phlvip Privacy Policy

This Privacy Policy ("Policy") describes how phlvip ("phlvip," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal data of users ("you," "Player," or "User") who access or use the phlvip online gaming platform available at https://phlvip.app (the "Platform").

phlvip is committed to protecting the privacy and personal data of every Filipino player who trusts us with their information. This Policy is designed to be transparent, straightforward, and fully compliant with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By registering an account, accessing the Platform, or using any of our services — including slots, live dealer games, keno, bingo, and all other game categories — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act of 2012, phlvip acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, phlvip determines the purposes and means of processing your personal data.

Third-party service providers engaged by phlvip to process data on our behalf — such as payment processors, game studios, and identity verification providers — act as Personal Information Processors (PIPs) and are contractually bound to process your data only on phlvip's documented instructions and in accordance with applicable data protection law.

phlvip collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties such as payment providers and identity verification services. The categories of personal data we collect include:

phlvip processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your personal data are:

• Account Registration & Management: To create and maintain your phlvip account, verify your identity, and manage your account settings and preferences.
• Service Delivery: To provide access to all games and features on the Platform, process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and deliver bonuses and promotions.
• Identity & Age Verification: To verify that you are at least 21 years of age and to conduct Know Your Customer (KYC) checks as required by applicable Philippine regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorized account access, and other illegal activities.
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations, PAGCOR-related regulatory requirements, and any other applicable Philippine laws.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: To monitor gameplay patterns and identify players who may be at risk of gambling-related harm, and to administer self-exclusion and deposit limit tools.
• Platform Improvement: To analyze usage patterns, troubleshoot technical issues, and improve the overall performance and user experience of the phlvip Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, phlvip relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phlvip — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing is necessary for phlvip's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phlvip does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Game Studios & Software Providers: Third-party game developers whose games are hosted on the phlvip Platform, to the extent necessary for game delivery and technical support.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on phlvip's behalf under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Philippine government agencies, law enforcement bodies, the National Privacy Commission, and other competent authorities, where disclosure is required by law or court order.
• Professional Advisors: Legal counsel, auditors, and other professional advisors, where necessary for the conduct of phlvip's business and subject to professional confidentiality obligations.

phlvip retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with phlvip, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC & Identity Documents: Retained for the duration of the account relationship plus five (5) years following account closure.
• Customer Support Records: Live chat transcripts and support emails are retained for two (2) years from the date of the interaction.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of the account relationship plus three (3) years.
• Technical & Usage Logs: Server logs and usage data are retained for up to twelve (12) months for security and performance monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phlvip's data disposal procedures.

phlvip implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and phlvip's servers is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on phlvip's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized phlvip personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Multi-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Regular Security Audits: phlvip conducts regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses.
• Incident Response: phlvip maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, phlvip will notify the National Privacy Commission and affected players within the timeframes required by law.

phlvip uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies help us recognize your device, maintain your session, and improve your experience on the Platform.

The types of cookies used by phlvip are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized information about how players use the Platform — such as which pages are visited most frequently — to help us improve performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings and display preferences, to provide a more personalized experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

phlvip does not use third-party advertising cookies or cross-site behavioral tracking cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the Platform.

The phlvip Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine laws and regulations governing online gambling and casino-style gaming. phlvip does not knowingly collect personal data from individuals under the age of 21.

During the registration process, all players are required to confirm that they are at least 21 years of age. phlvip reserves the right to request documentary proof of age at any time and to suspend accounts pending age verification.

To exercise any of your data subject rights as described in this Policy — including the right to access, rectification, erasure, restriction, portability, or objection — please contact phlvip's Data Protection Officer using the contact details provided in Section 14.

When submitting a data rights request, please provide sufficient information to allow us to verify your identity and locate your account. phlvip will respond to all verified data rights requests within fifteen (15) business days of receipt, in accordance with the timeframes prescribed by the Philippine Data Privacy Act of 2012.

• Requests may be submitted via live chat on the Platform or by email to our DPO.
• phlvip will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive.
• Where phlvip is unable to comply with a request — for example, because retention is required by law — we will explain the reason in our response.
• If you are not satisfied with p hlvip's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

In the course of providing services on the Platform, phlvip may transfer your personal data to service providers or infrastructure partners located outside the Philippines. Where such transfers occur, phlvip ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012.

Safeguards for international transfers may include:

• Standard contractual clauses approved by the National Privacy Commission or equivalent data protection authorities.
• Transfers to countries or organizations that have been recognized as providing an adequate level of data protection.
• Binding corporate rules where transfers occur within a group of companies subject to a common data protection framework.

phlvip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes to this Policy, we will:

• Post the updated Policy on this page with a revised "Last Updated" date.
• Notify registered players via email or in-Platform notification where the changes are material and affect your rights.
• Where required by law, seek your renewed consent before processing your data under the updated terms.

Your continued use of the phlvip Platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how phlvip protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or phlvip's handling of your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated. The NPC can be reached through its official government channels.