Scope of this Policy: This Privacy Policy applies to all personal data collected by pinayvip through the pinayvip.app website, any associated mobile interfaces, and all customer support and payment interactions. It applies to all registered players, prospective registrants, and visitors who browse the platform without registering.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for personal data processed through the pinayvip platform is the pinayvip operating entity ("pinayvip," "we," "us," or "our").
pinayvip has appointed a Data Protection Officer (DPO) as required by the National Privacy Commission. The DPO is responsible for overseeing compliance with this Privacy Policy and with RA 10173. Contact details for the pinayvip DPO are set out in Section 16 of this Policy.
pinayvip is registered with the National Privacy Commission in accordance with the requirements of RA 10173 and the NPC's registration framework for personal information controllers processing sensitive personal information.
pinayvip collects the following categories of personal data from players and platform users:
2.1 Identity and Registration Data
2.2 Contact Data
2.3 Financial and Transaction Data
2.4 Gaming and Account Activity Data
2.5 Technical and Device Data
Sensitive Personal Information: Government ID numbers, financial account details, and health-related information (if disclosed in a responsible gaming context) are classified as sensitive personal information under RA 10173 and are subject to the highest level of protection pinayvip applies to any data category.
pinayvip collects personal data through the following mechanisms:
pinayvip uses the personal data it collects for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and maintenance | Identity data, contact data |
| Age and identity verification (KYC) | Identity data, government ID documents |
| Processing deposits and withdrawals | Financial data, identity data |
| Anti-money laundering compliance (AMLC) | Financial data, identity data, transaction history |
| Fraud detection and prevention | Technical data, financial data, gaming activity |
| Responsible gaming monitoring | Gaming activity, financial data, responsible gaming settings |
| Customer support | Identity data, contact data, account activity |
| Platform security and integrity | Technical data, gaming activity, login history |
| PAGCOR regulatory reporting | Identity data, financial data, gaming activity |
| Promotional communications (with consent) | Contact data, gaming activity (for personalization) |
| Platform improvement and analytics | Technical data, gaming activity (aggregated/anonymized) |
Under the Philippine Data Privacy Act, pinayvip processes personal data only where a valid legal basis exists. The legal bases applicable to pinayvip's processing activities are:
pinayvip does not sell, rent, or trade your personal data to third parties for their own commercial purposes. pinayvip shares personal data only in the following circumstances and only to the extent necessary for the stated purpose:
6.1 Payment Processors
Transaction data is shared with GCash, Maya, Philippine bank processors, and other payment service providers strictly to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by confidentiality agreements with pinayvip.
6.2 KYC and Identity Verification Providers
Identity documents and related personal data are shared with licensed third-party KYC service providers for the sole purpose of verifying your identity and age. These providers are contractually bound to process your data only for this purpose and to maintain equivalent security standards.
6.3 Regulatory Authorities
pinayvip is legally obligated to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities when required by law, court order, or valid regulatory request. We do not have discretion to refuse legally mandated regulatory disclosures.
6.4 Game Software Providers
Game providers may receive anonymized session and technical data necessary for game delivery and technical support. Personal identity data is not shared with game providers beyond what is technically necessary for game operation.
6.5 Legal and Security Purposes
Personal data may be shared with law enforcement agencies, legal counsel, or other relevant parties where pinayvip has a good-faith belief that disclosure is necessary to investigate suspected fraud, protect the security of the platform, or protect the rights and safety of players or third parties.
What We Do Not Do: pinayvip does not share your personal data with advertising networks, data brokers, or unrelated commercial third parties. We do not use your gameplay data to build advertising profiles for third-party platforms.
7.1 Some of pinayvip's service providers — including cloud hosting infrastructure, KYC verification platforms, and game software providers — may process data in servers located outside of the Philippines. Where such transfers occur, pinayvip ensures that appropriate safeguards are in place in compliance with the cross-border data transfer provisions of RA 10173 and NPC regulations.
7.2 Safeguards used for international transfers include: contractual data processing agreements with receiving parties, binding corporate rules where applicable, and assessment of the receiving country's data protection framework to confirm it provides adequate protections equivalent to Philippine standards.
7.3 Where you have concerns about international transfers of your data, you may contact the pinayvip Data Protection Officer using the contact details in Section 16 to request further information about the specific safeguards applicable to your data.
pinayvip retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | AMLC / PAGCOR requirements |
| Financial transaction records | 5 years from transaction date | RA 9160 (AMLA), as amended |
| KYC / identity documents | 5 years post-account closure | PAGCOR regulatory obligation |
| Game session logs | 2 years from session date | Legitimate interest (dispute resolution) |
| Customer support records | 3 years from last interaction | Legitimate interest |
| Marketing consent records | Until consent withdrawn + 1 year | Consent / legal compliance |
| Self-exclusion records | Duration of exclusion + 2 years | Responsible gaming obligation |
| Technical / log data | 90 days | Security / fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized using methods that prevent re-identification.
pinayvip uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and understand how players interact with the site. The categories of cookies used are:
pinayvip does not use advertising or retargeting cookies that track your activity across third-party websites. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your pinayvip account.
pinayvip implements the following technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:
Your Role in Account Security: No security system is impenetrable. You are responsible for maintaining the confidentiality of your pinayvip login credentials. Use a strong, unique password. Enable 2FA. Do not share your account details with anyone. Report suspected unauthorized access to pinayvip support immediately.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pinayvip. These rights are not theoretical — they are legally enforceable and pinayvip is obligated to respond to valid requests within 15 calendar days of receipt:
You have the right to know whether pinayvip holds personal data about you, and to receive a copy of this Privacy Policy explaining how your data is collected, used, and shared.
You may request a copy of the personal data pinayvip holds about you, including transaction history, KYC records, and account activity logs, in a structured and readable format.
If any personal data pinayvip holds about you is inaccurate or incomplete, you have the right to request correction. This is particularly important for name and address data used in KYC verification.
You may request that pinayvip delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis exists. This right is subject to pinayvip's legal retention obligations under AMLC and PAGCOR regulations.
You may object to pinayvip processing your personal data for direct marketing at any time. You may also object to processing based on pinayvip's legitimate interests where your particular circumstances justify it.
You may request a copy of your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON), and have it transferred directly to another controller where technically feasible.
Under RA 10173, you are entitled to be indemnified for damages sustained as a result of a violation of your data privacy rights by pinayvip, in accordance with Philippine law.
If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC) of the Philippines. pinayvip's DPO can assist you with information about the NPC complaint process on request.
How to Exercise Your Rights: Submit your data subject rights request by contacting the pinayvip Data Protection Officer at the contact details in Section 16. pinayvip will acknowledge your request within 48 hours and provide a substantive response within 15 calendar days. Complex requests may take up to 30 days where justified, with prior notice to you.
12.1 pinayvip is strictly a 21+ platform. The collection of personal data from individuals under the age of 21 is not permitted under pinayvip's Terms and Conditions or under PAGCOR's regulatory framework for online gaming operators in the Philippines.
12.2 pinayvip does not knowingly collect, retain, or process personal data from any person under 21 years of age. The KYC verification process is specifically designed to detect and prevent underage registration.
12.3 If pinayvip discovers or has reason to believe that it has collected personal data from an individual under 21, all such data will be immediately deleted, the associated account will be permanently closed, and any funds held in that account will be returned in accordance with applicable law.
12.4 If you are a parent or guardian and believe that a minor under your care has registered on pinayvip, please contact the pinayvip Data Protection Officer immediately using the contact details in Section 16.
13.1 pinayvip may send you marketing communications — including promotional offers, bonus notifications, and platform updates — only where you have provided explicit, informed consent to receive such communications at the time of registration or through your account settings.
13.2 Marketing communications from pinayvip may be delivered via the following channels where you have consented: email, SMS to your registered Philippine mobile number, and in-platform notifications when you are logged into your account.
13.3 You may withdraw your consent to receive marketing communications at any time. Opt-out options are included in every marketing email and SMS. You may also update your communication preferences directly from your pinayvip account settings. Withdrawal of marketing consent does not affect the processing of your data for account operation and regulatory compliance purposes.
13.4 pinayvip does not share your contact details with third parties for the purpose of sending you their marketing communications.
14.1 The pinayvip platform may contain links or integrations with third-party services — including payment provider portals (GCash, Maya, bank online portals) and game provider interfaces. These third-party services operate under their own privacy policies, which are independent of this Privacy Policy.
14.2 pinayvip is not responsible for the privacy practices of third-party services accessed through or in connection with the pinayvip platform. When you leave the pinayvip platform to complete a payment through GCash, Maya, or a Philippine bank's portal, your data becomes subject to that provider's privacy policy.
14.3 pinayvip recommends that Players review the privacy policies of all third-party payment providers and services they use in connection with their pinayvip account.
15.1 pinayvip reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in Philippine law or NPC guidance, changes in our service offering, or changes in the third parties we work with.
15.2 Material changes to this Privacy Policy — specifically, changes that affect how your personal data is used or shared — will be communicated to you via your registered email address or a prominent notice on the pinayvip platform at least seven (7) days before the changes take effect.
15.3 Non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy) may be made at any time without advance notice.
15.4 The version number and effective date shown at the top of this Policy identify the current iteration. Previous versions of this Policy are available from the pinayvip Data Protection Officer on request.
15.5 Your continued use of the pinayvip platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with material changes, you should cease using the platform before the effective date and contact customer support to close your account.
For all privacy-related inquiries, data subject rights requests, or complaints, please contact the pinayvip Data Protection Officer:
pinayvip Data Protection Officer
Email (plain text — not a clickable link):
support@pinayvip.app
Subject line: Privacy Policy Inquiry / Data Subject Request
All privacy inquiries are handled by the pinayvip compliance team. We acknowledge receipt within 48 hours and provide a substantive response within 15 calendar days as required by RA 10173. For urgent account security matters (such as suspected unauthorized access), please use the pinayvip 24/7 live chat support channel for faster response.
If you are not satisfied with pinayvip's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). Information about the NPC complaint process is available from the NPC's official channels.