phpvlp Privacy Policy

1. Introduction

phpvlp ("we," "us," "our") operates the online gaming platform available at https://phpvlp.net and is committed to protecting the privacy and personal data of all registered players and website visitors ("you," "your"). This Privacy Policy has been prepared in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal information collected, processed, stored, and shared by phpvlp in connection with your use of our Platform, including our website, mobile-browser gaming interface, customer support channels, and any promotional communications you receive from us.

As a PAGCOR-licensed online gaming operator serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and the rest of the Philippines, phpvlp is also subject to PAGCOR's data governance requirements. Where PAGCOR rules impose obligations beyond those under the DPA, we comply with the stricter standard.

2. Personal Data We Collect

phpvlp collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on a government-issued ID)
• Date of birth (used to verify the 21+ age requirement under PAGCOR rules)
• Gender
• Nationality and country of residence
• Residential address, including barangay, city, and province for Philippine players
• Email address and mobile phone number
• Username and encrypted account password

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (Philippine passport, driver's licence, UMID, SSS ID, PhilSys National ID, PRC ID, or equivalent)
• Proof of address documents (utility bills, bank statements, barangay clearance)
• Source of funds documentation where required by our AML compliance team
• Selfie or liveness verification images submitted during KYC

2.3 Financial & Transaction Data

• GCash or PayMaya mobile wallet identifiers (account name and registered number)
• BPI, BDO, or Metrobank account details used for bank transfers
• Visa/Mastercard card details (card number is never stored in full; only the last four digits and card type are retained post-transaction)
• Deposit and withdrawal history, including amounts in Philippine Peso (₱)
• Gaming transaction history (bets placed, games played, winnings, bonus usage)

2.4 Technical & Usage Data

• IP address and approximate geolocation (used for regulatory compliance and fraud detection)
• Device type, operating system, and browser version
• Session logs, including login timestamps, session duration, and pages visited
• Clickstream data and in-platform navigation patterns

2.5 Communications Data

• Records of live chat conversations with phpvlp customer support
• Email correspondence related to your account
• Responsible gaming self-assessments and self-exclusion requests
• Feedback, complaint, and dispute records

3. How We Collect Your Data

phpvlp collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or opt in to marketing communications.
• Automatically: When you access and use the Platform, our servers and analytics tools automatically collect technical and usage data including IP address, device identifiers, session logs, and cookie data.
• From payment processors: When you initiate a GCash, PayMaya, BPI, BDO, Metrobank, or card transaction, our payment processing partners share transaction status information and, where required, payer identity data with phpvlp to complete the transaction and meet AML obligations.
• From regulatory and fraud prevention services: phpvlp may receive data about you from third-party identity verification, fraud detection, and sanctions screening services engaged to meet PAGCOR compliance requirements.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, phpvlp processes your personal data on the following legal bases:

5. How We Use Your Personal Data

phpvlp uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your phpvlp account, authenticating your identity on login, and managing your account settings and preferences.
• Regulatory compliance: Fulfilling our obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (AMLA) as amended, and the Data Privacy Act of 2012. This includes submitting mandatory reports and retaining records for prescribed periods.
• KYC and age verification: Verifying that all players are aged 21 or above and are legally eligible to use the Platform under Philippine law.
• Payment processing: Processing your deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and card networks in Philippine Peso (₱).
• Responsible gaming: Monitoring gaming behaviour to identify signs of problem gambling, administering self-exclusion and limit-setting tools, and fulfilling our duty of care obligations.
• Customer support: Responding to your enquiries, complaints, and dispute submissions promptly and accurately.
• Platform security and fraud prevention: Detecting and preventing fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct.
• Marketing (with consent): Sending you promotional offers, bonus notifications, and product updates where you have opted in to receive such communications.
• Platform improvement: Analysing aggregated usage data to enhance the performance, features, and user experience of the phpvlp Platform.

phpvlp will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing an alternative lawful basis.

6. Data Sharing & Disclosure

phpvlp does not sell, rent, or trade your personal data. We share your personal data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, acquiring banks), KYC and identity verification platforms, cloud infrastructure providers, fraud detection services, and customer support software. These providers are contractually bound to process your data only on our instructions and to maintain security standards equivalent to those required by the DPA.

6.2 Regulatory & Law Enforcement Authorities

phpvlp is required to share certain player data with PAGCOR as part of our operating licence conditions. We may also be required to disclose personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory and law enforcement authorities pursuant to a valid legal request, court order, or statutory obligation. phpvlp will not disclose more data than is required in response to any such request.

6.3 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of phpvlp's assets, your personal data may be transferred to the acquiring entity as part of the transaction, provided that the acquiring entity agrees to be bound by privacy obligations consistent with this Privacy Policy.

6.4 Protection of Rights

We may disclose personal data where we reasonably believe disclosure is necessary to protect the rights, property, or safety of phpvlp, our players, or the public — for example, in connection with suspected fraud, cheating, or criminal conduct on the Platform.

7. Cookies & Tracking Technologies

phpvlp uses cookies and similar tracking technologies on our Platform. A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly. They enable session management, authentication, and security features. These cookies cannot be disabled without impairing the functionality of the Platform.
• Analytics Cookies: Used to collect aggregated information about how players use the Platform — such as which pages are visited most frequently and how long sessions last. This data is used to improve Platform performance and user experience. Analytics data is anonymised wherever possible.
• Fraud Prevention Cookies: Used to detect abnormal or suspicious usage patterns that may indicate fraud, bot activity, or the use of multiple accounts in violation of our Terms & Conditions.
• Preference Cookies: Used to remember your Platform settings, such as language preference and responsible gaming settings you have configured.

phpvlp does not use third-party advertising or retargeting cookies. You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use the Platform.

8. Data Retention

phpvlp retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes.

9. Data Security

phpvlp implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3. Personal and financial data stored in our databases is encrypted at rest using AES-256.
• Access Controls: Access to personal data is restricted to phpvlp personnel who need it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations and receive regular data privacy training.
• Infrastructure Security: Our Platform is hosted on ISO 27001-certified cloud infrastructure. We conduct regular vulnerability assessments and penetration testing.
• Payment Security: All payment transactions are processed through PCI-DSS compliant payment gateways. phpvlp never stores full card numbers on its own servers.
• Incident Response: phpvlp maintains a documented data breach response procedure. In the event of a personal data breach, we will notify the NPC within 72 hours and affected players within a reasonable timeframe as required by law.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by phpvlp:

To exercise any of the above rights, please contact our Data Protection Officer at the details provided in Section 14. We will respond to all verified data subject requests within 30 calendar days. Complex requests may require up to an additional 30 days, in which case we will notify you of the extension.

Please note that certain rights may be subject to limitations where processing is required to fulfil our legal obligations under PAGCOR regulations or the AMLA — for example, we cannot erase transaction records that are required to be retained for anti-money laundering compliance purposes.

11. Children's Privacy & Age Restriction

The phpvlp Platform is strictly restricted to individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. phpvlp does not knowingly collect personal data from any person below the age of 21.

As part of our registration and KYC process, all players are required to verify their age by submitting a valid government-issued identification document. Any account found to belong to a person under the age of 21 will be immediately suspended and all associated balances forfeited or returned in accordance with applicable law.

12. International Data Transfers

phpvlp primarily processes and stores personal data within the Philippines. In some cases, personal data may be processed or accessed by our service providers from locations outside the Philippines — for example, where we use cloud services or fraud detection tools hosted in other jurisdictions.

Where personal data is transferred outside the Philippines, phpvlp ensures that adequate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012. These safeguards may include contractual data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission, or reliance on the recipient country's adequacy status under NPC guidelines.

phpvlp does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without the explicit consent of the data subject or an applicable legal justification under the DPA.

13. Changes to This Privacy Policy

php vlp reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on this page with a revised effective date;
• Display a prominent notice on the Platform informing logged-in players of the update; and
• Where required by law or the significance of the change warrants it, notify you directly via email to the address registered on your phpvlp account.

Your continued use of the phpvlp Platform following the posting of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Privacy Policy, you should cease using the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how phpvlp protects your personal data.

14. Contact Us & Data Protection Officer

phpvlp has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular No. 17-01. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our DPO through the following channels:

We aim to respond to all privacy-related enquiries within 5 business days and to resolve data subject access requests within 30 calendar days from the date of receipt of a complete and verified request.

If you believe that your data privacy rights have been violated and are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC can be found on the NPC's official website.