vvjil Privacy Policy

1 Who We Are

vvjil ("we," "us," "our," or "the Company") operates the online casino and sports betting platform accessible at vvjil.net. vvjil is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and provides real-money gaming services exclusively to eligible players within the Republic of the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173), vvjil acts as the Personal Information Controller (PIC) in respect of all personal data it collects and processes in connection with the operation of vvjil.net and related services. This means vvjil determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

All questions, requests, and concerns relating to this Privacy Policy or vvjil's data practices should be directed to our Data Protection Officer (DPO) via the contact details in Section 13 of this document.

2 Data We Collect

vvjil collects only the personal information that is necessary for the purposes described in this policy. The categories of personal data we collect are set out in the table below.

3 How We Use Your Data

vvjil processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose incompatible with the reason it was originally collected. The primary purposes for which we use your personal information are:

• Account Creation & Management: To register your vvjil account, verify your identity and age (21+ requirement per PAGCOR), and manage your ongoing account relationship with us.
• Platform Operation: To provide access to all vvjil gaming services — slots, live casino, Monster Hi-Lo, bingo, sports betting, and other products — and to process your deposits, withdrawals, and bonus claims.
• KYC & Identity Verification: To comply with PAGCOR's Know Your Customer requirements and confirm that you are eligible to use vvjil's real-money services.
• Anti-Money Laundering (AML) Compliance: To monitor transactions and gaming activity for suspicious patterns as required under the Anti-Money Laundering Act of 2001 (Republic Act 9160, as amended) and PAGCOR AML guidelines, and to report qualifying transactions to the Anti-Money Laundering Council (AMLC) where legally required.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, multi-account abuse, bonus abuse, and unauthorized access to player accounts.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and informed manner.
• Responsible Gaming: To administer self-exclusion requests, deposit limits, cooling-off periods, and other responsible gaming tools in accordance with your instructions and PAGCOR responsible gaming requirements.
• Marketing & Promotions: To send you promotional offers, bonus announcements, and platform updates — but only where you have explicitly given consent to receive such communications.
• Platform Improvement: To analyse aggregated usage data and improve the functionality, performance, and user experience of the vvjil platform.
• Legal Compliance: To fulfil any legal obligation imposed on vvjil by PAGCOR regulations, Philippine law, court orders, or lawful requests from Philippine government authorities.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, vvjil must have a valid lawful basis for each category of personal data processing it undertakes. The lawful bases vvjil relies upon are:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary for vvjil to perform the contract with you — i.e., to provide the gaming services described in the Terms & Conditions you accepted upon registration.
• Legal Obligation: Processing required for KYC, AML compliance, age verification, and regulatory reporting is carried out to fulfil vvjil's legal obligations under PAGCOR regulations and Philippine law.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is based on vvjil's legitimate interest in operating a safe, compliant, and well-functioning gaming platform — provided that such interests do not override your data rights.
• Consent: Processing your data for direct marketing purposes (email, SMS, push notifications) is based solely on your explicit, freely given consent. You may withdraw this consent at any time without any adverse effect on your account.

5 Sharing Your Data

vvjil does not sell your personal data to any third party. We share your personal information only in the specific, limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Your financial data is shared with payment service providers — including GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, 7-Eleven, and Cebuana Lhuillier — solely for the purpose of processing your deposits and withdrawal transactions.
• KYC & Identity Verification Partners: vvjil may engage accredited third-party identity verification providers to assist in validating government-issued IDs and confirming player eligibility in accordance with PAGCOR KYC requirements.
• Game Content Suppliers: Third-party game providers whose titles are available on the vvjil platform may receive session data necessary to operate the games you play (e.g., bet amounts, round results). These providers operate under strict data processing agreements with vvjil.
• Regulatory Authorities: vvjil is legally required to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where required by law or lawful order.
• IT & Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers may process certain technical data on vvjil's behalf, under binding data processing agreements that require them to maintain the same level of data protection as vvjil.
• Professional Advisers: vvjil's legal counsel, auditors, and compliance consultants may access relevant personal data on a confidential basis where necessary to provide their professional services.
• Business Transfers: In the event of a merger, acquisition, or sale of vvjil's business or assets, personal data may be transferred to the acquiring entity, subject to that entity agreeing to protect your data in a manner consistent with this Privacy Policy and the Data Privacy Act.

All third parties with whom vvjil shares personal data are contractually required to implement appropriate technical and organisational measures to protect that data, and are prohibited from using it for any purpose other than the one for which it was shared.

6 Cookies & Tracking Technologies

vvjil uses cookies and similar tracking technologies (collectively, "cookies") on vvjil.net. Cookies are small text files placed on your device when you visit a website. They help the platform function correctly, remember your preferences, and — where you have given consent — allow us to understand how players use the site so we can improve the experience.

The types of cookies vvjil uses are:

• Strictly Necessary Cookies: These cookies are essential for the vvjil platform to function. They enable you to log in securely, navigate between pages, and access your account balance and game history. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your language preference, display settings, and other personalisation choices to improve your experience on the platform.
• Analytics Cookies: With your consent, vvjil uses analytics cookies to collect anonymised data about how players navigate the platform — such as which pages are visited most frequently and which games are most popular. This helps us identify areas for improvement.
• Marketing Cookies: With your explicit consent, marketing cookies allow vvjil to present you with personalised promotional offers relevant to your gaming preferences and activity on the platform.

7 Data Retention

vvjil retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods prescribed by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

Upon expiry of the applicable retention period, vvjil will securely delete or anonymise your personal data in accordance with industry-standard data destruction procedures. Anonymised data (which can no longer be linked back to you as an individual) may be retained indefinitely for statistical and research purposes.

8 Data Security

vvjil implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:

• Encryption in Transit: All data transmitted between your device and vvjil's servers is protected by 256-bit Transport Layer Security (TLS/SSL) encryption — the same standard used by major Philippine banks.
• Encryption at Rest: Sensitive personal data stored on vvjil's servers — including government ID information and financial account details — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within vvjil is restricted on a strict need-to-know basis. Employees and contractors who handle personal data undergo regular privacy and security training and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): vvjil offers 2FA for player accounts to provide an additional layer of protection against unauthorised login attempts. Players are strongly encouraged to enable 2FA in their account security settings.
• Penetration Testing & Vulnerability Assessments: vvjil's platform undergoes regular third-party security audits and penetration tests to identify and address potential vulnerabilities before they can be exploited.
• Incident Response: vvjil maintains a formal data breach response procedure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, vvjil will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will inform affected players without undue delay.

9 Your Rights Under the Data Privacy Act

The Philippine Data Privacy Act of 2012 grants you a comprehensive set of rights in relation to your personal data held by vvjil. These rights are summarised below. To exercise any of them, contact vvjil's Data Protection Officer using the details in Section 13.

10 Children's Privacy

vvjil's platform and services are strictly intended for adults aged 21 years and above, in accordance with PAGCOR's minimum age requirement for real-money online gambling in the Philippines. vvjil does not knowingly collect personal data from individuals under the age of 21.

All accounts are subject to mandatory age verification during the KYC process. Where vvjil discovers or has reasonable grounds to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all real-money activity on the account will be reversed where possible, and any data collected in relation to that account will be deleted in accordance with our data retention procedures.

11 Cross-Border Data Transfers

Some of vvjil's third-party technology providers and game content suppliers may be located outside of the Philippines. Where personal data is transferred to entities in other countries, vvjil ensures that such transfers comply with the requirements of Section 21 of the Philippine Data Privacy Act and the implementing rules of the National Privacy Commission governing cross-border transfers.

Specifically, vvjil relies on one or more of the following safeguards for cross-border transfers:

• The recipient country has been recognised by the NPC as providing an adequate level of data protection comparable to Philippine standards.
• The transfer is governed by a binding data processing agreement containing standard contractual clauses approved by or consistent with NPC guidelines.
• The transfer is necessary for the performance of the contract between vvjil and you as a player (for example, processing a withdrawal through an international payment gateway).

vvjil does not transfer your personal data to countries or organisations that cannot guarantee an adequate level of data protection. All cross-border recipients of vvjil player data are contractually prohibited from using that data for any purpose other than the specific service they are providing to vvjil.

12 Updates to This Privacy Policy

vvjil reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, updates to Philippine data protection law, new PAGCOR regulatory requirements, or improvements to our platform. The date of the most recent revision is always displayed at the top of this page.

Where a change to this Privacy Policy is material — meaning it significantly affects how we process your personal data or materially changes your rights — vvjil will notify you by email to your registered address and/or via an in-platform notification at least 14 days before the change takes effect. Continued use of the vvjil platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

For minor, non-material updates (such as clarifications of existing language or corrections of typographical errors), vvjil may update this page without prior notice. Players are encouraged to review this Privacy Policy periodically to remain informed of how vvjil handles their personal data.

13 Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise any of your data rights under the Philippine Data Privacy Act, or have concerns about how vvjil handles your personal information, please contact vvjil's designated Data Protection Officer (DPO) using the details below:

If you are not satisfied with vvjil's response to your privacy concern or data rights request, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC):