vip2 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by vip2 ("vip2", "we", "us", "our") and applies to all personal data collected through the vip2 website (vip2.cam), mobile-optimized platform, customer support channels, and any other services operated by vip2 in connection with its PAGCOR-regulated online casino platform.

vip2 is committed to protecting the privacy and security of all personal information entrusted to us by our registered players, prospective users, and visitors. This Policy is designed to comply with the requirements of Republic Act No. 10173, known as the Data Privacy Act of 2012 ("PDPA"), and its Implementing Rules and Regulations as administered by the National Privacy Commission ("NPC") of the Philippines.

By registering an account with vip2, accessing our platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the vip2 platform immediately.

2. Data Controller Information

For the purposes of the Data Privacy Act of 2012, vip2 is the personal information controller responsible for the processing of your personal data. Our designated Data Protection Officer (DPO) can be reached at:

Data Protection Officer, vip2
Email: [email protected]
Available Monday to Friday, 9:00 AM to 6:00 PM (PHT) | 24/7 Live Chat support available on the platform

If you have any concerns about how your personal data is being processed, or wish to exercise any of your data subject rights, you may contact our DPO using the details above. All data subject requests will be acknowledged within seventy-two (72) hours and responded to within fifteen (15) business days, in accordance with NPC guidelines.

3. Personal Data We Collect

Depending on the nature of your interaction with the vip2 platform, we may collect the following categories of personal data:

4. How We Collect Your Data

vip2 collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data and usage data collected automatically through cookies, web beacons, session tracking tools, and server logs when you access and interact with the vip2 platform.
• Third-party sources: Identity verification data from PAGCOR's player database, fraud prevention data from accredited third-party AML screening providers, and payment verification data from GCash, Maya, BPI, BDO, and Metrobank as required to process transactions.

5. Legal Bases for Processing

vip2 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the vip2 Terms and Conditions, including account management, payment processing, and provision of gaming services.
• Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) requirements, National Privacy Commission directives, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming compliance, and platform improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, promotional notifications, and personalized offers — where you have provided explicit consent. You may withdraw this consent at any time by contacting our support team or updating your account preferences.

6. How We Use Your Data

vip2 uses your personal data for the following purposes:

• To create, verify, and manage your vip2 account, including identity verification and KYC compliance;
• To process deposits, withdrawals, and other financial transactions in Philippine Peso via GCash, Maya, BPI, BDO, Metrobank, and other accepted payment channels;
• To provide customer support and resolve disputes, complaints, or technical issues;
• To comply with PAGCOR regulatory requirements, including reporting obligations under the Anti-Money Laundering Act;
• To detect, prevent, and investigate fraud, money laundering, account takeovers, and other prohibited activities;
• To monitor gameplay for responsible gaming compliance, including detecting signs of problem gambling and enforcing self-exclusion restrictions;
• To send transactional notifications such as deposit confirmations, withdrawal updates, and security alerts;
• To send promotional communications, bonus offers, and personalized recommendations — where you have consented to receive such communications;
• To analyze platform usage, improve our services, and optimize the player experience.

7. Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the vip2 platform. They help us recognize your device, remember your preferences, and analyze how our platform is used. vip2 uses the following types of cookies:

• Essential cookies: Required for the platform to function correctly — including session management, login authentication, and security features. These cannot be disabled.
• Analytics cookies: Help us understand how players interact with the platform — such as which games are most popular, how long sessions last, and where players encounter difficulties. This data is aggregated and anonymized.
• Preference cookies: Remember your settings and preferences — such as language selection and interface customization — to provide a more personalized experience.
• Marketing cookies: Used only where you have consented, to deliver relevant promotional content. These cookies track whether you have claimed a particular bonus offer.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, manage, and delete cookies stored on your device. Please note that disabling certain cookies may impair the functionality of the vip2 platform — in particular, disabling essential cookies will prevent you from logging in to your account.

8. Data Sharing & Third Parties

vip2 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other accepted payment providers — to process deposits, withdrawals, and refunds. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Accredited KYC and AML screening services engaged by vip2 to verify your identity and screen for sanctions list matches, as required by PAGCOR and AMLA regulations.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies — where disclosure is required by law, court order, or regulatory directive.
• Technology service providers: Cloud hosting providers, cybersecurity vendors, and platform maintenance providers engaged by vip2 under strict data processing agreements that prohibit unauthorized use of your data.
• Game providers: Licensed third-party game developers and live studio operators whose games are hosted on the vip2 platform. These providers receive only the minimum data necessary to operate their games (typically a pseudonymous player ID and bet/result data).

9. International Data Transfers

Some of vip2's service providers and technology partners may be located outside the Philippines. Where your personal data is transferred outside the Philippines, vip2 ensures that such transfers are subject to appropriate safeguards in compliance with the Data Privacy Act of 2012 and NPC guidelines. These safeguards include contractual data processing agreements incorporating the NPC's standard contractual clauses, or transfers to jurisdictions that the NPC has determined to provide adequate levels of data protection.

All international transfers of financial data related to deposits and withdrawals are conducted through PAGCOR-accredited payment rails and are subject to Bangko Sentral ng Pilipinas (BSP) oversight as applicable.

10. Data Retention

vip2 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

• Account registration data: Retained for the duration of your account plus five (5) years following account closure, as required by PAGCOR regulations and AMLA record-keeping requirements.
• Financial transaction records: Retained for ten (10) years from the date of the transaction, in compliance with the Anti-Money Laundering Act and Bureau of Internal Revenue requirements.
• KYC verification documents: Retained for five (5) years following account closure or the end of the business relationship, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, to support dispute resolution and quality assurance.
• Technical and usage data (logs): Retained for twelve (12) months for security monitoring and fraud detection purposes.

Upon expiration of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with NPC guidelines for data disposal.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vip2:

• Right to be informed: The right to know that your personal data is being collected and processed, and to be provided with information about the purposes and legal basis for that processing — as set out in this Policy.
• Right to access: The right to request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to correction: The right to request that inaccurate, incomplete, or outdated personal data be corrected or updated.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR regulations and AMLA.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation, where processing is based on legitimate interests.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all data subject requests within fifteen (15) business days. In some cases — such as erasure requests where we are legally obligated to retain certain records — we may be unable to fully comply, but we will explain the reasons clearly.

12. Data Security Measures

vip2 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and the vip2 platform;
• AES-256 encryption for sensitive data stored in our databases;
• Multi-factor authentication (MFA) requirements for all administrative access to vip2 systems;
• Regular penetration testing and vulnerability assessments conducted by accredited third-party cybersecurity firms;
• Strict access controls ensuring that only authorized personnel with a documented need can access personal data;
• Comprehensive staff training on data privacy obligations and security best practices;
• An incident response plan for personal data breaches, including NPC notification procedures within seventy-two (72) hours of discovering a breach as required by NPC Circular No. 16-03.

While vip2 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You play an important role in protecting your account by using a strong, unique password and enabling any available two-factor authentication features.

13. Children's Privacy

The vip2 platform is strictly intended for individuals who are 21 years of age or older. vip2 does not knowingly collect personal data from individuals under 21 years of age. If we discover or are notified that we have inadvertently collected personal data from a minor, we will immediately close the associated account, forfeit any winnings generated, refund verified deposits, and delete the personal data from our systems as expeditiously as possible.

If you are a parent or guardian and believe that your child has registered an account with vip2, please contact us immediately at [email protected] so that we can take prompt action.

14. Changes to This Policy

vip2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes — those that significantly affect your rights or the way we process your data — will be communicated to registered users via email or in-platform notification at least seven (7) days before taking effect. Minor or editorial updates may be made without advance notice.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how vip2 protects your personal data. Your continued use of the vip2 platform following any updates constitutes your acceptance of the revised Policy.