vpph Privacy Policy

1. Personal Data We Collect

vpph collects personal data that is necessary for the legal operation of a PAGCOR-licensed online gaming platform, the fulfillment of our regulatory obligations, and the delivery of a secure and personalized gaming experience to Filipino players. We collect data through several channels, including during account registration, during ongoing use of the Platform, and through automated technical means.

1.1 Data You Provide Directly

When you register for a vpph account or use our services, you may provide us with the following categories of personal data:

1.2 Data Collected Automatically

When you access or use the vpph Platform, we automatically collect certain technical and behavioral data through cookies, log files, and similar tracking technologies, including:

• IP address and approximate geographic location (city or region level);
• Device type, operating system, browser type and version;
• Pages visited, features used, session duration, and click patterns;
• Game activity, wager history, deposit and withdrawal transaction logs;
• Referral source (how you arrived at the vpph Platform);
• Login timestamps and session identifiers.

1.3 Data from Third Parties

In limited circumstances, vpph may receive personal data about you from third-party sources, including:

• Payment processors (GCash, PayMaya, banks) to verify transactions and prevent fraud;
• Identity verification service providers used to complete your KYC check;
• PAGCOR and other regulatory authorities as part of their licensing oversight functions;
• The Anti-Money Laundering Council (AMLC) as required by law.

2. How vpph Uses Your Personal Data

vpph processes your personal data on the legal bases provided under the Philippine Data Privacy Act, including your consent, the performance of a contract (the Terms and Conditions governing your vpph account), compliance with legal obligations, and our legitimate interests as a PAGCOR-licensed gaming operator.

The specific purposes for which vpph uses your personal data are as follows:

2.1 Account Management and Service Delivery

We use your personal data to create and maintain your vpph account, verify your identity and age (21+ as required by PAGCOR), process deposits and withdrawals in Philippine Peso, deliver gaming services (slots, live casino, sports betting, bingo, and other products on the Platform), and manage your account settings and preferences.

2.2 Regulatory Compliance and Legal Obligations

As a PAGCOR-licensed operator, vpph is subject to a range of mandatory regulatory obligations that require the processing of your personal data. These include:

• Know Your Customer (KYC) identity verification and age verification;
• Anti-Money Laundering (AML) transaction monitoring and suspicious activity reporting to PAGCOR and AMLC;
• Maintaining gaming records as required by PAGCOR regulations;
• Responding to lawful requests from Philippine law enforcement, courts, or regulatory authorities;
• Responsible gaming obligations, including self-exclusion management.

2.3 Security and Fraud Prevention

vpph uses your data to detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other illegal or prohibited conduct on the Platform. This includes automated transaction monitoring, device fingerprinting, and behavioral analysis.

2.4 Customer Support

We process your personal data to respond to your inquiries, complaints, and support requests — whether submitted through live chat, email, or any other customer service channel available on the vpph Platform.

2.5 Platform Improvement

Aggregated and anonymized data derived from Platform usage patterns is used to analyze the performance of our games and services, improve the user interface and experience, and identify technical issues. This analysis does not involve individual user profiling for marketing purposes.

2.6 Marketing Communications

With your explicit consent at the time of registration or through your account communication preferences, vpph may send you promotional offers, bonus updates, and platform news relevant to your gaming activity. You may withdraw your consent to marketing communications at any time by updating your account preferences. Withdrawal of consent for marketing does not affect the lawfulness of data processing for other purposes outlined in this Policy.

3. Disclosure and Sharing of Your Personal Data

vpph does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We disclose personal data only in the limited circumstances described below, and only to the extent necessary for each purpose.

3.1 Service Providers and Processors

vpph engages trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include:

• Payment processing partners (GCash, PayMaya, and Philippine bank partners) for deposit and withdrawal processing;
• Identity verification and KYC service providers for age and identity checks;
• Game software providers and technology platform partners who supply games or back-end infrastructure;
• Cloud hosting and data storage providers operating under security standards compliant with the PDPA;
• Customer support platform providers who facilitate our support chat and ticketing systems.

All third-party data processors are required to implement adequate security measures and to process your data solely for the specified purposes permitted under their agreements with vpph.

3.2 Regulatory and Law Enforcement Authorities

vpph will disclose personal data to Philippine regulatory authorities, law enforcement agencies, or courts when required to do so by law, court order, or lawful regulatory directive. This includes mandatory disclosures to PAGCOR and the Anti-Money Laundering Council (AMLC) under the Republic Act No. 9160, as amended.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of vpph's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the privacy practices of the successor entity prior to completion, where practicable.

3.4 No Cross-Border Transfers Without Safeguards

Where vpph transfers your personal data outside of the Philippines (for example, to cloud infrastructure or service providers located in other jurisdictions), such transfers are carried out only where adequate safeguards are in place, consistent with the PDPA and NPC regulations on cross-border data transfers.

4. Data Security Measures

vpph implements a comprehensive set of technical, organizational, and administrative security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmission between your device and vpph's servers;
• Encrypted storage of sensitive data fields including passwords (hashed using industry-standard algorithms), financial account details, and identity document copies;
• Two-factor authentication (2FA) available for all vpph accounts to prevent unauthorized login;
• Role-based access controls ensuring only authorized personnel can access specific data categories based on job function;
• Regular security audits and penetration testing of Platform infrastructure;
• Segregated database architecture with player funds and personal data stored in environments separate from development and testing systems;
• Incident response procedures compliant with the PDPA's requirements for data breach notification to the NPC and affected individuals.

4.1 Data Breach Procedures

In the event of a personal data breach that poses a real risk of serious harm to your rights and freedoms, vpph will notify the Philippine National Privacy Commission (NPC) within 72 hours of becoming aware of the breach. We will also notify affected individuals without undue delay where the breach is likely to result in a high risk to your personal rights and freedoms, in accordance with the PDPA.

5. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vpph. To exercise any of these rights, you may contact vpph customer support with your request, and we will respond within the timeframes mandated by the NPC.

5.1 Right to Be Informed

You have the right to be informed about the collection, processing, and use of your personal data. This Privacy Policy serves as vpph's primary means of fulfilling this obligation. We also provide just-in-time notices at relevant data collection points on the Platform.

5.2 Right to Access

You have the right to request a copy of the personal data vpph holds about you, along with information about how it is being used and with whom it has been shared. vpph will provide this information within thirty (30) days of a verified access request.

5.3 Right to Correction

If any personal data vpph holds about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update that information. You may update many of your account details directly through your vpph account settings panel.

5.4 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests. Where you object to marketing, we will cease that processing promptly. Where you object on other grounds, we will evaluate your objection in accordance with the PDPA.

5.5 Right to Erasure

You may request the deletion of your personal data from vpph's systems in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to limitations where vpph is required to retain data for legal, regulatory, or audit purposes (e.g., PAGCOR and AMLC record-keeping requirements), in which case we will inform you of those limitations.

5.6 Right to Data Portability

Where technically feasible, you may request that vpph provide your personal data in a structured, commonly used, and machine-readable format to allow you to transfer it to another service provider.

5.7 Right to Lodge a Complaint

If you believe vpph has processed your personal data in violation of the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. You may also raise concerns with vpph's Data Protection Officer before escalating to the NPC.

6. Cookies and Tracking Technologies

vpph uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyze Platform usage patterns. A cookie is a small text file placed on your device by our web server when you access the vpph Platform.

6.1 Types of Cookies We Use

6.2 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the vpph Platform, as they are required for login sessions and basic security functions. vpph does not use third-party advertising cookies or retargeting pixels.

7. Data Retention

vpph retains your personal data for as long as your account is active and for a period thereafter as required by Philippine law and PAGCOR regulations. Specific retention periods include:

• Account and identity data: Retained for the life of your account, plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations;
• Transaction records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act of 2001, as amended;
• Customer support communications: Retained for up to three (3) years following account closure or resolution of the last support interaction;
• Marketing consent records: Retained for the duration of consent and for a period of three (3) years after withdrawal of consent as evidence of prior consent;
• Technical and log data: Typically retained for twelve (12) months unless required for longer periods for security investigation purposes.

Upon expiry of the applicable retention period, vpph will securely delete or anonymize your personal data in accordance with PDPA-compliant disposal procedures.

8. Minors and Age Restriction

The vpph Platform is strictly restricted to individuals who are 21 years of age or older, as mandated by PAGCOR regulations. vpph does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will immediately close the associated account, delete all related personal data, and report the matter to PAGCOR as required.

If you are a parent or guardian and believe that your child has registered for a vpph account, please contact our customer support immediately so we can take appropriate action.

9. Changes to This Privacy Policy

vpph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform services. When we make material changes to this Policy, we will:

• Update the "Effective Date" at the top of this page;
• Display a notice on the vpph Platform homepage or send you an email notification where the changes are significant;
• Where required by law, seek your re-consent for new processing activities.

Your continued use of the vpph Platform following the posting of any changes to this Privacy Policy constitutes your acknowledgment of and agreement to the revised Policy. We encourage you to review this page periodically to remain informed of how vpph protects your data.

10. Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or vpph's personal data practices, please contact our customer support team through the vpph Platform. Our support team is available 24 hours a day, seven days a week, and will route privacy-related inquiries to vpph's designated Data Protection Officer (DPO) as required by the Philippine Data Privacy Act.

vpph's Data Protection Officer is responsible for overseeing our compliance with the PDPA and for handling data subject requests within the timeframes prescribed by the National Privacy Commission. All privacy-related requests will be acknowledged promptly and resolved in accordance with NPC requirements.

For support, email us at: [email protected]