viphh Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, use, disclosure, storage, and protection of personal data by viphh ("we," "us," "our"), operating the online gaming platform accessible at viphh.cam and related mobile applications.

viphh is committed to protecting your privacy and ensuring the security of your personal information in accordance with:

• Republic Act No. 10173 – Data Privacy Act of 2012 (DPA) of the Philippines
• National Privacy Commission (NPC) regulations and circulars
• Philippine Amusement and Gaming Corporation (PAGCOR) licensing requirements
• General Data Protection Regulation (GDPR) principles where applicable to international users
• Industry best practices for online gaming and financial services data security

By creating a viphh Account, accessing our Services, or providing personal information to us, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with this Policy, you must immediately cease use of viphh Services and refrain from providing any personal information.

2. Data Controller and Contact Information

2.1 Data Controller Identity

viphh, operating under PAGCOR authorization in the Republic of the Philippines, is the data controller responsible for the personal information you provide through our platform. As data controller, we determine the purposes and means of processing your personal data.

2.2 Data Protection Officer Contact

For questions, concerns, or requests regarding your personal data, data privacy rights, or this Privacy Policy, please contact our Data Protection Officer:

• Email: [email protected]
• Alternative Email: [email protected]
• Subject Line: "Data Privacy Inquiry – [Your Account Username or Email]"
• Response Time: We aim to respond to all privacy inquiries within 5 business days

You may also reach our general customer support for privacy-related matters through our 24/7 live chat service or [email protected] email.

3. Types of Personal Data We Collect

viphh collects and processes various categories of personal data necessary to provide our Services, comply with legal obligations, and ensure platform security. The personal data we collect includes:

3.1 Account Registration Information

• Full legal name as it appears on government-issued identification
• Date of birth (to verify you are 21 years of age or older)
• Gender (optional)
• Email address
• Mobile phone number (Philippine number required)
• Username and password (passwords are encrypted and never stored in plain text)
• Residential address (street address, barangay, city/municipality, province, postal code)
• Nationality and country of residence

3.2 Identity Verification (KYC) Documents

To comply with PAGCOR anti-money laundering (AML) and Know Your Customer (KYC) regulations, we collect:

• Government-issued photo identification (Philippine passport, driver's license, UMID, Philippine national ID, voter's ID, etc.)
• Proof of residential address (utility bills, bank statements, government correspondence dated within last 3 months)
• Selfie photograph holding your identification document (for biometric verification)
• Source of funds documentation for large deposits or withdrawals (employment records, bank statements, business registration documents)
• Additional identity verification documents as required by PAGCOR or requested during enhanced due diligence procedures

3.3 Payment and Financial Information

• Payment method details (GCash mobile number, Maya account information, bank account numbers, Coins.ph wallet ID)
• Payment transaction history (deposits, withdrawals, amounts, dates, times, transaction IDs)
• Billing information and payment receipts
• Cryptocurrency wallet addresses (if cryptocurrency payment methods are offered)

Security Note: We do not store complete credit/debit card numbers, CVV codes, or full bank account credentials. Payment processing is handled by certified third-party payment processors complying with PCI-DSS standards. We only retain minimal payment method identifiers necessary for transaction processing and fraud prevention.

3.4 Gaming Activity and Behavioral Data

• Game play history (games played, wagers placed, outcomes, wins, losses)
• Bonus claims and wagering progress
• Session duration, login frequency, and activity patterns
• Betting preferences and favorite games
• Responsible gaming settings (deposit limits, session time limits, self-exclusion requests)
• Customer support interactions (chat transcripts, email correspondence, support tickets)

3.5 Technical and Device Information

• IP address and geolocation data (to verify Philippine jurisdiction access)
• Device type, model, operating system, and browser version
• Mobile device identifiers (IMEI, Android ID, iOS IDFA)
• Cookies, local storage, and similar tracking technologies (see Cookie Policy for details)
• Referrer URL and navigation path through our website
• Screen resolution, language preferences, and time zone settings

3.6 Marketing and Communications Preferences

• Email subscription preferences (promotional emails, newsletters, bonus offers)
• SMS/text message marketing consent
• Push notification preferences for mobile app users
• Communication language preference (English, Tagalog, or bilingual Filipino-English)

4. How We Use Your Personal Data

viphh processes your personal data for specific, explicit, and legitimate purposes, including but not limited to:

4.1 Account Management and Service Provision

• Creating and maintaining your viphh Account
• Authenticating your identity and managing login sessions
• Processing deposits, withdrawals, and payment transactions
• Providing access to games, live dealer tables, and gaming features
• Managing bonuses, promotions, loyalty programs, and VIP rewards
• Facilitating customer support and responding to inquiries
• Maintaining accurate financial records and transaction histories

4.2 Legal and Regulatory Compliance

• Verifying you are at least 21 years of age (legal gambling age in Philippines)
• Complying with PAGCOR licensing conditions and regulatory reporting requirements
• Conducting KYC and AML due diligence procedures mandated by Philippine law
• Preventing money laundering, terrorist financing, and financial crimes
• Detecting and preventing fraud, identity theft, and account abuse
• Responding to lawful requests from law enforcement, courts, and regulatory authorities
• Maintaining compliance with Data Privacy Act and NPC regulations
• Generating audit trails and regulatory compliance reports

4.3 Platform Security and Risk Management

• Monitoring for suspicious activity, fraud patterns, and security threats
• Preventing unauthorized access, account takeovers, and hacking attempts
• Identifying and blocking multiple accounts, bonus abuse, and Terms violations
• Enforcing responsible gaming policies and self-exclusion requests
• Detecting collusion, game manipulation, and unfair play
• Protecting against distributed denial-of-service (DDoS) attacks and cyber threats

4.4 Marketing and Communications

With your explicit consent, we use your personal data to:

• Send promotional emails about new games, bonuses, and special offers
• Deliver SMS/text message notifications about exclusive promotions
• Provide personalized game recommendations based on your preferences
• Send birthday bonuses and anniversary rewards
• Invite you to participate in tournaments, competitions, and events
• Notify you about platform updates, new features, and service improvements

You may opt out of marketing communications at any time through your Account settings or by clicking "unsubscribe" links in emails.

4.5 Analytics and Platform Improvement

• Analyzing gaming trends, user behavior, and platform performance
• Conducting A/B testing to optimize user experience and interface design
• Generating aggregated, anonymized statistics and reports (never containing personally identifiable information)
• Improving game selection, features, and platform functionality
• Enhancing customer support quality and response times
• Developing new products, services, and gaming experiences

5. Legal Bases for Data Processing

Under the Philippine Data Privacy Act and GDPR principles, viphh processes your personal data based on the following legal grounds:

Where we rely on legitimate interests, we conduct balancing tests to ensure our interests do not override your fundamental privacy rights. You have the right to object to processing based on legitimate interests.

6. Data Sharing and Third-Party Disclosures

viphh does not sell, rent, or trade your personal data to third parties for marketing purposes. However, we may share your personal information with trusted third parties under the following circumstances:

6.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, BPI, BDO, UnionBank, Coins.ph, and other payment gateways process deposits and withdrawals on our behalf.
• Game Providers: Third-party software developers and live dealer studios (e.g., Evolution Gaming, Pragmatic Play, NetEnt) may receive limited data to facilitate gameplay.
• Identity Verification Services: KYC/AML compliance vendors verify your identity documents and conduct background checks.
• Cloud Hosting Providers: Secure data centers host our platform infrastructure and databases.
• Customer Support Tools: Live chat software and helpdesk systems process support interactions.
• Analytics Platforms: Google Analytics, Mixpanel, or similar services analyze aggregated user behavior (we anonymize IP addresses and personal identifiers).

All third-party service providers are contractually obligated to maintain data confidentiality, implement appropriate security measures, and use your personal data only for specified purposes.

6.2 Legal and Regulatory Authorities

We may disclose your personal data to:

• PAGCOR and other Philippine gaming regulators for licensing compliance and audits
• National Privacy Commission (NPC) in response to lawful data protection inquiries
• Law enforcement agencies (Philippine National Police, National Bureau of Investigation) pursuant to valid court orders, subpoenas, or warrants
• Tax authorities (Bureau of Internal Revenue) for tax compliance and reporting
• Anti-Money Laundering Council (AMLC) for suspicious transaction reports

6.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the new entity will be bound by this Privacy Policy or will obtain your consent for any material changes.

6.4 Affiliates and Group Companies

We may share data with affiliated companies within the viphh corporate group for internal administration, consolidated reporting, and service improvements. All affiliates adhere to the same data protection standards outlined in this Policy.

7. Data Security Measures

viphh implements industry-leading technical, organizational, and administrative security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Security Controls

• Encryption: All data transmissions use TLS 1.3 encryption. Sensitive data at rest (passwords, payment details) is encrypted using AES-256 encryption.
• Secure Authentication: Multi-factor authentication (2FA) available for Account access. Passwords are hashed using bcrypt with salt rounds, never stored in plain text.
• Firewall Protection: Enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor network traffic.
• DDoS Mitigation: Cloudflare and AWS Shield protect against distributed denial-of-service attacks.
• Secure Development: Code undergoes regular security audits, penetration testing, and vulnerability assessments by independent third-party security firms.
• Database Security: Access controls, role-based permissions, and audit logging restrict database access to authorized personnel only.

7.2 Organizational Security Policies

• Strict access control policies limit employee access to personal data on a need-to-know basis
• All employees sign confidentiality agreements and undergo data protection training
• Background checks conducted on employees with access to sensitive data
• Regular security awareness training and phishing simulation exercises
• Incident response plan and data breach notification procedures in place
• Annual third-party security audits and compliance assessments

7.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours of discovering the breach, as required by the Data Privacy Act
• Report the breach to the National Privacy Commission (NPC) within the mandated timeframe
• Provide details about the nature of the breach, data affected, and remedial actions taken
• Offer guidance on steps you can take to protect yourself (e.g., password changes, monitoring financial accounts)

8. Data Retention and Deletion

8.1 Retention Periods

viphh retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, and resolve disputes. Specific retention periods include:

• Active Accounts: Personal data retained for the duration of your Account's active status and use of viphh Services.
• Closed Accounts: After Account closure, most personal data is deleted within 30 days, except data we are legally required to retain.
• Transaction Records: Financial transaction data, deposits, withdrawals, and gaming history retained for 5 years as required by PAGCOR and Anti-Money Laundering Act (AMLA).
• KYC Documents: Identity verification documents retained for 5 years after Account closure to comply with AML regulations.
• Legal Claims: Data related to disputes, legal proceedings, or regulatory investigations retained until final resolution plus applicable statute of limitations.
• Marketing Opt-Outs: Email addresses of users who opt out of marketing retained indefinitely to honor your preferences and prevent future contact.

8.2 Data Deletion Process

When personal data is no longer needed:

• Data is securely deleted from active databases and backup systems using industry-standard data sanitization methods
• Physical documents (if any) are shredded or incinerated
• Electronic media is overwritten or degaussed to prevent data recovery
• Deletion is logged and audited for compliance verification

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal data:

9.1 Right to Access

You have the right to request and obtain a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (e.g., PDF, CSV) within 15 days of your request.

9.2 Right to Rectification

If your personal data is inaccurate, incomplete, or outdated, you have the right to request corrections or updates. You can update most information directly through your Account settings, or contact customer support for assistance.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as:

• Data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• Data was unlawfully processed or must be erased to comply with legal obligations

Please note that we may be legally required to retain certain data (transaction records, KYC documents) even after you request deletion.

9.4 Right to Restrict Processing

You may request that we limit the processing of your personal data in certain situations, such as during disputes about data accuracy or while we assess your objection to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request." We will verify your identity and respond within the timeframes required by Philippine law.

10. International Data Transfers

viphh primarily operates within the Philippines and stores personal data on servers located in secure Philippine or Southeast Asian data centers. In limited circumstances, we may transfer data to third-party service providers located outside the Philippines (e.g., international payment processors, cloud hosting providers in Singapore, AWS regions).

When transferring data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by the National Privacy Commission
• Adequacy determinations confirming the destination country has sufficient data protection laws
• Binding corporate rules for intra-group transfers
• Your explicit consent for specific international transfers

We will never transfer your personal data to jurisdictions with inadequate data protection standards without implementing appropriate safeguards.

11. Children's Privacy

viphh Services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If we discover that we have inadvertently collected information from a minor, we will:

• Immediately close the Account
• Delete all associated personal data from our systems
• Void all transactions and return deposits (where legally permissible)
• Report the incident to our compliance team for investigation

If you believe a minor has accessed viphh Services or provided personal information to us, please contact us immediately at [email protected].

12. Updates to This Privacy Policy

viphh reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on the viphh Website homepage
• In-Account notification upon your next login

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Continued use of viphh Services after Policy updates constitutes acceptance of the revised terms.

13. Complaints and Regulatory Contact

If you believe viphh has violated your data privacy rights or mishandled your personal information, you have the right to file a complaint with:

National Privacy Commission (NPC) – Philippines

• Address: 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila, Philippines
• Email: [email protected]
• Website: https://www.privacy.gov.ph
• Hotline: (02) 8234-2228

You also have the right to seek judicial remedy through Philippine courts if you believe your data privacy rights have been violated.