pinayvip Privacy Policy

pinayvip ("pinayvip," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online gaming platform at pinayvip.net (the "Platform"). This Privacy Policy describes how pinayvip collects, uses, stores, shares, and protects your personal information when you access or use the Platform, create an account, make a deposit, participate in games, or contact our support team.

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects our obligations under the Anti-Money Laundering Act (AMLA) and the regulatory requirements of the Philippine Amusement and Gaming Corporation (PAGCOR).

This Privacy Policy should be read together with our Terms & Conditions, which are available at /terms-conditions, and our Responsible Gaming Policy at /responsible-gaming. Capitalized terms not defined in this Privacy Policy have the meanings given to them in the Terms & Conditions.

pinayvip collects personal data that you provide directly to us, data generated automatically through your use of the Platform, and data obtained from third parties where permitted by law. The categories of personal data we collect include:

2.1 Registration & Identity Data

When you create a pinayvip account, we collect:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify you are 21 years of age or older);
• Residential address (including barangay, city/municipality, province, and ZIP code);
• Philippine mobile number;
• Email address;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR requirements and Philippine AML regulations, we collect:

• Copies of government-issued photo ID (PhilSys National ID, passport, driver's license, SSS ID, GSIS ID, PRC ID, or voter's ID);
• Selfie photographs taken while holding your ID;
• Proof of address documents (utility bills, bank statements) where required;
• Source of funds documentation for high-value transactions.

2.3 Financial & Transaction Data

• GCash or PayMaya account numbers linked to your pinayvip account;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where used for transactions;
• Deposit and withdrawal history, including amounts, dates, and payment methods;
• Bonus and promotional transaction records.

2.4 Gameplay & Activity Data

• Game session logs, including games played, bet amounts, win/loss records, and session duration;
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests);
• Bonus and promotion participation history;
• Customer support interaction records, including live chat transcripts and email correspondence.

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Unique device identifiers;
• Session timestamps and page interaction data collected via cookies and similar technologies (see Section 6).

pinayvip uses your personal data for the following purposes:

pinayvip does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law (such as automated fraud screening, which is always subject to human oversight).

Under the Data Privacy Act of 2012, pinayvip processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, game delivery, and payment processing — is necessary for the execution of the Terms & Conditions you agreed to upon registration.
• Legal obligation: Processing required to comply with Philippine law, including KYC verification under PAGCOR regulations, AML reporting obligations under the AMLA, and data retention requirements under applicable statutes.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where our legitimate interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as sending promotional communications and marketing materials. You may withdraw your consent at any time by contacting our support team or updating your communication preferences in your account settings.

pinayvip does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

5.1 Service Providers

pinayvip engages trusted third-party service providers to assist in operating the Platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment partners), KYC verification service providers, game software providers, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually bound to process your data only on pinayvip's instructions and in accordance with applicable data protection law.

5.2 Regulatory Authorities

pinayvip is required by Philippine law to share certain data with regulatory and law enforcement authorities, including:

• The Philippine Amusement and Gaming Corporation (PAGCOR) — for licensing compliance and player protection purposes;
• The Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under the AMLA;
• The National Privacy Commission (NPC) — in the event of a data breach or upon regulatory inquiry;
• Philippine law enforcement agencies — where required by a valid court order or legal process.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of pinayvip's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

pinayvip uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and detect fraudulent activity. A cookie is a small text file placed on your device when you visit the Platform.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that help detect fraudulent activity. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations. Disabling these cookies may affect your experience on the Platform.
• Analytics Cookies: Collect anonymized data about how players use the Platform — which pages are visited most, how long sessions last, and where players encounter errors. This data helps us improve the Platform. You may opt out of analytics cookies via your browser settings.
• Security & Fraud Prevention Cookies: Help pinayvip identify unusual login patterns, detect the use of multiple accounts, and prevent unauthorized access. These are essential for platform integrity.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your pinayvip account. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

pinayvip retains your personal data for as long as your account is active and for a period thereafter as required by Philippine law and our legitimate business interests. The following retention periods apply:

Upon expiry of the applicable retention period, pinayvip will securely delete or anonymize your personal data. Anonymized data — which cannot be used to identify you — may be retained indefinitely for statistical and analytical purposes.

pinayvip implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and the pinayvip Platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages, including login, deposit, and withdrawal flows.
• Encryption at rest: Sensitive personal data, including KYC documents and financial information, is encrypted at rest using AES-256 encryption on our servers.
• Access controls: Access to personal data is restricted to pinayvip employees and contractors who need it to perform their job functions. All access is logged and subject to regular review.
• Two-factor authentication: pinayvip's internal systems require multi-factor authentication for all staff accessing player data. We also offer SMS OTP-based 2FA to players for their account security.
• Regular security audits: pinayvip engages independent security firms to conduct penetration testing and vulnerability assessments on a regular basis.
• Incident response: pinayvip maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the DPA.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pinayvip:

To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 13. We will respond to all verified requests within thirty (30) days. In some cases, we may need to verify your identity before processing your request. Where we are unable to fulfill a request due to a legal obligation (such as AML retention requirements), we will explain the reason in our response.

If you believe pinayvip has not adequately addressed your privacy concerns, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at www.privacy.gov.ph (visit the NPC website directly — this is not a clickable link from pinayvip).

During the registration process, pinayvip requires all applicants to confirm that they are at least 21 years of age. We verify this through our KYC process, which requires submission of a government-issued photo ID showing the applicant's date of birth. Any account found to belong to a person under 21 years of age will be immediately suspended, all funds will be returned to the payment source, and the account will be permanently closed.

If you are a parent or guardian and believe that a minor has registered on the pinayvip Platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

pinayvip primarily stores and processes your personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and game software suppliers — may process data in other jurisdictions. Where such cross-border transfers occur, pinayvip ensures that:

• The receiving country provides an adequate level of data protection as determined by the National Privacy Commission;
• Appropriate contractual safeguards are in place, including data processing agreements that impose obligations equivalent to those under the Philippine Data Privacy Act; and
• The transfer is limited to the minimum data necessary for the service provider to perform their contracted function.

pinayvip does not transfer your KYC documents or sensitive personal information outside the Philippines except where strictly required for identity verification services, and only to providers that meet the NPC's cross-border transfer requirements.

pinayvip may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date;
• Send a notification to the email address registered to your pinayvip account at least fourteen (14) days before the changes take effect; and
• Display a prominent notice on the Platform for at least thirty (30) days following the update.

Your continued use of the pinayvip Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you must stop using the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how pinayvip protects your personal data. Previous versions of this Privacy Policy are available upon request from our Data Protection Officer.

pinayvip has appointed a Data Protection Officer (DPO) as required by the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

We aim to respond to all privacy-related inquiries within five (5) business days. For formal data subject rights requests, we will acknowledge receipt within three (3) business days and provide a substantive response within thirty (30) calendar days, as required by the Data Privacy Act of 2012.