🔐 vipl Privacy Policy

vipl ("vipl," "we," "us," "our") is an online gaming platform serving players in the Philippines. We operate the website vipl.win and provide online casino games, live dealer tables, sports betting, sabong livestreams, bingo, Super Keno, Hi-Lo, and other gaming services to registered players who are 21 years of age or older.

We take your privacy seriously. This Policy sets out in plain terms how we collect your personal data, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over it as a data subject under Philippine law. We have written this Policy to be as clear and straightforward as possible — because we believe you deserve to understand exactly what happens to your information when you use vipl.

This Policy should be read together with the vipl Terms & Conditions and the vipl Responsible Gaming Policy. In any case of conflict between this Policy and another vipl document, this Privacy Policy governs with respect to personal data matters.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, vipl is the personal information controller in respect of all personal data collected through the vipl Platform.

vipl operates as an online gaming platform serving the Philippines market. Our operations are oriented toward compliance with PAGCOR's online gaming regulations and the data protection standards established by the National Privacy Commission (NPC) of the Philippines.

If you have any questions or concerns about how vipl handles your personal data, or if you wish to exercise any of your data subject rights under the DPA, please contact our Data Protection Officer using the details provided in Section 15 of this Policy.

vipl collects the following categories of personal data from registered players and Platform visitors:

vipl collects personal data through the following means:

4.1 Direct Collection

We collect data that you provide to us directly when you:

• Register a vipl account;
• Complete the KYC identity verification process by submitting government-issued ID documents;
• Make a deposit or request a withdrawal via GCash, PayMaya, or a Philippine bank;
• Contact vipl's customer support team via live chat or email;
• Respond to a survey, promotion, or other Platform communication;
• Update your account profile or notification preferences.

4.2 Automated Collection

When you access the vipl Platform, certain technical data is collected automatically by our systems and third-party analytics tools. This includes your IP address, device identifiers, browser characteristics, and session behaviour. This automated collection is standard practice for online platforms and helps vipl maintain Platform security, detect fraud, and improve user experience.

4.3 Third-Party Sources

In some circumstances, vipl may receive personal data about you from third parties, including payment service providers (such as GCash or PayMaya) in connection with transaction verification, identity verification providers used to support the KYC process, or fraud prevention and anti-money laundering (AML) screening services.

Under the Philippine Data Privacy Act of 2012, vipl processes your personal data on the following legal bases:

• Consent: For certain processing activities — such as sending marketing SMS messages or using non-essential cookies — vipl relies on your freely given, specific, informed consent. You may withdraw consent at any time without prejudice to the lawfulness of processing carried out before withdrawal.
• Contractual Necessity: Processing your identity data, contact data, financial data, and gaming data is necessary for vipl to provide the gaming services you have contracted for under the vipl Terms & Conditions.
• Legal Obligation: Processing your KYC and financial transaction data is necessary for vipl to comply with Philippine anti-money laundering laws, PAGCOR reporting requirements, and applicable taxation obligations.
• Legitimate Interest: vipl processes certain technical and behavioural data on the basis of its legitimate interest in maintaining Platform security, preventing fraud, and improving the quality of services offered to players.

vipl uses the personal data it collects for the following purposes:

6.1 Account Management & Service Delivery

To register and administer your vipl account, verify your identity and age (21+ requirement), process deposits and withdrawals in PHP, provide access to games and Platform features, and deliver account-related communications such as transaction confirmations and security alerts via SMS to your registered Philippine mobile number.

6.2 Legal & Regulatory Compliance

To comply with Philippine anti-money laundering legislation, KYC obligations under PAGCOR regulations, mandatory transaction reporting requirements, and any other legal obligation imposed on vipl by Philippine or applicable international law. vipl is required by law to retain certain financial and identity records for defined periods regardless of account status.

6.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, unauthorized account access, multi-accounting, bonus abuse, money laundering, and other conduct prohibited under the vipl Terms & Conditions. vipl's fraud prevention systems may use automated decision-making to flag unusual account or transaction patterns for human review.

6.4 Responsible Gaming

To monitor gaming patterns for indicators of problem gambling behaviour, enforce self-exclusion requests, apply deposit limits and session controls set by the player, and provide appropriate responsible gaming interventions where vipl's systems identify potential at-risk behaviour.

6.5 Platform Improvement & Analytics

To analyse aggregated and anonymised usage data to improve the Platform's performance, identify popular games and features, optimise the user experience for players on Philippine mobile networks, and inform decisions about new game additions and product development.

6.6 Marketing Communications

Where you have given your consent, to send you information about vipl promotions, bonuses, new game launches, and relevant Platform updates via SMS to your registered Philippine mobile number. You may withdraw your marketing consent at any time by contacting vipl support or updating your account notification preferences.

vipl does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary for the specific purpose:

7.1 Payment Service Providers

vipl shares transaction data with GCash, PayMaya, BPI, BDO, and Metrobank to the extent necessary to process deposits and withdrawals. These providers process your financial data under their own privacy policies and applicable Philippine financial regulations.

7.2 Game Software Providers

vipl's live casino and slot games are provided by licensed third-party game studios. Limited technical and gaming session data may be shared with these providers solely to enable game functionality, ensure RNG certification compliance, and resolve game disputes.

7.3 Identity Verification & KYC Services

vipl may use third-party identity verification services to assist with the KYC process. These providers receive the minimum personal data necessary to verify your identity and age and are contractually bound to process such data only for the specified purpose.

7.4 Regulatory & Law Enforcement Authorities

vipl will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine law enforcement agencies, or other competent authorities where required by law, court order, or regulatory requirement. vipl does not require your consent to make such disclosures where they are legally mandated.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of vipl's assets, your personal data may be transferred to the relevant successor entity. vipl will notify affected players of any such transfer via SMS and will ensure that the receiving entity is bound by data protection obligations no less stringent than those in this Policy.

vipl retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your vipl account and for a minimum period of five (5) years following account closure, in compliance with Philippine AML retention obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLC and PAGCOR record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following submission, or longer if required by PAGCOR or AMLC regulations.
• Gaming history and session data: Retained for up to three (3) years for responsible gaming monitoring, dispute resolution, and regulatory reporting purposes.
• Customer support communications: Retained for up to two (2) years following resolution of the relevant inquiry, for quality assurance and dispute reference purposes.
• Marketing consent records: Retained for the duration of the marketing relationship and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, vipl will securely delete or anonymise your personal data in accordance with its data disposal procedures.

vipl uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and allow vipl to understand how the Platform is being used.

9.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They maintain your login session, enable account security features such as CSRF protection, and remember your language and display preferences. Essential cookies cannot be disabled without impairing Platform functionality.

9.2 Analytics Cookies

vipl uses analytics tools to collect aggregated data about how players navigate the Platform, which games are most popular, and where technical issues are occurring. Analytics cookies help vipl improve the Platform experience. Where possible, analytics data is anonymised before processing.

9.3 Managing Cookies

Most browsers allow you to refuse or delete cookies through their settings. Disabling non-essential cookies will not prevent you from using the vipl Platform, but it may affect the quality of your experience and the accuracy of personalised features. Please consult your browser's help documentation for instructions on managing cookie settings.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by vipl. To exercise any of these rights, please contact vipl's Data Protection Officer at the details in Section 15.

vipl implements appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the vipl Platform is encrypted using 256-bit SSL/TLS technology. This protects your account credentials, financial data, and personal information during transit.
• Two-Factor Authentication (2FA): vipl offers SMS-based 2FA for all player accounts. Players are strongly encouraged to enable this feature to protect their accounts from unauthorized access.
• Access Controls: vipl staff access to personal data is governed by a strict need-to-know policy. Access to sensitive player data is role-restricted, logged, and subject to regular audit.
• Encrypted Storage: Financial data, KYC documents, and other sensitive personal data are stored in encrypted form within vipl's secure infrastructure.
• Penetration Testing: vipl's systems undergo regular security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: vipl maintains a data breach response procedure. In the event of a personal data breach affecting your rights and freedoms, vipl will notify you and the NPC in accordance with the timeframes prescribed by the Data Privacy Act.

If vipl becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be closed immediately, all associated data will be securely deleted to the extent permitted by law, and any funds in the account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and you believe that your child under the age of 21 has registered a vipl account or submitted personal data to vipl, please contact our Data Protection Officer immediately using the details in Section 15 so that appropriate action can be taken without delay.

The vipl Platform may contain links to third-party websites or services — for example, links to payment providers such as GCash or PayMaya. vipl is not responsible for the privacy practices of any third-party website or service. Once you leave the vipl Platform and access a third-party site, that site's own privacy policy governs the collection and use of your data.

vipl encourages you to review the privacy policies of any third-party services you use in connection with your vipl account, particularly those of your chosen payment provider, before submitting your personal or financial information to those services.

vipl reserves the right to amend this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Where changes are material — meaning they substantially alter how vipl processes your personal data or affect your rights as a data subject — vipl will notify registered players via SMS to their registered Philippine mobile number prior to the changes taking effect.

Your continued use of the vipl Platform after the effective date of any amendment to this Policy constitutes your acknowledgment of the revised Policy. If you do not agree with any amendment, you should cease using the Platform and request account closure. Your right to withdraw consent for consent-based processing is not affected by this provision.

If you have any questions, concerns, or requests relating to this Privacy Policy or vipl's handling of your personal data — including requests to exercise your data subject rights under the Philippine Data Privacy Act — please contact vipl's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 on the vipl Platform — the fastest way to reach the team for any account or data query.
• Email: [email protected] — please include "Privacy Request" in your subject line so your message reaches the DPO team promptly.
• Operating Hours: 24 hours a day, 7 days a week, Philippine Standard Time (PST, UTC+8).