1 Introduction
PinoyVIP is an online gaming platform serving players across the Philippines. We take privacy seriously — not as a regulatory checkbox but as a genuine obligation to the community that trusts us with their personal information. This policy is our commitment to you, written in plain language so you know exactly where you stand.
PinoyVIP processes personal data as a data controller under Philippine Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules and regulations issued by the National Privacy Commission (NPC). Where data is processed for licensed gaming operations, we also comply with applicable PAGCOR or relevant gaming authority requirements.
2 Data We Collect
PinoyVIP collects personal data in the following categories. We only collect what is genuinely needed for the specific purposes described below.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID number | KYC / Age Verification |
| Contact Data | Email address, mobile number, home address | Account & Communications |
| Financial Data | GCash number, bank account name, transaction records | Payments & AML |
| Technical Data | IP address, device type, browser, session timestamps | Security & Fraud Prevention |
| Usage Data | Games played, bets placed, login history, pages visited | Platform Improvement |
| Communication Data | Support chat logs, email correspondence | Customer Support |
3 How We Collect Your Data
PinoyVIP collects personal data through the following channels:
- Direct submission — when you register an account, complete KYC verification, make a deposit, contact support, or update your profile.
- Automated collection — through cookies, server logs, and analytics tools as you use the platform. Technical and usage data are collected this way.
- Third-party payment providers — when you transact through GCash, Maya, GrabPay, InstaPay, or a linked bank, those providers share transaction confirmation data with us to complete the payment process.
- Identity verification partners — KYC providers used for document verification during account validation share verification outcomes (pass/fail) with PinoyVIP.
PinoyVIP does not purchase personal data lists from third-party data brokers or marketing platforms, and we do not collect data from social media platforms unless you explicitly link a social account to your PinoyVIP profile.
4 Why We Use Your Data
Every piece of data PinoyVIP holds is used for a defined reason. The main purposes are:
- Account registration and management — creating your account, verifying your identity, and keeping your profile accurate.
- Payment processing — handling deposits and withdrawals securely through local Philippine payment channels.
- Regulatory compliance — meeting KYC, AML (anti-money laundering), and gaming license obligations.
- Platform security — detecting and preventing fraud, collusion, unauthorized access, and prohibited conduct.
- Customer support — resolving queries, complaints, and account issues efficiently.
- Platform improvement — analyzing usage patterns to fix bugs, improve the interface, and develop new features.
- Responsible gaming — monitoring for patterns that may indicate problem gambling and enabling our support tools to work correctly.
- Communications — sending account notifications, security alerts, and where you have opted in, promotional messages about PinoyVIP offers.
5 Legal Basis for Processing
PinoyVIP processes personal data under the following legal bases as defined by the Philippine Data Privacy Act:
- Contractual necessity — processing required to fulfill the Terms and Conditions you accepted when registering, including account management and payment processing.
- Legal obligation — processing required by Philippine law, including KYC for gaming operators, AML reporting, and data retention mandated by regulators.
- Legitimate interests — processing for fraud prevention, platform security, and internal analytics, where these interests do not override your privacy rights.
- Consent — for marketing communications and non-essential cookies, where we ask for your agreement before processing. You may withdraw consent at any time.
6 Data Sharing & Third Parties
PinoyVIP does not sell your personal data. We share data only in the specific, limited circumstances described below, and only with parties who are contractually bound to handle it with appropriate security and confidentiality:
- Payment processors — GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, and partner banks receive transaction data necessary to complete deposits and withdrawals.
- KYC and identity verification providers — third-party services that verify government-issued IDs and other documents during account verification. These providers receive only what is needed for verification and are prohibited from using the data for other purposes.
- Regulatory and law enforcement authorities — where required by Philippine law, gaming regulations, or a valid legal order. PinoyVIP will notify you of such disclosures where legally permitted to do so.
- IT and infrastructure providers — cloud hosting, data security, and analytics vendors who process data on PinoyVIP's behalf under strict data processing agreements.
- Fraud prevention services — platforms that help detect multi-accounting, payment fraud, and other prohibited activities, receiving limited technical identifiers only.
7 Cookies & Tracking Technologies
PinoyVIP uses cookies and similar technologies to keep the platform functional, secure, and improving. Here is what each type does:
- Essential cookies — required for login sessions, security tokens, and basic platform functionality. These cannot be disabled without breaking the platform.
- Analytics cookies — help PinoyVIP understand how players navigate the platform so we can fix friction points and improve usability. Data is aggregated and anonymized.
- Security cookies — used to detect and prevent bot activity, credential stuffing, and other automated attacks on user accounts.
- Preference cookies — remember your language, layout, or other interface settings between sessions.
Non-essential cookies (analytics and preference) are only set after your consent via the cookie banner shown on your first visit. You can adjust your cookie preferences at any time through your browser settings.
8 Data Security
PinoyVIP invests seriously in the security of your personal data. The technical and organizational measures in place include:
- TLS 1.3 encryption for all data in transit between your device and PinoyVIP servers
- AES-256 encryption for sensitive data at rest, including payment credentials and identity documents
- Role-based access controls — staff can only access personal data relevant to their specific job function
- Multi-factor authentication requirements for all administrative system access
- Regular third-party penetration testing and security audits
- 24/7 intrusion detection and automated threat response systems
- Secure deletion protocols for data that has reached its retention expiry
In the event of a data breach that poses risk to your rights and freedoms, PinoyVIP will notify the National Privacy Commission within 72 hours and inform affected members as promptly as possible, in line with NPC Circular 16-03 requirements.
9 Data Retention
PinoyVIP retains personal data only for as long as required by its lawful purposes. The general retention schedule is:
- Active account data — retained for the lifetime of your account plus a minimum of five (5) years after closure, as required by Philippine AML and gaming regulations.
- Transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by AMLC rules.
- Support communications — retained for three (3) years from the date of last communication.
- Technical and usage logs — retained for 12 months and then deleted or anonymized for aggregate analysis.
- Marketing consent records — retained for the duration of your opt-in plus two (2) years, to demonstrate compliance if audited.
When retention periods expire, data is securely deleted or permanently anonymized using industry-standard methods. PinoyVIP does not simply archive old data indefinitely.
10 Your Data Rights
Under the Philippine Data Privacy Act, you have the following rights regarding personal data PinoyVIP holds about you. These are genuine, exercisable rights — not just statements on paper.