27vip Privacy Policy

01 Introduction

27vip is committed to protecting the privacy and security of all personal information entrusted to us by our players. This Policy applies to all personal data collected through the 27vip website, mobile applications, customer support channels, and any other touchpoints through which you interact with our Services.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents with respect to data privacy matters, this Policy shall prevail.

02 Data Controller

27vip acts as the data controller for all personal information collected through the platform. As data controller, we determine the purposes and means by which your personal data is processed. We are responsible for ensuring that your data is handled in accordance with applicable data protection laws and this Policy.

If you have any questions or concerns about how your personal data is processed, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

03 Data We Collect

3.1 Identity & Contact Information

• Full legal name, date of birth, and nationality
• Government-issued identification number (e.g., PhilSys ID, passport, driver's license)
• Residential address, city, and province (e.g., Manila, Cebu, Davao, Quezon City, Makati)
• Email address and mobile phone number

3.2 Financial Information

• Payment method details (e.g., GCash account number, PayMaya account, BPI or BDO bank account details)
• Transaction history, including deposits, withdrawals, and bonus activity
• Source of funds documentation where required for KYC compliance

3.3 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Login timestamps, session duration, and pages visited
• Game activity, betting history, and platform interaction logs
• Geolocation data (country/region level) for compliance purposes

3.4 Communications Data

• Records of correspondence with our customer support team via live chat or email
• Responses to surveys, promotions, or feedback requests
• Marketing preferences and communication opt-in/opt-out records

04 How We Collect Data

27vip collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification and fraud prevention data from licensed third-party KYC and AML service providers.
• Payment processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment partners.

05 How We Use Your Data

27vip processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your 27vip player account.
• Identity verification: To verify your identity and age (21+) in compliance with applicable regulations.
• Transaction processing: To process deposits, withdrawals, and bonus payments accurately and securely.
• Legal compliance: To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable legal obligations.
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct.
• Customer support: To respond to your inquiries, complaints, and support requests.
• Responsible gaming: To monitor gaming activity and apply responsible gaming tools where appropriate.
• Marketing: To send you promotional offers, bonuses, and platform updates, subject to your communication preferences.
• Platform improvement: To analyze usage patterns and improve the functionality, security, and user experience of the 27vip platform.

06 Legal Basis for Processing

27vip processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have agreed to.
• Legal obligation: Processing required to comply with applicable laws, including AML, KYC, and gaming regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and business analytics, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time.

07 Sharing Your Data

27vip does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following circumstances:

• Service providers: Trusted third-party vendors who assist us in operating the platform, including payment processors (GCash, PayMaya, BPI, BDO), KYC verification providers, fraud detection services, and IT infrastructure partners. These parties are contractually bound to process your data only on our instructions and in accordance with applicable law.
• Regulatory authorities: Government agencies, law enforcement bodies, or regulatory authorities where disclosure is required by law or court order, including the Philippine Amusement and Gaming Corporation (PAGCOR) and the Anti-Money Laundering Council (AMLC).
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
• Fraud prevention networks: Industry-wide fraud prevention and responsible gaming databases, where sharing is necessary to protect the integrity of the platform and the safety of players.

08 Data Retention

27vip retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. In general, we apply the following retention periods:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our internal data disposal procedures.

09 Security Measures

27vip implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive personal and financial data at rest
• Multi-factor authentication options for player accounts
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Incident response procedures for detecting and responding to data breaches

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable law.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 27vip platform. They help us recognize your device, remember your preferences, and analyze how you use our Services. We also use similar technologies such as web beacons and local storage objects.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login status to improve your experience.
• Analytics cookies: Help us understand how players interact with the platform so we can improve performance and usability.
• Marketing cookies: Used to deliver relevant promotional content based on your interests and platform activity, subject to your consent.

10.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 27vip platform. For strictly necessary cookies, no opt-out is available as they are required for the platform to operate.

11 Your Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by 27vip:

• Right to be informed: The right to know how your personal data is being collected and processed.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

12 Minors

The 27vip platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the 27vip platform, please contact us immediately at [email protected] so that we can take appropriate action.

13 Changes to This Policy

27vip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes, we will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal information. Your continued use of the 27vip platform following any update constitutes your acceptance of the revised Policy.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 27vip handles your personal data, please reach out to our Data Protection Officer. We are committed to addressing all privacy-related inquiries promptly and transparently.