Privacy Policy

1.1 This Privacy Policy ("Policy") describes how vipfun ("vipfun," "we," "us," "our") collects, processes, stores, shares, and protects personal data in connection with the operation of the vipfun online gaming platform, accessible at https://vipfun.one (the "Platform").

1.2 vipfun is deeply committed to the privacy and data security of every Filipino player who uses our services. We treat personal data as a trust placed in us by our players — something to be handled with care, transparency, and strict adherence to the law.

1.3 This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, vipfun also follows international data protection best practices consistent with PAGCOR's guidelines for licensed online gaming operators.

1.4 By registering an account on vipfun, making a deposit, or otherwise using the Platform, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

1.5 This Policy should be read together with vipfun's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2.1 For the purposes of the Philippine Data Privacy Act of 2012, vipfun is the personal information controller responsible for the personal data you provide when using our Platform.

2.2 vipfun operates the Platform at https://vipfun.one and is responsible for all decisions regarding the nature, purposes, and scope of personal data processing activities described in this Policy.

2.3 If you have any questions, concerns, or requests relating to the handling of your personal data, you may contact the vipfun data privacy team through our 24/7 live chat on the Platform, or via email at support@vipfun.one. Please include "Privacy Request" in your subject line to ensure prompt routing to the appropriate team.

3.1 vipfun collects the minimum amount of personal data necessary to operate a safe, compliant, and functional online gaming platform. The categories of data we collect are described below.

3.2 Sensitive Personal Information. Under the Philippine Data Privacy Act, certain categories of information are classified as sensitive personal information and require a higher standard of protection. Where vipfun collects government-issued identification documents, these are treated as sensitive personal information and processed solely for the purpose of KYC verification in compliance with PAGCOR licensing requirements and Philippine AML laws. We do not collect medical, political, religious, or biometric data beyond what is expressly required for identity verification.

4.1 Directly from You. The majority of personal data we hold is provided directly by you during the account registration process, KYC verification, deposit and withdrawal transactions, and interactions with our customer support team.

4.2 Automatically. When you visit and interact with the vipfun Platform, we automatically collect certain technical and behavioural data through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser type, pages visited, and session duration. See Section 10 for details on cookies.

4.3 From Third-Party Service Providers. vipfun may receive data about you from the following third-party sources in the course of operating the Platform:

• Payment processors (GCash, Maya, BPI, BDO, UnionBank, Coins.ph) — transaction confirmation data;
• KYC and identity verification service providers — document verification results;
• Fraud detection and AML compliance service providers — risk assessment data;
• Game content providers — game session and result data generated during gameplay.

4.4 From Regulatory Authorities. In certain circumstances, we may receive information from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies in connection with our compliance obligations.

5.1 vipfun processes your personal data only where a valid legal basis exists under the Philippine Data Privacy Act of 2012 and its Implementing Rules. The legal bases upon which we rely are as follows:

5.2 Contractual Necessity

Processing is necessary for the performance of our contract with you — specifically, for operating your player account, processing deposits and withdrawals, delivering games, and providing customer support. Without this processing, we cannot provide vipfun's services to you.

5.3 Compliance with Legal Obligation

Processing is necessary to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Philippine Data Privacy Act, and other applicable legislation. This includes KYC verification, AML monitoring, and regulatory reporting.

5.4 Legitimate Interests

Processing is necessary for vipfun's legitimate interests in operating a secure, fraud-free platform — including fraud detection, responsible gaming monitoring, platform security, and abuse prevention — provided that such interests are not overridden by your data protection rights.

5.5 Consent

Where processing is based on your consent — such as for direct marketing communications — we will obtain your explicit consent before such processing commences. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.1 vipfun uses your personal data only for the purposes for which it was collected and for compatible purposes permitted under applicable law. The primary uses of your data are as follows:

• Account Management: Creating and maintaining your player account, verifying your identity, managing your PHP wallet, and processing login and authentication;
• Payment Processing: Facilitating deposits and withdrawals via GCash, Maya, bank transfers, and other supported payment methods, and maintaining accurate financial records;
• Regulatory Compliance: Conducting KYC verification, performing AML checks, filing Suspicious Transaction Reports (STRs) or Covered Transaction Reports (CTRs) as required under Philippine law, and responding to regulatory enquiries;
• Customer Support: Responding to your enquiries, resolving account issues, and maintaining records of customer interactions for quality assurance;
• Platform Security: Detecting, investigating, and preventing fraud, account takeovers, money laundering, and other prohibited conduct;
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing self-exclusions and deposit limits, and providing responsible gaming tools;
• Platform Improvement: Analysing usage patterns and feedback to improve the design, functionality, and performance of the vipfun Platform;
• Direct Marketing: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications;
• Legal Proceedings: Establishing, exercising, or defending legal claims in connection with your account or use of the Platform.

6.2 vipfun will not use your personal data for any purpose that is incompatible with the purposes described in this Policy without providing you prior notice and, where required, obtaining your consent.

7.1 vipfun does not sell, rent, or trade your personal data to any third party under any circumstances.

7.2 We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

7.3 Payment Processors

Personal and financial data necessary to process your deposits and withdrawals is shared with our payment partners, including GCash (Mynt – Globe Fintech Innovations, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, UnionBank, Coins.ph, and other supported processors. These entities process your data solely to facilitate the payment transaction and are contractually bound to handle your data in accordance with Philippine data protection law.

7.4 Identity Verification Service Providers

Identity document data submitted for KYC purposes is processed by vipfun's appointed identity verification service providers. These providers verify the authenticity of your identification documents and return a verification result to vipfun. Your documents are not retained by these providers beyond the period necessary to complete verification.

7.5 Game Content Providers

Game session data (including wager amounts and game outcomes) is exchanged with our game content providers to the extent necessary to deliver gameplay, calculate results, and maintain accurate game records. These providers are contractually prohibited from using your data for any purpose beyond game delivery.

7.6 Regulatory and Law Enforcement Authorities

vipfun is legally required to report certain transactions to the Anti-Money Laundering Council (AMLC) of the Philippines and to cooperate with investigations by PAGCOR, the NPC, and other competent Philippine authorities. In such cases, we will disclose the minimum personal data required by the applicable legal obligation or lawful authority.

7.7 Fraud Detection and Compliance Providers

vipfun may share technical and transactional data with fraud detection and AML compliance service providers to assist in identifying and preventing financial crime on the Platform. All such providers operate under data processing agreements consistent with the Philippine Data Privacy Act.

7.8 Legal and Professional Advisors

Personal data may be shared with vipfun's legal counsel, auditors, and other professional advisors to the extent necessary for the provision of professional services. All such parties are bound by confidentiality obligations.

8.1 vipfun retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable Philippine law.

8.2 The following retention periods apply to the primary categories of data we hold:

• Account and identity data: Retained for the duration of your active account relationship with vipfun, and for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• KYC documentation: Retained for a minimum of five (5) years following the completion of verification, in accordance with Republic Act No. 9160 (AMLA) requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by PAGCOR licensing conditions and the AMLA;
• Customer support communications: Retained for three (3) years following resolution of the relevant support interaction;
• Technical and log data: Retained for a maximum of twelve (12) months for security and fraud investigation purposes;
• Marketing consent records: Retained for the duration of the consent, plus three (3) years to demonstrate compliance.

8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised and aggregated data may be retained indefinitely for analytical and reporting purposes.

9.1 vipfun implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or unlawful processing. Our security programme includes, but is not limited to:

• Encryption in transit: All communications between your device and the vipfun Platform are protected using 256-bit TLS/SSL encryption — the same standard used by Philippine banks and financial institutions;
• Encryption at rest: Personal data stored in vipfun's databases is encrypted at rest. Passwords are hashed using a one-way cryptographic algorithm and are never stored in plain text;
• Access controls: Access to personal data within vipfun's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit;
• Multi-factor authentication: The vipfun Platform uses OTP-based verification for account access from new devices, providing an additional layer of protection beyond passwords;
• Fraud monitoring: Automated systems monitor account activity in real time to detect unusual patterns indicative of unauthorised access or financial fraud;
• Regular security testing: vipfun conducts regular vulnerability assessments and penetration testing to identify and remediate security weaknesses;
• Incident response: vipfun maintains a documented data breach response plan in accordance with NPC Circular 16-03. In the event of a personal data breach that poses a significant risk to your rights and freedoms, we will notify the NPC within 72 hours and affected players without undue delay.

9.2 While vipfun employs industry-standard security measures, no electronic system or transmission over the Internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your Account credentials and must not share your password or OTP codes with any other person.

10.1 vipfun uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance your user experience, and support our security and analytics operations.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against CSRF attacks, and cookies that remember your language and display preferences. These cookies cannot be disabled without impairing core Platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how you use the Platform — which pages are visited, how long sessions last, and where errors occur. This data helps us improve the Platform. These cookies do not identify you personally.
• Functional Cookies: Remember your preferences and settings to personalise your experience — such as your preferred game lobby view or notification settings.
• Security Cookies: Used by our fraud detection systems to identify and distinguish legitimate users from bots and to detect unusual access patterns that may indicate account compromise.

10.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features on the vipfun Platform. Instructions for managing cookies are available in the help section of your browser.

10.4 vipfun does not use third-party advertising cookies or tracking pixels that transmit your data to advertising networks or social media platforms.

11.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vipfun. To exercise any of these rights, please contact our support team via live chat or email at support@vipfun.one with the subject line "Data Rights Request."

11.2 vipfun will respond to data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reason within the initial 30-day period.

11.3 Identity Verification for Requests. To protect your data, we may ask you to verify your identity before processing a data rights request. This is to ensure that your data is not disclosed to or acted upon at the request of an unauthorised third party.

11.4 Complaints to the NPC. If you are not satisfied with vipfun's response to your data rights request, or if you believe that vipfun has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Complaint procedures are available on the NPC's official website.

12.1 vipfun is an online gaming platform for adults only. In accordance with PAGCOR regulations, the minimum age to hold a vipfun account is twenty-one (21) years. vipfun does not knowingly collect personal data from individuals under 21 years of age.

12.2 Age verification is conducted during the KYC process. Any account found to belong to a person under 21 years of age will be suspended immediately, and any personal data collected will be deleted except where retention is required by law.

12.3 If you are a parent or guardian and believe that a person under 21 has created an account on vipfun using false information, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

13.1 vipfun may send you promotional communications, bonus offers, and platform updates by SMS to your registered mobile number or by email, where you have provided consent to receive such communications.

13.2 Opting Out. You may opt out of direct marketing communications at any time by: (a) following the unsubscribe instructions included in any marketing SMS or email you receive from vipfun; or (b) contacting our support team via live chat and requesting removal from marketing communications. Opt-out requests will be processed within 10 business days.

13.3 Opting out of marketing communications does not affect the delivery of transactional communications that are necessary for your account — such as deposit confirmations, withdrawal notifications, security alerts, and OTP codes. These communications are sent as part of the service you have contracted with vipfun and cannot be disabled while your account remains active.

13.4 vipfun does not share your contact details with third-party marketers or permit third parties to send marketing communications on their own behalf to vipfun players.

14.1 vipfun's primary data processing infrastructure is located in the Asia-Pacific region. In the course of operating the Platform, certain personal data may be processed by game content providers, KYC service providers, and technical infrastructure partners operating in jurisdictions outside the Philippines.

14.2 Where personal data is transferred outside the Philippines, vipfun ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards include contractual data processing agreements incorporating the NPC's standard contractual clauses, or transfers to recipients in jurisdictions that the NPC has determined to provide an adequate level of data protection.

14.3 vipfun does not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without your explicit consent and without implementing appropriate contractual protections.

15.1 vipfun may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date of the current version is displayed at the top of this page.

15.2 Where changes are material — meaning they substantially affect your rights or the way we use your data — vipfun will notify registered players via SMS to the registered mobile number at least fourteen (14) days before the amended Policy takes effect, unless a shorter notice period is required by law.

15.3 Your continued use of the vipfun Platform following the effective date of any amendment to this Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the amended Policy, you must cease using the Platform and request account closure in accordance with our Terms & Conditions.

15.4 The most current version of this Policy is always available at https://vipfun.one/privacy-policy. We encourage you to review this page periodically to stay informed about how vipfun protects your personal data.

16.1 If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a concern about how vipfun has handled your personal data, please contact our data privacy team through any of the following channels:

• Live Chat: Available 24/7 on the vipfun Platform — the fastest way to reach our support team for any privacy-related query. Please mention "Privacy" or "Data Rights" at the start of your message.
• Email: support@vipfun.one — please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line.

16.2 vipfun will acknowledge privacy-related enquiries within 5 business days and will endeavour to resolve all requests within 30 calendar days.

16.3 If you are not satisfied with vipfun's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available on their official website. vipfun will cooperate fully with any NPC investigation.