25vipph Privacy Policy

1 Who We Are

25vipph ("we", "us", "the Platform", "the Operator") operates the online gaming platform accessible at https://25vipph.net. 25vipph is regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and serves registered players located in the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), 25vipph acts as the Personal Information Controller in respect of the personal data collected from registered players and site visitors. This means 25vipph determines the purposes and means by which your personal data is processed.

Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. You may contact the DPO directly via our support team if you have any privacy-related concerns specific to your 25vipph account.

2 Personal Data We Collect

25vipph collects only the personal data that is necessary for the purposes described in this policy. The categories of personal data we collect from Filipino players include:

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming intervention or legally required by PAGCOR.

3 How We Collect Your Data

25vipph collects personal data through the following channels:

• Direct submission: Information you provide when registering your 25vipph account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions;
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the 25vipph website or mobile interface;
• Third-party sources: Identity verification data from licensed KYC/AML service providers; payment transaction data from payment processors such as GCash, Maya, BPI, BDO, and Metrobank; fraud prevention data from licensed third-party risk management services;
• Regulatory sources: Information shared by PAGCOR or other Philippine regulatory bodies in connection with licensing compliance, player protection programmes, or law enforcement requests.

4 Why We Use Your Personal Data

25vipph uses the personal data it collects for the following defined purposes:

• Account creation and management: To register your player account, verify your identity, and maintain your account in good standing on the 25vipph platform;
• Transaction processing: To process deposits and withdrawals in Philippine Peso via your chosen payment method (GCash, Maya, BPI, BDO, Metrobank, and others), and to maintain accurate financial records;
• Legal and regulatory compliance: To fulfil our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine laws;
• Know Your Customer (KYC) and Anti-Money Laundering (AML): To verify the identity of players, detect suspicious transactions, and file Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where legally required;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other security threats to the 25vipph platform;
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance via our 24/7 support team;
• Responsible gaming: To monitor player behaviour for signs of problem gambling, administer self-exclusion requests, and comply with PAGCOR player protection requirements;
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the features and performance of the 25vipph platform;
• Marketing communications: To send you relevant promotions, bonus offers, and platform updates — but only where you have given your consent or where we have a legitimate interest to do so, and always with a clear option to opt out.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and related implementing rules, 25vipph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the player agreement between you and 25vipph — including account registration, transaction processing, and customer support;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML obligations, tax reporting requirements, and other Philippine legal mandates. 25vipph cannot opt out of these processing activities;
• Legitimate interests: Processing conducted in the legitimate interests of 25vipph or third parties — such as fraud prevention, platform security, and analytics — where those interests are not overridden by your rights;
• Consent: Processing for purposes such as direct marketing communications, where 25vipph is required to obtain your explicit consent. You may withdraw your consent at any time by contacting our support team or updating your communication preferences within your account settings.

6 Data Sharing and Disclosure

25vipph does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Visa, Mastercard, and other payment service providers involved in processing your deposits and withdrawals. These providers handle financial data under their own privacy policies and applicable Philippine banking regulations;
• KYC and AML service providers: Licensed third-party identity verification and anti-money laundering screening providers engaged by 25vipph to fulfil regulatory requirements;
• Game content providers: Licensed game studios and live casino providers whose games are offered on the 25vipph platform. These providers may receive anonymised or pseudonymised gameplay data for technical and fairness auditing purposes;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies — where disclosure is required by law or by a valid regulatory order;
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by 25vipph under strict confidentiality obligations;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection providers operating the technical infrastructure that supports the 25vipph platform.

Any third party that receives personal data from 25vipph is contractually required to process it only for the specified purpose, to maintain appropriate security standards, and to comply with the Philippine Data Privacy Act of 2012.

7 Cookies and Tracking Technologies

The 25vipph website uses cookies and similar tracking technologies to provide you with a functional and personalised experience. A cookie is a small data file stored on your device when you visit a website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the 25vipph platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing your ability to use the platform;
• Functional cookies: Used to remember your preferences — such as your language setting, preferred game category, and session display options — so that you do not need to re-enter them each time you visit 25vipph;
• Analytics cookies: Used to collect aggregated, anonymised data about how Filipino players navigate and interact with the 25vipph website, enabling us to improve platform performance and user experience;
• Marketing cookies: Used to deliver relevant promotional content about 25vipph where you have consented to receive marketing communications. These cookies may track your visits to 25vipph over time.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookie categories may affect the functionality of the 25vipph platform. A more detailed cookie preference panel is available within your account settings once you are logged in.

8 Data Security

25vipph implements a layered security architecture to protect the personal data of Filipino players against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: All data exchanged between your device and the 25vipph servers is encrypted using TLS (Transport Layer Security) protocols, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit;
• Encryption at rest: Sensitive personal data stored in 25vipph databases is encrypted using industry-standard algorithms to protect against unauthorised access in the event of a system breach;
• Access controls: Access to player data within 25vipph's internal systems is restricted on a role-based, need-to-know basis. All staff with data access undergo background checks and regular privacy training;
• Two-factor authentication: 25vipph supports two-factor authentication (2FA) for all player accounts. We strongly encourage all Filipino players to enable 2FA to add an additional layer of protection to their 25vipph account;
• Regular security audits: 25vipph's infrastructure and applications undergo periodic penetration testing and security audits conducted by independent cybersecurity specialists;
• Incident response: In the event of a personal data breach that is likely to adversely affect Filipino players, 25vipph will notify the National Privacy Commission (NPC) within 72 hours of discovery, as required by the Data Privacy Act of 2012, and will inform affected players without undue delay.

9 Data Retention

25vipph retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Active account data: Retained for the duration of your active registration on 25vipph, plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and related PAGCOR directives;
• KYC and identity documents: Retained for five (5) years following account closure, or longer if required by an ongoing regulatory investigation or legal proceeding;
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication is relevant to an ongoing dispute or investigation;
• Marketing consent records: Retained for the duration of your consent, plus two (2) years following withdrawal of consent as evidence of your prior authorisation.

Upon expiry of the applicable retention period, 25vipph will securely delete, destroy, or anonymise your personal data so that it can no longer be attributed to you as an individual.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to the personal data that 25vipph holds about you:

• Right to be informed: The right to be notified of how your personal data is being processed — which is the purpose of this Privacy Policy;
• Right of access: The right to obtain confirmation of whether 25vipph holds personal data about you and to receive a copy of that data in a structured, commonly used format;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update most of your account information directly through your 25vipph profile settings;
• Right to erasure: The right to request deletion of your personal data, subject to our legal obligations to retain certain data under PAGCOR regulations and Philippine law;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may exercise this right at any time by updating your communication preferences in your account settings;
• Right to data portability: The right to receive your personal data in a machine-readable format and to transmit that data to another controller where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 25vipph has not handled your personal data in accordance with the Data Privacy Act of 2012.

To exercise any of the above rights, please contact the 25vipph support team via live chat. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days, subject to identity verification and any applicable legal limitations.

11 Children and Minors

The 25vipph platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations and Philippine gaming law. 25vipph does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that a minor has registered on 25vipph or provided us with their personal data without your consent, please contact our support team immediately. 25vipph will take prompt action to verify the situation, close the minor's account, and delete any associated personal data in accordance with our data minimisation obligations.

12 Updates to This Privacy Policy

25vipph may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where we make material changes to this Privacy Policy — that is, changes that significantly affect your rights or the way we process your personal data — we will notify registered Filipino players via email or through a prominent notice displayed upon login to the 25vipph platform.

Your continued use of 25vipph following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. We recommend that you review this Privacy Policy at least once every six months to stay informed of how 25vipph protects your data.

13 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 25vipph handles your personal data, please reach out to us through the following channel:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the 25vipph platform. Our support agents are fluent in English and familiar with the Philippine gaming and data privacy context;
• Email (plain text — not a link): [email protected]

For formal data subject rights requests (access, rectification, erasure, portability), please clearly state the nature of your request and provide sufficient information to verify your identity. We will not be able to act on rights requests where we cannot confirm the requestor's identity.

If you are not satisfied with 25vipph's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC), the independent authority responsible for enforcing the Data Privacy Act of 2012. Details of how to file a complaint with the NPC are available on the NPC's official government website.