vipfun Privacy Policy

1. Who We Are (Data Controller)

vipfun (referred to herein as "vipfun", "we", "us", or "our") operates the online gaming platform accessible at vipfun.co, offering casino games, sports betting, live dealer, bingo, and related services to eligible players in the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), vipfun is the Personal Information Controller (PIC) in respect of personal data collected through the vipfun platform. Our Data Protection Officer (DPO) can be contacted at the details provided in Section 15 of this Policy.

This Privacy Policy applies to all personal data collected from registered players, prospective players, and visitors to vipfun.co, regardless of the device or method of access used.

2. Personal Data We Collect

vipfun collects personal data necessary to operate the platform, verify player identity, process transactions, and comply with legal obligations. The categories of personal data we collect include:

2.1 Identity and Contact Data

• Full legal name as it appears on a Philippine government-issued ID;
• Date of birth (for age verification — 21+ requirement);
• Philippine mobile number;
• Email address;
• Residential address in the Philippines;
• Government-issued ID type, number, and scanned copy (for KYC verification).

2.2 Financial and Transaction Data

• GCash or PayMaya account linked to your vipfun account;
• Bank account details (BDO, BPI, Metrobank, or other Philippine bank) where provided for withdrawal;
• Deposit and withdrawal history;
• Transaction amounts, dates, and payment method references.

2.3 Gaming Activity Data

• Game session logs (game played, duration, bets placed, outcomes);
• Bonus redemption and wagering records;
• VIP loyalty program activity;
• Responsible gaming settings and self-exclusion status.

2.4 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, browser type and version;
• Session identifiers and login timestamps;
• Cookie and similar tracking technology data (see Section 9).

2.5 Communications Data

• Records of communications with vipfun support (live chat transcripts, email correspondence);
• Feedback, complaints, and dispute records.

3. How We Collect Your Data

vipfun collects personal data through the following means:

• Direct provision: Data you enter during registration, KYC verification, deposit/withdrawal requests, or when contacting support;
• Automated collection: Technical and device data collected automatically when you access or use the vipfun platform, via cookies, server logs, and similar technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud service providers; payment verification data from GCash, PayMaya, and banking partners;
• Regulatory sources: Self-exclusion or restriction information from applicable Philippine gaming regulatory databases where vipfun is required or permitted to check.

4. How We Use Your Personal Data

vipfun uses your personal data for the following purposes:

vipfun will not use your personal data for any purpose incompatible with those listed above without first obtaining your consent or establishing another lawful basis under RA 10173.

5. Legal Basis for Processing

vipfun processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to fulfill our obligations under the vipfun Terms & Conditions (account management, payment processing, game provision);
• Legal obligation: Processing required to comply with applicable Philippine laws, including AMLA reporting obligations, PAGCOR regulatory requirements, and tax laws;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement where these interests are not overridden by your rights;
• Consent: Processing for marketing communications, non-essential cookies, and other purposes where vipfun has obtained your explicit consent. You may withdraw consent at any time.

6. Data Sharing and Disclosure

vipfun does not sell your personal data. We may share your data with the following categories of recipients, strictly as necessary:

6.1 Service Providers and Processors

Third-party companies that process data on vipfun's behalf under contractual data processing agreements, including: KYC and identity verification providers; payment processors (GCash, PayMaya, banking partners); IT infrastructure, hosting, and security providers; game software providers; customer support platform providers.

6.2 Regulatory and Law Enforcement Authorities

vipfun will disclose personal data to Philippine regulatory bodies (including PAGCOR and the AMLC), law enforcement agencies, and courts where required or authorized by law, including for AML reporting, regulatory audits, and legal proceedings.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of vipfun's business, personal data held by vipfun may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom vipfun shares personal data are contractually required to process that data securely, use it only for the specified purpose, and comply with applicable Philippine data privacy laws.

7. Data Retention

vipfun retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and to comply with applicable legal and regulatory retention obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of the account and for a minimum of 5 years following account closure, as required by Philippine AMLA and gaming regulations;
• Transaction records: Retained for a minimum of 5 years from the date of the transaction;
• Game session logs: Retained for a minimum of 3 years;
• Support communications: Retained for 3 years from the date of the interaction;
• Marketing data: Retained until you withdraw consent or request deletion, subject to overriding legal retention requirements;
• Technical/device logs: Typically retained for 12 months unless required longer for security investigations.

When retention periods expire, personal data is securely deleted or anonymized in accordance with vipfun's data disposal procedures.

8. Data Security

vipfun implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data in transit;
• Encryption of sensitive data at rest, including financial and identity records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication for internal systems accessing player data;
• Incident response procedures for data breach detection, containment, and notification.

In the event of a personal data breach that poses a real risk of harm to affected individuals, vipfun will notify the Philippine National Privacy Commission (NPC) within 72 hours of discovery and will notify affected players as required by law.

9. Cookies and Tracking Technologies

vipfun uses cookies and similar tracking technologies on the vipfun.co platform. Cookies are small text files stored on your device that help the platform function properly and enable analytics.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function (e.g., session management, login authentication). Cannot be disabled.
• Functional Cookies: Remember your preferences and settings (e.g., language, game lobby layout). Can be disabled, but may affect platform functionality.
• Analytics Cookies: Collect anonymized data about how players use the platform to help vipfun improve its services. Require consent.
• Marketing Cookies: Used to deliver relevant promotions and track campaign effectiveness. Require consent.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect your vipfun experience. Strictly necessary cookies cannot be disabled as they are essential for platform operation.

10. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), vipfun players have the following rights regarding their personal data:

• Right to be Informed: The right to know what personal data vipfun holds about you and how it is used — as described in this Policy;
• Right of Access: The right to request a copy of the personal data vipfun holds about you;
• Right to Correction: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to vipfun's legal retention obligations;
• Right to Object: The right to object to the processing of your data for direct marketing or on grounds relating to your particular situation;
• Right to Data Portability: The right to receive your data in a structured, commonly used format;
• Right to Lodge a Complaint: The right to file a complaint with the Philippine National Privacy Commission (NPC) at privacy.gov.ph if you believe vipfun has violated your data privacy rights.

To exercise any of these rights, contact vipfun's Data Protection Officer (see Section 15). vipfun will respond to all verified requests within 15 business days. Identity verification will be required before any data is disclosed or actioned.

11. Children's Privacy

vipfun's services are strictly limited to individuals aged 21 years and above, consistent with applicable Philippine gaming regulations. vipfun does not knowingly collect personal data from persons under 21 years of age. If vipfun becomes aware that an account has been created by a person under 21, the account will be immediately closed and all associated data deleted, subject to any applicable legal retention requirements.

If you have reason to believe that a minor has registered on vipfun, please notify our support team immediately.

12. Cross-Border Data Transfers

Where vipfun transfers personal data to service providers or partners located outside the Philippines (e.g., cloud infrastructure providers or international game studios), vipfun ensures that such transfers comply with the requirements of RA 10173, including that the recipient country or organization provides an adequate level of data protection or that appropriate safeguards (such as data processing agreements with standard contractual clauses) are in place.

vipfun will not transfer personal data outside the Philippines except as necessary to deliver the services described in this Policy and in compliance with applicable data privacy law.

13. Third-Party Links and Services

The vipfun platform may contain references to third-party game studios, payment providers, and service partners. While vipfun carefully vets its partners, this Privacy Policy applies only to personal data processed directly by vipfun. Third-party services operate under their own privacy policies, which vipfun does not control.

vipfun recommends reviewing the privacy policies of any third-party service you interact with in connection with your vipfun account, including your GCash or PayMaya provider.

14. Updates to This Privacy Policy

vipfun may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. The most current version will always be published at vipfun.co/privacy-policy, with the effective date displayed at the top of the page.

For material changes that affect your rights or how your data is used, vipfun will provide advance notice via your registered email address or through a prominent platform notification. Your continued use of vipfun following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

15. Contact and Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or concerns regarding vipfun's data processing practices, please contact our Data Protection Officer:

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights under RA 10173 have been violated.