vph77 Privacy Policy — Your Data, Your Rights

This Privacy Policy applies to all personal data collected, processed, stored, and used by vph77 in connection with your access to and use of the vph77 online casino and sports betting platform, accessible at vph77.org and any associated subdomains or mobile-accessible interfaces (collectively, the "Platform").

Data Controller. For the purposes of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its implementing rules and regulations, the data controller responsible for your personal information is vph77, operating under PAGCOR licensing and reachable at the contact details provided in Section 13 of this Policy.

This Policy applies to all registered users of the vph77 Platform, all visitors to vph77.org, and all individuals whose personal data is processed in connection with account registration, identity verification, payment processing, customer support interactions, and any promotional activities conducted by vph77.

vph77 collects personal data from you directly when you register, use the Platform, and contact our support team, as well as automatically through your use of the Platform. The categories of data we collect are as follows:

Special Categories of Data. vph77 does not intentionally collect sensitive personal information such as health data, religious beliefs, or political opinions. However, in the context of responsible gaming, you may voluntarily disclose information relating to gambling-related difficulties when accessing self-exclusion tools or contacting the support team. Such disclosures are handled with heightened care and used only to provide the responsible gaming assistance you have requested.

vph77 uses the personal data it collects for the following purposes:

• Account Registration and Management: To create and maintain your vph77 account, authenticate your identity at login, and manage your account settings and preferences;
• Identity Verification (KYC): To verify your identity and age (minimum 21 years) as required by PAGCOR regulations and applicable anti-money laundering laws, including the Philippines Anti-Money Laundering Act (AMLA);
• Transaction Processing: To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods, and to process your withdrawal requests to your verified payment account;
• Service Delivery: To provide access to games, live dealer tables, sports betting markets, bingo rooms, and all other features of the vph77 Platform;
• Customer Support: To respond to your inquiries, complaints, and requests submitted through the 24/7 live chat or by email;
• Legal and Regulatory Compliance: To comply with PAGCOR licensing requirements, anti-money laundering obligations, data privacy regulations, court orders, and any other legal obligations applicable to vph77;
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraud, unauthorised access, money laundering, bonus abuse, and other prohibited activities on the Platform;
• Responsible Gaming: To monitor gaming behaviour in the context of responsible gaming obligations, enforce self-exclusion orders, and operate deposit limit and session reminder tools;
• Marketing Communications (with consent): To send you promotional offers, news about new games, and other marketing materials where you have provided opt-in consent. You may withdraw this consent at any time;
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players use the Platform and to improve its features, performance, and user experience.

vph77 processes your personal data on the following lawful bases as recognised under the Philippines Data Privacy Act:

• Contractual Necessity: Processing required to fulfil the vph77 Terms and Conditions — including account management, game access, and payment processing — is necessary for the performance of the contract between you and vph77;
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws is carried out pursuant to vph77's legal obligations;
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregated analytics is carried out on the basis of vph77's legitimate interest in operating a safe and compliant gaming platform;
• Consent: Processing for direct marketing communications is carried out only on the basis of your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5.1 vph77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, Visa, Mastercard, and QR Ph receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are required to handle your data in compliance with applicable regulations;
• Identity Verification Services: Third-party KYC and anti-money laundering verification providers receive identity documents and personal details solely for the purpose of verifying your identity as required by PAGCOR and AMLA regulations;
• Game Content Providers: Licensed game providers may receive anonymised or pseudonymised session data necessary for game delivery, technical support, and RNG certification. No directly identifiable personal data is shared with game providers beyond what is technically necessary;
• Regulatory Authorities: PAGCOR and other competent Philippine government authorities will receive personal data where required by law, regulatory order, or court directive;
• Fraud Prevention Networks: vph77 may share data within regulated industry fraud prevention networks to protect against money laundering, match-fixing, and other criminal activities;
• Professional Advisors: Lawyers, auditors, and accountants engaged by vph77 may access personal data as necessary and are bound by confidentiality obligations.

6.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. vph77 uses cookies and similar tracking technologies to operate the Platform, remember your session, and analyse usage patterns.

6.2 Types of Cookies Used.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cookies cannot be disabled without affecting Platform functionality;
• Performance and Analytics Cookies: Used to collect aggregated information about how users interact with the Platform — pages visited, session length, error rates — for the purpose of improving performance. This data is processed in anonymised or aggregated form;
• Functional Cookies: Remember your preferences such as language settings and responsible gaming alert configurations;
• Marketing Cookies: Used only where you have provided consent to receive personalised promotional content. You may withdraw consent and disable marketing cookies at any time through your account settings.

6.3 Managing Cookies. You may control and delete cookies through your browser settings. Please be aware that disabling strictly necessary cookies will impair your ability to use the vph77 Platform, including the ability to log in and maintain an authenticated session.

vph77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum period of five (5) years following account closure, as required by PAGCOR regulations and applicable anti-money laundering laws;
• Transaction and Financial Data: Retained for a minimum of five (5) years following the date of each transaction, in accordance with financial record-keeping obligations under Philippine law;
• Gaming Activity Data: Retained for the duration of your account and for up to five (5) years following account closure for regulatory and responsible gaming audit purposes;
• Support Communications: Retained for up to three (3) years from the date of the last interaction, unless a longer retention period is required in connection with an ongoing dispute or legal proceeding;
• Marketing Preference Data: Retained until you withdraw consent, at which point marketing data is deleted within thirty (30) days, subject to retention of a record of the withdrawal of consent for compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

vph77 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmission channels between your device and vph77 servers;
• Encrypted storage of sensitive data, including password hashes and identity documents, using industry-standard cryptographic methods;
• Access controls ensuring that employee access to personal data is limited to those with a legitimate business need, governed by role-based access permissions;
• Automatic session timeout after a period of inactivity to protect accounts accessed from shared or public devices;
• SMS-based one-time password (OTP) verification for logins from unrecognised devices or following a password reset;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Staff training on data protection obligations and secure data handling practices.

Under the Philippines Data Privacy Act of 2012, you are entitled to the following rights with respect to your personal data held by vph77. To exercise any of these rights, please contact the vph77 Data Protection Officer using the details in Section 13.

vph77 will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where the complexity or volume of a request requires additional time, vph77 will notify you of the extension and the reason therefor within the initial 30-day period.

21+ The vph77 Platform is strictly restricted to persons who are at least 21 years of age at the time of registration, in accordance with PAGCOR regulations. vph77 does not knowingly collect personal data from individuals under the age of 21.

If vph77 discovers or is informed that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, the personal data will be securely deleted to the extent permitted by PAGCOR and AMLA record-keeping obligations, and any funds held in the account will be dealt with in accordance with applicable PAGCOR procedures.

Parents or guardians who believe that a person under the age of 21 has registered on the vph77 Platform should contact the Data Protection Officer immediately at the contact details provided in Section 13.

vph77's responsible gaming tools necessarily involve processing of gaming activity data. Specifically:

• Deposit limit settings and session timer configurations are stored against your account and applied automatically across all sessions and devices;
• Self-exclusion records are retained for the duration of the exclusion period and for a minimum of five (5) years thereafter, for regulatory compliance and to prevent re-registration;
• Gaming behaviour data may be analysed by vph77's responsible gaming systems to identify patterns consistent with problem gambling, which may trigger a welfare check from the support team;
• Information you voluntarily provide in connection with a self-exclusion request or welfare interaction is treated as sensitive data and is accessible only to authorised responsible gaming personnel.

For full details of the responsible gaming tools available to you on vph77, please visit the Responsible Gaming page.

vph77 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or vph77's data processing practices. When material changes are made, vph77 will:

• Update the "Last Updated" date displayed at the top of this Policy;
• Post a prominent notice on the vph77 Platform informing users of the change;
• Where practicable and where the change is materially adverse to users, provide notice via the registered mobile number or in-account notification prior to the change taking effect.

The version of this Privacy Policy currently in force is always available at vph77.org/privacy-policy. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with an amendment, you may close your account in accordance with the procedure described in the vph77 Terms and Conditions.

vph77 has designated a Data Protection Officer (DPO) as required under the Philippines Data Privacy Act. The DPO is responsible for overseeing vph77's compliance with its data protection obligations and is the appropriate point of contact for all privacy-related inquiries, data rights requests, and complaints.

When contacting the DPO regarding a data rights request, please provide your registered username and a clear description of the request. vph77 may ask for proof of identity before processing data access or deletion requests to ensure the security of your account.