At pinayvip, protecting the personal data of our Filipino players is not an afterthought — it is a core obligation. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have under the Philippine Data Privacy Act of 2012.
Your Privacy Matters. This Privacy Policy ("Policy") describes how pinayvip ("pinayvip," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal data of users ("Player," "User," or "you") of the pinayvip platform accessible at pinayvip.org. This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and applicable issuances of the National Privacy Commission ("NPC") of the Philippines. By accessing or using the pinayvip Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
pinayvip is the personal information controller ("PIC") in respect of personal data processed through the pinayvip Platform. As PIC, pinayvip determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with the DPA, its IRR, and applicable NPC regulations.
pinayvip operates under the oversight of the Philippine Amusement and Gaming Corporation ("PAGCOR") and is subject to PAGCOR's regulatory requirements with respect to player data management, Know Your Customer ("KYC") procedures, and anti-money laundering compliance reporting obligations.
Data Protection Officer. pinayvip has designated a Data Protection Officer ("DPO") in accordance with Section 21 of the DPA IRR. The DPO is responsible for overseeing pinayvip's compliance with data privacy laws, serving as the point of contact for data privacy inquiries and complaints, and liaising with the National Privacy Commission. Contact details for pinayvip's DPO are provided in Section 14 of this Policy.
This Policy applies to all personal data collected, used, stored, or otherwise processed by pinayvip in connection with:
This Policy applies regardless of the device or method through which you access the pinayvip Platform — whether desktop, mobile browser, or any future application — and applies to both Filipino residents and non-residents accessing the Platform from within Philippine territory.
pinayvip collects the categories of personal data set out in the table below. The specific data collected from you at any given time depends on your level of engagement with the Platform and the regulatory requirements applicable to your account status.
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number (Passport, UMID, SSS ID, PhilHealth ID, Voter's ID, LTO Driver's License) | KYC verification, age verification, PAGCOR compliance, AMLA obligations |
| Contact Data | Email address, Philippine mobile number, residential address (including barangay, city/municipality, province) | Account management, transaction notifications, customer support, regulatory correspondence |
| Financial Data | GCash account reference, PayMaya account reference, bank name, account number (partial), transaction history, deposit and withdrawal records | Payment processing, fraud detection, AMLA reporting, withdrawal verification |
| Gaming Data | Bet history, game session records, win/loss data, VIP tier status, bonus participation history, responsible gaming tool usage | Regulatory reporting, responsible gaming monitoring, VIP programme management, dispute resolution |
| Technical Data | IP address, device type and OS, browser type and version, session timestamps, login history, geolocation (approximate) | Security monitoring, fraud prevention, Platform improvement, geographic restriction enforcement |
| Communications Data | Customer support chat logs, email correspondence, complaint records, feedback submitted through the Platform | Service quality management, dispute resolution, regulatory record-keeping |
| Marketing Preferences | Promotional opt-in/opt-out status, communication channel preferences, promotion participation records | Direct marketing (with consent), personalisation of offers |
pinayvip does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA — including data about race, ethnicity, political opinions, religious beliefs, health, sexual orientation, or biometric data — except where such information is incidentally contained in government-issued identification documents submitted for KYC purposes, in which case only the information necessary for identity verification is processed.
pinayvip collects personal data through the following means:
pinayvip processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:
Withdrawal of Consent. Where pinayvip relies on your consent as the legal basis for processing, you may withdraw that consent at any time by updating your marketing preferences in your account settings or by contacting pinayvip's Data Protection Officer. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
pinayvip uses your personal data for the following specific purposes:
pinayvip does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review process, except where required by real-time fraud prevention systems operating within parameters reviewed and approved by pinayvip's compliance team.
pinayvip does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following circumstances and only to the extent necessary for the specified purpose:
International Transfers. Where pinayvip engages third-party service providers located outside the Philippines — such as cloud infrastructure providers or game studio operators — any transfer of personal data to those providers is conducted under appropriate contractual protections consistent with NPC requirements for cross-border data transfers, including data processing agreements requiring compliance standards equivalent to those of the Philippine DPA.
pinayvip retains your personal data for the periods specified below, or for such longer period as may be required by applicable Philippine law or PAGCOR regulatory requirements:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and KYC records | 5 years from account closure | AMLA and PAGCOR regulatory requirements |
| Transaction records (deposits/withdrawals) | 5 years from transaction date | AMLA, BIR tax record-keeping obligations |
| Gaming history records | 5 years from the relevant game session | PAGCOR licensing requirements, dispute resolution |
| Customer support communications | 3 years from last communication | Dispute resolution, quality assurance |
| Marketing preferences | Until consent is withdrawn or account is closed | Consent-based processing |
| Technical/log data | 12 months from collection | Security and fraud prevention (legitimate interest) |
| Self-exclusion records | Indefinitely (or until exclusion period ends and player re-registers) | Responsible gaming obligations, PAGCOR requirements |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pinayvip's data destruction procedures, unless a legal hold or ongoing regulatory investigation requires continued retention.
pinayvip uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) on pinayvip.org to operate the Platform, improve user experience, and support fraud prevention and analytics functions. The categories of cookies used are:
You may manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, blocking strictly necessary cookies will prevent you from logging into your pinayvip account. Please note that pinayvip does not use cookies to serve third-party advertising on the Platform.
pinayvip implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes, consistent with the security standards required under the Data Privacy Act IRR and pinayvip's PAGCOR licensing obligations. These measures include:
Data Breach Notification. In the event of a personal data breach that is likely to result in serious harm to affected individuals, pinayvip will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with its obligations under the Data Privacy Act and NPC Circular No. 16-03. Notifications will describe the nature of the breach, the categories and approximate number of affected records, likely consequences, and the measures pinayvip is taking or has taken to address it.
While pinayvip takes all reasonable measures to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that the device you use to access the Platform is adequately secured against unauthorised access.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pinayvip. To exercise any of these rights, please contact pinayvip's Data Protection Officer using the contact details provided in Section 14.
| Right | What It Means | How to Exercise |
|---|---|---|
| Right to Information | The right to be informed about how your personal data is being collected and processed, including the legal basis and purposes for processing. | This Policy serves as pinayvip's primary disclosure. Contact the DPO for additional information. |
| Right to Access | The right to request a copy of the personal data pinayvip holds about you and information about how it is processed. | Submit a data access request to the DPO. Responses provided within 15 business days. |
| Right to Rectification | The right to request correction of inaccurate or incomplete personal data held by pinayvip. | Update your account information directly, or contact the DPO for changes not accessible through your account. |
| Right to Erasure / Blocking | The right to request deletion or blocking of personal data where processing is unlawful or the data is no longer necessary for its stated purpose. | Contact the DPO. Note: Erasure requests may be refused where retention is required by law or regulatory obligation. |
| Right to Data Portability | The right to receive your personal data in a structured, commonly used format for transfer to another platform. | Submit a portability request to the DPO. Provided in CSV or PDF format where technically feasible. |
| Right to Object | The right to object to processing of your personal data based on legitimate interests, or to direct marketing purposes. | Update marketing preferences in your account settings, or contact the DPO to object to other processing. |
| Right to Damages | The right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, unlawfully obtained, or unauthorised use of personal data. | Submit a formal complaint to the DPO. Unresolved complaints may be escalated to the National Privacy Commission. |
pinayvip will respond to all verifiable data subject rights requests within 15 business days of receipt. Where a request is complex or involves a large volume of data, pinayvip may extend this period by a further 30 days with written notice to you. There is no charge for exercising your data subject rights, except where requests are manifestly unfounded or excessive, in which case pinayvip reserves the right to charge a reasonable administrative fee consistent with NPC guidance.
No Collection of Data from Minors. The pinayvip Platform is strictly restricted to individuals who are 21 years of age or older. pinayvip does not knowingly collect, process, or retain personal data from persons under the age of 21. If pinayvip discovers that it has inadvertently collected personal data from a person under 21, it will immediately suspend the associated account, delete the personal data to the extent permitted by law, and report the matter as required by applicable regulations.
pinayvip employs mandatory age verification procedures as part of the account registration and KYC process to prevent access by underage individuals. Any person providing false age or identity information to circumvent these controls is in breach of pinayvip's Terms & Conditions and applicable Philippine law. If you have reason to believe that a minor has registered an account on pinayvip, please contact our Data Protection Officer or customer support team immediately so that the matter can be investigated and resolved without delay.
pinayvip reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine privacy law or NPC regulations, changes to pinayvip's data processing activities, technological or operational changes affecting data handling, or other legitimate business reasons.
When pinayvip makes material changes to this Policy, we will publish the updated Policy on pinayvip.org with a revised effective date, and may notify registered Players via email or in-Platform notification where the change materially affects the way we process your personal data. The notice period for material amendments will be not less than 30 days before the revised Policy takes effect, except where a shorter period is required by applicable law.
Your continued use of the Platform following the effective date of a revised Policy constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically to stay informed about how pinayvip protects your personal data.
For all data privacy inquiries, data subject rights requests, complaints regarding pinayvip's data processing practices, or concerns about potential data breaches, please contact pinayvip's Data Protection Officer:
pinayvip Data Protection Officer
Email: [email protected]
Subject line: "Privacy / DPO Inquiry"
Response time: Within 2 business days for acknowledgement; 15 business days for substantive response
If you are not satisfied with pinayvip's response to a data privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about filing a complaint with the NPC is available through official Philippine government channels.
For general customer support inquiries that do not involve data privacy matters, please contact pinayvip's 24/7 customer support team via the live chat feature available on the Platform. The customer support team can also assist with account settings, marketing opt-out requests, and responsible gaming tools.
This Policy is governed by the Philippine Data Privacy Act of 2012 (RA 10173) and administered by the National Privacy Commission (NPC).
Data Subject Rights
Under the Philippine Data Privacy Act, every pinayvip player is a data subject with enforceable rights. Here is a quick summary of what you can request and how.
Know what data pinayvip collects, why it is collected, and how it is used — all covered in this Policy.
Request a copy of the personal data pinayvip holds about you. Responses provided within 15 business days.
Request correction of any inaccurate or outdated personal data held in your pinayvip account records.
Request deletion of data no longer necessary for its stated purpose, subject to legal retention obligations.
Receive your personal data in a structured format (CSV or PDF) for transfer to another service provider.
Object to processing based on legitimate interests or withdraw consent for direct marketing at any time.
Privacy Commitments
These are not just policy statements — they are practical standards built into how pinayvip operates every day, for every Filipino player on the Platform.
All data transmitted between your browser and the pinayvip Platform is encrypted using TLS/SSL protocols. Sensitive data — including your identity documents and payment details — is also encrypted at rest in our secure infrastructure, consistent with DPA requirements and PAGCOR security standards.
pinayvip employees can only access your personal data if they have a specific operational need to do so. Access rights are managed through a role-based system, regularly reviewed, and subject to audit logging. No employee can access your full data profile without documented justification reviewed by the compliance team.
pinayvip maintains documented data breach detection, response, and notification procedures aligned with the NPC's 72-hour reporting requirement. If a breach affecting your data occurs, you will be notified directly — not left to discover it independently. The pinayvip DPO leads all breach response activities.
Every third-party service provider that processes pinayvip player data — from payment processors to game studios — is bound by a data processing agreement requiring compliance standards equivalent to the Philippine DPA. pinayvip does not share your data with vendors that cannot demonstrate adequate data protection standards.
pinayvip retains your personal data only for as long as required by law or for the specific purpose it was collected. When retention periods expire, data is securely deleted or anonymised. There is no indefinite storage of player data — every category has a documented retention schedule reviewed annually by the DPO.
pinayvip has appointed a registered Data Protection Officer in accordance with the DPA IRR. The DPO is your direct point of contact for all data privacy matters — from access requests to breach notifications to NPC complaint escalations. The DPO is reachable at [email protected] with a dedicated privacy inquiry subject line.
Play With Confidence
pinayvip is built for Filipino players who expect transparency, security, and respect for their personal data. From PAGCOR-regulated operations to DPA-compliant data handling, every part of the platform is designed to keep you protected.
Must be 21 years or older to play. Gambling can be addictive — please play responsibly. Visit our Responsible Gaming page for tools and support resources.