slovip Privacy Policy
Your Data, Your Rights

Welcome to the slovip Privacy Policy. slovip ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the slovip platform. This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This policy describes in clear, plain language: what personal data slovip collects from you; the purposes for which that data is processed; the legal bases on which we rely to process it; how long we keep it; who we share it with; and the rights you have in relation to your personal data. We have written this policy to be as transparent and straightforward as possible, because we believe you deserve to know exactly how your information is handled.

This Privacy Policy applies to all players, visitors, and registered users of the slovip platform, regardless of whether you are based in Metro Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines. It applies to data collected through the slovip.app website and any associated interfaces.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and slovip.

slovip is an online gaming and casino platform operating under the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR). The platform is accessible at slovip.app and provides Filipino players with access to online slots, live dealer games, bingo, and other gaming products.

For the purposes of the Philippine Data Privacy Act of 2012, slovip acts as the Personal Information Controller (PIC) in respect of the personal data it collects directly from players and visitors to the platform. Where slovip engages third-party service providers to process data on its behalf — such as payment processors, identity verification providers, and analytics platforms — those providers act as Personal Information Processors (PIPs) under written data processing agreements that bind them to the same standards of data protection required by Philippine law.

slovip has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and with the Data Privacy Act. Contact details for the DPO are provided in Section 14 of this policy.

slovip collects personal data from you in the following ways: directly when you register an account, make a deposit, contact support, or use platform features; automatically when you browse the platform; and from third parties such as payment processors and identity verification services. The categories of personal data we collect include:

Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, province, and postal code)
• Email address and mobile phone number
• Username and encrypted password
• Government-issued ID details (e.g., Philippine passport, driver's licence, SSS/UMID card number) submitted during KYC verification

Financial & Transaction Data

• GCash or PayMaya account reference numbers
• Bank account details (bank name, account name) for bank transfer transactions
• Debit card details (card type, last four digits, expiry date — full card numbers are never stored by slovip)
• Deposit and withdrawal history, including amounts in Philippine Peso (₱) and timestamps
• Bonus and promotional activity records

Gaming Activity Data

• Game session logs, including games played, wager amounts, win/loss records, and session duration
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)
• Bonus wagering progress and promotional participation records

Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser type and version
• Cookie identifiers and session tokens (see Section 7)
• Platform access logs, including login timestamps and pages visited

Communications Data

• Records of live chat conversations with slovip support agents
• Email correspondence with the slovip support team or DPO
• Responses to surveys or feedback requests (where you choose to participate)

slovip does not collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (such as health data, political opinions, or religious beliefs) unless you voluntarily disclose such information in the context of a responsible gaming support interaction, in which case it is handled with the highest level of confidentiality.

slovip uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or establishing a separate legal basis.

• Account Management: To create, maintain, and administer your slovip account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Age & Identity Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with PAGCOR regulations and the Philippine Anti-Money Laundering Act (AMLA).
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card, and to maintain accurate financial records of all transactions on your account.
• Platform Operation & Improvement: To deliver the games, features, and services available on the slovip platform, and to analyse usage patterns to improve platform performance, user experience, and game offerings.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct, and to protect the security and integrity of the platform and its players.
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and any other applicable Philippine laws and regulations.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to administer responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), and to provide support to players who may be experiencing gambling-related harm.
• Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided your consent to receive such communications. You may withdraw this consent at any time.
• Legal Claims: To establish, exercise, or defend legal claims in connection with your use of the slovip platform.

Under the Philippine Data Privacy Act of 2012, slovip must have a lawful basis for processing your personal data. The legal bases on which slovip relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and slovip — specifically, to operate your account, process transactions, and deliver the gaming services you have registered to use.
• Legal Obligation: Processing that is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing that is necessary for slovip's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have given your explicit, informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

slovip does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the minimum data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC (Know Your Customer) service providers who assist slovip in verifying player identities and ages in compliance with PAGCOR and AMLA requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful legal process.
• Technology Service Providers: Cloud hosting providers, cybersecurity firms, and platform analytics providers who process data on slovip's behalf under written data processing agreements that impose equivalent data protection obligations.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where disclosure is necessary for the provision of professional services to slovip.

In all cases where slovip shares your data with third-party processors, we ensure that appropriate contractual safeguards are in place to protect your personal information and to restrict its use to the specific purpose for which it was shared.

slovip uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. A cookie is a small text file placed on your device when you visit a website. The types of cookies used by slovip are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as maintaining your login session, remembering your language preference, and ensuring the security of your account. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the slovip platform — such as which pages are visited most frequently and whether any error messages are encountered. This data helps us improve the platform experience. These cookies require your consent.
• Functional Cookies: These cookies allow the platform to remember choices you have made (such as your preferred game category or responsible gaming settings) to provide a more personalised experience. These cookies require your consent.

slovip does not use advertising or tracking cookies that follow you across third-party websites. You can manage your cookie preferences at any time through the cookie settings panel available on the platform. Please note that disabling strictly necessary cookies may impair your ability to use certain platform features, including the slovip login process.

slovip implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the slovip platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored in slovip's databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to slovip staff and contractors who have a legitimate need to access it for their job functions. All access is logged and subject to regular review.
• Password Security: Player passwords are stored as salted cryptographic hashes. slovip staff cannot view your password in plain text and will never ask you to provide it.
• Regular Security Audits: slovip conducts regular internal and third-party security assessments, including penetration testing, to identify and remediate vulnerabilities in the platform.
• Incident Response: slovip maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify the NPC within 72 hours and inform you promptly where required by law.

While slovip takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for keeping your slovip login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

slovip retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the AMLC and Bureau of Internal Revenue regulations.
• Identity Verification Documents: KYC documents are retained for five (5) years after account closure or the last transaction, whichever is later.
• Support Communications: Live chat logs and email correspondence are retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements.
• Technical Logs: Server access logs and security logs are retained for twelve (12) months, after which they are securely deleted.

When personal data is no longer required for any of the above purposes, slovip will securely delete or anonymise it in accordance with NPC-approved data disposal procedures.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by slovip. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data slovip holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by slovip. You may also update certain account details directly through your account dashboard after completing the slovip login process.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to slovip's legal obligations to retain certain data under PAGCOR and AMLA regulations.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to slovip's overriding legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that slovip has processed your personal data in violation of the Data Privacy Act.

slovip will respond to all data rights requests within fifteen (15) business days of receipt. Complex requests may require additional time, in which case we will notify you of the extended timeline and the reason for it.

slovip takes the protection of minors extremely seriously. The platform is designed exclusively for adults aged 21 years and above, in compliance with Philippine law governing casino-style gambling and online gaming. Age verification is a mandatory step in the slovip registration process, and no deposit or gameplay is permitted until age verification is successfully completed.

slovip does not knowingly collect, store, or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 — whether through a misrepresentation of age during registration or any other means — we will immediately suspend the relevant account, void any wagers placed, and securely delete all associated personal data.

If you are a parent or guardian and believe that a minor in your care has registered on the slovip platform, please contact our support team immediately via live chat or by emailing our Data Protection Officer. We will investigate and take appropriate action without delay.

slovip primarily stores and processes personal data within the Philippines. However, some of our third-party technology service providers — including cloud infrastructure providers and cybersecurity platforms — may process data in data centres located outside the Philippines.

Where personal data is transferred outside the Philippines, slovip ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Philippine Data Privacy Act. These safeguards include:

• Contractual clauses in data processing agreements that impose Data Privacy Act-equivalent obligations on overseas processors
• Transfers only to jurisdictions or organisations that the NPC has recognised as providing an adequate level of data protection
• Regular review of overseas processors' data protection practices and certifications

You may request further information about the specific safeguards in place for any international data transfer by contacting our Data Protection Officer.

slovip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed of how slovip is protecting your personal data. Your continued use of the platform after the effective date of any revised policy constitutes your acknowledgement of the changes.

If any change to this Privacy Policy materially affects your rights or the way we process your personal data in a manner that requires your consent, we will seek that consent before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way slovip handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 via the chat widget on the slovip platform — the fastest way to reach us for urgent data concerns
• Email: [email protected]
• General Support: support@slovip. app

When contacting us regarding a data rights request, please include your registered account username, a clear description of your request, and a copy of a valid government-issued ID so that we can verify your identity before processing the request. This is necessary to protect your data from unauthorised access by third parties.

If you are not satisfied with slovip's response to your data rights request or complaint, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.