strictly intended for individuals who are 21 years of age or older, as required under PAGCOR's regulations for online gaming in the Philippines. vviph does not knowingly collect personal data from individuals under the age of 21.

If vviph becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all personal data associated with the account will be scheduled for deletion (subject to any mandatory retention obligations for fraud investigation), and the matter will be escalated to the relevant compliance team.

Cross-Border Data Transfers

vviph's primary data processing infrastructure is located within the Philippines. In limited circumstances, personal data may be transferred to and processed in countries outside the Philippines in connection with services provided by third-party technology, fraud prevention, or game content suppliers.

Where cross-border transfers of personal data occur, vviph ensures that appropriate safeguards are in place to protect transferred data to a standard equivalent to that required under Philippine law, including:

• Contractual clauses and data processing agreements with recipient entities requiring compliance with Philippine data protection standards.
• Transfer only to jurisdictions that the National Privacy Commission of the Philippines has recognized as providing adequate data protection, where applicable.
• Privacy impact assessments for transfers involving sensitive personal information.

Players wishing to obtain further information about the specific safeguards applicable to any cross-border transfer of their data may submit a request to the vviph Data Protection Officer.

Third-Party Services

The vviph platform integrates with a number of third-party services to deliver the full gaming experience, including live game studio providers, payment gateway operators, identity verification services, and fraud prevention tools. While vviph selects these providers carefully and enforces data protection obligations through contractual agreements, each provider operates under their own privacy policies and is independently responsible for data processing conducted on their own systems.

vviph is not responsible for the privacy practices of third-party providers beyond the contractual protections it enforces. Players who have concerns about how a specific third-party provider handles their data are advised to review that provider's privacy policy or contact them directly.

The vviph website does not include third-party advertising scripts, social media tracking pixels, or behavioral advertising technologies. Technical integrations are limited to those necessary for platform operation and security.

Changes to This Privacy Policy

vviph may update this Privacy Policy from time to time in response to changes in applicable law, PAGCOR regulatory guidance, data processing practices, or platform features. The "Last Updated" date at the top of this document reflects the most recent revision.

Material changes to this Privacy Policy will be communicated to registered players via their registered email address and/or a prominent notice on the vviph platform at least seven (7) days before the changes take effect. Continued use of the vviph platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically. If you have questions about any change, contact our Data Protection Officer before the effective date of the revision.

Contact & Data Protection Officer

For all privacy-related enquiries, data rights requests, complaints, or questions about this Privacy Policy, please contact the vviph Data Protection Officer using the following details:

This Privacy Policy was last reviewed and updated in January 2026 and supersedes all previous versions of the vviph Privacy Policy. The governing version of this Policy at any given time is the one published at vviph.app/privacy-policy.