vviph Casino Privacy Policy

This Privacy Policy ("Policy") describes how vviph Casino ("vviph," "we," "us," "our"), the operator of the online gaming platform accessible at vviph.cam, collects, uses, stores, discloses, and protects personal information provided by users ("Player," "you," "your") in connection with their registration, account management, and use of any service offered through the platform.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission (NPC). It applies to all personal data collected through the vviph website, mobile browser interface, customer support channels, and any other touchpoints operated by or on behalf of vviph.

By creating an account with vviph, using any part of the platform, or submitting personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree with any provision of this Policy, you must discontinue use of the platform.

vviph collects personal information through several channels and means. The categories of information we collect are described below:

2.1 Information You Provide Directly

• Identity Information: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number) as required for KYC verification.
• Contact Information: Mobile number (Philippine format preferred), email address, and residential address including city (e.g., Manila, Cebu, Davao, Quezon City, or Makati).
• Account Credentials: Username and encrypted password. vviph does not store plaintext passwords.
• Financial Information: GCash or PayMaya account reference numbers, BPI, BDO, or Metrobank account names used for deposit and withdrawal verification. Full bank account numbers are not stored by vviph; they are transmitted directly to the relevant payment processor.
• KYC Documents: Scanned or photographed copies of government-issued identity documents submitted for age and identity verification purposes.
• Communications: Content of messages you submit via live chat, email, or any support ticket system, including any voluntary personal information included in those communications.

2.2 Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features accessed, game sessions initiated, bet history, session duration, login timestamps, and navigation paths within the platform.
• Transaction Data: Records of all deposits, withdrawals, bonuses claimed, bets placed, and game outcomes associated with your account.
• Cookies and Tracking Data: Information collected via cookies, web beacons, pixels, and similar technologies as described in Section 8 of this Policy.

2.3 Information from Third Parties

• Identity verification data received from KYC and AML compliance service providers engaged by vviph.
• Payment confirmation and transaction reference data from GCash, PayMaya, and banking partners.
• Fraud detection signals and risk scores from security and compliance service providers.

vviph uses the personal data it collects for the following purposes:

vviph will not use your personal data for any purpose that is incompatible with the purposes listed above without obtaining your prior consent, unless such use is required or permitted by law.

vviph processes personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its IRR:

• Consent: Where you have provided freely given, specific, informed, and unambiguous consent to processing, such as consent to receive promotional communications or to the use of non-essential cookies.
• Contractual Necessity: Where processing is necessary to perform our obligations under the Terms and Conditions you have accepted, including account registration, payment processing, and service delivery.
• Legal Obligation: Where processing is required to comply with a legal obligation to which vviph is subject, including PAGCOR regulatory requirements, AML obligations, and tax reporting requirements.
• Legitimate Interests: Where processing is necessary for the legitimate interests of vviph or a third party, provided that such interests are not overridden by your rights and interests. This covers fraud prevention, platform security, and internal analytics conducted on anonymised data.

vviph does not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• Service Providers: Third-party companies engaged by vviph to provide essential operational services, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, cloud infrastructure providers, and customer support platform operators. All service providers are bound by data processing agreements that restrict their use of your data to the specific service they provide.
• Game Content Partners: Licensed game studios providing titles on the vviph platform may receive anonymised session and bet data necessary for game operation and dispute resolution. They do not receive personally identifiable information beyond what is technically required for game delivery.
• Regulatory Authorities: vviph may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities upon lawful request or as required by applicable regulation.
• Law Enforcement: Where vviph is required by law, court order, or lawful government directive to disclose personal data to law enforcement or judicial authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material portion of vviph's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections as those described in this Policy.

vviph retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data is retained for the duration of your account's existence on the platform.
• Transaction and betting records are retained for a minimum of five (5) years following the date of the transaction, in accordance with PAGCOR and AMLC regulatory requirements.
• KYC and identity documents are retained for a minimum of five (5) years following account closure, unless a longer retention period is required by law.
• Customer support communication records are retained for three (3) years following the resolution of the relevant interaction.
• Marketing consent records are retained for the duration of the consent and for a period of three (3) years following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted from active systems or rendered irreversibly anonymous. Where secure deletion is not immediately technically feasible, the data is restricted from active processing pending scheduled deletion cycles.

vviph implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include, without limitation:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your browser and the vviph platform.
• Encryption of sensitive data at rest using industry-standard cryptographic algorithms.
• Role-based access controls ensuring that only authorised personnel access personal data on a need-to-know basis.
• Regular penetration testing and security vulnerability assessments conducted by qualified third-party security firms.
• Multi-factor authentication requirements for administrative system access.
• Comprehensive audit logging of access to personal data within internal systems.
• Formal data breach response procedures, including notification obligations as required by the NPC under the DPA.

In the event of a personal data breach that is likely to result in harm to affected data subjects, vviph will notify the National Privacy Commission and, where required, affected individuals within the timeframes prescribed by the DPA and NPC regulations.

vviph uses cookies and similar tracking technologies to operate the platform, maintain session security, analyse usage patterns, and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and previously entered information, to improve your experience across sessions.
• Analytics Cookies: Used to collect anonymised or aggregated data about how players interact with the platform, enabling vviph to identify areas for improvement. Analytics data is not used to personally identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the platform. Strictly necessary and security cookies cannot be disabled through browser settings without preventing access to the platform.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by vviph:

To exercise any of the above rights, please contact vviph's Data Protection Officer via the support email address listed in Section 13 of this Policy. vviph will respond to all verifiable data subject requests within thirty (30) calendar days of receipt.

The vviph Casino platform is strictly intended for adults. In the Philippines, participation in casino-style online gaming is restricted to individuals who are twenty-one (21) years of age or older under applicable PAGCOR regulations.

vviph does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as a mandatory part of the account registration and KYC process. If vviph becomes aware that personal data has been collected from a person under the required age, all associated account data will be deleted and the account will be permanently closed without further notice.

If you have reason to believe that a minor has registered on the vviph platform, please notify us immediately via the contact details in Section 13. vviph takes underage access seriously and will act promptly on all credible notifications.

vviph's primary operations and data infrastructure are based in the Philippines. However, certain service providers engaged by vviph — including cloud infrastructure providers and game studio partners — may operate servers or process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, vviph ensures that such transfers are carried out in compliance with the requirements of the Data Privacy Act of 2012, including through the use of contractual safeguards that require recipient organisations to apply data protection standards equivalent to those required under Philippine law.

By using the vviph platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside the Philippines where such transfer is necessary for the delivery of services to you, subject to the safeguards described above.

vviph reserves the right to update or amend this Privacy Policy at any time. The most current version of this Policy will always be published on this page with a revised Effective Date displayed at the top of the document.

Where amendments are material — meaning they substantively affect how your personal data is collected, used, or shared — vviph will endeavour to provide advance notice via email to registered account holders or via a prominent notice on the platform prior to the changes taking effect.

Your continued use of the vviph Casino platform after a revised version of this Policy has been published constitutes your acceptance of the updated terms. If you disagree with any amendment, you must cease using the platform and may request account closure in accordance with the Terms and Conditions.

For questions, concerns, or requests related to this Privacy Policy or your personal data, you may contact vviph's designated Data Protection Officer and Privacy team through the following official channels:

• Live Chat: Available 24 hours a day, 7 days a week via the vviph website. This is the fastest channel for general privacy enquiries.
• Email: [email protected] — for formal written data subject requests, complaints, and DPO correspondence. Please include "Privacy Request" in your subject line to ensure prompt routing.

vviph's Data Protection Officer will acknowledge all formal data subject requests within five (5) business days of receipt and provide a substantive response within thirty (30) calendar days, unless an extension is required under applicable law, in which case you will be notified of the extended timeline and the reason for it.

vviph serves players across the Philippines, including Manila, Quezon City, Makati, Cebu City, Davao, and all other regions. All privacy communications are handled in English and are subject to the laws of the Republic of the Philippines.