pvip Privacy Policy

1 Data Controller Identity

1.1 The data controller responsible for your personal data collected through the pvip platform is pvip, the online gaming platform accessible at https://pvip.cam, operated under the PAGCOR regulatory framework for online gaming in the Philippines.

1.2 pvip has appointed a Data Privacy Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and its implementing rules and regulations. The DPO is responsible for overseeing pvip's data protection strategy and ensuring compliance with applicable Philippine privacy law. Contact details for the DPO are provided in Section 13 of this Policy.

1.3 Where pvip engages third-party service providers to process personal data on its behalf, such providers act as data processors and are bound by contractual data processing agreements that require them to handle personal data only in accordance with pvip's documented instructions and applicable law.

2 Personal Data We Collect

2.1 Registration Data. When you create a pvip account, we collect your full legal name, date of birth, nationality, residential address (including city and province within the Philippines), email address, and mobile phone number.

2.2 Identity Verification (KYC) Data. To comply with PAGCOR regulations and Philippine AML laws, we may collect copies of government-issued identification documents (such as a Philippine passport, SSS ID, PhilHealth ID, driver's license, or UMID), selfie photographs for liveness verification, and proof of address documents.

2.3 Financial Data. We collect information about deposits, withdrawals, and transaction history on your pvip account. This includes the payment method used (e.g., GCash number, Maya account reference, or bank account details), transaction amounts in Philippine Peso (PHP), and timestamps. We do not store complete card numbers or full banking credentials on pvip servers.

2.4 Gaming Activity Data. We collect records of your gameplay activity, including games played, bet amounts, wins and losses, session durations, and bonus usage. This data is used for regulatory reporting, responsible gaming monitoring, and platform improvement.

2.5 Technical and Device Data. We automatically collect certain technical data when you access the pvip platform, including your IP address, device type and operating system, browser type and version, session timestamps, pages visited, and click-stream data.

2.6 Communications Data. If you contact pvip customer support, we retain records of your communications, including chat transcripts, email correspondence, and support ticket details, to facilitate resolution of your inquiry and improve our service quality.

2.7 Cookies and Tracking Data. We collect data via cookies and similar technologies as described in Section 9 of this Policy.

3 Purposes of Processing

pvip processes your personal data for the following defined purposes:

4 Legal Basis for Processing

4.1 Contractual Necessity. The majority of pvip's personal data processing is necessary for the performance of the contract between pvip and the player — specifically, to provide the online gaming services you have registered to use. This includes account management, payment processing, and game delivery.

4.2 Legal Obligation. Certain processing activities — particularly KYC verification, AML reporting, and regulatory data retention — are carried out because pvip is legally required to do so under Philippine law and PAGCOR licensing conditions.

4.3 Legitimate Interests. pvip processes certain data on the basis of its legitimate interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and platform analytics. Where legitimate interests are relied upon, pvip has assessed that these interests are not overridden by your privacy rights.

4.4 Consent. Where pvip processes your personal data for marketing communications or non-essential cookies, we do so on the basis of your consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5 Data Sharing and Disclosure

5.1 pvip does not sell, rent, or trade your personal data to third-party commercial entities for their own marketing purposes. Data sharing is limited to the following categories of recipients:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, and other payment processors receive the financial data necessary to process your transactions. These providers are bound by their own applicable data protection and financial regulatory obligations.
• KYC and Identity Verification Services: Third-party KYC providers may receive copies of your identification documents and biometric data for verification purposes, acting as data processors under pvip's instructions.
• Game Providers: Third-party game providers (including JILI and live dealer operators) may receive pseudonymized player identifiers and session data necessary to deliver game content. These providers do not receive your full identity or financial data.
• Regulatory Authorities: pvip is required to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities where required by law or regulatory directive.
• Law Enforcement: pvip will disclose personal data to Philippine law enforcement agencies in response to valid legal orders, warrants, or subpoenas.
• Professional Advisors: Legal, accounting, and auditing professionals engaged by pvip may access personal data to the extent strictly necessary for the professional services they are retained to provide.

5.2 In the event of a corporate restructuring, merger, acquisition, or sale of pvip's assets, personal data held by pvip may be transferred to the successor entity, subject to that entity assuming the same data protection obligations as set out in this Policy.

6 Data Retention

6.1 pvip retains your personal data for as long as your pvip account is active and for a period thereafter as required by applicable Philippine law and PAGCOR regulatory requirements.

6.2 In general, pvip retains account and transaction records for a minimum of five (5) years following account closure, in accordance with Philippine AML record-keeping obligations. KYC documentation is retained for the same minimum period.

6.3 Gaming activity data, responsible gaming records, and customer support communications are retained for a minimum of three (3) years following the relevant activity or communication.

6.4 Technical and device data collected via cookies and platform analytics is retained for shorter periods as described in Section 9 of this Policy.

6.5 Where you exercise your right to erasure and pvip is not subject to a legal obligation requiring it to retain the relevant data, pvip will delete or anonymize the data within thirty (30) calendar days of the verified erasure request.

7 Data Security Measures

7.1 pvip implements technical and organizational security measures designed to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols;
• Encryption of sensitive data at rest in pvip's database systems;
• Access controls limiting personal data access to authorized pvip personnel on a need-to-know basis;
• Regular security assessments and vulnerability testing of the pvip platform;
• Two-factor authentication options available to all registered players;
• Staff training on data protection obligations and security best practices;
• Incident response procedures for detecting and responding to personal data breaches.

7.2 In the event of a personal data breach that poses a risk to your rights and freedoms, pvip will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

7.3 While pvip applies robust security measures, no online platform can guarantee absolute security against all threats. Players are encouraged to use strong, unique passwords and to enable two-factor authentication to further protect their pvip account.

8 Your Data Privacy Rights

8.1 Under the Data Privacy Act of 2012 and its implementing regulations, you have the following rights with respect to your personal data held by pvip:

• Right to be Informed: You have the right to be informed that your personal data is being collected and processed, the purposes of processing, and the recipients of your data.
• Right of Access: You may request a copy of the personal data pvip holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data pvip holds about you is inaccurate or incomplete, you have the right to request its correction.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Object: You may object to the processing of your personal data where processing is based on legitimate interests, including profiling for direct marketing purposes.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe pvip has handled your personal data in violation of applicable law.

8.2 To exercise any of the above rights, please submit a written request to pvip's Data Privacy Officer using the contact details provided in Section 13. pvip will respond to all verified data subject requests within fifteen (15) business days of receipt.

8.3 pvip may request proof of identity before processing a data subject rights request to ensure that personal data is not disclosed to unauthorized parties.

9 Cookies and Tracking Technologies

9.1 pvip uses the following categories of cookies and similar tracking technologies on the platform:

• Essential Cookies: Required for core platform functionality, including session management, authentication, and security features. These cookies cannot be disabled without impairing platform function.
• Functional Cookies: Used to remember your preferences, language settings, and platform customizations across sessions.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the pvip platform, including pages visited and session duration. This data helps pvip improve platform performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your platform activity and preferences, where you have consented to receive marketing communications.

9.2 Analytics and marketing cookies are set only where you have provided consent. You may withdraw cookie consent or manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the pvip platform.

9.3 Data collected via analytics cookies is retained for a maximum of twenty-four (24) months. Session cookies are deleted when you close your browser.

10 Data of Minors

10.1 pvip does not knowingly collect, store, or process personal data from individuals under the age of twenty-one (21). The registration process requires users to confirm their date of birth, and pvip applies age verification checks as part of its KYC procedures.

10.2 If a parent, guardian, or any other party has reason to believe that a minor has submitted personal data to pvip without authorization, they should contact pvip's Data Privacy Officer immediately using the contact details in Section 13. pvip will take prompt steps to verify the claim and delete the relevant data if confirmed.

11 Cross-Border Data Transfers

11.1 Some of pvip's third-party service providers — including game content providers and KYC platform vendors — may be located outside the Philippines. Where personal data is transferred to such providers, pvip ensures that appropriate safeguards are in place to protect the data in accordance with the Data Privacy Act of 2012 and applicable NPC regulations.

11.2 Such safeguards may include contractual data processing agreements incorporating the standard clauses approved by the National Privacy Commission, or transfers to jurisdictions that have been determined to offer an adequate level of data protection.

11.3 pvip will not transfer your personal data to any jurisdiction or service provider that does not meet the minimum data protection standards required under Philippine law.

12 Changes to This Policy

12.1 pvip may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or PAGCOR regulatory requirements. All material changes will be communicated to registered players via the email address associated with their account, with a minimum of seven (7) days' advance notice before the updated Policy takes effect.

12.2 The current version of this Privacy Policy is always available on this page and is identified by the version number and effective date displayed at the top of the document. We encourage you to review this Policy periodically to stay informed about how pvip protects your personal data.

12.3 Your continued use of the pvip platform after the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the changes, you must cease using the platform and may request account closure and data deletion in accordance with Section 8.

13 Contact the Data Privacy Officer

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or pvip's handling of your personal data, you may contact pvip's designated Data Privacy Officer through the following channel:

13.2 For responsible gaming concerns, account self-exclusion, or gambling harm support, please visit the pvip Responsible Gaming page for dedicated resources and tools.

13.3 If you are not satisfied with pvip's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through its official complaints process.

13.4 For general account inquiries unrelated to data privacy, please visit the pvip FAQ page or contact the pvip customer support team via the live chat function available on the platform.