vipj Privacy Policy

This Privacy Policy applies to all personal data processed by vipj in connection with the operation of the online gaming platform accessible at vipj.one. It covers data collected through account registration, gameplay, payment transactions, customer support interactions, and any other engagement with vipj's Services.

The data controller responsible for processing your personal data under this Policy is the legal entity holding the PAGCOR license under which vipj.one operates. References to "vipj," "we," "us," or "our" in this document refer to that entity.

This Policy applies to all persons who access or use the vipj platform, including registered players, prospective registrants who interact with the site without completing registration, and any individual who contacts vipj's customer support channels.

vipj collects personal data through several channels, including direct submission by you, automated technical collection, and from third-party verification services. The categories of data collected are as follows:

vipj does not intentionally collect sensitive personal information as defined under the Data Privacy Act (e.g., race, religion, health data, sexual orientation) except where directly volunteered by you in a support communication context and strictly necessary for resolving your query.

vipj processes your personal data for the following specific, documented purposes:

3.1 Account Management and Service Delivery

To create and maintain your vipj Account, verify your eligibility to play (including age verification), process deposits and withdrawals, deliver game services, and communicate essential account notifications such as transaction confirmations, security alerts, and policy updates.

3.2 Identity Verification and KYC Compliance

To fulfill vipj's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended), and other applicable financial crime prevention regulations. KYC processing is not optional — it is a legal requirement for licensed operators.

3.3 Payment Processing

To facilitate deposits and withdrawals via GCash, Maya, BPI, BDO, 7-Eleven, Coins.ph, and USDT. Financial data is shared with payment processors only to the minimum extent necessary to complete the specific transaction requested.

3.4 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other unlawful conduct. Technical data and gameplay patterns are analyzed for anomalies that may indicate fraudulent or prohibited behavior.

3.5 Responsible Gaming

To monitor gameplay patterns and identify indicators of problem gambling behavior. vipj uses gameplay data to proactively apply responsible gaming interventions, including outreach to players showing signs of disordered gambling, and to administer self-exclusion, deposit limit, and cooling-off period tools.

3.6 Regulatory Reporting

To fulfill mandatory reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies as required by applicable law.

3.7 Platform Improvement

To analyze aggregated and anonymized usage data for the purpose of improving the vipj platform, optimizing game performance, and enhancing the overall player experience. This analysis uses de-identified data and does not involve decisions about individual players.

3.8 Marketing Communications (Opt-In Only)

To send promotional offers, bonus notifications, and product updates to players who have explicitly opted in to marketing communications. You may withdraw your marketing consent at any time through your Account settings without affecting your ability to use vipj's Services.

Under the Data Privacy Act of 2012, vipj processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the agreement with you (your Account Terms and Conditions), including account creation, game delivery, and payment processing;
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, AML/KYC regulations, tax reporting, and National Privacy Commission requirements;
• Legitimate Interests: Processing carried out for vipj's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights and interests;
• Consent: Processing for optional purposes such as marketing communications and non-essential analytics, where you have given explicit, informed consent. Consent may be withdrawn at any time without consequence to your account or service access.

vipj does not sell your personal data. We share your data only in the following limited circumstances and only to the extent necessary for the specified purpose:

5.1 Service Providers and Data Processors

vipj engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include:

• Payment processors (GCash/GXI, Maya/Voyager Innovations, BancNet, and other payment rails) — for transaction processing only;
• KYC/identity verification providers — for document verification, liveness checks, and sanctions screening;
• Game software providers — who receive the minimum technical data necessary to deliver game sessions;
• Cloud infrastructure providers — who host vipj's servers and databases under strict data security and confidentiality obligations;
• Customer support platform providers — who process support communications on vipj's behalf.

5.2 Regulatory and Law Enforcement Disclosure

vipj will disclose personal data to PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, the Bureau of Internal Revenue, or Philippine law enforcement authorities when required to do so by law, court order, or valid regulatory directive. vipj will not notify you of such disclosures where doing so would compromise an investigation or is prohibited by law.

5.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of vipj's assets, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.

vipj retains personal data for as long as is necessary to fulfill the purposes described in this Policy, subject to the following retention principles:

• Active accounts: Personal data is retained for the duration of your Account's active status plus an additional period required by law after closure;
• KYC and identity records: Retained for a minimum of five (5) years following account closure, in accordance with AML regulations and PAGCOR licensing requirements;
• Financial transaction records: Retained for a minimum of five (5) years as required by Philippine tax and AML regulations;
• Gameplay records: Retained for a minimum of three (3) years for responsible gaming monitoring, dispute resolution, and regulatory audit purposes;
• Support communications: Retained for two (2) years following case closure, unless the content relates to an ongoing legal matter;
• Marketing preference records: Retained for the duration of your Account plus one (1) year to document consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

vipj implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, destruction, and accidental loss. These measures include:

• Encryption in transit: All data transmitted between your device and vipj's servers is encrypted using TLS 1.2 or higher;
• Encryption at rest: Sensitive data stored in vipj's databases is encrypted using AES-256 or equivalent standards;
• Access controls: Access to personal data is restricted to vipj personnel and authorized service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Penetration testing and vulnerability management: vipj's infrastructure undergoes regular security assessments and vulnerability testing by qualified security professionals;
• Incident response: vipj maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, vipj will notify you and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act.

vipj uses cookies and similar tracking technologies on vipj.one to support platform functionality and analyze usage. The types of cookies used are as follows:

8.1 Strictly Necessary Cookies

These cookies are essential for the vipj platform to function and cannot be disabled. They include session management cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and load balancing cookies. No consent is required for strictly necessary cookies.

8.2 Functional Cookies

These cookies remember your preferences and settings — such as your chosen language, display preferences, and game settings — to personalize your experience. They are activated on the basis of your consent, which you may manage through your Account settings.

8.3 Analytics Cookies

vipj uses analytics cookies to understand how players navigate the platform, which features are used most, and where technical performance can be improved. Analytics data is aggregated and used only for internal platform improvement purposes. These cookies require your consent.

You may manage your cookie preferences through the cookie consent panel accessible on the vipj platform. Disabling non-essential cookies will not affect your ability to play games or access core Account features.

If vipj discovers or has reason to believe that a registered player is under 21 years of age, the Account will be immediately suspended and all personal data associated with that Account will be reviewed for deletion, subject to any mandatory retention requirements under applicable law regarding the unauthorized access.

If you are a parent or guardian and believe that a minor has registered an Account on vipj, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by vipj. These rights may be exercised by submitting a written request to [email protected]:

vipj will respond to verifiable data subject requests within thirty (30) calendar days of receipt. Where a request requires additional time due to complexity or volume, vipj will notify you within the initial 30-day period and provide a revised response timeframe. We may need to verify your identity before processing a data request to protect against unauthorized access to your information.

vipj's primary data storage and processing infrastructure is located in the Philippines. However, certain service providers engaged by vipj — including game software providers, cloud infrastructure partners, and KYC verification services — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, vipj ensures that appropriate safeguards are in place to protect your information to a standard at least equivalent to that required by the Data Privacy Act of 2012. These safeguards include:

• Binding contractual clauses (data processing agreements) requiring overseas recipients to process data only on vipj's documented instructions and to implement equivalent security measures;
• Transfers only to jurisdictions assessed to provide an adequate level of data protection relative to Philippine standards;
• Assessment and documentation of cross-border transfer risks in accordance with NPC guidelines.

By registering an Account on vipj, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines for the purposes described in this Policy, subject to the safeguards outlined above.

The vipj platform may, from time to time, contain references to third-party services in the context of payment processing or game delivery. vipj does not operate or control the privacy practices of third-party payment providers such as GCash, Maya, BPI, or BDO.

When you interact with a third-party payment provider's interface — for example, authorizing a GCash transaction — you are subject to that provider's terms of service and privacy policy, not this vipj Privacy Policy. vipj recommends that you review the privacy policies of any third-party services you interact with in connection with your use of vipj.

vipj accepts no responsibility or liability for the data practices of third-party services.

vipj reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Material amendments will be communicated to registered players through in-platform notifications, email to the registered address, or a prominent notice on vipj.one.

The revised Policy will take effect on the date indicated in the "Effective Date" field at the top of this document. Your continued use of the vipj platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not accept the revised Policy, you should cease using the platform and may request Account closure in accordance with the Terms and Conditions.

vipj has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's registration requirements. The DPO is responsible for overseeing vipj's data protection program, monitoring compliance with the Data Privacy Act, and serving as the primary point of contact for data subject requests and NPC inquiries.

To exercise any of your data rights, raise a privacy concern, report a suspected data breach, or request information about vipj's data processing activities, please contact the vipj Data Protection Officer at:

If you are unsatisfied with vipj's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (privacy.gov.ph), which serves as the supervisory authority for data protection matters in the Philippines.