Privacy Policy – pkvip.com

1. Who We Are

pkvip.com (referred to in this Policy as "we," "us," "our," or the "Platform") is an online casino and gaming platform operated for the benefit of Filipino players. The Platform is accessible at pkvipcom.org and offers a range of casino games, live dealer experiences, and sports betting services.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations (IRR), pkvip.com acts as the Personal Information Controller (PIC) in respect of the personal data it collects from users of the Platform.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with the DPA. Contact details for our DPO are provided in Section 15 of this Policy.

2. Data We Collect

pkvip.com collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Identity & Registration Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (used to verify the 21+ age requirement);
• Gender;
• Nationality and country of residence;
• Government-issued ID number (e.g., PhilSys National ID, passport, driver's license, UMID, SSS ID, or voter's ID);
• Username and encrypted password.

2.2 Contact Data

• Philippine mobile number (used for account verification and 2FA);
• Email address;
• Residential address (province, city/municipality, barangay, ZIP code).

2.3 Financial & Payment Data

• GCash or Maya account number (mobile number associated with the e-wallet);
• Bank account details for bank transfer transactions (account name, account number, bank name — e.g., BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank);
• Debit card details (card number, expiry date — stored in tokenized form only);
• Transaction history, deposit and withdrawal records.

2.4 Gaming & Behavioral Data

• Game session logs (games played, wagers placed, outcomes, session duration);
• Bonus and promotion usage history;
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests);
• Customer support interaction records.

2.5 Technical & Device Data

• IP address and approximate geolocation (province/city level);
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Cookie identifiers and similar tracking data (see Section 7).

2.6 Sensitive Personal Information

In limited circumstances, pkvip.com may collect sensitive personal information as defined under the DPA, including government ID numbers and financial account details. Such data is collected solely for identity verification and payment processing purposes and is subject to enhanced security controls.

3. How We Collect Data

We collect personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion;
• Automatically — through cookies, web beacons, and server logs when you access and interact with the Platform (see Section 7);
• From third-party payment processors — GCash, Maya, and partner banks may share transaction confirmation data with us to verify deposits and withdrawals;
• From identity verification providers — third-party KYC service providers may share verification results (pass/fail, document authenticity) with us as part of the onboarding process;
• From regulatory authorities — PAGCOR or other Philippine government agencies may share information with us in connection with regulatory compliance obligations.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, pkvip.com processes your personal data on the following legal bases:

5. How We Use Your Data

pkvip.com uses the personal data we collect for the following specific purposes:

• To create, verify, and manage your pkvip.com account;
• To verify your identity and confirm that you meet the 21+ age requirement mandated by Philippine gaming regulations;
• To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity in compliance with the Anti-Money Laundering Act (AMLA) and its amendments;
• To monitor gameplay for responsible gaming purposes and to apply self-imposed limits or exclusions at your request;
• To provide customer support and respond to your inquiries;
• To send you transactional communications (account confirmations, deposit receipts, withdrawal notifications, security alerts);
• To send you promotional communications about bonuses and offers — only where you have given explicit consent, and only until you withdraw that consent;
• To comply with reporting obligations to PAGCOR and other Philippine regulatory authorities;
• To improve the Platform's performance, user experience, and game offerings through aggregated analytics.

6. Data Sharing & Disclosure

pkvip.com does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the DPA. These include:

• Payment processors — GCash (Mynt), Maya (PayMaya Philippines), and partner banks for transaction processing;
• KYC / identity verification providers — for document authentication and age verification;
• Cloud infrastructure providers — for secure data hosting and platform operations;
• Customer support platforms — for live chat and ticketing services;
• Analytics providers — for aggregated, anonymized platform usage analysis.

All service providers are contractually bound to process your data only on our instructions, to maintain appropriate security standards, and to comply with the DPA.

6.2 Regulatory & Legal Disclosure

We may disclose your personal data to Philippine government authorities, law enforcement agencies, or courts where we are legally required to do so, including:

• PAGCOR (Philippine Amusement and Gaming Corporation) — for regulatory compliance and licensing;
• AMLC (Anti-Money Laundering Council) — for suspicious transaction reporting under AMLA;
• NPC (National Privacy Commission) — in connection with data breach notifications or regulatory inquiries;
• Philippine courts or law enforcement — pursuant to a valid court order or legal process.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of pkvip.com, your personal data may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

7. Cookies & Tracking Technologies

pkvip.com uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit the Platform. We use the following categories of cookies:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

8. Data Retention

pkvip.com retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus 5 years after account closure, in compliance with AMLA record-keeping requirements;
• Transaction and financial records: Retained for 5 years from the date of each transaction, as required by AMLA and BIR regulations;
• Gaming session logs: Retained for 2 years from the date of each session;
• Customer support records: Retained for 3 years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn, plus 1 year thereafter as evidence of consent;
• Technical and device logs: Retained for 12 months on a rolling basis.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures.

9. Data Security

pkvip.com implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher;
• Encryption at rest: Sensitive personal data, including financial account details and government ID numbers, is encrypted at rest using AES-256;
• Access controls: Personal data is accessible only to authorized personnel on a strict need-to-know basis, enforced through role-based access controls;
• Two-factor authentication (2FA): Required for all staff accounts with access to personal data systems;
• Regular security audits: The Platform undergoes periodic penetration testing and vulnerability assessments by independent security firms;
• Data breach response: We maintain a documented incident response plan. In the event of a personal data breach, we will notify the National Privacy Commission (NPC) within 72 hours of discovery, and affected data subjects within a reasonable timeframe, as required by the DPA.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by pkvip.com:

11. Children & Minors

If we discover that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the incident to the relevant Philippine authorities as required by law. If you believe that a minor has registered on the Platform, please contact us immediately at the details provided in Section 15.

12. Cross-Border Data Transfers

Some of our service providers — including cloud infrastructure and KYC verification providers — may process your personal data outside of the Philippines. Where such cross-border transfers occur, pkvip.com ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and NPC Circular No. 16-01, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Verification that the recipient country or organization provides an adequate level of data protection;
• Your explicit consent where required by the NPC.

A list of countries to which your data may be transferred is available upon request from our Data Protection Officer.

13. Third-Party Links

The pkvip.com Platform may contain links to third-party websites or services (for example, payment provider portals). This Privacy Policy applies only to the pkvip.com Platform. We are not responsible for the privacy practices of any third-party websites, and we encourage you to review the privacy policies of any external sites you visit.

14. Policy Updates

pkvip.com reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will:

• Update the "Last Updated" date at the top of this Policy;
• Notify registered users via the email address associated with their account;
• Display a prominent notice on the Platform for at least 30 days following the update.

Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must cease using the Platform and request account closure.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights under the DPA, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your data rights have been violated. The NPC can be reached through its official government channels.