vph77 Privacy Policy

vph77 ("we," "us," "our," or "the Platform") operates the online gaming and sports betting platform available at vph77.vip, serving registered players across the Philippines — from Metro Manila and Makati to Cebu, Davao, Quezon City, and communities throughout Luzon, Visayas, and Mindanao. In the ordinary course of providing its services, vph77 collects, processes, stores, and in limited circumstances discloses personal information relating to its registered players and website visitors.

This Privacy Policy sets out, in clear and accessible terms, the categories of personal data vph77 collects, the specific purposes for which that data is processed, the legal grounds on which processing is based, the parties with whom data may be shared, the security measures vph77 employs to protect it, and the rights available to players as data subjects under Philippine law. We encourage all players to read this policy carefully before registering a vph77 account.

For the purposes of the Data Privacy Act of 2012, vph77 is the personal information controller responsible for the personal data of registered players and visitors processed through the vph77.vip platform. As a personal information controller, vph77 determines the purposes and means of processing player personal data and is accountable for ensuring that processing complies with applicable Philippine data protection law.

vph77 has designated a Data Protection Officer (DPO) as required by NPC regulations. Players wishing to exercise their data rights, raise a privacy concern, or contact the DPO may do so through vph77's 24/7 support channels accessible on the platform. Formal written privacy correspondence should be directed to the support email address listed in the Contact & Support section of the vph77 website.

vph77 collects personal data across several categories, determined by the nature of the service being provided and the legal obligations applicable to the platform. The following table sets out the data categories, specific data elements, and the primary processing purpose for each:

Under the DPA, certain categories of personal information are classified as "sensitive personal information" and receive heightened protection. vph77 may process the following sensitive data categories: (a) government-issued identification numbers (including PhilSys and UMID numbers) for KYC purposes; and (b) financial account information necessary for payment processing. Such sensitive data is processed only where specifically required by law, contractual necessity, or with the explicit written consent of the data subject, and is subject to enhanced security controls.

Certain technical data is collected automatically when you access vph77.vip — including your IP address, device type, browser configuration, and session activity — through standard web server logging and platform analytics tools. This data is collected for security monitoring, fraud detection, and platform performance purposes and does not require active submission by the player.

vph77 processes player personal data for the following specific and documented purposes:

• Account registration and management — creating, maintaining, and administering your vph77 account, including authentication and credential management;
• Service delivery — enabling access to games, processing bets and wagers, calculating and crediting winnings, and operating all platform features;
• Identity verification (KYC) — verifying player identity as required by PAGCOR's licensing conditions and the Anti-Money Laundering Act of the Philippines;
• Payment processing — facilitating GCash, PayMaya, and bank transfer deposits and withdrawals in compliance with payment provider requirements;
• Fraud prevention and security — monitoring for unauthorized account access, duplicate account detection, suspicious wagering patterns, and potential AML-relevant activity;
• Regulatory compliance — fulfilling PAGCOR reporting obligations, AMLC filing requirements, and any other applicable regulatory reporting mandated by Philippine law;
• Responsible gaming — administering player-initiated deposit limits, loss caps, self-exclusion periods, and other responsible gaming controls; monitoring player behavior patterns for early identification of problem gambling indicators;
• Customer support — responding to account inquiries, processing complaints, resolving disputes, and providing technical assistance;
• Promotional communications — with your consent, sending information about vph77 promotions, new games, and platform updates relevant to your player profile;
• Platform improvement — analysing aggregated, anonymised usage data to improve the vph77 platform's performance, game library, and user experience.

Under the Data Privacy Act of 2012, every personal data processing activity must be grounded in a legitimate legal basis. The following bases apply to vph77's data processing activities:

vph77 shares personal data with third parties only where strictly necessary for service delivery, legal compliance, or fraud prevention. The following categories of recipients may receive player personal data:

• Payment Processors: GCash (G-Xchange, Inc.), PayMaya (Voyager Innovations, Inc.), and Philippine banking institutions (BPI, BDO, Metrobank) — to facilitate deposit and withdrawal transactions;
• Game Providers: Licensed third-party gaming software providers whose games are made available on the vph77 platform — limited to data required for game delivery and RNG certification;
• KYC Verification Partners: Third-party identity verification services used to assist in the verification of government-issued identification documents;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies as required by law;
• IT and Cloud Infrastructure Providers: Hosting and infrastructure service providers who process data on vph77's behalf under binding data processing agreements;
• Legal and Professional Advisers: Lawyers, auditors, and compliance consultants engaged by vph77 in connection with legal proceedings or regulatory reviews.

All third-party service providers who process vph77 player data in a sub-processor capacity are required to execute binding data processing agreements with vph77 that impose data security, confidentiality, and DPA-compliant handling obligations at least equivalent to those applied by vph77 itself. vph77 conducts due diligence on third-party processors prior to engagement.

Certain vph77 service providers and game providers may be located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, vph77 ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and NPC regulations on cross-border data transfers. Such safeguards may include:

• Binding contractual clauses incorporating the standard data protection obligations required by the NPC;
• Transfers to jurisdictions that the NPC has recognised as providing an adequate level of data protection;
• Where applicable, the explicit consent of the data subject to the specific transfer.

Players may request information about the specific safeguards applied to any cross-border transfer of their personal data by contacting vph77's Data Protection Officer through the support channels available on the platform.

vph77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with applicable Philippine legal and regulatory obligations, or to defend against potential legal claims. The following retention guidelines apply:

• Active account data — retained for the duration of the active account relationship and a post-closure period as specified below;
• KYC documents and identity records — retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA obligations;
• Transaction and wagering records — retained for a minimum of five (5) years following the date of each transaction, in accordance with AMLA record-keeping requirements;
• Support communications — retained for three (3) years following the resolution of the relevant inquiry or complaint, or longer where required for litigation hold purposes;
• Marketing consent records — retained for the duration of the consent and three (3) years thereafter;
• Technical and security logs — retained for twelve (12) months from the date of generation, subject to longer retention where required for security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

vph77 implements a comprehensive set of technical, organisational, and administrative security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Encryption: 256-bit SSL/TLS encryption for all data in transit between player devices and vph77 servers; AES-256 encryption for sensitive data at rest;
• Access Controls: Role-based access control (RBAC) ensuring staff members can only access personal data categories necessary for their specific job functions; multi-factor authentication required for all administrative system access;
• Password Security: Player passwords are processed through a one-way cryptographic hash function and are never stored in recoverable plaintext; even vph77 system administrators cannot retrieve a player's plaintext password;
• Network Security: Perimeter firewalls, intrusion detection systems, and DDoS mitigation protecting the platform infrastructure;
• Audit Logging: Comprehensive logging of all access to player personal data records, with regular review of access logs for anomalous activity;
• Staff Training: All vph77 personnel with access to personal data receive data privacy training covering DPA obligations, data handling procedures, and incident reporting protocols;
• Third-Party Security Assessments: Periodic security assessments of the platform infrastructure and key third-party processors.

vph77 uses cookies and similar tracking technologies on the vph77.vip platform. Cookies are small data files placed on your device by the platform's web server. vph77 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the basic operation of the vph77 platform, including session authentication, load balancing, and security functions. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences and settings — such as language preference and responsible gaming reminder intervals — to provide a personalized platform experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the platform — pages visited, session duration, feature usage — to help vph77 improve platform performance and user experience.
• Security Cookies: Used for fraud detection and platform security purposes, including device fingerprinting to detect duplicate accounts and suspicious access patterns.

Players can manage cookie preferences through their browser settings. Most modern browsers allow you to view, block, or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the vph77 platform, as session authentication requires cookie functionality. For full instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Under the Data Privacy Act of 2012, all data subjects have the following enforceable rights with respect to their personal information held by vph77. These rights may be exercised free of charge by contacting vph77's support team or Data Protection Officer:

vph77 is strictly restricted to individuals aged 21 years and older in compliance with PAGCOR's regulatory requirements. vph77 does not knowingly collect or process personal data relating to individuals under 21 years of age. Age verification is enforced through the KYC process applicable to all accounts before withdrawal eligibility is granted.

If vph77 discovers or is notified that personal data of a person under the age of 21 has been collected through fraudulent misrepresentation of age at registration, vph77 will: (a) immediately suspend the associated account; (b) delete the personal data concerned, subject to any mandatory retention obligation under applicable law; and (c) report the matter to PAGCOR as required by regulation. Parents or guardians who believe a minor has created a vph77 account should contact vph77 support immediately.

In the event of a personal data breach — defined as any unauthorized access, disclosure, alteration, loss, or destruction of personal data held by vph77 — vph77 will respond in accordance with the following protocol:

• Internal Containment: Immediate activation of vph77's incident response procedures to contain and assess the breach;
• NPC Notification: Where the breach is reasonably likely to give rise to serious harm to affected data subjects, vph77 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03;
• Player Notification: Affected players will be individually notified of a breach involving their personal data as soon as reasonably practicable, providing information about the nature of the breach, the likely consequences, and the measures taken or proposed;
• Post-Incident Review: Following containment, vph77 will conduct a formal post-incident review to identify root causes and implement corrective measures to prevent recurrence.

As a PAGCOR-licensed gaming operator, vph77 is a reporting entity under the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160) and its amendments. vph77 is legally required to monitor transactions, conduct enhanced due diligence on high-risk accounts, and file reports with the Anti-Money Laundering Council (AMLC) under the following circumstances:

• Covered Transaction Reports (CTRs): Single transactions or related transactions in excess of the statutory threshold defined under current AMLA regulations;
• Suspicious Transaction Reports (STRs): Any transaction that meets the suspicion criteria defined in the AMLA and its implementing rules, regardless of amount.

vph77 is legally prohibited from disclosing to the data subject or any third party that a CTR or STR has been filed, or that an AMLC investigation is in progress. The filing of such reports and the associated sharing of personal data with the AMLC constitutes a legal obligation and does not require the consent of the data subject under Section 13(c) of the DPA.

vph77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data processing practices, regulatory requirements, or platform services. Where a material change is made to this policy, vph77 will notify registered players via their registered contact details or through a prominent notice on the platform. The updated policy will be published at vph77.vip/privacy-policy with a revised "Last Updated" and "Effective" date.

Continued use of the vph77 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. Where a change requires fresh consent under the DPA, vph77 will obtain that consent before the relevant processing activity begins.

For all privacy-related inquiries, data rights requests, or concerns about vph77's data processing practices, players may contact vph77 through the following channels:

• Live Chat Support: Available 24/7 on the vph77 platform — the fastest route for most account-related privacy questions;
• Email: [email protected] — for formal written privacy correspondence addressed to the Data Protection Officer. Please include "DPO Request" in the subject line to ensure correct routing.

Players who are not satisfied with vph77's response to a privacy concern have the right to escalate their complaint to the National Privacy Commission of the Philippines through the NPC's official complaint process. Information about the NPC complaint procedure is available on the NPC's official government portal.