veryph Privacy Policy

1 Introduction

veryph is an online gaming platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We are committed to protecting the privacy and personal data of every player who uses our platform. This Policy applies to all personal data collected through veryph.app, our mobile-optimised site, customer support channels, and any other services we provide.

As a platform operating under PAGCOR oversight, veryph is subject to regulatory requirements that govern the collection and retention of certain player data. This Policy explains how we balance those regulatory obligations with our commitment to your privacy. We process your personal data only for legitimate, specified purposes and only to the extent necessary to fulfil those purposes.

If you have any questions about this Policy or how veryph handles your personal data, please contact our Data Protection Officer through the channels listed in Section 14 of this Policy.

2 Personal Data We Collect

veryph collects the following categories of personal data from players and users of the Platform:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement);
• Residential address, including barangay, city or municipality, province, and postal code;
• Email address and mobile number;
• Username and encrypted password;
• Government-issued identification details (e.g., Philippine passport number, SSS/UMID number, driver's licence number) submitted during KYC verification.

2.2 Financial & Transaction Data

• Deposit and withdrawal amounts in Philippine Peso (₱);
• Payment method details, including GCash account references, PayMaya account references, BPI, BDO, or Metrobank account identifiers (we do not store full bank account numbers or card numbers);
• Transaction history, including dates, amounts, and transaction reference numbers;
• Bonus and promotional credit history.

2.3 Gaming Activity Data

• Game session records, including games played, wager amounts, outcomes, and session duration;
• Betting history across all veryph products, including casino games, slots, bingo, keno, and sports betting;
• Responsible gaming settings you have applied to your account, such as deposit limits or self-exclusion periods.

2.4 Technical & Device Data

• IP address and approximate geolocation derived from your IP address;
• Device type, operating system, and browser type and version;
• Session timestamps and login history;
• Cookies and similar tracking technologies (see Section 7 for details).

2.5 Communications Data

• Records of your communications with veryph customer support, including live chat transcripts and email correspondence;
• Feedback, complaints, and dispute records;
• Marketing communication preferences.

3 How We Collect Your Data

veryph collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automatically: When you access and use the Platform, we automatically collect technical and device data through cookies, server logs, and similar technologies;
• From third-party payment providers: When you make a deposit or withdrawal using GCash, PayMaya, BPI, BDO, Metrobank, or other supported payment methods, we receive transaction confirmation data from those providers;
• From identity verification services: When you complete KYC verification, we may use third-party identity verification services to confirm the authenticity of the documents you submit;
• From fraud prevention and security services: We may receive data from third-party fraud detection and security monitoring services to help protect the integrity of the Platform.

4 How We Use Your Personal Data

veryph uses the personal data we collect for the following purposes:

veryph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), veryph processes your personal data on the following legal bases:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and delivery of gaming services;
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including PAGCOR regulatory requirements, anti-money laundering (AML) obligations under the Anti-Money Laundering Act (AMLA), and tax reporting requirements;
• Legitimate Interest: Processing is necessary for veryph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and interests;
• Consent: For certain processing activities, such as sending you marketing communications or promotional offers, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting our support team.

6 Data Sharing & Disclosure

veryph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Regulatory Authorities: We are required to share certain player data with PAGCOR and other relevant Philippine government agencies as part of our regulatory and licensing obligations. This includes reporting obligations under the Anti-Money Laundering Act;
• Payment Service Providers: We share transaction data with payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are bound by applicable financial regulations;
• Identity Verification Services: We may share identity documents and related data with third-party KYC verification providers to confirm your eligibility to use the Platform;
• Fraud Prevention and Security Providers: We may share technical and transaction data with fraud detection services to protect the Platform and its users from fraudulent activity;
• IT and Infrastructure Providers: We use third-party cloud hosting and IT service providers to operate the Platform. These providers act as data processors on our behalf and are contractually bound to process your data only on our instructions and in accordance with applicable data protection law;
• Legal and Professional Advisers: We may share data with our legal counsel, auditors, or other professional advisers where necessary to obtain advice or to defend or pursue legal claims;
• Law Enforcement: We may disclose personal data to law enforcement agencies or courts where required to do so by law, court order, or other legal process.

7 Cookies & Tracking Technologies

veryph uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. You cannot opt out of these cookies without affecting the functionality of the Platform;
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language and responsible gaming settings, to provide a more personalised experience;
• Analytics Cookies: We use analytics tools to understand how players use the Platform, which pages are most visited, and where technical issues occur. This data is used in aggregated, anonymised form to improve the Platform;
• Security Cookies: These cookies help us detect and prevent fraudulent activity, including account takeover attempts and bot activity.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the veryph Platform. For more information on managing cookies, refer to your browser's help documentation.

8 Data Retention

veryph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR regulatory requirements and anti-money laundering obligations;
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and applicable tax regulations;
• KYC and Identity Verification Data: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process;
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of the relevant gaming session, for regulatory compliance and responsible gaming monitoring purposes;
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the communication, or longer if the communication relates to an ongoing dispute or legal matter;
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention requirements.

Upon expiry of the applicable retention period, veryph will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

9 Data Security

veryph takes the security of your personal data seriously. We implement a range of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the veryph Platform;
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial data;
• Access controls that restrict access to personal data to authorised personnel only, on a strict need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Multi-factor authentication options for player accounts;
• Continuous monitoring for suspicious activity and potential security incidents;
• Staff training on data protection and information security best practices.

While veryph takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, veryph will notify you and the relevant authorities in accordance with applicable law.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by veryph:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to your request within fifteen (15) business days. We may need to verify your identity before processing your request. Please note that certain rights are subject to limitations under applicable law, particularly where data retention is required for regulatory compliance.

11 Children's Privacy

If you are a parent or guardian and believe that your child has registered an account on veryph, please contact our support team immediately. We take underage gambling extremely seriously and will act promptly to address any such situation.

12 Third-Party Links

The veryph Platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies only to the veryph Platform and does not cover the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit. veryph is not responsible for the privacy practices or content of third-party websites.

13 Updates to This Policy

veryph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players by posting a notice on the Platform and, where practicable, by sending a notification to the email address associated with your account.

The revised Policy will take effect on the date specified in the notice. Your continued use of the veryph Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically. The date of the most recent revision is displayed at the top of this page.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way veryph handles your personal data, please contact our Data Protection Officer through the following channels:

When submitting a data rights request, please include your registered account username, a clear description of your request, and any relevant supporting information. We will acknowledge your request within three (3) business days and aim to resolve it within fifteen (15) business days.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.