Privacy Policy

viptools ("viptools," "we," "us," or "our") operates the online gaming platform accessible at viptools.asia, including all associated subdomains, mobile applications, and related services (collectively, the "Platform"). viptools acts as the Personal Information Controller (PIC) in respect of the personal data of registered users and visitors to the Platform, as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

This Privacy Policy applies to all personal data collected by viptools in connection with your use of the Platform, whether you are a registered player, a visitor browsing the site, or a person who contacts our support team. By accessing or using the viptools Platform, you acknowledge that you have read and understood this Privacy Policy.

viptools collects the following categories of personal data, depending on how you interact with the Platform:

Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Residential address (barangay, city/municipality, province, ZIP code)
• Email address and mobile number
• Government-issued ID type and number (e.g., PhilSys ID, passport, driver's license, UMID)
• Selfie or live photo for biometric identity verification

Financial Data

• GCash or Maya account number (last four digits only; full numbers are not stored)
• Bank account details for withdrawal processing (account name, bank name, account number)
• Debit card details (card type, last four digits, expiry month/year; full card numbers are never stored by viptools)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
• Source-of-funds declarations where required by AML regulations

Gaming & Account Data

• Username and encrypted password hash
• Game session logs: games played, wagers placed, outcomes, session duration
• Bonus and promotion history
• Responsible gaming settings: deposit limits, session limits, self-exclusion status
• Customer support interaction records

Technical & Usage Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the Platform
• Referral source (how you arrived at viptools.asia)
• Cookie identifiers and session tokens (see Section 7)

viptools collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, via cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC/AML service providers; fraud-risk signals from payment processors; geolocation data from IP intelligence services.
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory authorities in connection with compliance obligations.

viptools uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile.
• Age and eligibility verification: To confirm that you meet the 21+ age requirement and are eligible to use the Platform under applicable Philippine law.
• Payment processing: To process deposits, withdrawals, and refunds via your chosen payment method.
• Game provision: To deliver gaming services, record game outcomes, and calculate winnings accurately.
• Bonus and promotions administration: To credit bonuses, track wagering requirements, and administer loyalty rewards.
• Regulatory compliance: To fulfill obligations under the DPA, AMLA, PAGCOR regulations, and other applicable Philippine laws, including KYC, AML transaction monitoring, and suspicious transaction reporting.
• Responsible gaming: To enforce deposit limits, session limits, self-exclusion orders, and other responsible gaming tools you have activated.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Customer support: To respond to your inquiries, resolve disputes, and improve our support services.
• Platform improvement: To analyze usage patterns, diagnose technical issues, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may withdraw consent at any time via your account settings.

Under the Philippine Data Privacy Act, viptools processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (the viptools Terms & Conditions), including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including KYC/AML obligations under the AMLA, age verification requirements under PAGCOR regulations, and data breach notification obligations under the DPA.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

viptools does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya, and partner banks receive the minimum data necessary to process your transactions. These processors are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC/AML service providers: Third-party identity verification and fraud-screening providers process your identity documents and biometric data solely for the purpose of verifying your eligibility to use the Platform.
• Game software providers: Game providers receive anonymized session data (player ID, wager amounts, outcomes) necessary to operate their games on the Platform. They do not receive your name, contact details, or financial data.
• Regulatory authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government authorities may receive your data where required by law, court order, or regulatory directive.
• IT and hosting providers: Cloud infrastructure and cybersecurity service providers process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Professional advisers: Lawyers, auditors, and accountants may access your data on a need-to-know basis in connection with legal proceedings, audits, or regulatory investigations, subject to professional confidentiality obligations.

viptools uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits, and display preferences. Disabling these may affect your experience.
• Analytics cookies: Collect anonymized data about how players use the Platform (pages visited, features used, session duration) to help us improve the service. These are only set with your consent.
• Marketing cookies: Track your interaction with viptools promotions to measure campaign effectiveness. These are only set with your explicit consent and can be withdrawn at any time via your account settings or browser controls.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform. For detailed information on the specific cookies used, please contact our Data Protection Officer (see Section 14).

viptools retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following minimum retention periods required by Philippine law:

• KYC and identity documents: Minimum five (5) years from account closure, as required by the AMLA and PAGCOR regulations.
• Transaction records: Minimum five (5) years from the date of each transaction, as required by the AMLA.
• Game session logs: Minimum three (3) years from the date of each session, for dispute resolution and regulatory audit purposes.
• Customer support records: Three (3) years from the date of the last interaction.
• Marketing consent records: Until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures. Data subject to an ongoing legal hold (e.g., pending litigation or regulatory investigation) will be retained until the hold is lifted.

viptools implements the following technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the viptools Platform
• AES-256 encryption for sensitive data at rest, including identity documents and financial records
• Bcrypt hashing with salt for all stored passwords; plaintext passwords are never stored
• Multi-factor authentication (MFA) available for all player accounts and mandatory for all viptools staff accounts
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular third-party penetration testing and vulnerability assessments
• 24/7 security monitoring and intrusion detection systems
• Documented incident response procedures aligned with NPC breach notification requirements

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, viptools will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with Section 20(f) of the DPA.

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by viptools:

• Right to be informed: The right to know what personal data viptools collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data viptools holds about you, including information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly in your viptools account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (see Section 8).
• Right to object: The right to object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time via your account settings.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated. The NPC can be reached at privacy.gov.ph.

To exercise any of the above rights, please contact our Data Protection Officer (see Section 14). viptools will respond to all data subject requests within thirty (30) days of receipt. Complex requests may require up to sixty (60) days, in which case we will notify you of the extension and the reason for it .

The viptools Platform is strictly intended for persons who are at least twenty-one (21) years of age. viptools does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process, and accounts found to belong to underage individuals will be immediately closed and all associated data deleted, except where retention is required by law.

If you are a parent or guardian and believe that a minor has registered on the viptools Platform using false information, please contact our Data Protection Officer immediately at the contact details provided in Section 14. viptools will investigate and take appropriate action within 48 hours of receiving such a report.

Some of the third-party service providers engaged by viptools — including cloud infrastructure providers and game software suppliers — may process your personal data outside the Philippines. Where such cross-border data transfers occur, viptools ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and NPC Circular 16-01, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law
• Transfers only to jurisdictions that the NPC has recognized as providing an adequate level of data protection
• Binding corporate rules where the recipient is a member of the same corporate group as viptools

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting our Data Protection Officer.

viptools reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes — those that significantly affect your rights or how we use your personal data — will be communicated to registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The current version of this Privacy Policy is always available at viptools.asia/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any update constitutes your acknowledgment of the revised Privacy Policy.

Where a change requires your fresh consent under the DPA (for example, a new processing purpose that is not compatible with the original purpose), viptools will seek your explicit consent before the new processing begins.