viph Privacy Policy

01 Introduction & Scope

This Privacy Policy ("Policy") describes how viph ("viph," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the viph online casino platform available at https://viph.app and all associated services, features, and content (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your use of the viph Platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals, gameplay, customer support interactions, and marketing communications.

This Policy should be read together with the viph Terms & Conditions, which govern your use of the Platform. By registering an account or using the viph Platform, you acknowledge that you have read and understood this Privacy Policy.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, viph is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform.

As Personal Information Controller, viph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.

03 Personal Data We Collect

viph collects the following categories of personal data in connection with your use of the Platform:

viph does not intentionally collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for KYC compliance and responsible gaming obligations. Where sensitive data is collected — such as government ID numbers — it is handled with heightened security measures.

04 How We Collect Your Data

viph collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically: When you access and use the Platform, viph's systems automatically collect technical data such as your IP address, device identifiers, browser type, and session activity through cookies and similar tracking technologies.
• From payment providers: When you transact via GCash, PayMaya, BPI, BDO, Metrobank, or other supported payment channels, viph may receive transaction confirmation data from those providers to verify and process your deposit or withdrawal.
• From identity verification services: viph may use third-party KYC service providers to assist in verifying the authenticity of identity documents submitted during the verification process.
• From regulatory authorities: In certain circumstances, viph may receive information from PAGCOR or other regulatory bodies in connection with its compliance obligations.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, viph processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and viph — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required for viph to comply with applicable laws and regulations, including PAGCOR licensing requirements, anti-money laundering (AML) obligations under the AMLA, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for viph's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending you marketing communications and promotional offers — viph relies on your freely given, specific, and informed consent. You may withdraw this consent at any time through your account settings or by contacting support.

06 How We Use Your Data

viph uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your viph account, including processing your registration, verifying your identity, and managing your account settings.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate records of your financial activity on the Platform.
• KYC & Compliance: To verify your identity and age (21+ requirement), comply with PAGCOR regulatory requirements, and fulfil viph's obligations under the Anti-Money Laundering Act (AMLA) and related regulations.
• Gaming Services: To provide access to viph's game library, record game outcomes, calculate and credit winnings, apply bonus credits, and maintain your gaming history.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, apply responsible gaming tools (deposit limits, self-exclusion, session limits) at your request, and proactively intervene where necessary to protect your wellbeing.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through viph's 24/7 support channels.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the Platform and its players.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and news about viph via email or SMS. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the viph Platform.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with your use of the Platform.

07 Data Sharing & Disclosure

viph does not sell your personal data. viph may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party service providers engaged by viph to assist with identity document verification and fraud screening.
• Game Providers: Software providers whose games are available on the viph Platform may receive limited technical data (such as player session tokens) necessary to deliver their games. Game providers do not receive your full identity or financial data.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where viph is legally required or permitted to disclose personal data in connection with the investigation or prosecution of criminal activity.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by viph, subject to confidentiality obligations.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers engaged by viph to operate and secure the Platform, subject to contractual data processing agreements.

08 Cookies & Tracking Technologies

viph uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the viph website. The following types of cookies are used:

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the viph Platform. viph does not use third-party advertising or behavioural tracking cookies.

09 Data Retention

viph retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with viph, plus a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLA record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required under the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of your preferences.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by viph. You may exercise any of these rights by contacting viph's Data Protection Officer at the details provided in Section 14.

11 Data Security

viph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS Encryption: All data transmitted between your device and the viph Platform is encrypted using Transport Layer Security (TLS) protocols.
• Encryption at Rest: Sensitive personal data stored on viph's systems — including KYC documents and financial data — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within viph's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Multi-Factor Authentication: viph's internal systems require multi-factor authentication for access by staff. Players are also encouraged to enable available account security features.
• Regular Security Audits: viph conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in the Platform.
• Incident Response: viph maintains a documented data breach response procedure. In the event of a breach affecting your personal data, viph will notify the NPC and affected players as required by law.

12 Children & Minors

The viph Platform is strictly intended for adults aged 21 years and above, in accordance with the minimum legal age for casino-style gambling in the Philippines as prescribed by PAGCOR regulations.

viph does not knowingly collect personal data from individuals under the age of 21. If viph becomes aware that personal data has been collected from a person under 21, it will immediately close the relevant account, void all associated wagers, and securely delete the personal data in question.

If you are a parent or guardian and believe that a minor in your care has registered an account with viph, please contact viph support immediately at [email protected] so that the matter can be investigated and resolved promptly.

13 Updates to This Policy

viph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or viph's data processing practices. The effective date at the top of this Policy will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or how viph processes your personal data — viph will endeavour to provide advance notice via the Platform or by email to your registered address. It is your responsibility to ensure your registered email address remains current and accessible.

Your continued use of the viph Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised version. If you do not agree with any changes to this Policy, you should cease using the Platform and close your account.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or viph's handling of your personal data, please contact viph's Data Protection Officer (DPO). The DPO is responsible for overseeing viph's compliance with the Data Privacy Act of 2012 and related regulations.

Please note that all email addresses above are provided as plain text for reference only and are not clickable links. To contact the viph DPO, please copy the address manually: [email protected]

viph aims to respond to all privacy-related enquiries within 15 business days. For urgent account security matters, please contact viph's 24/7 support team directly through the Platform's live chat feature.