Contents
- 1. Scope & Controller
- 2. Data We Collect
- 3. How We Collect Data
- 4. Purposes of Processing
- 5. Legal Basis
- 6. Data Sharing
- 7. Data Retention
- 8. Data Security
- 9. Cookies & Tracking
- 10. Minors
- 11. Cross-Border Transfers
- 12. Your Rights
- 13. Marketing Communications
- 14. Third-Party Links
- 15. Policy Changes
- 16. Contact & DPO
Section 01
Scope and Data Controller
This Privacy Policy applies to all personal data processed by vegasstar in connection with the operation of the vegasstar online gaming platform at vegasstar.vip, including all associated gaming services, customer support channels, payment processing activities, and marketing communications directed at registered Players.
Data Controller: vegasstar, operating the platform at vegasstar.vip, acts as the data controller for personal data collected from Players. As data controller, vegasstar determines the purposes and means of processing your personal information and bears the corresponding legal obligations under applicable Philippine law.
This Policy covers data collected from Players located in the Philippines and is drafted in accordance with the requirements of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC) of the Philippines.
Section 02
Personal Data We Collect
vegasstar collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy. The categories of personal data we collect include the following:
2.1 Registration and Identity Data
- Full legal name as it appears on your government-issued identification.
- Date of birth (required to verify 21+ age eligibility).
- Philippine mobile number (used for Account verification and OTP-based security).
- Email address, where provided.
- Username chosen at registration.
- Residential address (required for full KYC verification).
2.2 Identity Verification (KYC) Data
- Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, Passport, Driver's License, UMID, SSS/GSIS ID, Voter's ID).
- Selfie or identity photograph where requested for liveness verification.
- Proof of address documents where required.
- Source of funds documentation where required for enhanced due diligence.
2.3 Financial and Transaction Data
- GCash and PayMaya account numbers or identifiers associated with deposits and withdrawals.
- Bank account details for BDO, BPI, and Metrobank transfers.
- Cryptocurrency wallet addresses where used.
- Full transaction history: deposits, withdrawals, wagers, winnings, bonus credits, and adjustments.
- Transaction timestamps, amounts, and reference numbers.
2.4 Technical and Usage Data
- IP address and approximate geographic location at time of login and transactions.
- Device type, operating system, browser type and version.
- Session duration and platform navigation patterns.
- Game titles accessed, wager amounts, and play duration.
- Cookies and similar tracking technology data (see Section 9).
2.5 Communications Data
- Contents of customer support interactions via live chat or email.
- Records of complaints, disputes, and their resolution outcomes.
- Responsible gaming requests, including self-exclusion and limit-setting records.
Section 03
How We Collect Your Data
vegasstar collects personal data through the following means:
| Collection Method | Examples |
|---|---|
| Direct submission | Registration form, KYC document uploads, support messages, deposit/withdrawal requests. |
| Automated platform data | Login logs, IP address capture, device fingerprinting, session tracking, game activity records. |
| Payment providers | Transaction confirmation data from GCash, PayMaya, BDO, BPI, Metrobank, and cryptocurrency processors. |
| Identity verification services | Data returned by KYC verification providers when checking document authenticity and identity matching. |
| Cookies and analytics | Usage patterns, feature interaction, session length, and platform performance data collected via cookies. |
| Fraud detection systems | Behavioral signals, login anomaly detection, and transaction pattern analysis from automated monitoring tools. |
Section 04
Purposes of Processing Your Personal Data
vegasstar processes your personal data for the following clearly defined purposes:
4.1 Account Management
To create, maintain, and secure your vegasstar Account — including authentication, password recovery, account activity monitoring, and technical support.
4.2 Identity Verification and Age Compliance
To verify that you are who you say you are and that you meet the minimum age requirement of twenty-one (21) years for all casino-style gambling in the Philippines. This is a legal obligation under applicable Philippine gaming regulations and a core component of vegasstar's responsible gaming framework.
4.3 Payment Processing
To process deposits, withdrawals, and in-platform transactions accurately and securely. This includes verifying that payment accounts belong to you and that transactions comply with applicable financial regulations.
4.4 Legal and Regulatory Compliance
To fulfill obligations under Philippine law, including anti-money laundering (AML) regulations, counter-terrorism financing (CTF) requirements, PAGCOR-aligned responsible gaming standards, and the Data Privacy Act of 2012. vegasstar may be legally required to retain certain data and to provide it to regulatory authorities upon lawful demand.
4.5 Responsible Gaming
To administer responsible gaming tools — deposit limits, loss limits, cooling-off periods, and self-exclusion — and to monitor for signs of problematic gambling behavior in order to fulfill our duty of care to Players.
4.6 Security and Fraud Prevention
To detect, investigate, and prevent fraud, unauthorized Account access, money laundering, bonus abuse, and other prohibited activities on the platform.
4.7 Platform Improvement
To analyze aggregate usage patterns and platform performance data — in anonymized or pseudonymized form — to improve the vegasstar product experience for all Filipino players.
4.8 Marketing and Promotions
Where you have provided consent, to communicate relevant vegasstar promotions, bonuses, and platform updates via SMS or email. You may withdraw this consent at any time (see Section 13).
Section 05
Legal Basis for Processing
Under Republic Act No. 10173 and its Implementing Rules, vegasstar processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform the vegasstar Terms and Conditions you agreed to at registration — including Account management, gameplay, and payment processing.
- Legal obligation: Processing required to comply with Philippine law — including KYC/AML obligations, tax reporting requirements, and regulatory data retention mandates.
- Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests do not override your fundamental privacy rights.
- Consent: Processing for marketing communications and optional platform features, where your specific prior consent has been obtained and remains in force.
Section 06
Data Sharing and Disclosure
vegasstar does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:
6.1 Service Providers
vegasstar engages third-party service providers who process personal data on our behalf as data processors. These include: payment gateway operators (GCash, PayMaya, and banking partners), KYC verification platforms, cloud hosting and infrastructure providers, fraud detection services, and game technology providers. All processors are bound by data processing agreements that restrict their use of your data to the services they provide to vegasstar.
6.2 Regulatory and Legal Disclosures
vegasstar may disclose personal data to Philippine government agencies, regulatory bodies (including PAGCOR and the Anti-Money Laundering Council), or law enforcement authorities when required to do so by law, court order, or official government request. We will notify affected Players of such disclosures where legally permitted to do so.
6.3 Business Transfers
In the event of a merger, acquisition, or transfer of all or a portion of vegasstar's business operations, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer that materially affects your data rights.
Section 07
Data Retention
vegasstar retains personal data for as long as is necessary to fulfill the purposes described in this Policy, subject to the following retention guidelines:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of Account + 5 years post-closure | Legal obligation / AML compliance |
| KYC identity documents | Duration of Account + 5 years post-closure | Legal obligation / AML compliance |
| Transaction records | 10 years from transaction date | Philippine AML and tax regulations |
| Customer support records | 3 years from last interaction | Dispute resolution / legitimate interest |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent |
| Technical / session logs | 12 months on a rolling basis | Security and fraud detection |
| Self-exclusion records | Indefinitely (to prevent re-registration) | Responsible gaming / legal duty of care |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with industry-standard data destruction procedures.
Section 08
Data Security Measures
vegasstar implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:
- 256-bit TLS/SSL encryption on all data transmitted between your device and vegasstar servers.
- Encryption of sensitive data fields (including KYC documents and payment details) at rest using industry-standard encryption standards.
- Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
- Multi-factor authentication requirements for staff systems that process personal data.
- Real-time intrusion detection and anomaly monitoring on vegasstar infrastructure.
- Regular security assessments and vulnerability testing by qualified security professionals.
- Data breach response procedures in accordance with NPC notification requirements under RA 10173.
Despite these measures, no online platform can guarantee absolute data security. In the unlikely event of a personal data breach that creates risk to your rights, vegasstar will notify affected Players and the National Privacy Commission in accordance with applicable reporting obligations.
Section 09
Cookies and Tracking Technologies
vegasstar uses cookies and similar tracking technologies to operate the platform, maintain your login session, and analyze how the platform is used. A cookie is a small text file placed on your device by your browser when you visit vegasstar.vip.
9.1 Types of Cookies Used
- Strictly Necessary Cookies: Required for the platform to function. These maintain your logged-in session, remember your language preference, and enable core security features. These cannot be disabled without disrupting platform functionality.
- Functional Cookies: Remember your preferences and settings — such as game lobby view options — to improve your experience on return visits.
- Analytics Cookies: Collect anonymized data about how Players navigate the platform — which pages are visited most, where sessions end — to help vegasstar improve the product. No personally identifiable information is collected through analytics cookies.
- Security Cookies: Support fraud detection and session security monitoring by identifying anomalous login patterns or unusual device changes.
9.2 Managing Cookies
You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. Strictly necessary cookies cannot be disabled through browser settings as they are required for the platform to operate correctly.
Section 10
Protection of Minors
vegasstar does not knowingly collect personal data from individuals under the age of twenty-one (21). The Platform is strictly intended for adult users who meet the minimum age requirement under applicable Philippine gaming regulations. All registration attempts are subject to age verification, and KYC procedures are in place to enforce this requirement.
If vegasstar becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated Account, delete the relevant personal data to the extent legally permissible, and retain records necessary for AML and regulatory compliance purposes. Any suspected underage registration should be reported to vegasstar Support immediately.
Section 11
Cross-Border Data Transfers
Some of vegasstar's service providers — including cloud infrastructure operators, KYC verification platforms, and game technology providers — may process personal data on servers located outside the Philippines. Where such cross-border transfers occur, vegasstar ensures that appropriate safeguards are in place to protect your data in accordance with the standards required by Republic Act No. 10173, including:
- Contractual data transfer agreements with recipient processors that impose data protection obligations equivalent to those applicable in the Philippines.
- Transfer to jurisdictions that have been assessed as providing adequate levels of data protection.
- Implementation of additional technical safeguards — including encryption — where transfers involve sensitive personal data categories.
Section 12
Your Data Privacy Rights
As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by vegasstar. These rights are subject to applicable legal limitations and may be affected by data retention obligations arising from AML, tax, and gaming regulations.
Request a copy of the personal data vegasstar holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data. Some corrections require re-verification of your identity documents.
Request deletion of personal data that is no longer necessary, subject to overriding legal retention obligations under Philippine law.
Object to processing of your personal data based on legitimate interests, including direct marketing communications.
Request your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
To exercise any of the above rights, contact vegasstar's Data Privacy team through the official Support page at vegasstar.vip/support, clearly identifying the right you wish to exercise and the personal data concerned. vegasstar will respond within fifteen (15) business days of receiving a valid request.
Section 13
Marketing Communications
Where you have provided consent during registration or at a later stage, vegasstar may send you promotional communications about bonuses, platform updates, and new game releases via SMS or email. Your consent to receive marketing communications is entirely voluntary and does not affect your ability to use the vegasstar platform.
You may withdraw your consent to marketing communications at any time by:
- Updating your communication preferences in your vegasstar Account settings.
- Replying "STOP" to any vegasstar SMS marketing message.
- Contacting vegasstar Support through vegasstar.vip/support with a written opt-out request.
Withdrawal of marketing consent will be actioned within five (5) business days. Note that operational messages — including transaction confirmations, security alerts, and KYC notifications — are not marketing communications and cannot be opted out of while your Account remains active.
Section 14
Third-Party Links and Services
The vegasstar platform may contain references or links to third-party services — such as payment providers or game technology partners — whose privacy practices are governed by their own independent privacy policies. vegasstar is not responsible for the privacy practices or content of any third-party service, and we encourage you to review the privacy policy of any third-party service you interact with in connection with your vegasstar Account.
Section 15
Changes to This Privacy Policy
vegasstar may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or platform functionality. The current version of this Policy, together with its effective date, is always available at vegasstar.vip/privacy-policy.
Material changes — those that significantly affect how we process your personal data or that affect your rights — will be communicated to registered Players through in-platform notifications prior to taking effect. Continued use of the vegasstar platform following the effective date of any updated Policy constitutes acceptance of the revised terms.
Section 16
Contact and Data Protection Officer
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a data privacy concern, please contact vegasstar through the following official channel:
- Support Page: vegasstar.vip/support (live chat, 24/7 availability)
- Email: support@vegasstar.vip (plain text — not a clickable link)
For data privacy matters specifically — including access requests, erasure requests, and data breach reports — please include "DATA PRIVACY REQUEST" in the subject line of your communication so that it is routed directly to vegasstar's Data Privacy team.
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your rights under Republic Act No. 10173 have been violated. The NPC can be contacted through the official Philippine government privacy authority channels.