Privacy Policy
At vipph2, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we protect it, and what rights you have under the Philippine Data Privacy Act of 2012.
How vipph2 Protects Your Privacy
We follow strict data governance principles aligned with the Philippine Data Privacy Act (RA 10173) and international best practices. Here is what that means for you as a vipph2 player.
256-Bit SSL Encryption
Every data transmission between your device and the vipph2 platform is protected by 256-bit SSL/TLS encryption — the same standard used by major banks. Your login credentials, payment details, and personal information are never transmitted in plain text over any network.
No Data Selling — Ever
vipph2 does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used exclusively for delivering and improving your gaming experience, verifying your identity, processing transactions, and meeting our legal obligations under Philippine law.
DPA 2012 Compliant
We are fully compliant with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Our Data Protection Officer (DPO) ensures all data processing activities align with the National Privacy Commission's guidelines and directives.
You Control Your Data
As a vipph2 player, you have the right to access, correct, update, and request deletion of your personal data at any time, subject to our legal retention obligations. Submit your data rights request by emailing our Data Protection Officer at the contact address provided in this policy.
Transparent Cookie Use
We use cookies and similar tracking technologies only to improve your experience on vipph2 — including session management, fraud prevention, and analytics. We clearly disclose what cookies we use and why. You can manage your cookie preferences through your browser settings at any time.
AML-Grade Data Security
vipph2 applies Anti-Money Laundering Council (AMLC) data handling standards to all KYC documentation. Your government-issued ID, proof of address, and payment method verification documents are stored in isolated, access-controlled secure storage with strict internal access logs.
📌 Scope of This Policy: This Privacy Policy applies to all personal data collected by vipph2 through the vipph2.net website, mobile-optimized platform, and any related services or communications. By registering an account or continuing to use the vipph2 platform, you acknowledge that you have read and understood this Privacy Policy.
Introduction
vipph2 ("we", "us", "our") operates the vipph2 online gaming platform available at vipph2.net (the "Platform"). We are committed to protecting the privacy and personal data of all players, visitors, and users ("you", "your") who interact with our Platform.
This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, we also observe internationally recognized data protection principles, including those reflected in the General Data Protection Regulation (GDPR) as a benchmark for global best practice.
This policy explains:
- What categories of personal data vipph2 collects from you
- The purposes for which we process that data
- The legal basis we rely on for processing
- How long we retain your data and why
- With whom we share your data and under what conditions
- The rights you hold over your personal data and how to exercise them
- How to contact our Data Protection Officer (DPO)
We encourage you to read this policy carefully. If you have any questions or concerns about how vipph2 handles your personal data, please contact our Data Protection Officer using the contact details provided in Section 13 of this policy.
Personal Data We Collect
vipph2 collects personal data through several channels: directly from you when you register an account or interact with our Platform, automatically through your use of the Platform, and in limited cases from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are detailed below.
2.1 Account Registration Data
When you create a vipph2 account, we collect the following information that you voluntarily provide:
- Full legal name (as it appears on your government-issued ID)
- Date of birth (for age verification — 21+ only)
- Current residential address (including barangay, city/municipality, province)
- Email address
- Mobile phone number
- Preferred username and encrypted password
- Nationality and country of residence
2.2 Identity Verification (KYC) Data
To comply with PAGCOR regulations and the Anti-Money Laundering Act (AMLA), we are required to verify your identity before processing withdrawals. KYC documents we collect include:
- Government-issued photo ID (Philippine passport, driver's license, SSS ID, PhilSys ID, UMID, PRC ID, or Voter's ID)
- Proof of residential address (utility bill, bank statement, or barangay certificate dated within the last 3 months)
- Selfie or live photo for liveness verification
- Payment method ownership proof (e.g., screenshot showing your GCash account name matches your registered name)
- Source of funds declaration (for high-value accounts as required by AMLC)
2.3 Financial Transaction Data
When you make deposits or withdrawals, we collect:
- Payment method details (GCash account number, Maya account, bank account name and partial account number, USDT wallet address)
- Transaction amounts, dates, and reference numbers
- Transaction history on the Platform
We do not store full credit/debit card numbers on our servers. Card processing, where applicable, is handled by PCI-DSS-compliant third-party payment processors.
2.4 Gaming Activity Data
- Game session logs including game type, duration, bets placed, and outcomes
- Wagering history and account balance history
- Bonus and promotion participation records
- Sports betting selections and results
- Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
2.5 Technical & Device Data
- IP address and approximate geolocation (city/region level)
- Device type, operating system, and browser version
- Session start and end times
- Pages and features accessed on the Platform
- Referral URL (how you arrived at vipph2.net)
2.6 Communications Data
- Support tickets and live chat transcripts with our customer service team
- Email correspondence with vipph2
- Survey responses and feedback you voluntarily submit
📌 Special Categories: vipph2 does not intentionally collect sensitive personal information as defined under the DPA 2012 (such as health data, political opinions, or religious beliefs) except where specifically required by law (e.g., self-exclusion records related to problem gambling, which are treated as health-adjacent data and protected under heightened security controls).
How We Use Your Personal Data
vipph2 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the original purpose for which it was collected. The table below summarizes our key processing activities:
| Purpose | Data Used |
|---|---|
| Account creation & management | Registration data, device data |
| Identity verification (KYC) | KYC documents, registration data |
| Payment processing | Financial transaction data, KYC data |
| Delivering gaming services | Gaming activity data, account data |
| Fraud prevention & security | Device data, IP address, transaction history |
| AML compliance & AMLC reporting | KYC data, transaction data, account data |
| Responsible gaming tools | Gaming activity data, self-exclusion records |
| Customer support | Communications data, account data |
| Platform analytics & improvement | Technical data, gaming activity data (aggregated) |
| Promotional communications (opt-in) | Email address, mobile number, gaming preferences |
| Legal & regulatory compliance | All data categories as required by applicable law |
Where we wish to use your personal data for a new purpose not listed above, we will notify you and, where required, seek your consent before proceeding.
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, vipph2 must have a lawful basis for processing your personal data. We rely on the following legal bases:
- Performance of a Contract: Processing necessary to register your account, verify your identity, process deposits and withdrawals, and deliver gaming services under our Terms & Conditions.
- Compliance with a Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, AMLC directives, NPC requirements, and other applicable Philippine laws.
- Legitimate Interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, and analytics to improve the quality of our services — where these interests are not overridden by your rights and freedoms.
- Consent: Processing for direct marketing communications, non-essential cookies, and any other processing activity where consent is the most appropriate legal basis. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Vital Interests: In exceptional circumstances, processing to protect your vital interests or those of another person — for example, disclosing information to prevent serious harm in connection with a self-exclusion request.
Data Sharing & Disclosure
vipph2 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
5.1 Service Providers (Data Processors)
We engage trusted third-party companies to help us deliver our services. These processors act under our instructions and are contractually bound to protect your data. They include:
- Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, and other licensed Philippine payment service providers for deposit and withdrawal processing
- Identity verification providers: Third-party KYC/AML compliance platforms that assist with document verification and liveness checks
- Cloud infrastructure providers: Secure cloud hosting partners for Platform operation and data storage
- Customer support platforms: Live chat and ticketing system providers
- Analytics providers: Aggregated, pseudonymized analytics services to help us understand Platform usage
5.2 Regulatory Authorities
We are legally required to share certain information with Philippine government bodies and regulators, including:
- PAGCOR — for gaming regulatory compliance, audit purposes, and dispute resolution
- Anti-Money Laundering Council (AMLC) — for covered and suspicious transaction reports as mandated by the AMLA
- National Privacy Commission (NPC) — in the event of a personal data breach or upon lawful request
- Law enforcement agencies — where required by a valid court order, search warrant, or other lawful process
5.3 Business Transfers
If vipph2 undergoes a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of that transaction. We will notify affected players via email and publish a prominent notice on the Platform at least 30 days prior to any such transfer, giving you the opportunity to exercise your data rights.
⚠️ No Third-Party Marketing: vipph2 never shares your personal data with third-party advertisers, data brokers, or marketing companies. You will only receive promotional communications from vipph2 itself, and only if you have opted in to receive them.
Cookies & Tracking Technologies
vipph2 uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) on the Platform. Cookies are small data files stored on your device that help us provide a better, more personalized experience.
6.1 Types of Cookies We Use
- Essential Cookies: Required for the Platform to function properly. These include session authentication cookies that keep you logged in, fraud prevention cookies, and load-balancing cookies. You cannot opt out of these cookies as they are strictly necessary for the service.
- Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect your experience.
- Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data helps us improve vipph2.
- Security Cookies: Assist our fraud detection systems by recording behavioral patterns during your session to detect automated or malicious activity.
6.2 Managing Cookies
You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please be aware that disabling certain cookies may affect the functionality of the vipph2 Platform — for example, you may need to log in again each time you visit.
💡 How to Manage Cookies: In Chrome, go to Settings → Privacy and Security → Cookies and other site data. In Firefox, go to Settings → Privacy & Security → Cookies and Site Data. For mobile browsers, the path is typically Settings → Site Settings → Cookies.
Data Retention
vipph2 retains your personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable Philippine law. The key retention periods are as follows:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR regulatory requirement |
| KYC documents | 5 years from account closure | AMLA / AMLC requirement |
| Financial transaction records | 5 years from transaction date | AMLA / BIR requirement |
| Gaming activity logs | 3 years from account closure | PAGCOR audit requirement |
| Support communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Self-exclusion records | Permanently (or until rescinded per policy) | Responsible gaming obligations |
| Analytics data (aggregated) | 2 years, then anonymized indefinitely | Legitimate interests |
After the applicable retention period has expired, your personal data is securely deleted or anonymized so that it can no longer be linked back to you. Anonymized data may be retained indefinitely for statistical and research purposes.
If you request account closure, we will process your request promptly. However, certain data will be retained for the periods specified above to comply with our legal obligations, even after your account has been closed.
Data Security
vipph2 takes data security seriously and implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss.
8.1 Technical Security Measures
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers
- AES-256 encryption at rest for sensitive stored data including KYC documents, payment details, and passwords (stored as salted hashes)
- Web Application Firewall (WAF) to block SQL injection, cross-site scripting, and other common web attacks
- DDoS protection to ensure Platform availability and prevent service disruption attacks
- Multi-factor authentication (MFA) for all internal vipph2 staff accessing production systems
- Regular penetration testing conducted by independent security firms on at least an annual basis
- Intrusion detection systems (IDS) with 24/7 monitoring and automated alerting
8.2 Organizational Security Measures
- Strict need-to-know access controls — only authorized personnel whose job functions require access to specific data categories are granted access
- All staff with access to personal data undergo data privacy and security training upon onboarding and annually thereafter
- Background checks for all employees with access to sensitive player data
- Signed confidentiality and data processing agreements with all third-party service providers
- A documented Data Breach Response Plan tested annually
8.3 Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vipph2 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by NPC Circular No. 16-03. Affected players will be notified without undue delay by email and through a notice posted on the Platform, including details of the breach, the data affected, and the steps we are taking to address it.
⚠️ Your Role in Security: While vipph2 implements robust security measures, you also play a role in keeping your account secure. Use a strong, unique password for your vipph2 account, enable two-factor authentication (2FA), never share your login credentials with anyone, and contact us immediately if you suspect your account has been compromised.
Your Data Rights
Under the Philippine Data Privacy Act of 2012, you are entitled to the following rights with respect to your personal data held by vipph2. These rights may be subject to certain limitations under applicable law, particularly where data must be retained for regulatory compliance purposes.
Right to Access
Request a copy of the personal data vipph2 holds about you, including what data we have, why we have it, and who it has been shared with.
Right to Correction
Request correction of inaccurate, outdated, or incomplete personal data. You can update basic profile information directly in your account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Right to Object
Object to processing of your personal data for direct marketing purposes or processing based on legitimate interests at any time, without needing to justify your objection .
Right to Portability
Request a copy of your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service provider where technically feasible.
Right to Restrict Processing
Request that we limit how we use your personal data in certain circumstances — for example, while a correction request is being verified or an objection is being assessed.
Right Against Automated Decisions
Request human review of decisions made solely by automated processing that significantly affect you, such as account suspensions triggered by our fraud detection systems.
Right to Lodge a Complaint
File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe vipph2 has not handled your personal data in accordance with the DPA 2012.
Right to Withdraw Consent
Withdraw consent for any processing activity based on consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
📩 How to Exercise Your Rights: To submit a data rights request, email our Data Protection Officer at [email protected] with the subject line "Data Rights Request – [Your Full Name]". We will acknowledge your request within 3 business days and respond substantively within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Children's Privacy & Age Restriction
vipph2 is strictly intended for players who are 21 years of age or older, in accordance with Philippine laws governing online gambling and casino-style gaming. We do not knowingly collect personal data from individuals under the age of 21.
During the registration process, all players must confirm their age and agree to our Terms & Conditions. We also conduct age verification as part of our KYC process, requiring government-issued photo identification that confirms the player's date of birth.
⚠️ Underage Access: If we discover or have reason to believe that a player is under 21 years of age, we will immediately suspend the account, freeze any balance pending further review, notify relevant authorities as required by law, and securely delete or anonymize all personal data associated with the underage account. If you believe a minor has registered on the vipph2 Platform, please contact us immediately at [email protected].
Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling websites. Resources such as the Internet Positive program and net-nanny style filtering tools can help restrict access to gambling-related content on shared devices.
Third-Party Links & Integrations
The vipph2 Platform may contain references to or integrations with third-party services — for example, payment gateways such as GCash and Maya that redirect you to their own platforms to complete a transaction. Once you leave the vipph2.net domain, this Privacy Policy no longer applies.
Third-party services, including payment processors, have their own privacy policies and data practices. vipph2 is not responsible for the privacy practices, content, or security of third-party websites or services. We strongly encourage you to review the privacy policies of any third-party services you use in connection with your vipph2 account.
vipph2 has contractual data protection agreements in place with all third-party processors we work with, requiring them to process your data only as instructed by vipph2 and to maintain appropriate security standards. However, once data is processed by a third-party service acting as an independent data controller (such as your bank or GCash provider), their own policies govern that processing.
Changes to This Privacy Policy
vipph2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our services. All changes will be posted on this page with a revised "Last Updated" date at the top of the policy.
For material changes — that is, changes that significantly affect your rights or how we use your personal data — we will provide at least 30 days' advance notice by:
- Sending an email notification to the registered email address on your account
- Displaying a prominent notice on the vipph2.net homepage and Platform dashboard
Your continued use of the vipph2 Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data subject to our legal retention obligations.
💡 Stay Informed: We recommend bookmarking this Privacy Policy page and reviewing it periodically, especially after receiving a notification of changes. The "Last Updated" date at the top of this page always reflects when the most recent revision was made.
Contact Us & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the way vipph2 processes your personal data, please contact our Data Protection Officer (DPO):
📧 Data Protection Officer
vipph2 Online Gaming Platform
Email: [email protected]
Support: [email protected]
Response time: Within 3 business days for acknowledgment; 30 calendar days for substantive response.
If you are not satisfied with our response to your data rights request or complaint, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority responsible for overseeing compliance with the Data Privacy Act of 2012.
You may also contact the NPC directly for guidance on your rights as a data subject under Philippine law. Information about the NPC and its complaint procedures is publicly available through official Philippine government channels.
This Privacy Policy was last reviewed and approved by the vipph2 Data Protection Officer on January 1, 2026. It supersedes all previous versions of the vipph2 Privacy Policy.
Your Privacy Is Protected at vipph2
Now that you know exactly how vipph2 protects your personal data, explore our full lineup of games — from slots and live casino to fish hunters, bingo, and sports betting. All backed by the security and transparency commitments in this policy. For players 21+ only.