vipph1 Privacy Policy

1 Introduction & Scope

vipph1 ("vipph1," "we," "us," or "our") operates the online gaming platform accessible at vipph1.cam and all associated URLs (the "Platform"). This Privacy Policy ("Policy") describes how vipph1 collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform ("Players," "you," or "your").

This Policy applies to all personal data collected by vipph1 in connection with the operation of the Platform, including data collected during account registration, identity verification, gameplay, payment processing, customer support interactions, and marketing communications. It applies to Players physically located in the Republic of the Philippines, which constitutes the primary jurisdiction in which vipph1 operates under PAGCOR regulation.

This Policy is to be read alongside the vipph1 Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions regarding data privacy matters, this Policy shall prevail.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, vipph1 acts as the Personal Information Controller (PIC) with respect to the personal data of Players. As PIC, vipph1 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

vipph1 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy, monitoring compliance with applicable data privacy laws, and serving as the primary point of contact for data subject rights requests and communications with the National Privacy Commission (NPC). Contact details for the DPO are provided in Section 15.

3 Personal Data We Collect

vipph1 collects the following categories of personal data from Players:

4 How We Collect Your Data

vipph1 collects personal data through the following means:

• Direct collection: Information you provide during account registration, the KYC verification process, deposit and withdrawal requests, customer support interactions, and responses to promotional communications.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, session tracking technology, server logs, and device fingerprinting tools. See Section 10 for more detail on cookies.
• Third-party sources: Identity verification data returned by accredited KYC service providers following document checks; transaction data from payment gateways including GCash and PayMaya; fraud screening data from risk management partners; and publicly available sources used for AML/CTF screening such as sanctions lists and politically exposed persons (PEP) registries.

5 Lawful Basis for Processing

vipph1 processes your personal data on the following lawful bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations to you under the vipph1 Terms & Conditions, including account maintenance, payment processing, and game provision.
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), the Terrorism Financing Prevention and Suppression Act, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw marketing consent at any time by contacting customer support or using the unsubscribe mechanism in our communications.

6 How We Use Your Personal Data

vipph1 uses the personal data we collect for the following purposes:

• Creating, verifying, and managing your vipph1 account, including age verification (21+) and KYC compliance.
• Processing deposits and withdrawals in Philippine Peso via your registered payment methods, including GCash, PayMaya, BPI, BDO, and Metrobank.
• Providing access to all Platform games and features, including live baccarat, slots, bingo, jackpot games, and the Super Wheel.
• Detecting and preventing fraud, money laundering, account hacking, and other prohibited conduct as defined in the vipph1 Terms & Conditions.
• Complying with PAGCOR reporting requirements, AML/CTF screening obligations, and orders from Philippine law enforcement or regulatory authorities.
• Administering bonuses, promotions, and loyalty rewards, including verifying eligibility and wagering requirement completion.
• Monitoring gameplay for signs of problem gambling and administering responsible gaming tools such as deposit limits and self-exclusion.
• Providing customer support, resolving disputes, and maintaining support interaction records for quality assurance.
• Sending account-related communications (transaction confirmations, security alerts, policy updates) and, where consent is given, promotional communications.
• Improving Platform functionality, user experience, and game offerings through internal analytics and A/B testing.

7 Data Sharing & Disclosure

vipph1 does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors and e-wallet providers (GCash, PayMaya, and banking partners) for the purpose of processing your financial transactions.
• KYC and identity verification service providers engaged to verify your identity documents and perform AML/CTF screening.
• Game providers and software vendors whose games are integrated into the vipph1 Platform, to the extent necessary for game delivery and fairness auditing.
• PAGCOR and other Philippine regulatory authorities, as required by law, including the reporting of large transactions, suspicious activities, and self-exclusion registrations.
• Law enforcement authorities, courts, or government agencies in the Philippines when required by a lawful order, subpoena, warrant, or other legal process.
• Fraud prevention and cybersecurity partners who assist vipph1 in detecting and preventing fraudulent access, account takeovers, and money laundering.
• Professional advisors including legal counsel, auditors, and compliance consultants, under strict confidentiality obligations.

Where vipph1 engages third-party processors, we enter into data processing agreements that require those parties to implement appropriate technical and organizational security measures and to process personal data only on vipph1's documented instructions.

8 International Data Transfers

Some of vipph1's service providers and game technology partners may process personal data in jurisdictions outside the Philippines, including but not limited to data centers in Singapore and other Southeast Asian locations. Where such cross-border transfers occur, vipph1 ensures that adequate safeguards are in place as required by Section 21 of the Data Privacy Act, including the use of standard contractual clauses approved by the National Privacy Commission or equivalent contractual protections.

vipph1 does not transfer personal data to jurisdictions that have not been assessed as providing an adequate level of data protection without the implementation of appropriate contractual safeguards.

9 Data Retention

vipph1 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with BSP and AMLC reporting obligations.
• Gameplay logs: Retained for a minimum of two (2) years from the date of each game session, for dispute resolution and responsible gaming monitoring purposes.
• Customer support records: Retained for two (2) years from the date of the relevant interaction.
• Marketing consent records: Retained for the duration of the marketing relationship and for one (1) year after consent is withdrawn, for compliance evidence purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or archived in a manner that prevents re-identification, in accordance with NPC guidelines.

10 Cookies & Tracking Technologies

vipph1 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you access the Platform. vipph1 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security token storage. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, game lobby layout, and notification preferences.
• Analytics cookies: Used to collect aggregated, anonymized data about how Players navigate the Platform, enabling vipph1 to identify and improve user experience issues. No personally identifiable information is transmitted via analytics cookies.
• Security cookies: Used for fraud detection, bot identification, and geolocation compliance checks to ensure the Platform is only accessed from the Philippines.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, though some functionality may be reduced. vipph1 does not use cookies to serve third-party advertising on behalf of external advertisers.

11 Security Measures

vipph1 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and vipph1 servers.
• AES-256 encryption for sensitive personal data stored in vipph1 databases.
• Multi-factor authentication (MFA) available for all Player accounts and mandatory for administrative access by vipph1 staff.
• Regular third-party penetration testing and vulnerability assessments of Platform infrastructure.
• Role-based access controls limiting employee access to personal data strictly to those with a legitimate business need.
• Payment card and e-wallet credentials are handled exclusively by PCI-DSS-certified payment processors — vipph1 does not store full payment credentials on its own servers.
• Comprehensive security incident response procedures, including 24/7 monitoring for anomalous activity.

While vipph1 takes all reasonable measures to protect your data, no system is entirely immune to security risks. Players are encouraged to use strong, unique passwords for their vipph1 accounts, enable account login notifications, and report any suspected unauthorized access to customer support immediately.

12 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by vipph1:

• Right to be informed: The right to be notified of what personal data vipph1 collects, how it is used, and with whom it is shared — as provided in this Policy.
• Right of access: The right to request a copy of the personal data vipph1 holds about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most Account information directly through the Platform or by contacting customer support.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (see Section 9).
• Right to object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on vipph1's legitimate interests and your rights override those interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the vipph1 Data Protection Officer using the contact details in Section 15. vipph1 will respond to all data subject rights requests within fifteen (15) business days of receipt, in accordance with NPC requirements.

13 Children's Privacy

The vipph1 Platform is strictly intended for individuals aged 21 years and older, in compliance with PAGCOR regulations governing online gaming in the Philippines. vipph1 does not knowingly collect personal data from any individual under the age of 21. If vipph1 discovers that personal data has been collected from an individual under 21, the relevant account will be immediately suspended, all associated data will be deleted as soon as practicable, and the matter will be reported to PAGCOR in accordance with regulatory requirements.

If you are a parent or guardian and believe that a minor has registered on the vipph1 Platform or submitted personal data to vipph1, please contact our customer support team immediately. We take underage access seriously and have age verification controls in place at registration and upon any large withdrawal request.

14 Changes to This Privacy Policy

vipph1 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The effective date of the current version is displayed at the top of this document and on the Privacy Policy page of the Platform.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — vipph1 will notify you by email to your registered address or by posting a prominent notice on the Platform prior to the changes taking effect. For non-material changes, the updated Policy will simply be published on the Platform with a revised effective date.

Your continued use of the vipph1 Platform following the effective date of any update constitutes your acknowledgment of the revised Policy. If you do not accept the updated Policy, please discontinue use of the Platform and contact customer support to request account closure.

15 Contact & Data Protection Officer

For all data privacy inquiries, data subject rights requests, or to contact the vipph1 Data Protection Officer, please use the following contact details:

Email: [email protected]

When submitting a data subject rights request, please include your full name, registered email address, and a description of the right you wish to exercise or the concern you wish to raise. vipph1 may request additional information to verify your identity before processing the request, to protect against unauthorized disclosure of personal data.

Note: The email address above is for informational display only. Do not send sensitive documents such as scanned IDs via unencrypted email. For account-specific requests, please use the secure in-platform support chat after logging in to your vipph1 account. For formal complaints, you may also contact the National Privacy Commission of the Philippines through its official channels.