Privacy Policy — 56vipph

This Privacy Policy applies to all personal data collected, processed, stored, and shared by 56vipph in connection with the operation of the 56vipph online gaming platform accessible at 56vipph.net and all associated mobile interfaces, applications, and customer support channels.

This policy applies to all individuals who interact with 56vipph in any capacity, including registered members, visitors browsing the platform without a registered account, applicants for account registration whose applications are pending or declined, and former members whose accounts have been closed.

By registering an account with 56vipph or by continuing to use the platform after this policy has been published or updated, you acknowledge that you have read, understood, and agreed to the collection and use of your personal information as described herein. If you do not agree with any part of this Privacy Policy, you must discontinue use of the platform and, if applicable, request closure of your account.

2.1 Information You Provide Directly

When you register an account or interact with 56vipph's services, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Philippine National ID, passport number, driver's license number).
• Contact Data: Residential address (including barangay, city, province, and postal code), email address, and mobile number.
• Financial Data: GCash mobile number, Maya account reference, bank account details (BPI, BDO, UnionBank, Metrobank), cryptocurrency wallet address, and transaction history associated with your 56vipph account.
• Verification Documents: Scanned copies or photographs of government-issued ID documents, selfies for liveness verification, and proof of address documents such as utility bills or bank statements.
• Communications Data: Records of support ticket correspondence, live chat transcripts, and any written communications you direct to 56vipph via email or on-platform messaging.

2.2 Data Collected Automatically

When you access the 56vipph platform — whether via desktop browser or mobile device — our systems automatically collect certain technical and behavioral data:

• Device & Technical Data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and time zone setting.
• Usage Data: Pages visited, game sessions initiated and their duration, wagers placed, bet amounts, login and logout timestamps, navigation paths within the platform, and feature interactions.
• Geolocation Data: Approximate location derived from IP address for the purpose of jurisdiction verification. 56vipph does not collect precise GPS-level location data without explicit consent.
• Cookie & Tracking Data: Session cookies, persistent preference cookies, and analytics identifiers as described in Section 6 of this policy.

2.3 Data from Third Parties

56vipph may receive personal data about you from the following third-party sources where necessary for regulatory compliance or fraud prevention:

• Identity verification and KYC service providers who return verification status, risk scores, and document authenticity assessments.
• Payment processors who confirm transaction completion, flag chargebacks, or report suspected fraudulent payment activity.
• PAGCOR's player protection registry, which provides self-exclusion status information to prevent excluded individuals from accessing real-money gaming.
• Anti-money laundering screening services that cross-reference member details against sanctions lists and politically exposed persons (PEP) databases.

56vipph uses personal data collected from members and visitors for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

• Account Management: Creating and maintaining your 56vipph member account, authenticating your identity at login, and processing account-related requests such as password resets, account updates, and closure requests.
• Identity Verification (KYC): Verifying your identity and age as required by PAGCOR regulations and Republic Act No. 9160 (Anti-Money Laundering Act), including periodic re-verification where required by updated regulatory guidelines.
• Transaction Processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, USDT, and Coins.ph; reconciling account balances; and maintaining accurate financial records.
• Regulatory Compliance: Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC), including the submission of Covered Transaction Reports and Suspicious Transaction Reports where required.
• Responsible Gaming: Operating deposit limit tools, session time reminders, cooling-off periods, and self-exclusion programs in accordance with PAGCOR's responsible gaming framework.
• Customer Support: Responding to support enquiries, resolving account disputes, and maintaining records of all member communications for quality assurance and regulatory audit purposes.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, unauthorized access attempts, bonus abuse, and multi-accounting, as well as implementing technical security measures.
• Platform Improvement: Analyzing aggregated usage data to identify performance issues, improve game loading times, and enhance the overall user experience on the 56vipph platform.
• Promotional Communications: Sending you information about 56vipph promotions, bonuses, and platform updates where you have consented to receive marketing communications. You may withdraw this consent at any time via your account settings.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 56vipph processes your personal data on the following legal bases:

Where processing is based on legitimate interests, 56vipph has assessed that those interests do not override the fundamental rights and freedoms of data subjects, particularly where appropriate technical and organizational safeguards are in place.

56vipph does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data is disclosed to third parties only in the following circumstances:

5.1 Service Providers and Data Processors

56vipph engages third-party service providers who process personal data on our behalf and under our documented instructions. These include KYC and identity verification platforms, payment gateway operators, cloud infrastructure providers, customer support software vendors, and cybersecurity service providers. All such processors are bound by data processing agreements that require them to maintain appropriate security standards and process data only for the purposes specified by 56vipph.

5.2 Regulatory and Law Enforcement Authorities

56vipph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and any other competent government authority in the Philippines where disclosure is required by law, court order, or binding regulatory directive. Such disclosures are made in strict compliance with applicable legal procedures.

5.3 Business Continuity

In the event of a corporate restructuring, merger, acquisition, or sale of substantially all of 56vipph's assets, personal data held by 56vipph may be transferred to the acquiring or successor entity. Members will be notified of any such transfer via registered email address no less than thirty (30) calendar days before the transfer takes effect, and the acquiring entity will be required to honor the commitments set out in this Privacy Policy.

56vipph uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device by our web server when you visit the site. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, anti-CSRF tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display preferences, and lobby filter configurations. Disabling these cookies will result in a less personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how visitors use the platform — which pages are visited most, where users drop off, and how features perform. This data is used solely to improve platform performance. No individual profiling is conducted using analytics cookies.
• Session Security Cookies: Short-lived cookies used to detect and prevent suspicious login activity, including account takeover attempts from unrecognized devices or locations.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to or use the 56vipph platform. 56vipph does not use third-party advertising or behaviorally targeted marketing cookies.

56vipph retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of the member's active relationship with 56vipph, including any periods of account suspension.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from the date of account closure, as required by the Anti-Money Laundering Act and PAGCOR compliance directives.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with BIR requirements and AMLC record-keeping obligations.
• Support and Communication Records: Retained for three (3) years from the date of the communication, to support the resolution of any late-arising disputes.
• Closed Account Data (General): Personal data not subject to a longer statutory retention period is deleted or anonymized within ninety (90) days of confirmed account closure.
• Self-Excluded Member Records: Basic identifying information for self-excluded members is retained for the full duration of the exclusion period to prevent re-registration, and for a minimum of five (5) years thereafter.

Upon expiry of the applicable retention period, personal data is either securely deleted from our systems or anonymized such that it can no longer be linked to an identifiable individual.

56vipph implements a layered technical and organizational security framework designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Encryption: All data transmitted between your device and 56vipph servers is encrypted using TLS 1.3. Sensitive data stored in 56vipph databases — including identity documents and financial details — is encrypted at rest using AES-256.
• Access Controls: Access to personal data is restricted to 56vipph personnel and authorized data processors who have a legitimate operational need. Access is governed by role-based permissions, and all access events are logged for audit review.
• Two-Factor Authentication: 56vipph offers and strongly encourages two-factor authentication (2FA) for all member accounts to reduce the risk of unauthorized login.
• Penetration Testing: 56vipph engages independent cybersecurity firms to conduct periodic penetration tests and vulnerability assessments of our platform infrastructure.
• Incident Response: 56vipph maintains a documented data breach response plan. In the event of a confirmed personal data breach that is likely to affect your rights and freedoms, 56vipph will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected members without undue delay.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by 56vipph:

All data subject rights requests submitted to 56vipph will be acknowledged within three (3) business days and resolved within thirty (30) calendar days, or within the period permitted by applicable law where a request is particularly complex.

The 56vipph platform is strictly restricted to individuals who are 21 years of age or older, in accordance with Philippine gaming law and PAGCOR's age restriction requirements for online gaming platforms. 56vipph does not knowingly collect personal data from individuals under the age of 21.

If 56vipph becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, the relevant account will be immediately suspended, all real-money balances will be returned to the verified depositing payment method, and all associated personal data will be deleted from our systems within thirty (30) calendar days, except where retention is required by law for investigative purposes.

If you are a parent or guardian and believe that a minor under your care has registered an account on 56vipph, please contact our support team immediately so that the account can be investigated and closed without delay.

In certain circumstances, 56vipph may transfer personal data to third-party service providers whose processing infrastructure is located outside the Philippines. This may occur in connection with cloud hosting services, KYC verification platforms, or cybersecurity providers whose data centers are located in other jurisdictions.

Where such transfers occur, 56vipph ensures that an adequate level of data protection is maintained by implementing one or more of the following safeguards:

• Transferring data only to jurisdictions that the National Privacy Commission has recognized as providing an adequate level of data protection.
• Entering into data transfer agreements with recipient organizations that incorporate the standard contractual clauses endorsed by the NPC.
• Ensuring that recipient organizations are certified under recognized international data protection frameworks and are contractually bound to process data only as directed by 56vipph.

You may request information about the specific safeguards in place for any cross-border transfer affecting your personal data by contacting our Data Protection Officer at the details provided in Section 13 of this policy.

56vipph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, our data processing practices, or the services we offer. The "Last Updated" date at the top of this policy will be revised each time a change is made.

Material amendments — defined as changes that significantly affect how your personal data is collected, used, or shared, or that reduce the protections afforded to you under this policy — will be communicated to registered members via email to the address on file, no less than fourteen (14) calendar days before the amendment takes effect.

Non-material amendments, such as corrections of typographical errors, clarifications of existing provisions that do not alter their substance, or the addition of illustrative examples, take effect immediately upon publication without prior individual notification.

Your continued use of the 56vipph platform following the effective date of any amendment constitutes your acceptance of the amended Privacy Policy.

56vipph has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact the 56vipph DPO through the following channels:

• Email: [email protected] (Subject line: "Data Privacy Request — [Your Name]")
• Live Chat: Available 24 hours a day, 7 days a week, via the live chat widget on the 56vipph platform. Identify your query as a data privacy matter at the start of the session.
• Response Commitment: All privacy-related enquiries are acknowledged within three (3) business days and resolved within thirty (30) calendar days of receipt.

If you are dissatisfied with 56vipph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official government channels and complaint intake process.