vviph Privacy Policy

vviph ("vviph," "we," "us," or "our") operates the online gaming platform at https://vviph.vip (the "Platform"). We are committed to protecting the personal information of every individual who interacts with our Platform, including registered players, visitors, and prospective users located in the Philippines and elsewhere.

This Privacy Policy ("Policy") describes how vviph collects, uses, stores, shares, and protects personal data in connection with the Platform and all related services. It is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission ("NPC").

By accessing or using the vviph Platform, registering an account, or otherwise submitting your personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection law, the personal information controller responsible for your personal data is vviph, the operator of https://vviph.vip.

All data protection enquiries, requests to exercise data subject rights, and formal complaints may be directed to our Data Protection Officer at the contact details set out in Section 15 of this Policy. vviph has designated a Data Protection Officer ("DPO") in accordance with the requirements of the DPA and the NPC.

vviph collects the following categories of personal data from players and visitors. The specific data collected from you depends on how you interact with the Platform and the stage of your account lifecycle:

vviph does not collect sensitive personal information beyond what is necessary for identity verification and regulatory compliance. vviph does not collect or process biometric data unless expressly required by a specific regulatory instruction.

vviph collects personal data through the following mechanisms:

• Direct Submission: Information you voluntarily provide during registration, KYC verification, deposit and withdrawal requests, support interactions, or promotional participation.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser characteristics, session duration, and pages visited, primarily through cookies and server logs.
• Payment Processors: Financial data received from our approved payment service providers (such as GCash, PayMaya, and local Philippine banks) in connection with deposit and withdrawal transactions.
• Identity Verification Partners: Information received from third-party Know Your Customer ("KYC") service providers engaged to verify your identity and age in accordance with PAGCOR and anti-money laundering requirements.
• Game Platform Providers: Game session data generated through the integration of third-party game software providers within the vviph Platform.

vviph processes your personal data only for specific, declared, and legitimate purposes. The following table sets out the primary purposes for which your data is processed and the corresponding legal basis under the Philippine Data Privacy Act:

• Account Creation and Management: Processing necessary for the performance of the contract between you and vviph, namely the provision of online gaming services.
• Identity and Age Verification: Processing necessary to comply with legal obligations under PAGCOR regulations and Philippine anti-money laundering law (AMLA), including the strict 21+ age requirement applicable to all Philippine online gaming operators.
• Payment Processing: Processing necessary for the performance of the contract and to comply with financial regulatory obligations.
• Fraud Prevention and Security: Processing based on vviph's legitimate interest in protecting the security, integrity, and financial soundness of the Platform and all its users.
• Responsible Gaming Compliance: Processing necessary to comply with PAGCOR's responsible gaming framework, including the detection of at-risk gaming behaviour and enforcement of self-exclusion requests.
• Customer Support: Processing necessary for the performance of the contract and to ensure the quality of support services provided to players.
• Marketing and Promotions: Processing based on your explicit consent, which may be withdrawn at any time by updating your account communication preferences or contacting support at [email protected].
• Legal Compliance and Regulatory Reporting: Processing necessary to comply with applicable Philippine law, including but not limited to AMLA reporting obligations and responses to lawful requests from government authorities.
• Platform Analytics and Improvement: Processing based on vviph's legitimate interest in improving the performance, functionality, and user experience of the Platform.

vviph does not share your personal data with third parties except in the following circumstances, each of which is subject to appropriate contractual safeguards and data sharing agreements where required by law:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment providers receive the financial data necessary to process your deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Third-party identity verification services receive the identity documents you submit during the verification process solely for the purpose of confirming your identity and age.
• Game Software Providers: PG Soft, Pragmatic Play, Jili, and other integrated game providers receive limited technical session data necessary to operate their games on the vviph Platform. These providers are prohibited from using your data for purposes other than game delivery.
• IT Infrastructure and Security Providers: Cloud hosting, cybersecurity, and fraud detection service providers who process data solely on vviph's instructions and under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, and other competent Philippine government bodies when disclosure is required by law or a lawful order.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by vviph, subject to professional confidentiality obligations.

In all cases where vviph engages a third-party processor, vviph enters into a data sharing or data processing agreement that imposes obligations on the processor consistent with the requirements of the Philippine Data Privacy Act. vviph remains responsible for ensuring that third-party processors handle your data appropriately.

vviph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable Philippine law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active vviph account plus a minimum period of five (5) years following account closure, as required by AMLA and PAGCOR regulations.
• Financial Transaction Records: Retained for a minimum of ten (10) years from the date of the transaction, in compliance with Philippine anti-money laundering record-keeping requirements.
• Identity Verification Documents: Retained for the duration of your account plus five (5) years following closure, or longer if required by applicable law.
• Support and Correspondence Records: Retained for five (5) years from the date of the last interaction, unless a dispute or regulatory matter requires longer retention.
• Marketing Consent Records: Retained until the relevant consent is withdrawn, plus three (3) years from the date of withdrawal as evidence of prior consent.
• Technical and Log Data: Retained for up to twelve (12) months from the date of collection, unless retained longer for specific security or fraud investigation purposes.

When personal data is no longer required for retention, vviph securely destroys or anonymises it in accordance with the disposal procedures required under the DPA and NPC guidelines.

vviph implements technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, but are not limited to:

• Encryption: All data transmitted between your device and vviph servers is encrypted using 256-bit SSL/TLS encryption. Sensitive stored data, including passwords and payment credentials, is encrypted at rest using industry-standard algorithms.
• Access Controls: Personal data is accessible only to vviph personnel and authorised processors with a documented business need. Access is governed by role-based permissions and enforced through multi-factor authentication for administrative systems.
• Network Security: vviph's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and continuous security monitoring.
• Penetration Testing: Regular security audits and penetration tests are conducted by independent security specialists to identify and remediate vulnerabilities.
• Incident Response: vviph maintains a documented personal data breach response procedure. In the event of a breach that is likely to result in risk to your rights and freedoms, vviph will notify the NPC within 72 hours of discovery and affected individuals without undue delay, as required by the DPA.
• Employee Training: All vviph personnel who handle personal data receive regular data privacy training commensurate with their role.

vviph uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and analyse Platform performance. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences, such as language settings and game lobby configuration, to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform, which pages are most visited, and where errors occur. This data is used solely to improve Platform performance.
• Security Cookies: Used to detect and prevent fraud, including identifying unusual login patterns or suspicious activity associated with your account.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform. vviph does not use third-party advertising or behavioural targeting cookies. No cookie data is shared with advertising networks.

vviph's age verification procedures are designed to prevent underage access to the Platform. These procedures include verification of date of birth at registration, mandatory KYC identity verification before any withdrawal is processed, and ongoing monitoring for indicators of underage access.

If vviph discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, vviph will immediately suspend the relevant account, cease all processing of that individual's personal data, and take steps to securely delete the data collected, subject to any legal obligation to retain records for regulatory or investigative purposes. Any deposits made by an underage player will be returned minus any applicable processing costs, and the matter will be reported to the appropriate authorities if required by law.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to vviph without your consent, please contact us immediately at [email protected].

As a data subject under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by vviph. These rights are enforceable against vviph and may be exercised by contacting our Data Protection Officer at [email protected].

vviph primarily processes your personal data within the Philippines. However, in connection with the provision of certain technical services, including cloud hosting infrastructure and game platform integration, some personal data may be transferred to and processed in jurisdictions outside the Philippines.

Where such transfers occur, vviph ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to Philippine data privacy law, including the use of contractual clauses approved by the NPC and assessments of the data protection frameworks of the recipient jurisdiction. vviph will not transfer your personal data to a foreign country or international organisation that does not provide an adequate level of protection for data subject rights.

The vviph Platform integrates third-party game software provided by licensed game developers including PG Soft, Pragmatic Play, Jili, and others. These providers operate their game engines under their own applicable data protection and licensing frameworks. vviph ensures through contractual arrangements that these providers process only the data necessary to deliver game functionality and are prohibited from using player data for independent commercial purposes.

vviph's Privacy Policy does not extend to the data practices of any third-party service that operates independently of the vviph Platform. Any third-party services accessible via links within the Platform that redirect you to an external website are governed by their own privacy policies. vviph is not responsible for the data practices of external websites.

vviph does not embed or permit third-party advertising networks, social media tracking pixels, or third-party marketing analytics tools on the Platform that would allow those parties to profile your behaviour without your explicit consent.

vviph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or vviph's data processing practices. Where amendments are material — meaning they significantly affect your rights or how your data is used — vviph will provide advance notice through the Platform's notification system or, where a registered email address is held, by direct email notification.

The "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent amendment. Your continued use of the Platform after an amendment takes effect constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you may close your account and request the return of your available balance in accordance with the vviph Terms and Conditions.

vviph recommends that all registered players review this Policy periodically and especially whenever they receive a notification of an update. Copies of previous versions of this Policy are available on request from our Data Protection Officer.

For all data privacy related enquiries, requests to exercise your data subject rights, or concerns about how vviph handles your personal data, please contact our Data Protection Officer through the following channel:

When submitting a data subject rights request, please include your registered vviph account mobile number or email address, a description of your request, and a copy of a valid Philippine government-issued identification document to allow vviph to verify your identity before processing the request. vviph will not act on data subject rights requests that cannot be verified, to protect the privacy of all account holders.