vipphfun Privacy Policy

Welcome to the vipphfun Privacy Policy. vipphfun ("vipphfun", "we", "us", "our") operates the online gaming platform accessible at https://vipphfun.app and all associated subdomains, mobile applications, and related services (collectively, the "Platform"). This Privacy Policy explains how vipphfun collects, uses, discloses, stores, and protects the personal information of users ("you", "your", "Player") who access or use the Platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC). By registering for or using the vipphfun Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference. If you do not agree with any part of this Privacy Policy, please discontinue use of the vipphfun Platform immediately.

vipphfun collects personal data that is necessary for the operation of the Platform, compliance with legal obligations, and delivery of a safe and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address and Philippine mobile number
• Username and encrypted password
• Residential address (city, province, postal code)

2.2 Identity Verification (KYC) Data

• Government-issued photo ID (Philippine National ID, passport, driver's license, SSS/GSIS ID, or PhilHealth ID)
• Proof of address (utility bill, bank statement, or barangay certificate)
• Selfie or liveness check image for biometric verification where required
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account)

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• GCash, PayMaya, BPI, BDO, or Metrobank account reference numbers (we do not store full bank account numbers or card numbers)
• Transaction history and account balance records

2.4 Gaming Activity Data

• Game session logs, bet history, win/loss records, and game preferences
• Bonus and promotion usage history
• Responsible gaming settings (deposit limits, loss limits, self-exclusion status)

2.5 Technical and Device Data

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser information
• Session timestamps, login history, and access logs
• Cookie identifiers and similar tracking technologies (see Section 6)

2.6 Communications Data

• Records of your communications with vipphfun customer support (live chat transcripts, email correspondence)
• Feedback, survey responses, and complaint records

vipphfun collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings.
• Automatically through the Platform: When you access and use the vipphfun website or app, we automatically collect technical data such as your IP address, device information, and session activity through cookies and server logs.
• From payment processors: When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, or Metrobank, we receive transaction confirmation data from those payment providers to reconcile your account.
• From identity verification providers: vipphfun may use third-party KYC service providers to assist with identity verification. These providers process your ID documents and return a verification result to vipphfun.
• From fraud prevention and AML screening services: We may receive data from third-party services that help us detect fraudulent activity and comply with anti-money laundering obligations under Philippine law.

vipphfun processes your personal data for the following purposes, each of which has a lawful basis under the Data Privacy Act of 2012:

vipphfun does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC and biometric verification services that assist vipphfun in verifying your identity and age in compliance with regulatory requirements.
• Game Content Providers: Third-party game studios and live casino operators whose games are available on the vipphfun Platform. These providers may receive limited session data necessary to deliver their games.
• Fraud Prevention and AML Services: Third-party services that help vipphfun detect and prevent fraudulent activity, money laundering, and other illegal conduct.
• IT and Cloud Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers that support the technical operation of the vipphfun Platform.
• Legal and Regulatory Authorities: Philippine government agencies, law enforcement, courts, or regulators (including the National Privacy Commission) where disclosure is required by law, court order, or regulatory directive.
• Professional Advisors: Lawyers, auditors, and accountants who provide professional services to vipphfun, subject to strict confidentiality obligations.

In all cases where vipphfun shares personal data with third-party processors, we require those parties to implement appropriate technical and organizational security measures and to process your data only for the specified purpose and in accordance with our instructions.

vipphfun uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: These cookies remember your preferences (such as language settings and responsible gaming limits) to provide a more personalized experience on vipphfun.
• Analytics Cookies: vipphfun uses analytics tools to understand how players interact with the Platform — which pages are visited most, where users drop off, and how features are used. This data is aggregated and anonymized where possible.
• Security Cookies: These cookies help vipphfun detect and prevent fraudulent activity, unauthorized access, and bot traffic on the Platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the vipphfun Platform. Most modern browsers allow you to view, delete, and block cookies — refer to your browser's help documentation for instructions.

vipphfun retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

After the applicable retention period expires, vipphfun will securely delete or anonymize your personal data in accordance with our data disposal procedures. Where anonymization is not technically feasible, data will be securely destroyed.

vipphfun implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and vipphfun's servers is encrypted using 256-bit SSL/TLS protocols. This applies to all Platform interactions, including login, deposits, withdrawals, and game sessions.
• Encryption at Rest: Sensitive personal data stored on vipphfun's servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within vipphfun is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific role, and all access is logged and audited.
• Two-Factor Authentication (2FA): vipphfun offers optional 2FA for player accounts and requires 2FA for all internal staff accessing production systems containing personal data.
• Regular Security Audits: vipphfun conducts regular internal and third-party security audits, penetration testing, and vulnerability assessments to identify and remediate potential security weaknesses.
• Incident Response Plan: vipphfun maintains a documented data breach incident response plan. In the event of a breach, we will notify affected users and the National Privacy Commission within 72 hours as required by the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by vipphfun. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.

The vipphfun Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gambling regulations. vipphfun does not knowingly collect, process, or store personal data from individuals under the age of 21.

As part of our registration and KYC process, vipphfun requires all players to verify their date of birth and provide a valid government-issued photo ID confirming they are at least 21 years of age. Any account found to belong to a person under 21 will be immediately suspended, all funds will be returned, and the account will be permanently closed.

Some of vipphfun's third-party service providers — including cloud infrastructure, KYC verification, and game content providers — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, vipphfun ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012
• Transfers only to countries or organizations that the National Privacy Commission has recognized as providing adequate data protection
• Binding corporate rules where transfers occur within a corporate group

By using the vipphfun Platform, you acknowledge and consent to the transfer of your personal data to third-party processors located outside the Philippines, subject to the safeguards described above.

vipphfun reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the vipphfun Platform for at least 14 days following the update
• Send an email notification to all registered players with a summary of the key changes

Your continued use of the vipphfun Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how vipphfun protects your personal data. The current version of this Privacy Policy is always available at https://vipphfun.app/privacy-policy.

vipphfun has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and its IRR. The DPO is responsible for overseeing vipphfun's data protection strategy, ensuring compliance with applicable privacy laws, and serving as the primary point of contact for data privacy matters.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer through the following channels:

• Email: support@vipphfun.app — Please include "Data Privacy Request" in the subject line.
• Live Chat: Available within the vipphfun Platform after logging in. Our support team is available 24/7, including Philippine public holidays.
• Help Center: Visit our FAQ page for answers to common privacy-related questions.

If you are not satisfied with vipphfun's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.