vegastar89 Privacy Policy

1 Introduction

vegastar89 ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the vegastar89 Platform. We understand that when you share your personal information with us, you are placing trust in us — and we take that responsibility seriously.

This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

This Policy applies to all users of the vegastar89 Platform, including registered players, visitors who browse without registering, and individuals who contact our support team. If you are located outside the Philippines, please note that your data may be processed in the Philippines, where our primary operations are based.

We encourage you to read this Policy in full. If you have any questions about how vegastar89 handles your personal data, please refer to Section 14 for our contact details.

2 Personal Data We Collect

vegastar89 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name
• Date of birth
• Gender
• Nationality and country of residence
• Philippine mobile number
• Email address
• Residential address (for KYC verification)

2.2 Identity Verification (KYC) Data

• Government-issued ID (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of address documents
• Selfie or facial image for identity verification purposes
• Proof of payment method ownership

2.3 Financial Data

• GCash or PayMaya/Maya account details (mobile number only — we do not store PINs or passwords)
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank)
• Debit card details (card number, expiry — stored in tokenized form only)
• Transaction history (deposits, withdrawals, game wagers, winnings)

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps
• Pages visited and features used on the vegastar89 Platform
• Game history and betting patterns
• Cookies and similar tracking technologies (see Section 9)

2.5 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with vegastar89
• Feedback, survey responses, and promotional opt-in preferences

3 How We Collect Your Data

vegastar89 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically: When you use the vegastar89 Platform, we automatically collect technical and usage data through cookies, log files, and similar technologies.
• From third parties: We may receive data from identity verification providers, payment processors, fraud prevention services, and regulatory authorities where required by law.
• From publicly available sources: In limited circumstances, we may verify information against publicly available records for fraud prevention or regulatory compliance purposes.

4 How We Use Your Personal Data

vegastar89 uses your personal data only for legitimate, specified purposes. The table below summarises the primary purposes for which we process your data:

vegastar89 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, vegastar89 processes your personal data on the following legal bases:

• Contract Performance: Processing is necessary to fulfil our obligations to you under the vegastar89 Terms & Conditions — including account management, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate Interest: Processing is necessary for vegastar89's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

vegastar89 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only where necessary and lawful:

• Payment Processors: GCash, PayMaya/Maya, and banking partners require certain identity and transaction data to process your deposits and withdrawals securely.
• Identity Verification Providers: Third-party KYC and AML service providers assist us in verifying your identity and complying with regulatory obligations.
• Fraud Prevention Services: We share technical and transaction data with fraud detection partners to protect the integrity of the vegastar89 Platform and all its players.
• Regulatory Authorities: We are required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request.
• IT & Infrastructure Providers: Cloud hosting, data storage, and platform infrastructure providers process data on our behalf under strict data processing agreements.
• Game Providers: Third-party game studios and live dealer providers may receive limited technical data necessary to deliver their games on the vegastar89 Platform.

All third parties with whom vegastar89 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions and applicable law.

7 Data Retention

vegastar89 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account & KYC Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with Philippine AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Game History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support Communications : Retained for two (2) years from the date of the communication.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.
• Technical & Log Data: Retained for up to twelve (12) months for security and platform improvement purposes.

When personal data is no longer required, vegastar89 will securely delete or anonymise it in accordance with our data disposal procedures.

8 Data Security

vegastar89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the vegastar89 Platform is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised vegastar89 personnel on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training.
• Two-Factor Authentication (2FA): vegastar89 offers 2FA for player accounts to provide an additional layer of security against unauthorised access.
• Regular Security Audits: Our platform undergoes regular penetration testing and security audits by independent third-party security specialists.
• Incident Response: In the event of a personal data breach, vegastar89 will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

9 Cookies & Tracking Technologies

vegastar89 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyse usage patterns. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how players use the vegastar89 Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content. You may opt out of marketing cookies at any time through your account settings or browser controls.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the vegastar89 Platform. For a full list of cookies used by vegastar89, please contact our support team.

10 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vegastar89:

• Right to Be Informed: You have the right to be informed about how your personal data is collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data vegastar89 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account information directly through your vegastar89 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, subject to our overriding legal obligations.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: If you believe vegastar89 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

11 Minors & Age Policy

The vegastar89 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. vegastar89 does not knowingly collect personal data from individuals under the age of 21.

If vegastar89 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with our legal obligations.

If you are a parent or guardian and believe that your child has provided personal data to vegastar89, please contact us immediately at the details provided in Section 14 so that we can take prompt action.

12 International Data Transfers

vegastar89's primary operations are based in the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, game studios, and fraud prevention services — may process your personal data in jurisdictions outside the Philippines.

Where personal data is transferred internationally, vegastar89 ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection as recognised by the NPC.
• Implementing contractual clauses that require recipients to protect personal data to standards equivalent to those required under Philippine law.
• Conducting due diligence on all international data recipients to verify their data security practices.

13 Changes to This Privacy Policy

vegastar89 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the vegastar89 Platform following the effective date of any update constitutes your acknowledgment of the revised Policy.

14 Contact Us & Data Protection Officer

vegastar89 has appointed a Data Protection Officer (DPO) in accordance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Data Protection Officer Email: privacy@vegastar89.one
• General Support Email: support@vegastar89.one
• Live Chat: Available 24/7 within the vegastar89 Platform after login
• Response Time: We aim to respond to all data privacy requests within 30 days

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at complaints@privacy.gov.ph or through the NPC's official website.