ph8vip4 Privacy Policy

1. Introduction

ph8vip4 ("we," "us," or "our") is committed to protecting the personal information of every player who registers and plays on our platform. This Privacy Policy describes how ph8vip4 collects, processes, stores, shares, and protects personal data in connection with your use of the ph8vip4 website, mobile platform, games, payment services, and customer support channels (collectively, the "Platform").

This policy applies to all registered ph8vip4 players in the Philippines and to any individual whose personal data is processed by ph8vip4 in connection with the Platform. It should be read together with the ph8vip4 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

As the personal information controller under the Data Privacy Act of 2012, ph8vip4 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register for a ph8vip4 account, make transactions, contact support, or interact with promotional features, you provide us with personal data that may include:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., PhilSys number, UMID, SSS, or passport number)
• Contact data: Registered email address, mobile number, and residential address (barangay, city/municipality, province)
• Account credentials: Username and encrypted password (passwords are hashed and never stored in plaintext)
• Payment data: GCash-registered mobile number, Maya account details, bank account name and number (BPI, BDO, Metrobank), or other payment method identifiers — we do not store full card numbers
• KYC documents: Photographs or scanned copies of government-issued IDs, selfies for liveness verification, and proof-of-address documents submitted during identity verification
• Communications: Records of your correspondence with ph8vip4 customer support, including live chat transcripts, email exchanges, and feedback submissions

2.2 Data We Collect Automatically

When you access the ph8vip4 platform, certain technical and behavioral data is collected automatically through cookies, server logs, and analytics tools:

• Device data: Device type, operating system, browser type and version, screen resolution, and unique device identifiers
• Network data: IP address, approximate geolocation derived from IP, internet service provider, and connection type
• Usage data: Pages visited, games played, session duration, bet history, deposit and withdrawal activity, bonus redemption history, and click-stream data
• Cookie data: Session cookies, authentication tokens, and platform preference cookies as described in Section 6 below

2.3 Data from Third Parties

ph8vip4 may receive personal data about you from third parties in limited circumstances, including:

• Payment processors (e.g., GCash, Maya, InstaPay) who confirm transaction status and account ownership
• Identity verification service providers used to authenticate government-issued IDs
• Fraud prevention and anti-money laundering screening services
• PAGCOR or other regulatory bodies as part of compliance reporting obligations

3. How We Use Your Personal Data

ph8vip4 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use your data and the corresponding lawful basis for each:

Purpose	Data Used	Lawful Basis
Account registration and management	Identity, contact, credential data	Contract performance
Processing deposits and withdrawals	Payment data, identity data	Contract performance
KYC and age verification (21+ compliance)	Identity data, KYC documents	Legal obligation
Anti-money laundering screening	Identity, payment, usage data	Legal obligation
Fraud detection and prevention	Device, network, usage data	Legitimate interest
Responsible gaming monitoring	Usage data, betting patterns	Legal obligation / legitimate interest
Customer support	Identity, contact, communications	Contract performance
Platform analytics and improvement	Usage data, cookie data	Legitimate interest
Promotional communications (where opted in)	Contact data, usage data	Consent
Regulatory reporting to PAGCOR	Identity, payment, usage data	Legal obligation

ph8vip4 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing another lawful basis under the Data Privacy Act of 2012.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, ph8vip4 relies on the following lawful bases for processing your personal data:

• Contract performance: Processing is necessary to register your account, deliver gaming services, process your transactions, and honour bonus commitments — all of which are part of the contractual relationship between you and ph8vip4.
• Legal obligation: ph8vip4 is required by PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act itself to collect and retain certain personal data — including KYC documents and transaction records.
• Legitimate interest: ph8vip4 processes certain data (such as device fingerprinting and usage analytics) on the basis of its legitimate interest in preventing fraud, maintaining platform security, and improving service quality — provided such interests do not override your rights and freedoms.
• Consent: Where ph8vip4 relies on your consent (for example, to send you marketing emails or push notifications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.

5. Sharing Your Personal Data

5.1 Service Providers

ph8vip4 engages trusted third-party service providers to assist in operating the Platform. These providers process personal data on ph8vip4's behalf and are contractually bound to process data only as instructed by ph8vip4, to maintain appropriate security measures, and to comply with the Data Privacy Act of 2012. Categories of service providers include:

• Payment processors and e-wallet operators (GCash, Maya, BancNet, InstaPay)
• Identity verification and KYC technology providers
• Cloud hosting and data storage providers
• Customer support platform providers
• Fraud detection and cybersecurity service providers
• Analytics and platform performance monitoring tools

5.2 Regulatory and Legal Disclosures

ph8vip4 may disclose your personal data to government authorities, regulators, or law enforcement agencies where required to do so by Philippine law, court order, or valid legal process — including but not limited to disclosures to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC).

5.3 No Sale of Personal Data

ph8vip4 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own marketing, profiling, or commercial purposes. Any sharing of data is limited to what is described in this Privacy Policy and is governed by data sharing agreements that impose binding confidentiality and security obligations on recipients.

6. Cookies and Tracking Technologies

6.1 Types of Cookies Used

ph8vip4 uses the following categories of cookies when you access the Platform:

• Strictly necessary cookies: Required for the Platform to function — including session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled.
• Functional cookies: Store your language preferences, display settings, and session continuity preferences to improve your experience on the Platform.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate the Platform to help ph8vip4 identify usability issues and improve game loading performance.
• Fraud prevention cookies: Used to detect automated bot traffic, account takeover attempts, and other anomalous access patterns that could indicate fraudulent activity.

6.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and may prevent you from logging in to your ph8vip4 account. ph8vip4 does not use third-party advertising cookies or cross-site behavioral tracking cookies.

7. Data Retention

ph8vip4 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with PAGCOR licensing requirements and anti-money laundering record-keeping obligations under RA 9160.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Retained for the duration of the account and five (5) years post-closure.
• Customer support communications: Retained for two (2) years from the date of the interaction unless a longer period is required for dispute resolution.
• Marketing preferences and consent records: Retained for three (3) years from the date consent was recorded or withdrawn.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with ph8vip4's data disposal procedures.

8. Data Security

ph8vip4 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Security measures include:

• Encryption in transit: All data exchanged between your browser or app and ph8vip4 servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data fields (including payment identifiers and identity document references) are encrypted at the database level using AES-256 encryption.
• Password hashing: Account passwords are hashed using a strong one-way hashing algorithm with per-user salting — ph8vip4 staff cannot read your password.
• Access controls: Internal access to personal data is restricted to authorised staff on a need-to-know basis, enforced through role-based access control systems.
• Intrusion detection: ph8vip4 employs automated intrusion detection and prevention systems that monitor for anomalous access patterns in real time.
• Security audits: ph8vip4 conducts periodic security assessments and vulnerability testing of its Platform infrastructure.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph8vip4:

• Right to be informed: You have the right to be told how your personal data is being collected and processed — which is the primary purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data ph8vip4 holds about you, including the categories of data, the purposes of processing, and any third parties with whom data has been shared.
• Right to rectification: If any personal data ph8vip4 holds about you is inaccurate or incomplete, you may request that it be corrected. For account details such as your registered email or mobile number, you can update these directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to ph8vip4's legal obligations to retain certain data under PAGCOR and AML regulations.
• Right to object: You may object to processing based on legitimate interest — including direct marketing communications — at any time. Marketing opt-outs can be managed through your account notification preferences.
• Right to data portability: Where technically feasible, you may request that ph8vip4 provide your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe ph8vip4 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, contact ph8vip4 support via the live chat function on the Platform or by email at [email protected]. ph8vip4 will respond to verified data subject requests within the timeframes required by the NPC — typically within 15 business days of receiving a verifiable request.

10. Children and Minors

The ph8vip4 platform is strictly intended for individuals who are 21 years of age or older, in compliance with Philippine gaming regulations. ph8vip4 does not knowingly collect personal data from individuals under 21. If ph8vip4 discovers that personal data has been collected from a person under the age of 21, the account will be immediately suspended, the data will be securely deleted to the extent permitted by law, and the matter will be handled in accordance with PAGCOR requirements.

If you are a parent or guardian and believe that your child has provided personal information to ph8vip4, please contact support immediately so the matter can be investigated and resolved without delay.

11. Updates to This Privacy Policy

ph8vip4 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable Philippine law and NPC guidelines. The effective date of the current version is shown at the top of this page.

When material changes are made to this Privacy Policy, ph8vip4 will notify registered players by email and/or by posting a prominent notice on the Platform prior to the changes taking effect. Your continued use of the ph8vip4 platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how ph8vip4 is protecting your personal information.

12. Contact and Data Privacy Inquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ph8vip4 holds about you, you may contact our Data Protection Officer (DPO) through the following channels:

• Live chat: Available 24/7 on the ph8vip4 Platform
• Email: [email protected] — please use the subject line "Data Privacy Request"

ph8vip4 is committed to resolving all privacy inquiries fairly and promptly. If you are not satisfied with ph8vip4's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.

For additional information about your rights under the Data Privacy Act of 2012, you may visit the official NPC website or contact the NPC directly through their published channels.