vvip88 Privacy Policy

vvip88 is a Philippines-focused online gaming platform offering slots, live casino games, Dragon Tiger, bingo, cricket betting, sports wagering, and more. As part of delivering and continuously improving these services, vvip88 processes certain personal information about its registered players and website visitors.

This Privacy Policy ("Policy") applies to all personal data processed by vvip88 in connection with the operation of vvip88.app and any associated mobile applications or communication channels (collectively, the "Platform"). It applies to all registered players, visitors browsing the Platform without registering, and persons who contact vvip88 through any support channel.

By registering an account, depositing funds, placing a wager, or otherwise using the vvip88 Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree, you should discontinue use of the Platform and may request account closure as described in our Terms & Conditions.

This Policy should be read together with the vvip88 Terms & Conditions, which govern the overall relationship between you and vvip88.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, vvip88 acts as the Personal Information Controller (PIC) with respect to all personal data collected through the Platform.

As a Personal Information Controller, vvip88 determines the purposes for which, and the manner in which, personal data is processed. Certain third-party service providers engaged by vvip88 — such as payment processors and identity verification services — operate as Personal Information Processors (PIPs) and process data strictly on vvip88's documented instructions.

vvip88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection legislation. The DPO can be contacted at the address provided in Section 14 of this Policy.

vvip88 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarizes the categories of data collected:

vvip88 collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a vvip88 account, you voluntarily provide your name, email address, mobile number, date of birth, and residential address.
• KYC Verification Submissions: When you submit identity documents and photographs to complete the Know Your Customer process required by PAGCOR regulations and anti-money laundering obligations.
• Payment Transactions: When you make a deposit or request a withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, or USDT crypto, transaction metadata is captured and associated with your account.
• Platform Usage: Technical and behavioral data is collected automatically as you navigate and interact with the Platform, including pages visited, games played, and session activity.
• Cookies and Tracking Technologies: As detailed in Section 9, cookies and similar technologies collect data about your browsing behavior on the Platform to enhance functionality and security.
• Customer Support Interactions: When you contact vvip88 by email or live chat, the content of those communications, including any personal data you share, is recorded and stored.
• Third-Party Verification Services: vvip88 may receive data from identity verification partners to cross-check the information you provide during KYC.

vvip88 processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The following table sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting vvip88 at the details provided in Section 14. Withdrawal of consent will not affect the lawfulness of processing that occurred prior to the withdrawal.

vvip88 does not sell, rent, or share your personal data with third parties for their own marketing purposes. We share data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and USDT payment infrastructure providers receive transaction data necessary to process your deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and liveness-detection services receive your identity documents and photographs solely for the purpose of verifying your eligibility to use the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other Philippine government body with legal authority to request disclosure may receive data where legally required.
• IT & Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers that support the technical operation of vvip88 may access data as Personal Information Processors, subject to binding data processing agreements.
• Legal and Professional Advisors: Lawyers, auditors, and compliance consultants engaged by vvip88 may access limited personal data in the course of their professional engagement, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of vvip88's assets, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations. Affected players will be notified in advance.

vvip88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and anti-money laundering law.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction in compliance with the AMLA and PAGCOR record-keeping obligations.
• KYC Documents: Retained for the duration of the account relationship and for at least five (5) years after account closure.
• Technical and Log Data: Typically retained for twelve (12) months for security and fraud investigation purposes, after which it is aggregated or deleted.
• Support Communications: Retained for three (3) years from the date of the last communication, or longer where a dispute is ongoing.
• Marketing Consent Records: Retained for three (3) years from the date of consent or last interaction, whichever is later.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or destroyed using industry-standard data sanitization methods. Anonymized data that can no longer be attributed to any identifiable individual may be retained indefinitely for analytical purposes.

vvip88 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and vvip88 servers is encrypted using current TLS standards.
• AES-256 Encryption at Rest: Sensitive stored data, including financial information and KYC documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Multi-Factor Authentication: Internal systems require multi-factor authentication for all staff accessing player data.
• Penetration Testing: vvip88 conducts regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response Plan: A documented data breach response plan is maintained and tested regularly. In the event of a breach, affected players and the NPC will be notified within 72 hours.
• Staff Training: All vvip88 staff who handle personal data receive mandatory data privacy training and are bound by confidentiality agreements.

vvip88 uses cookies and similar tracking technologies on the Platform to enhance functionality, maintain session security, and analyze usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and game display options to personalize your experience.
• Analytics Cookies: Collect anonymized or aggregated data about how players use the Platform — such as which games are most popular and how players navigate between pages — to help us improve the Platform.
• Security Cookies: Used by our fraud detection systems to identify unusual login patterns, detect bot activity, and protect your account from unauthorized access.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using vvip88, but may affect certain personalization features. Strictly necessary and security cookies cannot be disabled without logging out of the Platform.

vvip88 does not use cookies to serve third-party advertising or to track your activity across other websites outside of the vvip88 domain.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by vvip88. These rights can be exercised by contacting our Data Protection Officer at the details in Section 14:

vvip88 will respond to all valid data subject requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly. We may require identity verification before processing a data subject request to prevent unauthorized disclosure.

As part of our registration process, all applicants are required to declare their date of birth and submit government-issued identification that confirms they meet the minimum age requirement. vvip88 conducts age verification as part of its KYC process and will immediately suspend and close any account found to belong to an individual under 21 years of age.

If vvip88 becomes aware that personal data has been collected from a person under 21 without proper verification, that data will be deleted as promptly as possible and the account will be closed. Any deposits made to such an account will be refunded in accordance with our responsible gaming obligations and applicable law.

If you are a parent or guardian and believe your child has registered on the Platform, please contact our Data Protection Officer at the details in Section 14 immediately so we can take appropriate action.

vvip88 primarily stores and processes your personal data within the Philippines. However, certain third-party service providers — such as international payment processors, cloud infrastructure providers, and identity verification platforms — may process your data in jurisdictions outside the Philippines.

Where such cross-border transfers occur, vvip88 ensures that appropriate safeguards are in place to protect your personal data, including:

• Binding contractual clauses in Data Processing Agreements with each international processor, requiring them to apply data protection standards equivalent to those required by Philippine law.
• Transfer only to jurisdictions or entities that provide an adequate level of data protection as assessed by vvip88's Data Protection Officer.
• Ensuring that cross-border transfers are disclosed to and, where required, registered with the National Privacy Commission.

By using the vvip88 Platform, you acknowledge and consent to the transfer of your personal data to the third-party processors described in this Policy, including those operating outside the Philippines, subject to the safeguards described above.

vvip88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Effective Date" displayed at the top of this page indicates when the current version came into force.

Where changes are material — meaning they significantly affect your rights or the way we process your personal data — vvip88 will provide advance notice through one or more of the following means:

• A prominent notice on the vvip88 Platform homepage or login page.
• An email notification sent to the email address registered to your account.
• An in-platform notification displayed upon your next login.

Your continued use of the vvip88 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure as described in our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how vvip88 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vvip88 processes your personal data, please contact our Data Protection Officer:

If you are not satisfied with vvip88's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on filing a complaint with the NPC is available through their official government channels.

vvip88 takes all data privacy complaints seriously and is committed to resolving them promptly, fairly, and in accordance with applicable Philippine law.