๐Ÿ”’ Your Data, Your Rights โ€“ Plain and Simple

PhilVIP Privacy Policy โ€“ How We Protect Your Personal Data

At PhilVIP, we take your privacy seriously. This Privacy Policy explains what personal information we collect when you use philvip.com, why we collect it, how we keep it safe, and what rights you have over your own data. We have written it to be as clear and straightforward as possible โ€“ no dense legal paragraphs that take forever to decode.

Policy Version
v2.5
Last Updated
January 1, 2025
Governed By
RA 10173 โ€“ Data Privacy Act
RA 10173 Compliant
256-bit SSL Encrypted
No Data Sold to Third Parties
NPC Registered Controller
PAGCOR Licensed Operator
philvip
Document: PhilVIP Privacy Policy
Version: 2.5
Effective: January 1, 2025
Law: Republic Act 10173 (Data Privacy Act of 2012)
Current
Summary up front: PhilVIP collects only what it needs to run your account, process your payments, and keep the platform safe and compliant. We do not sell your data to advertisers or third-party marketers. Ever. You have full rights over your data under Philippine law, and we make exercising those rights straightforward.

1. Who We Are and How to Contact Us

This Privacy Policy is issued by PhilVIP Gaming Inc. ("PhilVIP," "we," "our," or "us"), a Philippine-registered corporation and licensed online gaming operator under the Philippine Amusement and Gaming Corporation (PAGCOR). PhilVIP is the data controller responsible for your personal information collected through philvip.com and any associated mobile interface.

We are registered with the National Privacy Commission (NPC) of the Philippines as a personal information controller. Our designated Data Protection Officer (DPO) can be reached at any time at the contact details provided in Section 14 of this Policy.

This Privacy Policy applies to all personal data collected from players, prospective players, and visitors to the PhilVIP website and platform. By registering an account or using any PhilVIP service, you acknowledge that you have read and understood this Policy.

2. Personal Data We Collect

PhilVIP collects personal information that is necessary to operate your account, verify your identity, process transactions, and comply with regulatory requirements. We do not collect data that we do not have a clear operational or legal reason to hold.

2.1 Information You Give Us Directly

  • Registration data: Full legal name, date of birth, Philippine mobile number, and email address.
  • Identity verification (KYC) documents: Government-issued Philippine ID (e.g., passport, driver's licence, UMID, SSS card, PhilHealth card), selfie with ID, proof of address.
  • Financial information: GCash or Maya account number, bank account details (BDO, BPI, UnionBank), or card information associated with your registered payment methods. PhilVIP does not store full card numbers โ€“ card data is tokenised by our payment processor.
  • Communication data: Records of your correspondence with our support team, including chat transcripts and emails.

2.2 Information Collected Automatically

  • Device and technical data: IP address, device type, operating system, browser type and version, and screen resolution.
  • Usage data: Pages visited, games played, session duration, betting history, login timestamps, and navigation paths within the platform.
  • Cookie data: Data collected through cookies and similar tracking technologies. See Section 7 for full details.
  • Geolocation: Approximate location derived from your IP address, used to verify that you are accessing PhilVIP from within the Philippines as required by our PAGCOR license.

2.3 Information From Third Parties

  • Identity and fraud verification data from KYC and AML screening service providers.
  • Payment verification data from GCash, Maya, and connected banking partners, limited to transaction status and account holder confirmation.
  • Publicly available data relevant to fraud prevention and regulatory compliance.

3. Why We Collect Your Data

Every category of data PhilVIP collects has a specific, documented purpose. Below is a clear breakdown:

Data Category Purpose
Name, date of birth, mobile numberAccount creation, identity verification, regulatory compliance (PAGCOR/NPC)
Government-issued ID documentsKYC verification required before withdrawal processing; age verification (21+ requirement)
Payment account detailsProcessing deposits and withdrawals; fraud prevention; linking payments to your account
IP address and device dataGeographic eligibility check; security monitoring; fraud detection
Gaming and betting historyAccount management; responsible gaming monitoring; dispute resolution; regulatory reporting
Support communicationsResolving your queries; quality assurance; training our team
Cookie and analytics dataPlatform performance monitoring; improving user experience; session management
philvip

4. Legal Basis for Processing

PhilVIP processes your personal data on the following legal grounds under Republic Act 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations:

  • Contractual necessity: Processing your registration data, payment information, and gaming activity is necessary to deliver the PhilVIP service you have signed up for.
  • Legal obligation: PhilVIP is required by its PAGCOR license and Philippine anti-money laundering regulations (AMLA, RA 9160) to collect and retain certain player data, including KYC documentation and transaction records. This is not optional โ€“ it is a condition of our operating license.
  • Legitimate interest: Processing security logs, device data, and fraud indicators to protect PhilVIP and its players from fraud, unauthorised access, and financial crime. We apply a balancing test to ensure legitimate interests do not override your fundamental rights.
  • Consent: For optional data uses such as promotional email communications. You may withdraw consent for these at any time through your account settings or by contacting support.
Plain language: We process your data because we need it to run your account, because the law requires it, to keep the platform safe, and โ€“ only for marketing emails โ€“ because you gave us permission. You can withdraw marketing consent at any time.

5. How We Use Your Personal Data

PhilVIP uses the personal data we collect for the following specific purposes:

5.1 Account Operations

Your registration data is used to create and maintain your PhilVIP account, authenticate your identity at login, allow you to access games and betting markets, and manage your account preferences and settings.

5.2 Payment Processing

Financial information is used solely to process your deposits and withdrawals through your registered payment methods (GCash, Maya, BDO, BPI, UnionBank, InstaPay, PESONet, and Visa/Mastercard). Payment data is passed securely to our certified payment processors. PhilVIP does not retain full payment card numbers on its own systems.

5.3 Regulatory Compliance and KYC

Identity documents and KYC data are used to fulfil PhilVIP's obligations under PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act. This includes verifying your age (21+), confirming your identity before processing withdrawals, and reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) where legally required.

5.4 Responsible Gaming

Your gaming history and account activity data are monitored to support our responsible gaming programme. This includes identifying patterns that may indicate problem gaming behaviour and triggering welfare check-ins where appropriate. This monitoring is done with your wellbeing in mind, not for commercial profiling purposes.

5.5 Security and Fraud Prevention

Technical data including IP addresses, device fingerprints, and login logs are analysed to detect and prevent fraudulent activity, unauthorised account access, multiple account abuse, and money laundering. PhilVIP may share relevant data with law enforcement or PAGCOR where there is a legal obligation to do so.

5.6 Customer Support

Support communication records are used to resolve your queries efficiently, maintain continuity when you have follow-up questions, improve our team's performance through quality assurance reviews, and maintain records of dispute resolution outcomes.

5.7 Platform Improvement

Aggregated and anonymised usage data helps us understand how players navigate PhilVIP, which features are most used, and where the platform can be improved. This data is used in aggregate form and is not linked back to individual players for commercial profiling.

6. Who We Share Your Data With

PhilVIP does not sell, rent, or trade your personal data to third parties for marketing or advertising purposes. Full stop. Data sharing is limited to what is strictly necessary for operational, legal, and security purposes.

6.1 Authorised Service Providers

PhilVIP engages third-party service providers who process data on our behalf under strict data processing agreements. These include:

  • Payment processors (GCash/GXI, Paymaya/Maya Bank, InstaPay network providers, card networks)
  • KYC and identity verification platform providers
  • Cloud hosting and infrastructure providers operating data centres within the Philippines
  • Customer support platform providers
  • Fraud detection and cybersecurity service providers

All service providers are contractually required to process data only on PhilVIP's instructions, maintain appropriate security standards, and not use the data for any purpose beyond the agreed service.

6.2 Regulatory and Legal Authorities

PhilVIP will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or any other Philippine regulatory or law enforcement authority when required to do so by law, court order, or regulatory direction. We will inform you of such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event that PhilVIP Gaming Inc. undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer by email and this Privacy Policy will be updated to reflect any change in data controller.

Note: PhilVIP never shares your data with social media platforms, advertising networks, or data brokers. Your gaming habits are your own business.

7. Cookies and Tracking Technologies

PhilVIP uses cookies and similar technologies to keep the platform running smoothly, maintain your session while you play, and understand how the site is being used so we can improve it.

Types of Cookies We Use

  • Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking the platform.
  • Functional cookies: Remember your preferences such as language settings and game lobby filters. Disabling these will not break the platform but may reduce convenience.
  • Analytics cookies: Collect anonymised usage data to help us understand platform performance and user behaviour in aggregate. We use first-party analytics only โ€“ no third-party advertising trackers.
  • Security cookies: Used by our fraud detection systems to identify unusual access patterns. These are essential for platform security.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use PhilVIP. For guidance on managing cookies in your specific browser, consult your browser's help section.

PhilVIP does not use third-party advertising cookies or participate in cross-site behavioural advertising networks.

philvip

8. Data Retention

PhilVIP retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal and regulatory retention obligations. Specific retention periods are as follows:

Data CategoryRetention PeriodReason
Account registration dataDuration of account + 5 years after closurePAGCOR regulatory requirement
KYC identity documentsDuration of account + 5 years after closureAMLA and PAGCOR requirement
Financial transaction records7 years from transaction dateAMLA (RA 9160) record-keeping obligation
Gaming and betting history5 years from date of activityDispute resolution; regulatory reporting
Support communication records3 years from last contactQuality assurance; dispute resolution
Technical/security logs12 monthsFraud detection; incident investigation
Marketing consent recordsUntil consent is withdrawn + 3 yearsEvidence of lawful processing

After the applicable retention period expires, personal data is securely deleted or anonymised in a way that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical purposes.

9. How We Protect Your Data

PhilVIP invests in security measures proportionate to the sensitivity of the data we hold. The following technical and organisational safeguards are in place:

  • Encryption in transit: All communication between your browser or app and PhilVIP servers is encrypted using TLS 1.3 (256-bit). The padlock in your browser confirms this connection is secure.
  • Encryption at rest: Sensitive personal data stored in our databases is encrypted at rest using AES-256 encryption.
  • Payment card tokenisation: We do not store raw card numbers. Cards are tokenised by our PCI-DSS compliant payment processors, and only the token is retained by PhilVIP.
  • Access controls: Access to personal data is restricted to PhilVIP staff on a strict need-to-know basis. All access is logged and reviewed. Administrative access to sensitive systems requires multi-factor authentication.
  • Infrastructure security: Our hosting infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning. Penetration testing is conducted periodically by external security firms.
  • Staff training: All PhilVIP staff who handle personal data complete mandatory data privacy training upon joining and annually thereafter.
  • Incident response: PhilVIP maintains a documented data breach response procedure. In the event of a breach affecting your data, we will notify you and the National Privacy Commission within 72 hours of becoming aware of the incident, as required by RA 10173.
No security system is impenetrable, but PhilVIP applies industry-standard protections and is committed to continuous improvement of our data security posture.

10. Your Data Rights Under Philippine Law

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by PhilVIP. To exercise any of these rights, contact our Data Protection Officer at the details in Section 14.

Right to Access

Request a copy of the personal data PhilVIP holds about you, including information about how it is used and with whom it has been shared.

Right to Rectification

Request correction of inaccurate or incomplete personal data. Some corrections require identity re-verification for security reasons.

Right to Erasure

Request deletion of your personal data where PhilVIP no longer has a legal basis to retain it. Note that regulatory retention obligations may limit this right for certain data categories.

Right to Object

Object to processing based on PhilVIP's legitimate interests. You can also withdraw consent for marketing communications at any time through your account settings.

Right to Portability

Request your personal data in a structured, machine-readable format (CSV or JSON) so you can transfer it to another service provider.

Right to Lodge a Complaint

If you believe PhilVIP has handled your data improperly, you may file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

How to exercise your rights: Email privacy@philvip.com with the subject line "Data Rights Request." We will acknowledge your request within 3 business days and complete it within 15 business days as required by NPC regulations.

11. Children's and Minors' Privacy

PhilVIP is strictly an adults-only platform. The minimum age to register and play is 21 years old, in accordance with Philippine law and PhilVIP's PAGCOR operating license. PhilVIP does not knowingly collect personal data from individuals under 21 years of age.

Age is verified during the KYC process through government-issued ID documents. If PhilVIP becomes aware that personal data of an individual under 21 has been collected, the account will be closed immediately, the data will be deleted, and any funds associated with the account will be handled in accordance with PAGCOR regulations.

If you are a parent or guardian and believe that a minor has created a PhilVIP account, please contact us immediately at support@philvip.com so we can investigate and take appropriate action.

12. International Data Transfers

PhilVIP's primary data processing infrastructure is hosted within the Philippines. However, some of our third-party service providers โ€“ particularly KYC verification platforms and cybersecurity tools โ€“ may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, PhilVIP ensures that appropriate safeguards are in place as required by the Data Privacy Act and NPC guidelines. These safeguards include data processing agreements with standard contractual clauses, data residency requirements where possible, and selection of service providers in jurisdictions with equivalent data protection standards.

By using PhilVIP, you acknowledge that your data may be transferred to and processed in countries other than the Philippines for the operational purposes described in this Policy, subject always to the protections described above.

13. Updates to This Privacy Policy

PhilVIP reviews and updates this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or the services we offer. The current version and effective date are always displayed at the top of this page.

When material changes are made to this Policy โ€“ particularly changes that affect how we use your data or your rights as a data subject โ€“ we will notify you by email to your registered address at least 14 days before the changes take effect. For minor corrections such as formatting or typographical fixes, updates may be made without prior notice.

Continued use of PhilVIP after an updated Privacy Policy takes effect constitutes your acknowledgment of the changes. If you disagree with any update, you have the right to close your account by contacting support@philvip.com.

Previous versions of this Policy are available upon request by contacting our Data Protection Officer.

14. Contact Us and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or how PhilVIP handles your personal data, you can reach us through the following channels:

Data Protection Officer
Available for all privacy-specific enquiries, rights requests, and complaints.
privacy@philvip.com
General Support
Available 24/7 for account and platform questions.
support@philvip.com
Registered Office
PhilVIP Gaming Inc.
Metro Manila, Philippines
If you are not satisfied with PhilVIP's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.

What PhilVIP Holds and Why

A quick visual guide to the types of personal data on our platform and their purpose.

Identity

Name, DOB, gov ID โ€“ for KYC and account verification

Financial

GCash/Maya numbers and bank details for payment processing

Gaming

Bet history, game sessions, wins/losses for account management

Technical

IP address, device, browser for security and fraud detection

Support

Chat and email records for resolving queries and quality review

Analytics

Anonymised usage stats for platform improvement โ€“ never personally identifiable

Your Privacy is Protected at PhilVIP

Ready to Play? Join PhilVIP With Confidence

PAGCOR licensed, RA 10173 compliant, GCash-first payouts, and 24/7 support in Filipino and English. Your data and your money are safe here, Kabayan.