nvip Privacy Policy
At nvip, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains what personal data we collect from you as a registered Player or site visitor, how we use and protect that data, who we may share it with, and what rights you have under Philippine data protection law. We encourage every nvip member to read this document in full.
How nvip Protects Your Data
These cards summarise the six key pillars of the nvip privacy framework. Full details for each are set out in the legal sections below.
What We Collect
nvip collects only the personal data necessary to operate a safe, compliant gaming platform — including your name, date of birth, contact details, payment method identifiers, and gameplay activity records. We do not collect unnecessary or excessive data.
Why We Use It
Your data is used to verify your identity, process deposits and withdrawals, deliver personalised gaming experiences, comply with PAGCOR and anti-money laundering regulations, and ensure responsible gaming safeguards are in place for every account.
Who We Share With
nvip shares your data only with regulated payment processors (GCash, Maya, BPI, BDO, Metrobank), KYC and identity verification providers, and regulatory authorities where required by Philippine law. We never sell your data to advertisers or data brokers.
How We Secure It
All data transmitted to and from the nvip platform is encrypted using TLS 1.2 or higher. Sensitive data stored on our servers is encrypted at rest. Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
How Long We Keep It
nvip retains personal data for the minimum period required to fulfil the purpose for which it was collected, and in any case for no longer than required by applicable Philippine law, including anti-money laundering record-keeping obligations.
Your Rights
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, erase, and port your personal data held by nvip. You may exercise these rights at any time by contacting our Data Protection Officer through the support channels on this page.
Your Rights Under Philippine Privacy Law
The Philippine Data Privacy Act of 2012 (Republic Act No. 10173) grants every data subject a clear set of enforceable rights over their personal information. nvip is committed to honouring all of these rights in full and in a timely manner. Here is a summary of what you can ask us to do at any time.
Right to Access
Request a copy of all personal data nvip holds about you, including the purposes for which it is processed.
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data associated with your nvip account.
Right to Erasure
Request deletion of your personal data where there is no longer a lawful basis for nvip to retain it.
Right to Portability
Receive your personal data in a structured, commonly used format so you can transfer it to another service.
Right to Object
Object to processing of your data for direct marketing or where processing is based on nvip's legitimate interests.
Right to Damages
Seek indemnity for any damages sustained due to inaccurate, incomplete, outdated, or unlawful use of your data.
- 1.Introduction & Scope
- 2.Data Controller Details
- 3.Data We Collect
- 4.How We Collect Data
- 5.Legal Basis for Processing
- 6.How We Use Your Data
- 7.Sharing Your Data
- 8.International Transfers
- 9.Data Retention
- 10.Cookies & Tracking
- 11.Security Measures
- 12.Children & Minors
- 13.Your Rights
- 14.Marketing Communications
- 15.Third-Party Links
- 16.Policy Amendments
- 17.Contact & DPO
Introduction & Scope
This Privacy Policy ("Policy") is issued by nvip ("nvip", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User", "data subject") who access, register on, or interact with the nvip online gaming platform available at nvip.app and all associated mobile interfaces, applications, and sub-domains (collectively, the "Platform").
nvip is committed to protecting the privacy and security of your personal data in accordance with Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission of the Philippines ("NPC"). This Policy explains what personal data we collect, for what purposes, on what legal basis, for how long, and with whom we may share it.
This Policy applies to all nvip Players located in the Philippines, as well as to visitors who browse the Platform without registering. By accessing or using the Platform, you acknowledge that you have read and understood this Policy. Please read it carefully before submitting any personal data to us.
This Policy should be read together with the nvip Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of a conflict between this Policy and any other nvip document regarding data privacy matters, this Policy shall prevail.
Data Controller Details
For the purposes of the Philippine Data Privacy Act of 2012, nvip acts as the personal information controller ("PIC") in respect of all personal data collected through the Platform. As PIC, nvip determines the purposes for which and the means by which your personal data is processed.
nvip has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection law. The DPO can be contacted at any time using the details set out in Section 17 of this Policy.
Data Controller: nvip | Platform: nvip.app | Contact: [email protected] | DPO enquiries are acknowledged within two (2) business days and substantively responded to within fifteen (15) calendar days in line with NPC guidelines.
Data We Collect
nvip collects the following categories of personal data, limited to what is strictly necessary for the purposes described in Section 6 of this Policy:
3.1 Identity Data
Full legal name, date of birth, gender, nationality, and government-issued identification details (such as PhilSys ID number, passport number, driver's licence number, or UMID number). This data is collected during registration and KYC verification.
3.2 Contact Data
Philippine mobile number, email address, and residential address. This data is used for account communications, security alerts, and support correspondence.
3.3 Financial Data
Payment method identifiers (e.g., GCash mobile number, Maya account reference, bank account details for BPI, BDO, or Metrobank), deposit and withdrawal transaction records, and account balance history. nvip does not store full payment card numbers. All financial data is processed in Philippine Peso (PHP).
3.4 Technical Data
IP address, device type, operating system, browser type and version, screen resolution, session timestamps, and pages visited on the Platform. This data is collected automatically when you access the Platform.
3.5 Gameplay Data
Game session histories, wagers placed, winnings received, bonus usage records, and responsible gaming tool activations (deposit limits, session reminders, cooling-off periods, self-exclusion records). This data is retained as required by PAGCOR and applicable regulations.
3.6 Communications Data
Records of correspondence between you and the nvip support team, including live chat transcripts, emails, and any documentation submitted in connection with a complaint or KYC review.
What We Do Not Collect: nvip does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (other than selfie images used solely for identity verification), or health information, unless you voluntarily provide health-related information in the context of a responsible gaming assessment.
How We Collect Your Data
nvip collects personal data through the following means:
- Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
- Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the Platform. See Section 10 for full details on our cookie practices.
- Third-party sources: Identity and address verification data obtained from accredited KYC service providers, fraud prevention databases, and payment processors during the account verification process.
- Regulatory sources: Self-exclusion status and related information shared with nvip by PAGCOR or other regulatory bodies as part of their player protection frameworks.
Legal Basis for Processing
nvip processes your personal data on one or more of the following lawful bases as recognised under the Philippine Data Privacy Act of 2012:
| Legal Basis | Processing Activity |
|---|---|
| Performance of a contract | Processing necessary to create and manage your nvip account, process deposits and withdrawals, and provide access to the Platform's games and services. |
| Legal obligation | KYC identity verification, anti-money laundering record-keeping, age verification (21+), and compliance with PAGCOR regulatory requirements and NPC data protection obligations. |
| Legitimate interests | Fraud prevention, security monitoring, improving Platform performance, and responsible gaming monitoring where this does not override your fundamental rights. |
| Consent | Sending you promotional communications and personalised bonus offers where you have expressly opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing. |
How We Use Your Data
nvip uses your personal data for the following specific purposes:
- Account creation and management: To register your account, verify your identity and age (21+), and maintain your account in good standing.
- Transaction processing: To process deposits via GCash, Maya, QR Ph, GrabPay, InstaPay, BPI, BDO, and Metrobank, and to process withdrawal requests to your verified payment method.
- Platform delivery: To provide access to nvip's full range of games including slots, bingo, live casino, and Fortune Bingo, and to personalise your experience on the Platform.
- Regulatory compliance: To fulfil nvip's obligations under PAGCOR regulations, Philippine anti-money laundering laws, and the Data Privacy Act of 2012.
- Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, enforce deposit limits and self-exclusion decisions, and provide responsible gaming support resources.
- Security and fraud prevention: To detect and prevent fraudulent transactions, multiple account registrations, and other forms of platform abuse.
- Customer support: To respond to your enquiries, manage complaints, and provide 24/7 assistance through our live chat and email support channels.
- Marketing communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have provided consent and subject to your opt-out rights.
- Platform improvement: To analyse usage patterns, identify technical issues, and improve the overall performance and user experience of the Platform.
nvip will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing notice and, where required, obtaining your consent.
Sharing Your Data
nvip does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements or legal obligations:
7.1 Payment Processors
GCash, Maya, QR Ph, GrabPay, InstaPay, BPI, BDO, and Metrobank receive the minimum personal and financial data necessary to process your deposit and withdrawal transactions. These processors are subject to their own privacy policies and applicable Philippine financial regulations.
7.2 KYC and Identity Verification Providers
nvip engages accredited third-party KYC providers to perform identity verification and document authentication services. These providers act as personal information processors ("PIPs") under written agreements that require them to process your data only on nvip's instructions and to maintain appropriate security standards.
7.3 Regulatory and Law Enforcement Authorities
nvip is required to share certain data with PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, and other competent Philippine authorities where required by law, court order, or regulatory directive. In such cases, disclosure is mandatory and does not require your consent.
7.4 Technology and Infrastructure Providers
nvip uses cloud hosting, content delivery, and platform infrastructure providers who may process your data as part of providing their services. All such providers are contractually bound to process data only as directed by nvip and to maintain security standards consistent with industry best practices.
All third parties with whom nvip shares personal data are required to handle that data in accordance with applicable Philippine data protection law and nvip's data processing standards. nvip remains responsible for ensuring that third-party processing is lawful and proportionate.
International Data Transfers
The nvip Platform is primarily designed to serve Filipino players and is operated with data infrastructure located within or accessible from the Philippines. In certain cases, your personal data may be transferred to, stored, or processed by service providers located outside the Philippines — for example, in connection with cloud hosting or technology infrastructure services.
Where such transfers occur, nvip ensures that adequate safeguards are in place in accordance with the requirements of the Philippine Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers. These safeguards may include contractual clauses, adherence to recognised data protection frameworks, or transfers to jurisdictions that the NPC has determined provide adequate protection.
By using the nvip Platform, you consent to the transfer of your personal data outside the Philippines where such transfer is necessary for the performance of your contract with nvip or for the purposes described in this Policy, subject always to the safeguards described above.
Data Retention
nvip retains your personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal retention requirements. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Identity & KYC documents | Five (5) years from account closure, in line with AMLC record-keeping requirements. |
| Financial transaction records | Five (5) years from the date of each transaction, as required by Philippine anti-money laundering regulations. |
| Gameplay records | Three (3) years from the date of each game session, or longer if required by PAGCOR regulations. |
| Support correspondence | Three (3) years from the date of correspondence closure, to support dispute resolution. |
| Self-exclusion records | Retained indefinitely (or for the duration of the exclusion period plus five years) to prevent circumvention of exclusion obligations. |
| Technical / log data | Up to twelve (12) months, after which data is anonymised or deleted. |
| Marketing consent records | Until consent is withdrawn, plus three (3) years as evidence of lawful processing. |
Upon expiry of the applicable retention period, nvip will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an identifiable individual.
Cookies & Tracking Technologies
nvip uses cookies and similar tracking technologies to operate the Platform, improve your user experience, and analyse site usage. The following categories of cookies are used:
- Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your login session and securing your account. These cookies cannot be disabled without affecting Platform functionality.
- Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations to provide a more personalised experience.
- Analytics cookies: Collect anonymised data about how visitors interact with the Platform, which pages are visited most, and where technical errors occur. This data helps nvip improve the Platform over time.
- Security cookies: Used to detect and prevent fraudulent activity, including multiple account registrations and automated bot access.
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. nvip does not use cookies for cross-site advertising or behavioural profiling outside of the Platform.
Security Measures
nvip implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, without limitation:
- Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your device and the nvip Platform.
- Encryption of sensitive personal and financial data stored on nvip's servers.
- Role-based access controls limiting access to personal data to authorised personnel on a strict need-to-know basis.
- Two-factor authentication options for Player accounts and mandatory for internal staff accessing data systems.
- Regular penetration testing, security audits, and vulnerability assessments conducted by independent security specialists.
- An incident response plan that includes procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.
Data Breach Notification: In the event of a personal data breach that poses a real risk of serious harm to affected individuals, nvip will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will notify affected Players without undue delay, in accordance with the requirements of the Philippine Data Privacy Act of 2012.
Children & Minors
The nvip Platform is strictly for persons aged 21 years and above. nvip does not knowingly collect, use, or retain personal data from individuals under the age of 21. The minimum age restriction applicable to online casino-style gaming in the Philippines is strictly enforced through nvip's KYC and age verification processes.
If nvip becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, the data will be securely deleted to the extent permitted by law, and any deposits made will be returned net of any withdrawals already processed. Any winnings accrued prior to satisfactory age verification will be forfeited.
If you believe that a minor has registered on the nvip Platform, please notify us immediately via the contact details in Section 17 of this Policy.
21+ Strictly Enforced: nvip requires government-issued ID verification for all accounts. Registration attempts by persons under 21 will be rejected and reported to the appropriate authorities where required by law.
Your Rights
As a data subject under the Philippine Data Privacy Act of 2012, you are entitled to exercise the following rights in respect of your personal data held by nvip. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 17. nvip will respond to all verified requests within fifteen (15) calendar days.
- Right to be informed: You have the right to be informed whether nvip holds any personal data about you and, if so, to receive a description of that data and the purposes for which it is processed.
- Right of access: You may request a copy of the personal data nvip holds about you, together with information about how it is used and with whom it is shared. nvip will provide this information free of charge for one (1) request per twelve-month period.
- Right to rectification: You may request that nvip correct any inaccurate, incomplete, outdated, false, or unlawfully obtained personal data relating to your account. Certain corrections may require supporting documentation.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the legal basis), or where processing is unlawful. This right is subject to nvip's legal retention obligations.
- Right to data portability: You may request that nvip provide your personal data in a structured, commonly used, and machine-readable format so that you may transfer it to another service provider.
- Right to object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of nvip's legitimate interests where your rights and freedoms override those interests.
- Right to lodge a complaint: If you are not satisfied with how nvip has handled your personal data, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph (plain text — not a clickable link on this page).
Marketing Communications
nvip may send you promotional communications about bonuses, new game releases, special events, and Platform updates, but only where you have provided explicit consent to receive such communications during the registration process or at any subsequent point.
You may withdraw your consent to receive marketing communications at any time by:
- Clicking the "unsubscribe" link included in any marketing email sent by nvip;
- Updating your communication preferences in your nvip account settings; or
- Contacting our support team at [email protected] and requesting removal from our marketing list.
Please note that withdrawing your marketing consent does not affect nvip's right to send you service communications that are strictly necessary for the operation of your account, such as transaction confirmations, security alerts, and regulatory notices. These service communications will continue regardless of your marketing preferences.
Withdrawal of marketing consent will be processed within five (5) business days. You may continue to receive marketing communications during this processing period. Your withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Third-Party Links
The nvip Platform may from time to time contain references to third-party services, such as payment gateways (GCash, Maya, BPI, BDO, Metrobank) that you access as part of completing a transaction. Once you navigate away from the nvip Platform to a third-party service, this Privacy Policy no longer applies to the data you submit or the data collected by that third party.
nvip has no control over and accepts no responsibility for the privacy practices or content of third-party websites or services. We recommend that you review the privacy policy of any third-party service before providing your personal data to it. The inclusion of a reference to a third-party service on the nvip Platform does not constitute an endorsement of that service's privacy practices.
Amendments to This Policy
nvip reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The most current version of this Policy will always be available on this page, together with the date on which it was last updated.
Where we make material changes to this Policy that affect how we process your personal data, we will provide you with prominent notice via email or an in-Platform notification at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
If you do not agree with any amendment to this Policy, you should stop using the Platform and contact our Data Protection Officer to exercise your data subject rights, including the right to request deletion of your personal data, subject to applicable legal retention obligations.
Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or nvip's handling of your personal data, please contact our Data Protection Officer using the details below. All enquiries are treated confidentially and handled in accordance with the timelines specified in this Policy.
Data Protection Officer — nvip
Email: [email protected]
Subject line: Privacy / DPO Request
Response time: Within 2 business days (acknowledgement), 15 calendar days (substantive response)
You also have the right to escalate unresolved complaints to the National Privacy Commission of the Philippines. The NPC's contact details are publicly available at their official government website. nvip encourages Players to contact us first so that we may resolve any concerns directly and promptly.
Your Data Is Safe With nvip
Now that you know how nvip protects your personal information, explore everything our platform has to offer — from Fortune Bingo and live casino to premium slots. Safe, secure, and built for Filipino players. Must be 21 years or older to register.