vipl Casino Privacy Policy

01 Introduction & Scope

This Privacy Policy applies to all personal information that vipl Casino processes in connection with:

• Registration and maintenance of a vipl player account;
• Access to and use of any game, feature, or service available on the vipl platform;
• Deposits, withdrawals, and other financial transactions conducted through vipl;
• Communications between you and vipl's customer support, marketing, or compliance teams;
• Your participation in any vipl promotion, loyalty programme, or survey;
• Your browsing of the vipl website, whether or not you hold a registered account.

This Policy does not apply to third-party websites, applications, or services that may be linked to or from the vipl platform. vipl is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external platforms you visit.

This Policy is published in English. Where any translation is provided for convenience, the English version shall prevail in the event of any inconsistency.

02 Data Controller Details

For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal information is:

vipl has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy. Queries specifically addressed to the DPO may be directed to [email protected] with the subject line "Data Protection Officer — Privacy Query."

03 Personal Data We Collect

vipl collects the following categories of personal data, depending on how you interact with the platform:

vipl does not collect sensitive personal information beyond what is strictly necessary for KYC identity verification and PAGCOR compliance obligations. We do not collect biometric data, health information, or political affiliation data.

04 How We Collect Your Data

vipl collects personal data through the following means:

4.1 Direct Collection

Information you provide voluntarily when registering a vipl account, completing KYC verification, initiating a deposit or withdrawal, contacting customer support, participating in a promotion, or completing any form or survey on the vipl platform.

4.2 Automated Collection

Technical and usage data collected automatically when you access the vipl website or platform, including through cookies, web beacons, session tracking tools, and server logs. This data is collected to maintain platform security, detect fraudulent or suspicious activity, and improve the player experience. See Section 8 for details on our Cookie Policy.

4.3 Third-Party Sources

vipl may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification service providers used for KYC processing;
• Payment processors (e.g., GCash, PayMaya) for transaction confirmation and fraud screening;
• PAGCOR or other regulatory bodies, in connection with licensing compliance obligations;
• The Anti-Money Laundering Council (AMLC), where vipl is required to obtain or verify information under the Anti-Money Laundering Act.

05 Legal Basis for Processing

vipl processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our contract with you — managing your account, processing transactions, delivering games, and providing customer support;
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act itself, and tax reporting obligations;
• Legitimate Interests: Processing necessary for vipl's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and analytical improvements to the player experience;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time through your account settings or by contacting [email protected].

06 How We Use Your Personal Data

vipl uses your personal data for the following purposes:

• Creating, verifying, and managing your vipl player account;
• Processing and recording all deposits, withdrawals, and in-platform transactions in PHP;
• Verifying your identity and age (21+) through KYC procedures as required by PAGCOR;
• Monitoring transactions and gaming activity for anti-money laundering (AML) compliance and fraud prevention;
• Providing customer support and resolving disputes related to your account or game outcomes;
• Sending OTP verification messages, account security alerts, and transactional notifications to your registered Philippine mobile number;
• Administering bonuses, promotions, and loyalty rewards;
• Monitoring for responsible gaming indicators, implementing deposit limits or self-exclusion where requested, and complying with PAGCOR's responsible gaming directives;
• Fulfilling PAGCOR reporting obligations and complying with any regulatory, law enforcement, or legal process requests;
• Improving vipl's platform, game offerings, and user experience through aggregated analytics;
• Sending marketing communications and promotional offers where you have consented to receive them.

07 Data Sharing & Disclosure

vipl shares your personal data with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

7.1 Service Providers

vipl engages carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These include KYC identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), game software providers, cloud hosting providers, and customer support platform vendors. All service providers are contractually prohibited from using your data for purposes beyond those specified by vipl.

7.2 Regulatory & Legal Disclosure

vipl is required by law and by its PAGCOR licence to disclose player information to:

• The Philippine Amusement and Gaming Corporation (PAGCOR) for licensing compliance and regulatory reporting;
• The Anti-Money Laundering Council (AMLC) for covered and suspicious transaction reporting under the AMLA;
• The Bureau of Internal Revenue (BIR) for applicable tax reporting obligations;
• Philippine law enforcement agencies and courts, where compelled by a valid legal order.

Where permitted by law, vipl will notify you of any such disclosure unless doing so would compromise a regulatory investigation.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of vipl's business or assets, your personal data may be transferred to a successor entity. vipl will provide reasonable notice of such transfer and ensure that the receiving entity is bound by equivalent data protection obligations.

08 Cookies & Tracking Technologies

vipl uses cookies and similar tracking technologies on its website to maintain session integrity, improve platform performance, and collect analytics data. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the vipl platform to function — these include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Remember your preferences such as language settings and display configurations to personalise your experience;
• Analytics Cookies: Collect aggregated, anonymised data about how players use the vipl platform to help us identify areas for improvement. vipl uses reputable analytics services for this purpose;
• Marketing Cookies: Used only where you have consented to receiving marketing communications, to measure the effectiveness of promotional campaigns and tailor offers relevant to Filipino players.

You may control non-essential cookies through your browser settings. Disabling analytics or marketing cookies will not affect your ability to access and play vipl games. Disabling strictly necessary cookies may prevent login and platform access.

09 Data Retention

vipl retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active vipl account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA obligations;
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of transaction, in compliance with BIR and AMLC record-keeping requirements;
• Gaming Session Data: Retained for a minimum of two (2) years to support game integrity investigations and dispute resolution;
• Communications Data: Support tickets and chat transcripts retained for two (2) years following resolution;
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Data required for ongoing legal proceedings or regulatory investigations is retained until those proceedings are concluded.

10 Data Security

vipl implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption on all data transmitted between your device and vipl's servers;
• AES-256 encryption for sensitive data stored at rest, including financial and identity data;
• Role-based access controls limiting staff access to personal data to those with a legitimate business need;
• Multi-factor authentication requirements for all vipl staff accessing systems containing player personal data;
• Automated suspicious activity monitoring with real-time alerts for unusual access patterns — covering player accounts across Metro Manila, Cebu, Davao, and all Philippine regions;
• Regular third-party security audits and penetration testing of vipl's platform infrastructure;
• A documented personal data breach response procedure, including NPC notification within 72 hours of discovering a breach that poses risk to player rights.

11 Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vipl. To exercise any of these rights, contact vipl's Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request." vipl will respond within 15 business days of receiving a complete request.

If you believe vipl has not adequately addressed your privacy rights request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on NPC complaint procedures is available on the NPC's official website.

12 International Data Transfers

vipl's primary operations are based in the Philippines and most player data is stored and processed within Philippine territory or in data centres serving Philippine regulatory requirements. In limited circumstances — for example, where game software infrastructure or KYC verification services are provided by entities operating internationally — your personal data may be transferred to and processed in jurisdictions outside the Philippines.

Where such international transfers occur, vipl ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required by the Data Privacy Act of 2012, including through binding contractual clauses with the receiving entity, adequacy assessments of the destination jurisdiction's data protection framework, or equivalent protective measures recognised by the National Privacy Commission.

13 Children's Privacy — Strict 21+ Policy

vipl Casino strictly prohibits access to its platform by any person under the age of 21. This restriction is mandated by Philippine law and vipl's PAGCOR operating licence. vipl does not knowingly collect personal data from individuals under 21 years of age.

Age verification is conducted through KYC procedures requiring submission of a valid government-issued Philippine ID. Where vipl discovers that personal data has been collected from an individual under 21 — whether through account registration or otherwise — vipl will immediately suspend the account, delete the associated personal data to the extent permitted by legal obligations, and report the matter to PAGCOR as required by its licensing conditions.

If you are a parent or guardian and believe your child has accessed or registered on the vipl platform, please contact [email protected] immediately.

14 Amendments to This Policy

vipl reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated to reflect any revision.

For material changes that significantly affect how we process your personal data or your rights under this Policy, vipl will provide notice to registered players via the mobile number or email address associated with their account, with a minimum of 7 days' advance notice where reasonably practicable. Your continued use of the vipl platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically. The current version is always available at https://vipl.cam/privacy-policy.

15 Contact & Complaints

For any questions, requests, or complaints relating to this Privacy Policy or the handling of your personal data by vipl, please contact us through the following channels:

If you are not satisfied with vipl's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

For responsible gaming concerns, self-exclusion requests, or gambling-related support resources for Filipino players, please visit our Responsible Gaming page.