vegasstar Privacy Policy

1 About This Privacy Policy

This Privacy Policy describes how vegasstar ("vegasstar", "we", "us", or "our"), the operator of the online gaming platform at vegasstar.club, collects, uses, stores, shares, and protects the personal data of individuals who use the vegasstar Platform, including registered players, account applicants, and visitors to the vegasstar website.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). It should be read together with the vegasstar Terms and Conditions.

By registering an account with vegasstar or using the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not consent, you must not register an account or continue to use the Platform.

2 Data Controller Identity

The data controller responsible for personal data processed in connection with the vegasstar Platform is the operator of vegasstar.club, operating under applicable Philippine online gaming regulations and subject to PAGCOR oversight.

vegasstar has appointed a Data Protection Officer ("DPO") as required under the Data Privacy Act of 2012. The DPO is responsible for overseeing compliance with the DPA, responding to data subject rights requests, and serving as the primary point of contact for the National Privacy Commission.

To contact vegasstar's Data Protection Officer, please use the contact details provided in Section 14 of this Policy.

3 Personal Data We Collect

vegasstar collects the following categories of personal data from players and Platform users. We collect only the data that is necessary for the purposes described in this Policy.

3.1 Identity and Registration Data

• Full legal name as it appears on a Philippine government-issued identification document.
• Date of birth (used for age verification — you must be 21 or older to use vegasstar).
• Nationality and country of residence.
• Gender (where collected for KYC purposes).
• Government-issued identification document number (e.g., PhilSys ID, passport, driver's licence, UMID).

3.2 Contact Data

• Philippine mobile number (used as primary account identifier and for SMS OTP authentication).
• Email address.
• Residential address (province, city, barangay, postal code).

3.3 Financial and Transaction Data

• GCash account number and registered mobile number (where linked).
• PayMaya account reference (where used).
• Bank account name, account number, and bank name for BPI, BDO, Metrobank, and InstaPay transactions.
• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Wagering history, game play records, win and loss records, and account balance history.

3.4 Technical and Device Data

• IP address at time of registration and each subsequent login.
• Device type, operating system, and browser version.
• Device identifiers where permitted by your device settings.
• Login timestamps and session duration records.
• Geographic location data derived from IP address (country and approximate region level only; precise GPS location is not collected).

3.5 Communications Data

• Records of support interactions conducted through vegasstar's live chat, email support, and any other communication channels.
• Content of messages and complaints submitted to vegasstar support.

3.6 Responsible Gaming Data

• Self-exclusion status and exclusion period duration.
• Deposit limit, loss limit, and session time limit settings configured by the player.
• Responsible gaming tool usage history.

4 How We Collect Personal Data

vegasstar collects personal data through the following channels and mechanisms:

• Account Registration: Information you provide when completing the vegasstar registration form, including name, date of birth, mobile number, email address, and residential address.
• KYC Verification: Identity documents and supporting materials you submit when completing Know Your Customer verification before your first withdrawal.
• Payment Transactions: Financial data generated when you deposit or withdraw funds using GCash, PayMaya, BPI, BDO, Metrobank, or InstaPay.
• Platform Use: Technical data collected automatically as you navigate and use the vegasstar Platform, including IP address, device information, and session data.
• Support Interactions: Information you provide when contacting vegasstar's customer support team through live chat or email.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies as described in Section 7 of this Policy.
• Third-Party Sources: Identity verification and fraud screening data received from third-party KYC and AML service providers engaged by vegasstar for compliance purposes.

5 Purposes of Processing and Legal Basis

vegasstar processes personal data for the purposes set out in the table below. Each processing activity is supported by a legal basis under the Data Privacy Act of 2012.

Where vegasstar relies on consent as the legal basis for processing (for example, for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Consent may be withdrawn through your account settings or by contacting support.

6 Data Sharing and Disclosure

vegasstar does not sell or commercially transfer your personal data to third parties. Personal data may be shared with the following categories of recipients strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• PAGCOR and Philippine Regulatory Authorities: vegasstar is required to submit gaming activity reports, player data, and financial records to PAGCOR as part of its regulatory obligations. Disclosure is mandatory and non-negotiable.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports are submitted to the AMLC as required under Republic Act No. 9160, as amended by Republic Act No. 10365.
• Payment Service Providers: Financial data necessary to process your deposit or withdrawal is shared with your chosen payment provider — GCash, PayMaya, BPI, BDO, Metrobank, or your InstaPay-linked bank. These providers are independent data controllers subject to their own privacy policies.
• KYC and Identity Verification Providers: Identity documents and verification data may be shared with third-party KYC providers contracted by vegasstar to perform identity and document verification checks. These providers are bound by data processing agreements requiring DPA-equivalent protections.
• Game Software Providers: Limited technical session data (not financial data or government ID) may be shared with vegasstar's licensed game providers to ensure game integrity and resolve game-related disputes.
• Law Enforcement and Courts: Personal data may be disclosed to Philippine law enforcement agencies, courts, or other governmental authorities where required by a valid legal order, warrant, or subpoena.

7 Cookies and Tracking Technologies

vegasstar uses cookies and similar technologies to operate the Platform, maintain your login session, prevent fraud, and understand how players use the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing identifiers. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings and saved game favourites — to personalise your vegasstar experience across sessions.
• Analytics Cookies: Used to collect aggregated information about how players navigate and use the Platform, enabling vegasstar to identify performance issues and improve the user experience. Analytics data is processed in anonymised or pseudonymised form.
• Security Cookies: Used to support fraud detection and account security monitoring, including the detection of suspicious login locations and unusual session patterns.

vegasstar does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to or using the vegasstar Platform.

8 Data Security Measures

vegasstar implements technical and organisational security measures appropriate to the risk profile of the personal data processed on the Platform. These measures include, but are not limited to:

• TLS 1.3 encryption for all data in transit between player devices and vegasstar servers.
• AES-256 encryption for sensitive data stored at rest, including government identification numbers and financial account references.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for all vegasstar staff accessing production systems containing personal data.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Data loss prevention controls and security information and event management (SIEM) monitoring.
• Physical security controls at all data processing facilities.

No security system is entirely impenetrable. In the event of a personal data breach, vegasstar will follow its incident response procedures and notify the National Privacy Commission and affected players as required under the DPA and NPC Circular No. 16-03.

9 Data Retention Periods

vegasstar retains personal data for the periods set out below, after which data is securely deleted or anonymised. Retention periods are determined by the nature of the data, the purpose for which it was collected, and applicable Philippine legal and regulatory requirements.

Where data is retained beyond the periods above due to an ongoing legal proceeding, regulatory investigation, or dispute, the extended retention is limited to the duration of that specific matter.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, Filipino players whose personal data is processed by vegasstar have the following rights:

To exercise any of the rights above, please submit a written request to vegasstar's Data Protection Officer using the contact details in Section 14. vegasstar will respond to verified data subject requests within 15 calendar days of receipt. We may request proof of identity before processing any data subject rights request.

11 Minors and Age Restriction

The vegasstar Platform is strictly intended for persons aged 21 years and above. vegasstar does not knowingly collect personal data from individuals under the age of 21.

If vegasstar becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the associated Account will be suspended, and all transactions conducted under that Account will be voided in accordance with vegasstar's Terms and Conditions.

If you are a parent or guardian and believe that your child under 21 has registered a vegasstar Account or provided personal data to vegasstar, please contact the Data Protection Officer immediately using the contact details in Section 14 so that the matter can be investigated and resolved promptly.

12 Third-Party Links and Services

The vegasstar Platform may contain references to or integrations with third-party services — including payment providers such as GCash, PayMaya, BPI, BDO, and Metrobank, as well as game software providers. These third parties operate under their own privacy policies and data handling practices.

vegasstar is not responsible for the privacy practices of third-party services. We recommend reviewing the privacy policy of any third-party service before providing your personal data directly to that service. vegasstar's data processing agreements with service providers require them to maintain data protection standards consistent with the Philippine DPA where applicable.

13 Amendments to This Privacy Policy

vegasstar reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR requirements, or NPC guidance. The effective date at the top of this Policy indicates when it was last reviewed and updated.

Material changes to this Privacy Policy — including changes to the purposes for which data is processed, new categories of data collected, or changes to data sharing arrangements — will be communicated to registered players by email or through a prominent notice on the Platform not less than 14 days before the changes take effect.

Your continued use of the vegasstar Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of and consent to the updated data processing practices described in the revised Policy.

14 Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or vegasstar's handling of your personal data, please contact the vegasstar Data Protection Officer through the following channel:

Players who are not satisfied with vegasstar's response to a data privacy concern may lodge a complaint with the National Privacy Commission of the Philippines through the NPC's official complaints mechanism. Information on filing a complaint with the NPC is available on the NPC's official government website.