Privacy Policy
At vipph8, your personal data is handled with the same care we put into building a trustworthy gaming platform. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and how you can exercise your rights as a data subject under Philippine law.
Our Commitment
Six Core Privacy Principles
Every decision vipph8 makes about your personal data is guided by these six principles, which are rooted in the Philippine Data Privacy Act of 2012 (Republic Act 10173).
vipph8 collects your personal data only for specific, explicitly declared purposes — account registration, KYC verification, transaction processing, fraud prevention, regulatory compliance, and platform improvement. We do not collect data beyond what is reasonably necessary for these stated purposes, and we do not repurpose your data for unrelated activities without renewed consent.
We take reasonable steps to ensure that personal data held on your vipph8 account is accurate, complete, and up to date. You can review and update your profile information at any time through your account dashboard. Where we become aware that data we hold is inaccurate, we will correct it promptly and without requiring a formal request from you.
vipph8 implements layered technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include AES-256 encryption at rest, TLS 1.3 encryption in transit, two-factor authentication, role-based internal access controls, and regular third-party penetration testing of our infrastructure.
Your personal data is shared with third parties only when legally required or strictly necessary to deliver the vipph8 service — for example, with our licensed payment processors (GCash, Maya, BPI), identity verification partners, or Philippine regulatory bodies such as PAGCOR and the AMLC. We do not sell, rent, or trade your personal data to advertisers or data brokers under any circumstances.
As a data subject under the Data Privacy Act of 2012, you have enforceable rights over your personal data — including the right to access, correct, erase, object to processing, and data portability. vipph8 has a dedicated Data Privacy Officer (DPO) and a structured process for handling data subject requests within the legally mandated timeframes set by the National Privacy Commission.
vipph8 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Gaming transaction records are retained for a minimum of five (5) years as required under PAGCOR regulations and AMLA obligations. After the applicable retention period, personal data is securely deleted or anonymised in accordance with our data retention schedule.
Republic Act 10173
Your Rights as a Data Subject
The Philippine Data Privacy Act grants you the following rights with respect to your personal data held by vipph8. To exercise any of these rights, contact our Data Privacy Officer at [email protected].
- 1. Who We Are
- 2. Data We Collect
- 3. How We Collect Data
- 4. How We Use Your Data
- 5. Sharing Your Data
- 6. Cookies and Tracking
- 7. Security Measures
- 8. Data Retention
- 9. Children and Minors
- 10. Cross-Border Transfers
- 11. Exercising Your Rights
- 12. Complaints and NPC
- 13. Changes to This Policy
- 14. Contact Our DPO
Who We Are
vipph8 is a PAGCOR-regulated online gaming platform operating at vipph8.net, serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and throughout the Philippines. vipph8 acts as the Data Controller with respect to personal data collected through the Platform, as defined under Section 3(h) of the Philippine Data Privacy Act of 2012 (Republic Act 10173).
As the Data Controller, vipph8 determines the purposes and means of processing your personal data, and is responsible for ensuring that all processing activities comply with Republic Act 10173, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).
vipph8's appointed Data Privacy Officer (DPO) oversees compliance with this Policy and the Data Privacy Act. You may contact the DPO directly at [email protected] with any privacy-related enquiry.
Data We Collect
vipph8 collects personal data in the following categories depending on the nature of your interaction with the Platform:
2.1 Registration and Identity Data
When you create a vipph8 account, we collect your full legal name, date of birth, gender, Philippine mobile number, and email address. This information is required to establish your account, enforce the 21+ age restriction, and comply with PAGCOR's player registration requirements.
2.2 Know Your Customer (KYC) Data
As required by PAGCOR and the Anti-Money Laundering Act (Republic Act 9160, as amended), vipph8 collects government-issued identification documents from all players prior to processing withdrawals or when requested by our compliance team. Accepted KYC documents include the PhilSys National ID, UMID, SSS ID, driver's license, Philippine passport, and other government-issued IDs with photograph. We also collect a selfie or liveness verification photo where required by our KYC workflow.
2.3 Financial and Transaction Data
vipph8 records all deposit and withdrawal transactions, including the amount, payment method used (e.g., GCash account number, BPI account details, Maya wallet ID), transaction timestamps, and transaction reference numbers. We do not store full credit card numbers; card payments, where applicable, are tokenised by the relevant payment processor.
2.4 Gaming Activity Data
We collect detailed records of your gaming activity on the vipph8 Platform, including game sessions played (slots, bingo, fishing games, racing, live casino), bet amounts, game outcomes, win/loss history, session duration, and responsible gaming tool usage. This data is required for regulatory reporting to PAGCOR and for the operation of our responsible gaming programme.
2.5 Technical and Device Data
When you access vipph8.net, we automatically collect technical data including your IP address, device type, browser type and version, operating system, screen resolution, and referral URL. We also collect session data including login timestamps, pages visited, and features used. This data is used for security monitoring, fraud detection, and Platform optimisation.
2.6 Communications Data
If you contact vipph8 via live chat, email, or any other support channel, we retain records of that communication including the content of messages, timestamps, and any attachments provided. This data is used to resolve your enquiry, improve our support quality, and maintain a record of complaints for regulatory purposes.
2.7 Data Collected by Category — Summary Table
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Registration | Full name, DOB, mobile number, email address | Yes |
| KYC / Identity | Government ID scan, selfie/liveness photo | Yes (for withdrawals) |
| Financial | Deposit/withdrawal amounts, payment method IDs | Yes |
| Gaming Activity | Game history, bets, outcomes, session times | Automatic |
| Technical / Device | IP address, browser, device type, OS | Automatic |
| Communications | Support chat logs, email correspondence | When contacting support |
| Marketing Preferences | Opt-in/opt-out status, preferred contact channel | Optional |
How We Collect Your Data
vipph8 collects your personal data through the following methods:
- Direct Collection: Information you provide voluntarily when registering, completing KYC, making a deposit or withdrawal, contacting support, or updating your account profile.
- Automated Collection: Technical and device data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the vipph8 Platform. See Section 6 for full details on our cookie practices.
- Third-Party Sources: Identity verification data from our licensed KYC partners; fraud risk scores from our fraud detection providers; and payment transaction data from payment processors including GCash, Maya, BPI, BDO, Metrobank, and other accepted payment channels.
- Regulatory Sources: In certain circumstances mandated by PAGCOR or AMLC directives, vipph8 may receive or cross-reference data from public records or regulatory databases as part of our compliance obligations.
How We Use Your Data
vipph8 processes your personal data on one or more of the following legal bases: (a) performance of a contract (your account agreement with vipph8); (b) compliance with a legal obligation (PAGCOR regulations, AMLA, Data Privacy Act); (c) your consent where specifically given; or (d) legitimate interests pursued by vipph8 where these do not override your fundamental rights and freedoms.
4.1 Account Administration
We use your registration and KYC data to create and manage your vipph8 account, verify your identity, enforce the 21+ age restriction, authenticate your logins, and process your deposits and withdrawals in Philippine Peso via your chosen payment method.
4.2 Regulatory Compliance
vipph8 is legally required by PAGCOR and the AMLC to maintain records of player identity, gaming activity, and financial transactions. We process your data to generate mandatory regulatory reports, respond to official enquiries from PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government authorities, and to fulfil our obligations under the Electronic Commerce Act (Republic Act 8792).
4.3 Fraud Prevention and Security
We analyse your gaming behaviour, transaction patterns, device fingerprints, and IP address history to detect and prevent fraud, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct. This processing is carried out under our legitimate interests in protecting the integrity of the vipph8 Platform and safeguarding the interests of our wider player community.
4.4 Responsible Gaming
Your gaming activity data is processed to power vipph8's responsible gaming tools — including deposit limits, loss limits, session time reminders, and self-exclusion functionality. We also use this data to identify players who may be exhibiting signs of problem gambling, so that our responsible gaming team can proactively reach out with support and resources.
4.5 Platform Improvement
Aggregated and anonymised technical data is used to analyse Platform performance, identify and fix technical issues, improve user experience, and develop new features. Where data is genuinely anonymised and cannot be re-identified, it falls outside the scope of the Data Privacy Act.
4.6 Marketing Communications
With your prior consent, vipph8 may send you promotional emails, SMS notifications, and in-Platform messages about bonuses, new game releases, and special events. You can withdraw your consent to marketing communications at any time by updating your preferences in your account dashboard, clicking the unsubscribe link in any marketing email, or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew consent.
Sharing Your Data
vipph8 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:
- Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, UnionBank, InstaPay, PesoNet, 7-Eleven CLiQQ, Coins.ph, and USDT TRC20 processors receive the minimum necessary data to authenticate and complete your financial transactions.
- KYC / Identity Verification Partners: Licensed third-party identity verification providers receive your ID document scans and liveness photos solely for the purpose of completing your KYC verification. These partners are bound by data processing agreements consistent with the Data Privacy Act.
- Game Content Providers: Our licensed game software providers may receive anonymised or pseudonymised session data necessary to deliver their game content and resolve technical disputes. No directly identifiable personal data is shared beyond what is technically required.
- Regulatory and Law Enforcement Authorities: vipph8 is obligated to share player data with PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government bodies when required by law, court order, or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so.
- Professional Advisers: Our legal counsel, auditors, and accountants may access personal data on a strictly need-to-know basis under professional confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of vipph8's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices that will apply to your data going forward.
Cookies and Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device by the vipph8 website when you visit. They allow the Platform to recognise your device on subsequent visits, remember your preferences, maintain your logged-in session, and collect analytical data about how you use the site.
6.2 Types of Cookies We Use
- Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking the Platform's functionality.
- Performance / Analytics Cookies: Used to collect anonymised data about how players navigate the Platform, which pages are most visited, and where errors occur. This data helps us improve the vipph8 experience. These cookies do not identify you personally.
- Functional Cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming tool configurations. Disabling these cookies may degrade your experience on the Platform.
- Security Cookies: Used by our fraud detection and bot-mitigation systems to assess the risk profile of login and transaction attempts. These are essential for protecting your account.
6.3 Managing Cookies
You can manage your cookie preferences through the vipph8 cookie consent banner presented on your first visit, or by adjusting your browser settings to block or delete cookies. Please note that disabling strictly necessary or security cookies will impair your ability to use the vipph8 Platform. vipph8 does not use third-party advertising or retargeting cookies.
Security Measures
vipph8 implements a comprehensive information security programme designed to protect your personal data against the risks identified in our data protection impact assessments. Our security measures include, but are not limited to:
- AES-256 encryption for all personal data stored at rest in our database systems.
- TLS 1.3 encryption for all data in transit between your device and the vipph8 servers.
- Two-factor authentication (2FA) enforcement for all vipph8 account logins.
- Role-based access controls ensuring that internal staff can only access personal data relevant to their specific job function.
- Comprehensive audit logging of all internal access to personal data, with anomaly detection alerts.
- Regular third-party penetration testing and vulnerability assessments of our web application and infrastructure.
- Formal incident response procedures, including mandatory breach notification to the National Privacy Commission within 72 hours of discovering a personal data breach that is likely to result in harm to data subjects, as required under NPC Circular 16-03.
While vipph8 takes all reasonable technical and organisational precautions, no data transmission over the internet or electronic storage system is completely secure. You are also responsible for maintaining the security of your own account credentials as described in the vipph8 Terms and Conditions.
Data Retention
vipph8 retains personal data for the periods set out below, after which it is securely deleted or irreversibly anonymised:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | PAGCOR regulations, AMLA |
| KYC documents | 5 years after account closure | AMLA (RA 9160), PAGCOR |
| Transaction records | 5 years minimum | AMLA (RA 9160) |
| Gaming activity logs | 5 years | PAGCOR regulatory reporting |
| Support communications | 3 years | Complaint resolution, legitimate interest |
| Marketing consent records | Until withdrawn + 3 years | Proof of consent, DPA compliance |
| Technical / server logs | 12 months | Security monitoring, fraud detection |
Where a legal hold is in place — for example, where personal data is relevant to pending litigation or a regulatory investigation — vipph8 may retain the relevant data beyond the standard retention periods set out above.
Children and Minors
The vipph8 Platform is strictly prohibited for individuals under 21 years of age, consistent with Philippine law and PAGCOR regulations governing casino-style online gaming. vipph8 does not knowingly collect personal data from individuals under 21.
Age verification is performed at the point of registration using the date of birth provided by the user, and is further confirmed during KYC verification when a government-issued ID is submitted. Any account found to belong to a person under 21 years of age will be immediately suspended, all pending withdrawals will be frozen, and the matter will be reported to PAGCOR in accordance with our regulatory obligations.
Cross-Border Data Transfers
vipph8's primary data processing infrastructure is located within the Philippines. However, some of our third-party service providers — including certain game content providers and cloud infrastructure vendors — may process data in jurisdictions outside the Philippines. Where such cross-border transfers occur, vipph8 ensures that appropriate safeguards are in place as required under Section 21 of the Data Privacy Act and the NPC's rules on cross-border data flows.
These safeguards include contractual data transfer agreements that impose data protection standards equivalent to those required under Philippine law, and where applicable, reliance on the adequacy decisions of the National Privacy Commission. vipph8 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate compensating controls.
You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Privacy Officer at [email protected].
Exercising Your Rights
To exercise any of the data subject rights described in this Privacy Policy or in Section 16 of the Data Privacy Act, you may submit a written request to vipph8's Data Privacy Officer using any of the following channels:
- Email: [email protected] with the subject line "Data Subject Rights Request"
- In-Platform: via the Support section of your vipph8 account dashboard
To protect against fraudulent requests, vipph8 will require you to verify your identity before processing any data subject rights request. Verification will typically involve confirming details associated with your registered vipph8 account. We will not charge a fee for processing rights requests unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or refuse the request, with written reasons provided.
vipph8 will respond to all verifiable data subject rights requests within thirty (30) calendar days of receipt. Where a request is particularly complex or involves a large volume of data, we may extend this period by a further fifteen (15) days, with written notification to you explaining the reason for the extension.
Complaints and the National Privacy Commission
If you believe that vipph8 has violated your rights under the Data Privacy Act of 2012, we encourage you to first raise your concern directly with our Data Privacy Officer at [email protected]. We are committed to resolving all privacy complaints promptly, fairly, and transparently.
If you are not satisfied with our response, or if you believe your concern has not been adequately addressed within thirty (30) days, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act.
The NPC's complaint process and contact details are available on their official website. vipph8 fully cooperates with NPC investigations and will provide all requested documentation and records in a timely manner.
Changes to This Policy
vipph8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. When we make material changes to this Policy, we will notify you by:
- Posting the updated Privacy Policy on the vipph8.net website with a revised "Last Updated" date at the top of the page.
- Displaying a prominent notice in the vipph8 Platform dashboard for a period of at least fourteen (14) days following the update.
- Sending an email notification to the address registered on your vipph8 account, where the changes materially affect your rights or our processing activities in a way that requires renewed consent.
Your continued use of the vipph8 Platform following the posting of changes constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you may close your account by contacting our support team. Closing your account does not affect the lawfulness of processing carried out prior to closure, nor does it override our legal data retention obligations.
Contact Our Data Privacy Officer
For all privacy-related enquiries, data subject rights requests, complaints, or questions about this Privacy Policy, please contact vipph8's designated Data Privacy Officer:
Your Data. Your Rights. Our Commitment.
At vipph8, privacy is not a checkbox — it's built into how we operate every day. Explore the Platform knowing your personal data is protected under Philippine law and handled with the same rigour we apply to every aspect of our gaming service.
21+ only · Philippines residents · Play responsibly