Privacy Policy

1. Overview

This Privacy Policy applies to all personal data collected, processed, stored, and used by vipjili in connection with the operation of the vipjili platform, accessible at vipjili.one and any associated mobile-optimised versions of the platform. It applies to all registered players, prospective players, and visitors to the vipjili platform.

By registering a vipjili account or by continuing to use the vipjili platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not use the vipjili platform.

This policy should be read together with the vipjili Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, vipjili acts as the personal information controller in respect of all personal data collected through the vipjili platform. As the personal information controller, vipjili determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection law.

If you have any questions about how vipjili processes your personal data, or if you wish to exercise any of your data subject rights as described in Section 11 of this policy, you may contact vipjili's data privacy team using the contact details provided in Section 15.

3. Personal Data We Collect

vipjili collects the following categories of personal data from players and platform visitors. The specific data collected will depend on how you interact with the vipjili platform and the services you use.

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement under Philippine law);
• Nationality and country of residence;
• Email address;
• Mobile phone number;
• Residential address, including barangay, city or municipality, province, and postal code.

3.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., passport, driver's licence, SSS/UMID card, PhilSys national ID);
• Proof of address documents (e.g., utility bills, bank statements);
• Proof of payment method ownership where required;
• Selfie or facial image submitted for identity verification purposes.

3.3 Financial Data

• GCash or PayMaya account details (mobile number associated with the account);
• Bank account details for bank transfer transactions (account name, account number, bank name);
• Debit card details where applicable (card number is not stored by vipjili — it is processed directly by the payment gateway);
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used.

3.4 Gaming & Account Data

• vipjili username and account ID;
• Game history, including games played, bet amounts, win/loss records, and session durations;
• Bonus and promotion history;
• Responsible gaming settings and self-exclusion status;
• Customer support interaction records, including chat transcripts and email correspondence.

3.5 Technical & Usage Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser type and version;
• Pages visited on the vipjili platform, time spent on each page, and navigation paths;
• Referring URL (the website or link that directed you to vipjili);
• Cookie identifiers and similar tracking technology data as described in Section 10.

4. How We Collect Your Data

vipjili collects personal data through the following means:

• Direct collection: Data you provide when registering a vipjili account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access and use the vipjili platform, including through cookies and similar tracking technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment verification data from payment processors such as GCash, PayMaya, and banking partners.

5. How We Use Your Personal Data

vipjili uses the personal data it collects for the following purposes:

vipjili will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, vipjili processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and vipjili — including account registration, payment processing, and game provision — is carried out on the basis that it is necessary for the performance of that contract;
• Legal obligation: Processing required to comply with vipjili's legal obligations under Philippine law, including KYC/AML requirements, PAGCOR regulatory obligations, and tax reporting requirements;
• Legitimate interests: Processing carried out for vipjili's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and certain non-essential cookies, where you have provided explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Sharing Your Personal Data

vipjili does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, and banking partners, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party service providers engaged to verify player identity and age in compliance with Philippine regulatory requirements;
• AML and fraud screening providers: Compliance technology providers used to screen transactions and player activity for money laundering and fraud indicators;
• Game software providers: Game developers and content providers whose games are hosted on the vipjili platform may receive limited technical data necessary to deliver their games;
• Regulatory authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law, court order, or regulatory direction;
• Professional advisers: Legal, accounting, and auditing firms engaged by vipjili, subject to professional confidentiality obligations;
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged to support the operation of the vipjili platform.

All third-party service providers engaged by vipjili are required to process personal data only in accordance with vipjili's instructions and applicable data protection law. vipjili does not permit third-party service providers to use player data for their own independent purposes.

8. Data Retention

vipjili retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general principle, vipjili applies the following retention periods:

• Active account data: Retained for the duration of the player's account and for a period of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements;
• KYC and identity verification documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments;
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction;
• Customer support records: Retained for three (3) years following the resolution of the relevant support interaction;
• Technical and usage data: Retained for up to twenty-four (24) months, after which it is aggregated or anonymised.

When personal data is no longer required for any lawful purpose, vipjili will securely delete or anonymise it in accordance with its data disposal procedures.

9. Security Measures

vipjili implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the vipjili platform is encrypted using industry-standard SSL/TLS protocols;
• Encryption at rest: Sensitive personal data stored on vipjili's servers is encrypted at rest using AES-256 or equivalent encryption standards;
• Access controls: Access to personal data is restricted to vipjili personnel and authorised service providers who have a legitimate need to access it, and is governed by role-based access control policies;
• Two-factor authentication: vipjili supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised access;
• Regular security audits: vipjili conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the platform;
• Incident response: vipjili maintains a data breach response procedure and will notify affected players and the National Privacy Commission (NPC) in the event of a personal data breach, in accordance with the requirements of the Data Privacy Act.

10. Cookies & Tracking Technologies

vipjili uses cookies and similar tracking technologies on the vipjili platform. Cookies are small text files placed on your device when you visit a website. They help the platform function correctly, remember your preferences, and provide vipjili with information about how the platform is used.

10.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting platform functionality;
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits you have set;
• Analytics cookies: Collect anonymised information about how players use the vipjili platform, helping vipjili improve the user experience. These are only placed with your consent;
• Security cookies: Used to detect and prevent fraudulent activity and unauthorised account access.

10.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may prevent you from using certain features of the vipjili platform, including logging in to your account. For analytics and non-essential cookies, you may withdraw your consent at any time through the cookie preference settings available on the platform.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by vipjili. To exercise any of these rights, please contact vipjili using the details in Section 15. vipjili will respond to all valid data subject requests within thirty (30) days of receipt.

Please note that some of these rights are subject to limitations under applicable law. For example, vipjili may be unable to delete certain data that it is legally required to retain for AML or regulatory compliance purposes. vipjili will always explain the reason if it is unable to fulfil a data subject request.

12. Minors & Age Restriction

The vipjili platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine gambling regulations. vipjili does not knowingly collect personal data from individuals under the age of 21.

If vipjili becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the vipjili platform, please contact us immediately using the details in Section 15.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. vipjili supports responsible gaming and the protection of vulnerable individuals.

13. Cross-Border Data Transfers

In the course of operating the vipjili platform, your personal data may be transferred to and processed in countries other than the Philippines — for example, where vipjili's cloud infrastructure providers or KYC service providers are located. Where such transfers occur, vipjili ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Philippine Data Privacy Act, including the use of contractual data protection clauses with recipient organisations.

vipjili will not transfer your personal data to a foreign country or international organisation unless that country or organisation provides an adequate level of protection for personal data, or appropriate safeguards have been implemented as required by the National Privacy Commission.

14. Changes to This Privacy Policy

vipjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or vipjili's data processing practices. When material changes are made, vipjili will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered players via the email address associated with their account or via an in-platform notification.

Your continued use of the vipjili platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed of how vipjili protects your personal data.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about how vipjili has handled your personal data, please contact our data privacy team:

vipjili will acknowledge all data subject requests and privacy complaints within five (5) business days and will endeavour to resolve them within thirty (30) days. If you are not satisfied with vipjili's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.