viph Privacy Policy

1.Who We Are

viph is an online casino and sports betting platform operating at viph.lat, serving Filipino players across the Philippines including Manila, Cebu, Davao, Quezon City, Makati, and other regions. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), viph acts as the Personal Information Controller ("PIC") with respect to personal data collected from players and visitors on viph.lat.

viph has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with data privacy obligations. Contact details for the DPO are provided in Section 16 of this Policy.

2.Personal Data We Collect

viph collects the following categories of personal data from players and platform visitors, depending on how you interact with the platform:

2.1 Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address and/or Philippine mobile number (registered as login identifier)
• Residential address in the Philippines
• Account password (stored in hashed, non-reversible form — never in plain text)
• Preferred currency (Philippine Peso / PHP)

2.2 Identity Verification (KYC) Data

• Government-issued photo identification document (UMID, passport, driver's license, PhilHealth ID, or equivalent)
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 90 days)
• Proof of payment method ownership (GCash account details, bank account information in your registered name)
• Selfie or liveness check photograph (where required for enhanced KYC)

2.3 Financial Transaction Data

• Deposit amounts, methods, timestamps, and transaction reference numbers
• Withdrawal requests, amounts, destination account details, and processing status
• Account wallet balance history
• Bonus claims, wagering activity, and cashback calculations

2.4 Gaming Activity Data

• Game session logs: games played, wager amounts, win/loss outcomes, session duration
• Sports betting slip history: events wagered on, odds accepted, settlement results
• VIP loyalty points earned and redeemed
• Responsible gaming tool settings (deposit limits, self-exclusion status, session alerts)

2.5 Technical & Device Data

• IP address at login and during active sessions
• Device type, operating system, and browser version
• Geolocation data (country/region level, derived from IP address)
• Session timestamps and duration
• Cookie identifiers and similar tracking data (see Section 10)

2.6 Communications Data

• Records of live chat conversations with viph customer support
• Email correspondence sent to or received from viph
• Feedback, complaints, and survey responses you submit to viph

3.How We Collect Your Data

viph collects your personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit, request a withdrawal, contact support, or submit any form or communication on viph.lat.
• Automatically: When you visit or interact with viph.lat, our servers automatically collect technical data including your IP address, browser type, device information, and session activity through server logs and cookies (see Section 10).
• From payment providers: When you deposit or withdraw via GCash, PayMaya, BPI, BDO, Metrobank, or UnionBank, the relevant payment provider transmits transaction confirmation data to viph to facilitate settlement.
• From identity verification services: viph may use third-party KYC/identity verification service providers who process your submitted documents on viph's behalf and return verification status results.
• From fraud prevention services: viph may receive risk signals and device fingerprint data from fraud prevention partners to protect the security of your account and the platform.

4.How We Use Your Personal Data

viph uses your personal data for the following purposes:

• Account management: Creating, maintaining, verifying, and securing your viph account; authenticating your login; managing password recovery and Two-Factor Authentication.
• Identity verification: Verifying that you meet the 21+ age requirement; completing KYC in compliance with Philippine anti-money laundering regulations and PAGCOR's applicable online gaming compliance requirements.
• Payment processing: Processing deposits and withdrawals via your registered payment methods; reconciling transaction records; investigating payment disputes.
• Game services: Enabling participation in casino games, sports betting, bingo, and all viph game categories; calculating and crediting winnings; managing bonus eligibility and VIP loyalty program participation.
• Responsible gaming: Monitoring account activity for responsible gaming compliance; enforcing deposit limits, loss limits, and self-exclusion orders you have set; flagging accounts that may exhibit problem gambling patterns as required under applicable guidelines.
• Legal & regulatory compliance: Complying with Philippine laws including RA 10173 (Data Privacy Act), RA 9160 (Anti-Money Laundering Act), and PAGCOR's applicable online gaming regulatory requirements; responding to lawful requests from Philippine government authorities.
• Customer support: Responding to your queries, complaints, and account issues; maintaining support conversation records for quality assurance and dispute resolution.
• Security & fraud prevention: Detecting, preventing, and investigating unauthorized account access, fraud, money laundering, bonus abuse, and other prohibited conduct.
• Platform improvement: Analyzing aggregated, de-identified usage data to improve viph's platform performance, game library, and user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS — subject to your communication preferences and your right to opt out at any time (see Section 13).

5.Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its implementing rules, viph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and viph — specifically, to operate your gaming account, process payments, and deliver the platform services you have registered for.
• Legal obligation: Processing required to comply with viph's obligations under Philippine law, including KYC/AML compliance, age verification, and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where these interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications, where we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6.Sharing Your Personal Data

viph does not sell your personal data to third parties. viph may share your personal data with the following categories of recipients, solely for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment processors, to the extent necessary to facilitate your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who process your identity documents on viph's behalf under data processing agreements that bind them to confidentiality and data security obligations.
• Game software providers: viph's game content providers receive session-level game activity data (game ID, wager amounts, outcomes) necessary to operate the games. Game providers do not receive your full personal profile.
• Fraud prevention & security providers: Third-party services that assist viph in detecting unauthorized access, account fraud, and prohibited conduct.
• Philippine regulatory and law enforcement authorities: viph is legally obligated to disclose data to relevant Philippine government authorities — including the Anti-Money Laundering Council (AMLC), PAGCOR, and the National Privacy Commission (NPC) — when required by law, court order, or lawful government request.
• Professional advisers: viph's legal counsel, auditors, and compliance advisers, under confidentiality obligations, to the extent required for their professional services.

7.International Data Transfers

viph operates primarily within the Philippines. Some of viph's technology partners and game software providers may be based outside the Philippines. Where personal data is transferred outside the Philippines, viph ensures that appropriate safeguards are in place — including contractual data transfer clauses consistent with NPC guidelines — to protect your personal data to a standard equivalent to that required by the Philippine Data Privacy Act of 2012.

viph will not transfer your personal data to a foreign country or international organization that does not provide adequate data protection standards, unless appropriate safeguards are in place or a specific exception under RA 10173 applies.

8.Data Retention

viph retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods are as follows:

• Account and KYC data: Retained for the duration of your active account, plus a minimum of 5 years following account closure, in compliance with Philippine anti-money laundering legislation.
• Transaction records: Retained for a minimum of 5 years following each transaction, in compliance with RA 9160 and AMLC reporting requirements.
• Game session logs: Retained for 2 years from the date of each session, or longer if required in connection with an active dispute or regulatory investigation.
• Support communications: Retained for 2 years from the date of the communication, or until any related dispute is fully resolved.
• Marketing consent records: Retained for the duration of your account and 1 year after withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, viph will securely delete or anonymize your personal data unless a longer retention period is required or permitted by law.

9.Data Security

viph implements technical and organizational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include:

• TLS 1.3 encryption for all data in transit between your browser and viph.lat
• Encryption of sensitive data fields (including KYC documents and payment details) at rest
• Password storage using industry-standard one-way hashing algorithms (bcrypt)
• Two-Factor Authentication (2FA) available for all player accounts
• Account lockout after repeated failed login attempts to prevent brute-force access
• Regular security assessments and penetration testing of the viph platform
• Access controls limiting internal access to personal data to authorized personnel on a need-to-know basis
• Data breach detection and response procedures, including NPC notification obligations under RA 10173

While viph takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your login credentials. If you believe your viph account has been compromised, contact viph support immediately.

10.Cookies & Tracking Technologies

viph uses cookies and similar technologies (local storage, session storage, pixel tags) on viph.lat for the following purposes:

• Essential cookies: Required for core platform functionality including session authentication, login persistence ("Remember Me"), and security (CSRF protection). These cannot be disabled without affecting platform functionality.
• Functional cookies: Store your preferences such as display settings, game history, and responsible gaming tool configurations to personalize your viph experience.
• Analytics cookies: Collect aggregated, de-identified data about how players navigate and use viph.lat, used internally to improve platform performance and user experience. viph uses first-party analytics only.
• Security cookies: Support fraud detection and device fingerprinting to identify unauthorized access attempts and protect your account.

viph does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the viph platform.

11.Protection of Minors

viph strictly prohibits the registration and use of the platform by persons under 21 years of age, in compliance with PAGCOR's applicable minimum age requirements for online gambling in the Philippines. viph does not knowingly collect personal data from persons under 21.

Age verification is enforced through mobile number OTP verification at registration and through government-issued ID review during KYC. Any account found to have been registered by a person under 21 will be immediately suspended, all data will be deleted or isolated, and any balance will be forfeited.

If you believe that a minor has registered on viph.lat or that viph has inadvertently collected personal data from a minor, please contact viph's Data Protection Officer immediately at [email protected] so that the data can be identified and deleted.

12.Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by viph:

• Right to be informed: The right to be notified of what personal data viph collects and how it is used — as described in this Privacy Policy.
• Right to access: The right to request a copy of the personal data viph holds about you, and information about how it is processed.
• Right to correction: The right to request correction of inaccurate or incomplete personal data in your viph account. Note that KYC documents once verified cannot be unilaterally changed — updates require re-submission and re-verification.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no legal retention obligation requires its continued storage. Note that viph's AML and regulatory retention obligations (Section 8) may prevent full erasure within the mandatory retention period.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format for transmission to another service provider, where technically feasible.
• Right to object: The right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. Objection to marketing processing will result in removal from marketing communications immediately.
• Right to withdraw consent: Where processing is based on consent (including marketing communications), the right to withdraw consent at any time without affecting the lawfulness of prior consent-based processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe viph has violated your data privacy rights.

To exercise any of these rights, submit a written request to viph's Data Protection Officer at [email protected]. viph will respond within 15 business days of receiving a complete request. Identity verification may be required before processing your request.

13.Marketing Communications

With your consent, viph may send you promotional communications including bonus offers, game announcements, VIP program updates, and platform news via email or SMS to your registered contact details.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any viph marketing email
• Replying "STOP" to any viph marketing SMS
• Updating your communication preferences in your viph account settings
• Contacting viph support at [email protected] to request removal from marketing lists

Opting out of marketing communications does not affect transactional communications — viph will continue to send you account-related notices such as deposit confirmations, withdrawal processing updates, KYC request notifications, and security alerts, which are necessary for the operation of your account.

14.Third-Party Links

viph.lat may contain links to third-party content providers such as game software providers. These third-party platforms operate under their own privacy policies, which are independent of this Policy. viph is not responsible for the data practices of third-party sites or services accessed through links on viph.lat. You are encouraged to review the privacy policies of any third-party services you interact with.

15.Changes to This Privacy Policy

viph may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When material changes are made, viph will notify registered players via platform notification or email to their registered address, at least 14 days before the changes take effect where reasonably practicable.

The "Last updated" date at the top of this page indicates when this Policy was most recently revised. Your continued use of viph.lat following the effective date of a revised Policy constitutes your acknowledgment of the updated Policy. If you do not accept the revised Policy, you should discontinue use of viph and may close your account in accordance with viph's Terms & Conditions.

The current version of this Privacy Policy is always available at viph.lat/privacy-policy.

16.Contact & Data Protection Officer

For all data privacy matters — including requests to exercise your data subject rights, questions about this Policy, or concerns about viph's data processing practices — please contact viph's Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Channel: 24/7 Live Chat on viph.lat (for urgent account-level data concerns)

Please include "Data Privacy Request" in the subject line of any email and provide sufficient detail to identify your account and the nature of your request. viph will acknowledge your request within 3 business days and provide a substantive response within 15 business days.

For complaints to the National Privacy Commission of the Philippines, refer to the NPC's official channels as published on the NPC's official website.