pkvip2 Privacy Policy

01 Introduction

pkvip2 ("pkvip2," "we," "us," or "our") operates the online gaming platform accessible at pkvip2.app. We are committed to protecting the privacy and personal data of every Filipino player who uses our platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

This Policy applies to all personal data collected through the pkvip2 website, mobile applications, customer support channels, and any other touchpoint through which you interact with pkvip2. It should be read together with our Terms & Conditions, which govern your use of the pkvip2 platform.

By registering a pkvip2 account or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the pkvip2 platform immediately.

pkvip2 is the data controller responsible for your personal data. We have appointed a Data Protection Officer (DPO) who oversees our compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Contact details for our DPO are provided in Section 13.

02 Personal Data We Collect

pkvip2 collects personal data through several channels. The categories of data we collect include:

2.1 Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — you must be 21 or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address (province, city/municipality)

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., passport, SSS ID, PhilHealth ID, UMID, driver's license, or Postal ID)
• Selfie or liveness verification image (where required)
• Source of funds declaration (for high-value accounts)

2.3 Financial Data

• GCash mobile number or PayMaya account details
• Bank account name and number (for BPI, BDO, Metrobank withdrawals)
• Transaction history (deposits, withdrawals, wagers, bonuses)
• Payment card details (processed and tokenized by our PCI-DSS compliant payment processor — pkvip2 does not store raw card numbers)

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used
• Login timestamps and access logs
• Cookie identifiers and session tokens

2.5 Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with pkvip2 support or compliance teams
• Feedback, survey responses, and promotional opt-in preferences

03 How We Use Your Personal Data

pkvip2 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your pkvip2 account, including processing deposits, withdrawals, and wagers.
• Identity Verification: To verify your identity and age (21+) in compliance with applicable Philippine gaming and anti-money laundering regulations.
• Payment Processing: To process GCash, PayMaya, bank transfer, and card transactions securely and accurately.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal conduct.
• Regulatory Compliance: To fulfill our obligations under the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and any applicable PAGCOR-context regulatory requirements.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the pkvip2 platform experience for Filipino players.
• Responsible Gaming: To monitor gaming behavior and proactively offer responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) where appropriate.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent. You may withdraw consent at any time.

pkvip2 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), pkvip2 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the pkvip2 Terms & Conditions, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with Philippine law, including anti-money laundering reporting obligations, age verification requirements, and tax reporting.
• Legitimate Interests: Processing necessary for pkvip2's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

pkvip2 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and card payment processors — solely to facilitate deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and liveness verification service providers engaged to assist with age and identity verification, operating under strict data processing agreements.
• Regulatory Authorities: The Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or court order.
• IT Infrastructure Providers: Cloud hosting, database, and cybersecurity service providers who process data on our behalf under binding data processing agreements that prohibit independent use of your data.
• Responsible Gaming Partners: Where you have requested self-exclusion or referral to support services, we may share limited data with accredited responsible gaming organizations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom pkvip2 shares personal data are contractually required to implement appropriate technical and organizational security measures and to process your data only for the specific purposes for which it was shared.

06 Cookies & Tracking Technologies

pkvip2 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit pkvip2. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Used to collect anonymized data about how players navigate the pkvip2 platform, which pages are visited most frequently, and where errors occur. This data helps us improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming limit configurations.

pkvip2 does not use advertising cookies, cross-site tracking pixels, or third-party behavioral profiling technologies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the pkvip2 platform.

We do not use fingerprinting technologies or any tracking method designed to identify you across websites you visit outside of pkvip2.

07 Data Security

pkvip2 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and pkvip2 servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at Rest: Sensitive personal data stored in pkvip2 databases is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to pkvip2 personnel who require it to perform their job functions. All staff with data access undergo background checks and regular privacy training.
• Multi-Factor Authentication: pkvip2 systems require multi-factor authentication for all administrative access to production environments containing personal data.
• Penetration Testing: pkvip2 engages independent cybersecurity firms to conduct regular penetration testing and vulnerability assessments of our platform infrastructure.
• Incident Response: pkvip2 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by RA 10173.

While pkvip2 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your pkvip2 login credentials and for notifying us immediately if you suspect unauthorized access to your account.

08 Data Retention

pkvip2 retains your personal data for the periods set out below, after which data is securely deleted or anonymized:

• Account Data: Retained for the duration of your active pkvip2 account, plus five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• KYC & Identity Documents: Retained for five (5) years from the date of submission or account closure, whichever is later, as required by the Anti-Money Laundering Act (RA 9160).
• Transaction Records: Retained for five (5) years from the date of each transaction, in compliance with AMLC record-keeping obligations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical Logs: Retained for twelve (12) months for security monitoring and fraud investigation purposes.

Where retention beyond these periods is required by a specific legal obligation, court order, or ongoing investigation, pkvip2 will retain the relevant data until that obligation is fulfilled.

09 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by pkvip2:

• Right to Be Informed: The right to know what personal data pkvip2 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data pkvip2 holds about you, including information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your pkvip2 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time through your account notification settings.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe pkvip2 has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified data subject requests within fifteen (15) business days. We may require you to verify your identity before processing your request.

10 Children's Privacy

The pkvip2 platform is strictly intended for adults aged 21 years and above, as required by Philippine gaming regulations. pkvip2 does not knowingly collect personal data from individuals under the age of 21.

If pkvip2 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and report the matter to the appropriate Philippine regulatory authorities where required.

If you are a parent or guardian and believe that a minor has registered on pkvip2 using false information, please contact our support team immediately at [email protected] so we can take prompt action.

11 International Data Transfers

pkvip2 primarily stores and processes your personal data within the Philippines. In certain circumstances, your data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international payment processors.

Where such transfers occur, pkvip2 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173. These safeguards include:

• Binding data processing agreements that impose RA 10173-equivalent data protection obligations on the recipient.
• Transfer only to jurisdictions that the National Privacy Commission has recognized as providing adequate data protection.
• Standard contractual clauses approved by the NPC, where applicable.

By using the pkvip2 platform, you consent to the transfer of your personal data to third-party service providers outside the Philippines where necessary for the provision of pkvip2 services, subject to the safeguards described above.

12 Updates to This Privacy Policy

pkvip2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the pkvip2 platform informing registered players of the update.
• Where required by law, seek fresh consent from affected players before the changes take effect.

Your continued use of the pkvip2 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how pkvip2 protects your personal data.

Previous versions of this Privacy Policy are available upon request by contacting our Data Protection Officer.

13 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by pkvip2, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the pkvip2 platform
• Response Time: We aim to acknowledge all privacy-related inquiries within 24 hours and provide a substantive response within 15 business days.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing RA 10173.