Privacy Policy —
slovip Platform

1 Introduction and Data Controller

This Privacy Policy ("Policy") describes how slovip ("we", "us", "our") collects, processes, stores, and protects personal data obtained from individuals ("you", "your", "User") who access, register on, or otherwise interact with the slovip platform located at slovip.cam ("Platform").

slovip acts as the personal information controller in respect of personal data collected through the Platform, as that term is defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"). As personal information controller, slovip determines the purposes and means of processing personal data.

By accessing or using the Platform and by accepting the terms of this Policy during registration, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. Where consent is the legal basis for processing, you may withdraw your consent at any time, subject to the limitations set out in Section 11 of this Policy.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy.

2 Personal Data We Collect

slovip collects several categories of personal data in the course of providing its services. The categories collected and examples of the specific data points within each category are set out in the table below.

3 How We Collect Your Personal Data

slovip collects personal data through the following channels and methods:

3.1 Direct Collection

Data you provide directly to us during registration, KYC verification, account management, deposit and withdrawal transactions, contact with our support team, participation in surveys, or any other direct interaction with the Platform or our staff.

3.2 Automated Collection

Data collected automatically when you access or use the Platform, including technical data gathered through cookies, web beacons, server logs, and similar tracking technologies. This includes IP addresses, device identifiers, session data, and clickstream data. See Section 10 for our full Cookies Policy.

3.3 Third-Party Sources

Data received from third parties in certain circumstances, including:

• Payment processors and e-wallet providers (GCash, Maya, BPI, BDO, Metrobank, and others) for transaction verification and fraud prevention;
• Identity verification service providers engaged for KYC purposes;
• Credit reference agencies or anti-fraud databases where applicable under Philippine law;
• Marketing partners, where you have consented to the sharing of your data with such partners;
• Publicly available sources, including Philippine government registries where relevant to compliance obligations.

4 Purposes of Processing

slovip processes your personal data for the following purposes:

1. Account Registration and Management: To create, verify, maintain, and administer your player account on the Platform;
2. Identity Verification (KYC): To verify your identity, age (21+), and residence in compliance with our legal and regulatory obligations;
3. Service Delivery: To provide you with access to games, sports betting, live dealer tables, bingo, and all other features of the Platform;
4. Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods;
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct;
6. Legal and Regulatory Compliance: To comply with applicable Philippine laws, gaming regulations, anti-money laundering requirements, and lawful requests from government authorities;
7. Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer self-imposed limits, cooling-off periods, and self-exclusion;
8. Customer Support: To respond to your inquiries, resolve disputes, and manage complaints;
9. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications;
10. Platform Improvement: To analyse usage data in aggregate form to improve the Platform's functionality, content, and user experience;
11. Legal Claims: To establish, exercise, or defend legal claims arising from your use of the Platform.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act, slovip processes your personal data on the following legal bases:

6 Data Sharing and Disclosure

slovip does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in Section 4:

6.1 Service Providers and Processors

Third-party companies engaged by slovip to provide services in connection with the Platform, including payment processors (GCash, Maya, BPI, BDO, Metrobank, and others), KYC and identity verification service providers, cloud infrastructure and hosting providers, customer support platform providers, and cybersecurity service providers. These parties are contractually required to process your data only in accordance with slovip's instructions and this Policy.

6.2 Game Providers and Software Studios

Third-party game studios whose games are offered on the Platform may receive limited technical data (such as session tokens and wager data) solely to the extent necessary to operate and audit their games. Personal identity data is not shared with game studios.

6.3 Regulatory and Government Authorities

Where required by applicable Philippine law, court order, or the lawful directive of a government authority or regulatory body, slovip may disclose personal data. Such disclosures will be limited to what is strictly required by the relevant legal obligation.

6.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of slovip's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance, where required by applicable law.

7 International Data Transfers

The slovip Platform primarily processes and stores data within the Republic of the Philippines. However, certain service providers engaged by slovip — including cloud infrastructure providers and payment processors — may process or store data in data centres located outside the Philippines.

Where personal data is transferred outside the Philippines, slovip ensures that such transfers are subject to appropriate safeguards, which may include:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission of the Philippines;
• Transfer to jurisdictions that have been assessed to provide an adequate level of data protection;
• Other legally recognised transfer mechanisms as permitted under the DPA and its IRR.

You may request additional information regarding the safeguards applied to international transfers by contacting our Data Protection Officer at the details provided in Section 15.

8 Data Retention

slovip retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to legal and regulatory retention obligations. The following general retention periods apply:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with applicable Philippine financial regulations;
• Gaming Activity Data: Retained for a minimum of three (3) years following account closure;
• Support and Communications Data: Retained for a minimum of three (3) years from the date of the relevant communication;
• Self-Exclusion Records: Retained for the duration of the exclusion period plus five (5) years;
• Marketing Preferences: Retained until withdrawal of consent or account closure, whichever is earlier.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Security Measures

slovip implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL): 256-bit SSL encryption for all data transmitted between your device and the Platform;
• Password Hashing: All account passwords are stored using industry-standard one-way cryptographic hashing (bcrypt) — plain-text passwords are never stored;
• Two-Factor Authentication (2FA): SMS-based 2FA is available for all accounts and strongly recommended for all users;
• Access Controls: Personal data is accessible only to slovip personnel and authorised processors on a strictly need-to-know basis;
• Intrusion Detection and Monitoring: Continuous monitoring of system access logs, anomaly detection, and brute force protection;
• Data Minimisation: Only the minimum data necessary for each processing purpose is collected and stored;
• Security Audits: Regular internal and third-party security reviews and penetration testing of Platform infrastructure;
• Staff Training: Regular data privacy and security training for all slovip personnel who handle personal data.

10 Cookies and Tracking Technologies

The slovip Platform uses cookies and similar technologies to provide functionality, improve your experience, and gather analytics data. The following types of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as user authentication (keeping you logged in), session management, and security features including CSRF protection. These cookies cannot be disabled without impairing Platform functionality.

10.2 Functional Cookies

These cookies allow the Platform to remember your preferences and settings — such as your preferred language, game lobby view, and notification preferences — to personalise your experience.

10.3 Analytics Cookies

These cookies collect anonymised, aggregate data about how users navigate and interact with the Platform, allowing slovip to identify areas for improvement. Analytics data does not personally identify individual users.

10.4 Managing Cookies

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. For details on how to manage cookies in your specific browser, refer to the help documentation provided by your browser developer.

11 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you are entitled to exercise the following rights in relation to your personal data held by slovip:

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 15. We will respond to verified requests within thirty (30) days. We may ask you to verify your identity before processing a data rights request to protect against unauthorised access.

12 Children's Privacy

If slovip discovers or has reason to believe that personal data has been collected from an individual under the age of 21 without appropriate verification, the relevant account will be immediately suspended, all balances and bonuses will be frozen pending investigation, and the personal data will be deleted as soon as practicable following the conclusion of any required regulatory review.

If you are a parent or guardian and believe your child has registered on the Platform or provided personal data, please contact us immediately via the details in Section 15.

13 Marketing Communications

Where you have provided your consent during registration or through your account settings, slovip may send you promotional communications relating to bonuses, new game launches, seasonal offers, and platform updates via email, SMS, or in-platform notifications.

13.1 Opting Out

You may opt out of marketing communications at any time by:

• Updating your notification preferences in your account settings;
• Clicking the "unsubscribe" link in any marketing email sent by slovip;
• Contacting slovip support via live chat and requesting removal from marketing lists.

Opting out of marketing communications will not affect the receipt of service-related communications — such as transaction confirmations, security alerts, and account notifications — which are sent as part of our contractual obligations to you.

13.2 Profiling for Marketing

slovip may use aggregated and pseudonymised data to segment users for the purpose of delivering relevant promotional offers — for example, targeting players who have played a specific game type with an offer related to that category. This profiling is conducted on an aggregated basis and does not involve automated individual decision-making that produces legal or significant effects.

14 Amendments to This Policy

slovip reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the structure of the Platform. The date of the most recent revision is displayed at the top of this Policy.

Where a material change is made to this Policy — particularly a change that affects your rights or increases the scope of data processing — slovip will notify registered users via their registered email address or through a prominent notice on the Platform at least fourteen (14) days prior to the change taking effect.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree to the amended Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

15 Contact Us and Data Protection Officer

slovip has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with the Philippine Data Privacy Act. To exercise your data rights, raise a privacy concern, or request further information about our data processing practices, please contact:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through the NPC's official channels.