Privacy Policy — 42vipph Data Protection

Who We Are

42vipph ("we," "us," or "our") operates the online gaming platform accessible at https://42vipph.vip (the "Platform"). For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, 42vipph acts as the Personal Information Controller in respect of the personal data of users registered on or visiting the Platform.

We are committed to protecting the privacy and security of all personal data entrusted to us by our users, in accordance with applicable Philippine data privacy laws and international best practices. This Privacy Policy applies to all personal data collected through the Platform, our customer support channels, and any other interaction you have with 42vipph.

Personal Data We Collect

Depending on how you interact with the 42vipph Platform, we may collect the following categories of personal data:

We do not collect sensitive personal information (as defined under the DPA) unless strictly required for regulatory compliance, in which case we will obtain your explicit consent and apply heightened security measures.

How We Collect Your Data

42vipph collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, PayMaya, and banking partners.
• Regulatory sources: Data received from PAGCOR, AMLC, or other Philippine government agencies in connection with our regulatory obligations.

Why We Use Your Personal Data

42vipph processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your 42vipph account, including verifying your identity and age (21+).
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the features of the Platform.
• Regulatory compliance: To fulfil our obligations under the DPA, Anti-Money Laundering Act, PAGCOR regulations, and other applicable Philippine laws — including KYC verification, transaction monitoring, and mandatory reporting.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and unauthorized account access.
• Responsible gaming: To monitor gaming behaviour, enforce responsible gaming tools (deposit limits, self-exclusion), and identify players who may need support.
• Customer support: To respond to your enquiries, resolve disputes, and improve our support services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform improvement: To analyse usage patterns, conduct research, and improve the features and performance of the 42vipph Platform.

Legal Basis for Processing

Under the Data Privacy Act of 2012, 42vipph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account and deliver the Platform's services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including KYC, AML, and PAGCOR regulatory requirements.
• Legitimate interests: Processing for fraud prevention, security, responsible gaming monitoring, and Platform improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential analytics, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

42vipph does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• KYC and identity verification providers: To verify your identity and age as required by law.
• Payment processors: GCash, PayMaya, and banking partners, to process deposits and withdrawals.
• AML and fraud screening services: To screen transactions and accounts against sanctions lists and fraud databases.
• IT and cloud service providers: To host, maintain, and secure the Platform infrastructure.
• Customer support platforms: To manage and respond to support enquiries.
• Regulatory and law enforcement authorities: PAGCOR, AMLC, the National Privacy Commission, and other Philippine government bodies, where required by law or court order.

Cookies & Tracking Technologies

The 42vipph Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your session, and analyse usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without affecting core functionality (e.g., session management, login state, security tokens).
• Functional cookies: Remember your preferences (e.g., language, display settings) to improve your experience.
• Analytics cookies: Collect anonymised data about how users interact with the Platform, helping us identify areas for improvement. This data is aggregated and does not identify you personally.
• Security cookies: Help detect and prevent fraudulent activity, unauthorized access, and bot traffic on the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the Platform. We do not use cookies to serve third-party advertising or to track your activity across unrelated websites.

Data Retention

42vipph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Where data must be retained for regulatory purposes, access is restricted to authorised compliance personnel only.

Data Security

42vipph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 42vipph Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 or equivalent standards.
• Access controls: Personal data is accessible only to authorised 42vipph personnel and third-party processors who require it to perform their functions, subject to strict role-based access controls.
• Multi-factor authentication: Administrative access to systems holding personal data requires multi-factor authentication.
• Regular security audits: We conduct periodic vulnerability assessments and penetration testing to identify and remediate security risks.
• Incident response: We maintain a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected users within the timeframes required by the DPA.

While we take all reasonable steps to protect your data, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 42vipph:

• Right to be informed: You have the right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Privacy Policy.
• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

Children's Privacy

The 42vipph Platform is strictly intended for users who are 21 years of age or older, in accordance with Philippine law governing casino-style gambling. We do not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and take any further action required by law. If you believe a minor has registered on the Platform, please contact us immediately using the details in Section 14.

Cross-Border Data Transfers

In the course of operating the 42vipph Platform, your personal data may be transferred to, stored in, or processed by systems located outside the Philippines — for example, by cloud infrastructure providers or KYC verification partners operating in other jurisdictions.

Where such transfers occur, 42vipph ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing adequate data protection.

We will not transfer your personal data to a foreign jurisdiction unless we are satisfied that adequate protections are in place and, where required, we have obtained your consent or are otherwise permitted to do so under applicable law.

Updates to This Privacy Policy

42vipph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. The date of the most recent revision is displayed at the top of this page.

Where changes are material, we will notify you via the Platform or by email to your registered address prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the 42vipph Platform following the effective date of any update constitutes your acceptance of the revised Policy.

Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 42vipph, please contact our designated Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information about the NPC and how to file a complaint is available through official Philippine government channels.