vviph Privacy Policy
This Privacy Policy explains how vviph collects, uses, stores, shares, and protects the personal data of players on the vviph Philippine online gaming platform. We are committed to transparency and compliance with the Data Privacy Act of 2012 (Republic Act No. 10173).
256-bit SSL Encryption
All data transmitted between your device and vviph's servers is encrypted using TLS 1.3 and 256-bit SSL — the same standard used by major Philippine banks such as BPI and BDO. Your credentials and financial details are never transmitted in plain text.
Secure Data Storage
Personal data collected by vviph is stored in encrypted, access-controlled environments. Access to personally identifiable information is restricted to authorized personnel on a need-to-know basis, with audit logs maintained for all access events.
Your Rights Under RA 10173
As a Filipino data subject, you have the right to access, correct, erase, and object to the processing of your personal data under the Data Privacy Act of 2012. vviph honors all data subject rights requests within the legally prescribed timeframes.
No Sale of Personal Data
vviph does not sell your personal data to third parties for their independent marketing purposes. Data shared with third-party service providers is strictly governed by data processing agreements requiring those parties to protect your information.
PAGCOR Compliance
vviph's data collection and retention practices comply with PAGCOR's regulatory requirements for licensed online gaming operators, including identity verification, transaction recordkeeping, and responsible gaming data management obligations.
Breach Notification
In the event of a data breach that poses a real risk to the rights and freedoms of data subjects, vviph will notify the National Privacy Commission (NPC) within 72 hours and affected individuals as required under RA 10173 and NPC Circular No. 16-03.
1 Who We Are (Data Controller)
vviph operates the online gaming platform accessible at vviph.org (the "Platform"). For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, vviph is the Personal Information Controller ("PIC") in respect of personal data collected through the Platform.
vviph is duly registered with the National Privacy Commission (NPC) of the Philippines and maintains a designated Data Protection Officer ("DPO") responsible for overseeing compliance with applicable data protection laws. Contact details for the DPO are provided in Section 13 of this Policy.
2 Personal Data We Collect
vviph collects personal data that is necessary, relevant, and limited to the purposes for which it is processed. The categories of personal data we collect include:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number and document | Registration & KYC verification |
| Contact Data | Philippine mobile number, email address, residential address (province/city) | Registration form |
| Financial Data | GCash wallet reference, bank account details (BPI/BDO), transaction history, deposit and withdrawal records | Payment processing |
| Gaming Data | Game session history, wager amounts, wins/losses, bonus usage, self-exclusion status | Platform activity |
| Technical Data | IP address, device type, operating system, browser, login timestamps, session duration | Automated collection |
| Communications Data | Customer support chat transcripts, emails, survey responses | Support interactions |
vviph does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for identity verification and anti-money laundering compliance, such as government ID numbers. Where sensitive data is collected, heightened security controls and specific consent procedures apply.
3 How vviph Uses Your Personal Data
3.1 Core Platform Operations
vviph processes your personal data to operate the Platform, including creating and managing your account, verifying your identity (KYC), processing deposits and withdrawals via GCash, Maya, BPI, BDO, and other accepted Philippine payment channels, providing access to games and services, and delivering customer support.
3.2 Legal and Regulatory Compliance
vviph processes personal data to comply with obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (RA 9160, as amended), the Terrorism Financing Prevention and Suppression Act, and other applicable Philippine laws. This includes transaction monitoring, suspicious activity reporting, and retention of records for statutory periods.
3.3 Responsible Gaming
Gaming behavior data is processed to support vviph's responsible gaming obligations, including identifying patterns associated with problem gambling, applying self-exclusion measures, and communicating with players about responsible gaming tools and resources.
3.4 Security and Fraud Prevention
Technical and gaming data is processed to detect, investigate, and prevent fraud, money laundering, unauthorized access, and other prohibited activities on the vviph Platform.
3.5 Marketing Communications
With your consent, vviph may send you promotional communications about bonuses, new games, and platform updates. You may withdraw consent and opt out of marketing communications at any time by adjusting your notification preferences in account settings or by contacting vviph support.
4 Legal Bases for Processing
vviph processes personal data on the following legal bases under RA 10173:
- Contract performance — processing necessary to provide gaming services pursuant to the agreement formed upon registration;
- Legal obligation — processing required to comply with PAGCOR regulations, AML laws, tax obligations, and PAGCOR record-keeping requirements;
- Legitimate interests — processing for fraud detection, security monitoring, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your data protection rights;
- Consent — processing for direct marketing communications, where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time.
5 Sharing Your Personal Data
5.1 Third-Party Service Providers
vviph shares personal data with carefully selected third-party service providers acting as Personal Information Processors ("PIPs") under written data processing agreements. These providers include: game content providers (JILI, Pragmatic Play, PG Soft, Evolution Gaming, and others); payment processors (GCash/GXI, Maya, BancNet); KYC and identity verification services; cloud infrastructure providers; and customer support platform operators. All PIPs are contractually required to process data only on vviph's documented instructions and to implement appropriate technical and organizational security measures.
5.2 Regulatory and Law Enforcement Disclosure
vviph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and courts of competent jurisdiction where required to do so by law, court order, or regulatory demand.
5.3 Business Transfers
In the event of a merger, acquisition, or transfer of all or a substantial part of vviph's business, personal data may be transferred to the acquiring entity subject to equivalent data protection obligations. Affected data subjects will be notified of any such transfer in accordance with RA 10173.
6 Cookies and Tracking Technologies
vviph uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that enable the Platform to recognize your browser, maintain your session state after vviph login, remember your preferences, and analyze Platform usage patterns. The categories of cookies used by vviph are:
- Strictly Necessary Cookies — Required for the Platform to function. Includes session authentication tokens and security cookies. These cannot be disabled without rendering the Platform inoperable.
- Functional Cookies — Store your preferences such as language settings and responsible gaming tool configurations.
- Analytics Cookies — Used to understand how players interact with the Platform, which pages are most visited, and how players navigate between sections. Data is aggregated and anonymized.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality, including the ability to log in to vviph.
7 Data Retention
vviph retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:
- Account and identity data: for the duration of the account relationship and a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act;
- Financial transaction records: minimum five (5) years from transaction date, as required under applicable Philippine financial regulations;
- Customer support communications: three (3) years from the date of the communication;
- Marketing consent records: retained for the duration of consent plus three (3) years to demonstrate compliance.
Following expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with vviph's data disposal procedures.
8 Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by vviph:
Right to Access
Obtain confirmation of whether vviph processes your personal data and access a copy of that data.
Right to Rectification
Request correction of inaccurate or incomplete personal data held by vviph about you.
Right to Erasure
Request deletion of your personal data where processing is no longer necessary or lawful, subject to vviph's legal retention obligations.
Right to Object
Object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Lodge a Complaint
Lodge a complaint with the National Privacy Commission (NPC) if you believe vviph has processed your data in violation of RA 10173.
To exercise any of these rights, contact vviph's Data Protection Officer as specified in Section 13. vviph will respond to verifiable requests within thirty (30) days, extendable by a further thirty (30) days where complexity requires, with notice to you.
9 Cross-Border Data Transfers
Some of vviph's third-party service providers — including game content providers and cloud infrastructure operators — are located outside the Philippines. Where personal data is transferred to entities in countries without equivalent data protection standards, vviph ensures that appropriate safeguards are in place, including standard contractual clauses or other legally recognized transfer mechanisms, as recognized by the National Privacy Commission.
10 Children's Privacy
The vviph Platform is strictly intended for individuals who are at least 21 years of age. vviph does not knowingly collect personal data from persons under 21. If you have reason to believe that a minor has provided personal data to vviph, please contact our DPO immediately. Upon verification, we will take steps to delete such data from our systems and close any associated account.
11 Security Measures
vviph implements a layered set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data in transit;
- AES-256 encryption for sensitive data at rest;
- Multi-factor authentication for administrative system access;
- Role-based access controls and the principle of least privilege;
- Regular penetration testing and vulnerability assessments by independent security firms;
- 24/7 intrusion detection and security monitoring;
- Annual data privacy and security training for all vviph staff with access to personal data;
- Documented incident response and breach notification procedures aligned with NPC Circular No. 16-03.
12 Changes to This Privacy Policy
vviph reserves the right to update this Privacy Policy to reflect changes in our data processing practices, legal requirements, or Platform features. Material changes will be notified to registered players via Platform notification or registered contact details at least fourteen (14) days before taking effect, where practicable. The current version of this Policy is always accessible at vviph.org/privacy-policy, with the effective date prominently displayed. Continued use of the Platform following the effective date of any revision constitutes acceptance of the revised Policy.
13 Contact & Data Protection Officer
For any questions, concerns, or requests regarding this Privacy Policy or vviph's handling of your personal data, please contact vviph's Data Protection Officer through the following channels:
- Live Chat: Available 24/7 directly on the vviph Platform (select "Privacy & Data" from the support menu);
- Email: [email protected] (plain text — not a clickable link) with the subject line "Data Privacy Request";
- National Privacy Commission: Complaints may also be submitted directly to the NPC at its official website or offices in the Philippines.
vviph is committed to addressing all data privacy inquiries promptly and in good faith, consistent with our obligations as a PAGCOR-regulated Philippine online gaming operator.
Your Data is Safe at vviph
vviph takes privacy seriously — 256-bit encryption, RA 10173 compliance, and no sale of your data. Play confidently on the Philippines' most trusted gaming platform. 21+ only.
Go to vviph Login