vipfun Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how vipfun ("vipfun," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information obtained from users ("you," "your," or "User") of the vipfun website located at vipfun.cam (the "Website") and related gaming services (collectively, the "Services").

By creating an account, accessing the Website, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Policy, you must immediately cease using our Services and close your account if one has been created.

This Policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as international data protection standards. vipfun is registered with the National Privacy Commission (NPC) of the Philippines as required by law.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for a vipfun account, we collect the following personal information directly from you:

Data Category	Examples	Purpose
Identity Information	Full legal name, date of birth, gender, nationality, government-issued ID numbers (passport, driver's license, UMID, PRC ID)	Account registration, age verification, KYC compliance, fraud prevention
Contact Information	Email address, mobile phone number, residential address, postal code	Account communication, verification, customer support, marketing (with consent)
Financial Information	Bank account details, e-wallet information (GCash, Maya), transaction history, deposit/withdrawal records	Processing payments, withdrawals, financial transactions, anti-money laundering compliance
Account Credentials	Username, password (encrypted), security questions and answers	Account access, authentication, security
Verification Documents	Copies of government-issued IDs, proof of address documents (utility bills, bank statements), selfie photos with ID	Identity verification, regulatory compliance, fraud prevention

2.2 Information Collected Automatically

When you access and use the vipfun Services, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), mobile network information
• Usage Data: Pages visited, features used, games played, betting history, session duration, clickstream data, navigation patterns
• Technical Data: IP address, geolocation data (country, city, region), connection timestamps, server logs, error reports
• Gaming Data: Gameplay statistics, bet amounts, win/loss records, bonus usage, game preferences, RTP (return to player) data
• Communication Data: Customer support interactions, live chat transcripts, email correspondence, feedback submissions

2.3 Information from Third Parties

We may receive personal information about you from third-party sources including payment processors (for transaction verification and fraud detection), identity verification services (for KYC compliance), credit reference agencies (for financial verification), gaming regulators (for compliance and licensing requirements), and fraud prevention services (for security and risk assessment).

3. How We Use Your Information

3.1 Primary Purposes

vipfun uses your personal information for the following lawful purposes, based on contractual necessity, legal obligation, legitimate interests, and your consent where applicable:

• Account Management: Creating and maintaining your vipfun account, authenticating your identity, processing account updates and modifications
• Service Provision: Enabling access to gaming services, processing bets and transactions, calculating and distributing winnings, managing bonuses and promotions
• Payment Processing: Processing deposits and withdrawals, verifying payment methods, reconciling financial transactions, preventing payment fraud
• Compliance and Legal Obligations: Verifying age and identity (21+ requirement), conducting KYC and AML checks, complying with gaming regulations, responding to legal requests and court orders, cooperating with law enforcement
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, identity theft, account takeover, collusion, bonus abuse, and other prohibited activities
• Customer Support: Responding to inquiries, resolving disputes, providing technical assistance, investigating complaints
• Responsible Gaming: Implementing deposit limits, session time limits, self-exclusion, monitoring gambling patterns for problem gambling indicators, providing access to support resources
• Marketing and Communications: Sending promotional offers, newsletters, game updates, and personalized recommendations (with your consent, which can be withdrawn at any time)
• Platform Improvement: Analyzing usage patterns, conducting research, testing new features, optimizing user experience, developing new products and services
• Legal Protection: Enforcing Terms and Conditions, defending legal claims, protecting intellectual property rights

3.2 Legal Basis for Processing

Under the Philippine Data Privacy Act, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services)
• Legal Obligation: Processing is required to comply with Philippine laws and regulations (gaming licenses, AML/KYC requirements)
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, security, service improvement) that do not override your fundamental rights
• Consent: You have provided explicit consent for specific processing activities (marketing communications, optional data sharing)

4. Information Sharing and Disclosure

4.1 When We Share Your Information

vipfun does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information with the following categories of recipients under strict confidentiality obligations:

• Service Providers: Payment processors (GCash, Maya, banks), identity verification services, fraud detection agencies, customer support platforms, cloud hosting providers, data analytics services. These providers are contractually bound to use your data only for specified purposes and to maintain appropriate security measures.
• Gaming Regulators: Philippine Amusement and Gaming Corporation (PAGCOR), National Privacy Commission, Anti-Money Laundering Council (AMLC), and other regulatory authorities as required by law.
• Law Enforcement: Police, judicial authorities, government agencies when required by valid legal process (subpoena, court order, search warrant) or to prevent imminent harm.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy.
• Legal Compliance: When disclosure is necessary to comply with applicable laws, enforce our Terms and Conditions, protect our rights and property, investigate fraud or security issues, or respond to emergency situations.

4.2 International Data Transfers

Your personal information is primarily stored and processed within the Republic of the Philippines. In some cases, we may transfer data to service providers located outside the Philippines (such as cloud hosting providers or payment processors). When we do so, we ensure that appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms to protect your data in accordance with Philippine data protection standards.

5. Data Security and Protection

5.1 Security Measures

vipfun implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmissions are protected using 256-bit SSL/TLS encryption. Passwords are hashed and salted using industry-standard cryptographic algorithms. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Role-based access controls (RBAC) limit employee access to personal data on a need-to-know basis. Multi-factor authentication (MFA) is required for administrative access. All access to sensitive data is logged and monitored.
• Network Security: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect our network infrastructure. Regular vulnerability assessments and penetration testing identify and remediate security weaknesses.
• Data Segregation: Customer funds are held in segregated accounts separate from operational funds. Personal data is isolated from public-facing systems.
• Employee Training: All employees with access to personal data receive regular training on data protection, confidentiality, and security best practices.
• Incident Response: We maintain an incident response plan to detect, investigate, and respond to security breaches promptly. In the event of a data breach affecting your information, we will notify you and the National Privacy Commission as required by law.

5.2 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account. You must keep your username and password confidential and not share them with anyone, use a strong, unique password for your vipfun account, enable two-factor authentication if available, log out of your account when using shared or public devices, notify us immediately if you suspect unauthorized access to your account, and keep your contact information up to date so we can reach you in case of security issues.

6. Data Retention

vipfun retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:

• Active Accounts: While your account remains active, we retain your account information, transaction history, and gaming records to provide ongoing services.
• Closed Accounts: After you close your account, we retain certain information for a minimum of five (5) years to comply with Philippine gaming regulations, anti-money laundering laws, and tax requirements. This includes identity information, transaction records, and betting history.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference to ensure we do not contact you in the future.
• Legal Holds: If your account is involved in litigation, investigation, or dispute resolution, we may retain relevant data until the matter is fully resolved.
• Anonymized Data: After retention periods expire, we may anonymize or aggregate your data for statistical analysis, research, and service improvement. Anonymized data cannot be re-identified and is not considered personal information.

At the end of the retention period, we securely delete or destroy your personal information in accordance with our data disposal procedures.

7. Your Privacy Rights

7.1 Rights Under Philippine Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Be Informed: You have the right to be informed about how your data is collected, used, and shared, as described in this Privacy Policy.
• Right to Access: You may request access to your personal data held by vipfun and receive a copy in a structured, commonly used format.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data in certain circumstances (e.g., data no longer necessary for original purpose, consent withdrawn). This right is subject to legal retention requirements.
• Right to Object: You may object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests. We will cease processing unless we have compelling legitimate grounds that override your interests.
• Right to Data Portability: You may request transfer of your data to another service provider in a machine-readable format, where technically feasible.
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission of the Philippines if you believe your privacy rights have been violated.

7.2 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 12 of this Policy. We will respond to your request within thirty (30) days as required by Philippine law. We may require verification of your identity before processing requests that involve access to or deletion of personal data. There is no fee for exercising your rights unless your request is clearly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or refuse to act on the request.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide analytics, and deliver personalized experiences. vipfun uses cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance your experience and provide essential functionality.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Website to function properly. These cookies enable core features such as account login, session management, security, and payment processing. You cannot disable essential cookies as they are required for service provision.
• Performance Cookies: Collect information about how you use the Website (pages visited, time spent, errors encountered). This helps us improve Website performance and user experience.
• Functional Cookies: Remember your preferences and settings (language, currency, game favorites) to provide a more personalized experience.
• Analytics Cookies: Help us understand user behavior, traffic sources, and engagement patterns. We use this data to optimize content and features.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. These cookies require your consent and can be disabled through cookie settings.

8.3 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. However, blocking essential cookies will prevent you from using certain features of the vipfun Services. To manage cookies, consult your browser's help documentation or visit browser-specific cookie management pages.

9. Children's Privacy

vipfun Services are strictly for individuals who are twenty-one (21) years of age or older. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21. If you are under 21, you are not permitted to register for an account or use our Services.

If we discover that we have collected personal information from a person under 21 years of age, we will immediately delete that account and all associated personal data. If you believe that a minor has registered an account or provided personal information to vipfun, please contact us immediately at the address provided in Section 12.

We implement age verification procedures during registration and may request additional proof of age documentation. Parents and guardians are encouraged to monitor their children's online activities and prevent underage access to online gambling services.

10. Third-Party Websites and Services

The vipfun Website may contain links to third-party websites, services, or advertisements that are not owned or controlled by vipfun. This Privacy Policy applies only to information collected by vipfun. We are not responsible for the privacy practices, content, or security of third-party websites.

When you click on a third-party link or interact with third-party content, you leave the vipfun Website and are subject to the privacy policy and terms of service of that third party. We encourage you to review the privacy policies of any third-party websites you visit. vipfun does not endorse or assume responsibility for third-party privacy practices.

11. Changes to This Privacy Policy

vipfun reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will update the "Last Updated" date at the top of this Policy and post the revised version on the Website.

If we make material changes that significantly affect how we collect, use, or share your personal information, we will provide advance notice by email (to the address associated with your account) or through a prominent notice on the Website. Your continued use of the Services after the effective date of the revised Privacy Policy constitutes acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12. Contact Information and Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, or if you wish to exercise your privacy rights, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry / Data Protection)
• Live Chat: Available 24/7 through the vipfun Website (Tagalog and English support)
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days and fulfill data subject requests within 30 days as required by Philippine law

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto St., Pasay City, Metro Manila, Philippines 1307
• Email: [email protected]
• Website: privacy.gov.ph
• Telephone: +63 2 8234 2228