Privacy Policy

Plain-English Summary

This Privacy Policy explains how VIPScatter (vipscatter.com) collects, uses, stores, and protects your personal information when you use our website and services. It also explains your rights regarding your data and how to exercise them.

By using VIPScatter, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

This policy complies with the EU General Data Protection Regulation (GDPR), the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), and other applicable data protection laws in the jurisdictions we operate.

Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is:

If you have any questions about how your personal data is handled, you may contact our team directly via the contact page at any time.

Data We Collect

We collect the following categories of personal data, depending on how you interact with VIPScatter:

Data You Provide Directly

Data Collected Automatically

We do not collect sensitive personal data (e.g. race, religion, health information) except where explicitly required for responsible gaming self-exclusion purposes, and only with your explicit consent.

How We Use Your Data

We use your personal data for the following purposes:

• Account management — Creating, maintaining, and securing your account.
• Payment processing — Processing deposits and withdrawals through your chosen payment method.
• KYC & AML compliance — Verifying your identity and age as required by our gaming licence and anti-money laundering obligations.
• Customer support — Responding to your inquiries, complaints, and support requests.
• Responsible gaming — Monitoring gaming behaviour to identify problem gambling patterns and enforce self-exclusion or deposit limits you have set.
• Marketing communications — Sending you bonus offers, promotions, and platform news — only if you have opted in, and only via your chosen channel.
• Fraud prevention & security — Detecting and preventing fraudulent activity, unauthorised access, and money laundering.
• Legal compliance — Fulfilling obligations under gaming regulations, tax law, and court orders.
• Analytics & improvement — Understanding how users interact with our platform to improve features, performance, and content.
• Affiliate tracking — Attributing registrations and deposits to the correct affiliate partner for commission purposes.

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and other GDPR-applicable jurisdictions, we process your personal data on the following legal bases:

For users in the Philippines, processing is conducted in accordance with the Data Privacy Act of 2012 (RA 10173) and the implementing rules of the National Privacy Commission (NPC).

Who We Share Your Data With

We share personal data only where necessary, and only with parties bound by confidentiality and data protection obligations:

Payment Processors

GCash, Maya, QRPH, Skrill, Neteller, and cryptocurrency payment providers receive the financial data necessary to process your transactions. Each is subject to their own privacy policy and PCI-DSS compliance standards.

KYC & Identity Verification Providers

Third-party identity verification services process your ID documents and verify your identity and age to meet our licensing requirements. These providers are contractually prohibited from using your data for any other purpose.

Game Providers

Software providers (e.g. Pragmatic Play, NetEnt, Microgaming) receive a session token and anonymised player identifier when you launch a game. They do not receive your full name, email, or financial data.

Analytics Providers

We use anonymised or pseudonymised analytics tools to understand platform usage. No personally identifiable information is shared with analytics providers in a form that allows individual identification.

Affiliate Partners

When you register via an affiliate link, the affiliate partner receives confirmation that a qualifying action occurred (e.g. a deposit was made). They do not receive your name, contact details, or financial information.

Regulatory & Legal Authorities

We disclose personal data to gaming regulators, financial intelligence units, law enforcement, and courts where required by law, court order, or regulatory directive. We will notify you of such disclosures unless prohibited by law from doing so.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy and to comply with our legal obligations:

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

Cookies & Tracking Technologies

VIPScatter uses cookies and similar tracking technologies (e.g. pixels, local storage) to operate the platform, analyse usage, and support affiliate tracking. Here is what we use and why:

Managing Cookies

You can control or delete cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain cookies, or delete existing cookies. Note that disabling cookies may affect site functionality. For guidance, visit allaboutcookies.org.

Security Measures

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• 128-bit SSL/TLS encryption on all data transmitted between your browser and our servers.
• Password hashing — passwords are never stored in plain text; they are hashed using bcrypt with a unique salt per user.
• Two-factor authentication (2FA) — available for all accounts and required for withdrawal requests above a threshold amount.
• Access controls — internal access to personal data is restricted on a need-to-know basis with role-based permissions.
• Penetration testing — our platform undergoes regular third-party security audits.
• Data breach response — in the event of a data breach affecting your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay.

Your Data Rights

Depending on your jurisdiction, you have the following rights regarding your personal data. To exercise any of these rights, contact us and we will respond within 30 days.

If you are dissatisfied with how we handle your data rights request, you have the right to lodge a complaint with your national data protection authority — for example, the National Privacy Commission (NPC) in the Philippines, or the relevant EU supervisory authority in your member state.

Children's Privacy

VIPScatter's services are strictly for adults aged 21 years and older. We do not knowingly collect personal data from anyone under the age of 21.

If we become aware that a minor has provided personal data or created an account, we will immediately suspend the account, delete the data, and notify the relevant authorities where required. If you believe a minor has accessed our services, please contact us immediately via our contact page.

Parents and guardians are encouraged to use parental control tools such as Gamban and Net Nanny to block access to gambling websites on devices used by minors.

International Data Transfers

VIPScatter serves users across Asia and beyond. Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where we transfer data outside the EEA or the Philippines, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions recognising the destination country's data protection standards
• Binding Corporate Rules (BCRs) where applicable
• Contractual obligations on third-party processors to apply equivalent protections

You may request details of the specific safeguards applied to your data by contacting us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Display a prominent notice on our homepage for at least 14 days.
• Send a notification email to registered users if the changes materially affect how we process their data.

We encourage you to review this policy periodically. Continued use of VIPScatter after changes are published constitutes acceptance of the updated policy.

Contact Us & Data Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact us through any of the following channels:

• Contact page: vipscatter.com/contact
• Live Chat: Available 24/7 on any page — ask for the Data Privacy team
• Response time: We aim to acknowledge all data requests within 72 hours and resolve them within 30 calendar days

For formal Subject Access Requests (SARs) or complaints, please use the contact form and select "Account / Data Privacy" as your topic. Include your registered email address and a description of your request. We may need to verify your identity before processing the request.