vip27 Privacy Policy

vip27 ("we", "us", "our") is committed to protecting and respecting the privacy of all players and visitors who access the vip27 Platform at vip27.ws. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by vip27.

This policy is written in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). It also reflects the data governance requirements imposed on vip27 as a PAGCOR-regulated online gaming operator.

Please read this Privacy Policy carefully and in full. It is intended to be clear, accessible, and written in plain English so that every Filipino player — whether you are based in Manila, Cebu, Davao, Quezon City, or anywhere else across the archipelago — can understand exactly how your personal information is used.

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, vip27 is the data controller responsible for your personal data collected through the Platform.

vip27 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. You can reach our DPO at any time using the contact details set out in Section 14 of this policy.

vip27 collects the following categories of personal data from players and visitors:

3.1 Registration & Identity Data

• Full legal name, date of birth, and gender
• Residential address (including barangay, city/municipality, province)
• Valid government-issued ID details (e.g., PhilSys ID, passport, driver's licence, UMID)
• Email address and mobile number
• Username and encrypted password

3.2 Financial Data

• GCash and PayMaya mobile wallet account numbers
• Bank account details for BPI, BDO, or Metrobank transfers (account name and number only)
• Deposit, withdrawal, and transaction history in Philippine Peso (₱)
• Source-of-funds declarations submitted as part of KYC verification

3.3 Usage & Technical Data

• IP address, device type, operating system, and browser information
• Login timestamps, session duration, and game activity logs
• Pages viewed, navigation paths, and feature interactions within the Platform
• Geolocation data (city/region level) derived from your IP address

3.4 Communications Data

• Records of Live Chat conversations with vip27 customer support agents
• Email correspondence sent to or received from vip27
• Responses to surveys, feedback forms, or promotions where you choose to participate

3.5 Responsible Gaming Data

• Self-exclusion requests and the terms thereof
• Deposit limit, loss limit, and session time limit settings
• Any disclosures made to our Responsible Gaming team

vip27 collects personal data through the following means:

• Direct collection: Information you actively provide when registering for an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, and server logs. See Section 8 for full details on our cookie practices.
• Third-party sources: Identity verification data from licensed third-party KYC service providers; transaction confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank; and fraud-screening data from anti-fraud and anti-money-laundering service providers.
• Regulatory sources: Information provided to or obtained from PAGCOR or other Philippine government agencies in connection with our licensing and compliance obligations.

vip27 processes your personal data for the following specific, legitimate purposes:

1. Account registration and management — to create, maintain, and administer your vip27 player Account.
2. Identity verification and KYC — to verify your identity, age (21+), and residential address as required by PAGCOR and RA 10173.
3. Payment processing — to process deposits, withdrawals, and transaction records in PHP via your chosen payment method.
4. Game operation and integrity — to deliver game services, maintain accurate win/loss records, and investigate disputes.
5. Regulatory compliance — to meet obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine law.
6. Customer support — to respond to your queries, complaints, and feedback in a timely and effective manner.
7. Responsible gaming — to administer self-exclusion, deposit limits, and other player protection tools; and to identify and assist players who may be experiencing gambling harm.
8. Security and fraud prevention — to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
9. Platform improvement — to analyse aggregate usage patterns and improve the functionality, design, and content of the vip27 Platform.
10. Marketing communications — to send you promotional offers, bonus notifications, and updates about vip27 where you have consented to receive such communications or where permitted by applicable law. You may withdraw consent at any time.

Under the Data Privacy Act of 2012, vip27 relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered vip27 player, including Account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives.
• Legitimate interests: Processing for fraud prevention, platform security, aggregate analytics, and customer support, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where your freely given, specific, and informed consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
• Vital interests: Processing necessary to protect the vital interests of a data subject, for example in responsible gaming interventions where a player's wellbeing may be at risk.

vip27 does not sell your personal data. We share your information only with the following categories of recipients, and only to the extent strictly necessary:

• Payment service providers: GCash, PayMaya, BPI, BDO, and Metrobank, solely for the purpose of processing your deposit and withdrawal transactions.
• KYC and identity verification providers: Licensed third-party services engaged to verify player identity and age in compliance with PAGCOR requirements.
• Anti-fraud and AML screening providers: Services used to screen transactions and player activity against sanctions lists and fraud databases as required under the Anti-Money Laundering Act.
• IT and cloud infrastructure providers: Hosting, database, and security service providers who process data on vip27's behalf under strict data processing agreements that require them to maintain confidentiality and security.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies where disclosure is required by law, court order, or regulatory direction.
• Game content providers: Where required to resolve game disputes, limited game activity logs may be shared with the relevant licensed game software provider.

All third-party service providers engaged by vip27 are required by contract to process your personal data only in accordance with our instructions and in compliance with applicable Philippine data protection law.

vip27 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow us to recognise your browser and remember certain information about your session.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without affecting your ability to use vip27.
• Performance & Analytics Cookies: Used to collect anonymous information about how players use the Platform — which pages are visited most, how long sessions last, and where errors occur. This data helps us improve the Platform experience.
• Functionality Cookies: Used to remember your preferences, such as language settings and game display preferences, to personalise your experience on the Platform.
• Marketing & Targeting Cookies: Used to deliver relevant promotional content to you on the Platform and to measure the effectiveness of our campaigns. These are only set with your explicit consent.

8.2 Managing Cookies

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the vip27 Platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

vip27 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the vip27 Platform;
• Encryption of sensitive data fields (including passwords and financial account details) at rest;
• Role-based access controls that limit staff access to personal data strictly to those with a need to know;
• Regular penetration testing and vulnerability assessments of the Platform and supporting infrastructure;
• Multi-factor authentication for administrative access to systems holding personal data;
• Comprehensive data breach response and notification procedures in accordance with NPC requirements.

Despite our best efforts, no method of data transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vip27 will notify you and the National Privacy Commission in accordance with the timeframes and procedures prescribed under RA 10173 and its Implementing Rules.

vip27 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required by applicable Philippine law and PAGCOR regulations. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years after Account closure, as required under PAGCOR licensing conditions and AMLA obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLA record-keeping requirements.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years thereafter as evidence of lawful processing.
• Responsible gaming records: Retained for the duration of any self-exclusion period plus five (5) years, to enable effective enforcement of exclusion terms.

Upon the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with vip27's data retention and disposal procedures.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vip27. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.

vip27 will respond to all data subject requests within fifteen (15) working days of receipt. Where a request is complex or numerous, we may extend this period by a further fifteen (15) working days with prior written notice to you.

The vip27 Platform is strictly intended for use by individuals aged 21 years and above. vip27 does not knowingly collect or process personal data of individuals under the age of 21.

As part of our registration and KYC process, all players are required to verify their age using a valid government-issued identification document. Any Account found to have been created by or on behalf of a person under 21 years of age will be immediately suspended and closed, all funds will be frozen pending investigation, and the matter may be reported to PAGCOR and relevant authorities.

If you are a parent or guardian and believe that a minor has created an Account on vip27, please contact us immediately at [email protected] so that we can take appropriate action.

vip27 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

Where changes are material — meaning they significantly affect your rights or the way we process your data — vip27 will provide at least fourteen (14) days' advance notice to registered players via email to the address on file, or via a prominent notice on the Platform.

Your continued use of the vip27 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must discontinue use of the Platform and may request Account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vip27 processes your personal data, please contact our Data Protection Officer through any of the following channels:

• General Inquiries: [email protected]
• Data Privacy Requests: [email protected] (subject line: "Data Privacy Request")
• Responsible Gaming: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the vip27 Platform

All data privacy requests will be acknowledged within two (2) business days and resolved within fifteen (15) working days, subject to the complexity of the request.