vip7 Privacy Policy

01Data Controller

vip7 ("vip7," "we," "us," "our") is the personal information controller in respect of all personal data processed in connection with your use of the vip7 online gambling platform at vip7.vu and associated domains. vip7 operates under a PAGCOR licence and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

vip7 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Privacy Policy. The DPO may be contacted at the address specified in Section 13 of this Policy.

02Data We Collect

vip7 collects personal data in the following categories, depending on your level of engagement with the platform:

vip7 does not collect sensitive personal information as defined under the DPA (e.g., health data, political opinions, religious affiliations) except where expressly required by PAGCOR-mandated responsible gaming obligations.

03How We Use Your Data

vip7 processes your personal data for the following specific purposes:

• Account creation and management: To register your vip7 account, verify your identity through KYC procedures, and manage your account settings and preferences.
• Service delivery: To facilitate wagering activity, credit winnings to your account, process GCash and Maya deposits and withdrawals, and provide access to the game library.
• Regulatory compliance: To comply with PAGCOR licence conditions, AMLC reporting obligations under Republic Act No. 9160, and NPC requirements under the DPA.
• Responsible gaming: To monitor gambling behaviour for signs of problem gambling, enforce self-imposed limits and exclusions, and comply with PAGCOR's responsible gaming guidelines.
• Security and fraud prevention: To detect, investigate, and prevent unauthorised account access, money laundering, bonus abuse, and other fraudulent activity.
• Customer support: To respond to inquiries, complaints, and disputes, and to maintain records of customer interactions for training and dispute resolution purposes.
• Platform improvement: To analyse aggregated usage patterns and improve platform performance, game recommendations, and user experience — using anonymised or pseudonymised data wherever possible.
• Marketing communications: To send promotional offers, bonus notifications, and product updates where you have provided explicit consent and have not subsequently opted out.

04Legal Basis for Processing

vip7 processes personal data under the following lawful bases as recognised by the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you as a registered vip7 player — including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licence conditions, AMLC anti-money laundering regulations, and NPC directives.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes including marketing communications and non-essential analytics, where you have provided freely given, specific, informed, and unambiguous consent.

05Data Sharing & Disclosure

vip7 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• PAGCOR: As required by our operating licence, vip7 provides player identity, transaction, and compliance data to PAGCOR on request and in accordance with mandated reporting schedules.
• Anti-Money Laundering Council (AMLC): Transactions that trigger reporting thresholds under Republic Act No. 9160 are reported to the AMLC as required by law.
• Payment service providers: GCash, Maya, BPI, BDO, Metrobank, and other payment processors receive only the minimum data necessary to process your specific transaction.
• Game content providers: Game studios providing titles to the vip7 platform receive anonymised or pseudonymised gameplay data for RNG certification and game performance purposes. No identity or financial data is shared with game providers.
• Technology and infrastructure providers: Cloud hosting, SMS gateway, and cybersecurity vendors who process data on our behalf under Data Processing Agreements that impose DPA-equivalent obligations.
• Law enforcement and courts: Where required by a valid court order, warrant, or other legal process under Philippine law.

06Cookies & Tracking Technologies

vip7 uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly necessary cookies: Session management, authentication state, and security tokens. These cannot be disabled without affecting core platform functionality.
• Functional cookies: Remembering your game lobby preferences, language settings, and deposit method selections between sessions.
• Performance cookies: Collecting anonymised data on page load times, error rates, and feature usage to improve platform reliability. No personal identity data is collected via performance cookies.
• Analytics cookies: Aggregated usage analytics using first-party tools. vip7 does not deploy third-party advertising cookies (e.g., Facebook Pixel, Google Ads) on the platform.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the vip7 platform.

07Data Security

vip7 implements technical and organisational security measures appropriate to the risk profile of the personal data we process. These measures include:

• TLS 1.3 encryption for all data in transit between your device and vip7 servers.
• AES-256 encryption for sensitive personal data and financial records stored at rest.
• Multi-factor authentication required for all vip7 administrative access to production systems.
• SMS OTP verification for new device logins by registered players.
• Automated suspicious activity detection systems monitoring for unusual login patterns, transaction anomalies, and potential account takeover attempts.
• Regular penetration testing conducted by independent security firms.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vip7 will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with NPC Circular No. 16-03.

08Data Retention

vip7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR licence conditions and AMLC regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Republic Act No. 9160.
• Customer support communications: Retained for three (3) years from the date of the last communication, for dispute resolution purposes.
• Marketing consent records: Retained for the duration of consent and for two (2) years following withdrawal, to demonstrate compliance with DPA consent requirements.
• Technical and usage logs: Retained for a maximum of twelve (12) months from collection date, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with NPC-prescribed disposal standards.

09Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by vip7:

• Right to be informed: To receive clear information about how your data is collected and used — which this Policy provides.
• Right of access: To obtain a copy of the personal data vip7 holds about you, and information about how it is processed.
• Right to rectification: To have inaccurate or incomplete personal data corrected. You may update most information directly in your vip7 account settings panel.
• Right to erasure: To request deletion of personal data where it is no longer necessary for the purpose for which it was collected — subject to retention requirements imposed by PAGCOR and AMLC regulations.
• Right to object: To object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to data portability: To receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: To file a complaint with the National Privacy Commission if you believe vip7 has violated your rights under the DPA.

10Children's Privacy

The vip7 platform is strictly for individuals aged 21 years and above. vip7 does not knowingly collect personal data from any person under 21 years of age. If we become aware that personal data has been submitted by an underage individual, we will delete that data immediately and close the associated account.

Parents and guardians are responsible for ensuring that minors do not access the vip7 platform on shared devices. We recommend enabling device-level parental controls on shared smartphones and tablets.

11Cross-Border Data Transfers

vip7's primary data processing infrastructure is hosted within the Philippines. Where personal data is transferred to third-party service providers located outside the Philippines — for example, international cloud infrastructure providers or game studio partners — vip7 ensures that such transfers comply with Section 21 of the DPA and applicable NPC regulations, including the use of standard contractual clauses or approved transfer mechanisms.

Data is not transferred to countries that do not provide an adequate level of data protection without appropriate safeguards in place. A list of countries to which data may be transferred is available from our DPO upon written request.

12Policy Amendments

vip7 reviews and updates this Privacy Policy periodically and whenever there are material changes to our data processing practices or applicable law. Material changes will be communicated to registered players via SMS to your registered Philippine mobile number, with a minimum of fourteen (14) days' notice before the revised Policy takes effect.

The date of the most recent revision is displayed at the top of this document. Your continued use of the vip7 platform following the effective date of a revised Policy constitutes acceptance of the revised terms. If you do not accept the changes, you must cease using the platform and may request account closure.

13Contact & Complaints

For privacy-related inquiries, rights requests, or concerns about this Policy, please contact the vip7 Data Protection Officer:

If you are not satisfied with vip7's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC's complaint procedure and contact information are available on the NPC's official website.