27vip Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") applies to all personal information collected by 27vip in connection with your use of the 27vip website at 27vip.org, including all games, account features, wallet services, promotions, customer support, and any related mobile or digital interfaces operated by 27vip.

By registering a 27vip account, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the 27vip platform.

This Policy should be read together with the 27vip Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

2. Data Controller

27vip is the data controller responsible for the personal information collected and processed through the 27vip platform. As data controller, 27vip determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 (Republic Act 10173) and all applicable National Privacy Commission (NPC) issuances.

For all data privacy queries, rights requests, or complaints, you may contact 27vip's designated Data Protection Officer (DPO) using the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

27vip collects personal data across three broad categories: information you provide directly, information collected automatically during your use of the platform, and information received from third parties where applicable.

Information you provide directly:

• Full legal name and date of birth (required for account registration and age verification).
• Philippine mobile number used as your primary account identifier and for OTP verification.
• Email address (where provided for account recovery or correspondence).
• Government-issued identification documents submitted for KYC (Know Your Customer) verification — such as a Philippine passport, driver's licence, SSS ID, PhilSys National ID, or UMID.
• Financial information including payment account identifiers (e.g., GCash registered number, bank account details) necessary to process deposits and withdrawals.
• Communications you send to 27vip support, including chat transcripts and written complaints.

Information collected automatically:

• Device identifiers including IP address, device type, operating system version, and browser type.
• Login timestamps, session duration, pages visited, and features accessed within the 27vip platform.
• Game activity records including bets placed, game outcomes, and transaction history — maintained for regulatory compliance, dispute resolution, and responsible gaming purposes.
• Geolocation data (at the country and region level) used to confirm that you are accessing the platform from within the Philippines.
• Cookie and tracking data as described in Section 7.

Information from third parties:

• Verification data received from KYC service providers used to confirm identity documents.
• Transaction confirmation data received from payment processors including GCash, Maya, BPI, BDO, and other integrated payment providers.
• Fraud and AML screening data from compliance service providers where required by Philippine law.

4. How 27vip Uses Your Personal Data

27vip uses personal data collected from players for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the 27vip platform.
• Age verification: To confirm that all players are 21 years of age or older in compliance with PAGCOR guidelines and Philippine gaming regulations.
• Payment processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and other supported payment methods. Your payment data is shared with payment processors only to the extent necessary to complete transactions.
• Customer support: To handle queries, resolve disputes, and respond to complaints submitted to the 27vip support team.
• Regulatory compliance: To comply with AML (Anti-Money Laundering) obligations, PAGCOR reporting requirements, and any other applicable Philippine regulatory obligations.
• Responsible gaming: To monitor play patterns, apply deposit limits, facilitate self-exclusion, and contact players who may exhibit signs of problematic gaming behaviour.
• Platform security: To detect and prevent fraud, unauthorised account access, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• Platform improvement: To analyse aggregated usage data and improve the functionality, performance, and game selection of the 27vip platform.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have not opted out of such communications. You may opt out at any time.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 27vip processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and 27vip — specifically, to operate your account, process transactions, and provide gaming services.
• Legal obligation: Processing is required to comply with Philippine law, including AML regulations, PAGCOR reporting obligations, and tax-related requirements.
• Legitimate interests: Processing is necessary for 27vip's legitimate interests in preventing fraud, ensuring platform security, and improving its services — provided those interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, 27vip relies on your consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Data Sharing & Disclosure

27vip does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, and 7-Eleven CLiQQ — solely to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services used to verify the authenticity of government-issued identification documents submitted during account verification.
• AML and compliance services: Screening services used to detect and report suspicious financial activity as required by Philippine AML law.
• Game technology providers: Third-party game developers and live dealer studios whose games are hosted on the 27vip platform, where player activity data must be shared to operate game sessions.
• Regulatory and law enforcement authorities: PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), courts, and law enforcement agencies where disclosure is required by law or court order.
• Professional advisers: Lawyers, accountants, and auditors under duties of confidentiality where necessary to protect 27vip's legal rights or comply with legal obligations.

All third parties with whom 27vip shares personal data are required to process that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than that for which it was shared.

7. Cookies & Tracking Technologies

27vip uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform function correctly and provide a better player experience.

Categories of cookies used by 27vip:

• Strictly necessary cookies: Required for the platform to function — including session authentication, wallet access, and game loading. These cannot be disabled.
• Performance cookies: Collect anonymised data about how players use the platform — which pages load most slowly, which features are most used — to help 27vip improve platform performance.
• Functional cookies: Remember your preferences, such as language selection and login credentials if you choose "Remember Me" on the login screen.
• Analytics cookies: Used by 27vip's internal analytics tools to understand aggregate player behaviour. No individual player data is shared externally through these cookies.

You may configure your browser to refuse or delete cookies, but note that disabling strictly necessary cookies will prevent you from accessing your 27vip account. For other cookie categories, you may adjust your preferences within the 27vip platform settings.

8. Data Security

27vip implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 27vip platform.
• Encryption at rest for sensitive data including payment account details and KYC documents.
• Role-based access controls ensuring that only authorised 27vip personnel can access player personal data, and only to the extent necessary for their role.
• Regular security assessments and penetration testing of the 27vip platform infrastructure.
• Two-factor authentication (2FA) available for all player accounts and mandatory for 27vip administrative access.

In the event of a personal data breach that is likely to affect your rights and freedoms, 27vip will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected players without undue delay in accordance with NPC Circular 16-03.

9. Data Retention

27vip retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account data: Retained for the duration of your active account plus 5 years following account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction and game history: Retained for 5 years from the date of each transaction or game session, as required by PAGCOR and AMLC reporting obligations.
• KYC documents: Retained for 5 years following account closure or the date of last transaction, whichever is later.
• Support communications: Retained for 3 years from the date of the last communication in a support thread.
• Marketing consent records: Retained for the duration of your account plus 1 year, to demonstrate compliance with consent requirements.

Where 27vip is required by law or court order to retain data for a longer period, data will be held for that extended period and then deleted at the earliest opportunity.

10. Your Data Rights Under Philippine Law

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 27vip:

To exercise any of the above rights, contact 27vip's DPO as described in Section 14. 27vip will respond to all data rights requests within 15 working days of receipt, subject to identity verification.

11. Children's Privacy

The 27vip platform is strictly intended for individuals who are 21 years of age or older. 27vip does not knowingly collect personal data from individuals under the age of 21. Online gaming by persons under 21 is prohibited under applicable Philippine gaming regulations.

If 27vip discovers that personal data has been collected from a player who is under 21 years old, that account will be immediately suspended, all associated funds will be reviewed in accordance with the Terms & Conditions, and the personal data will be deleted from 27vip's systems as soon as practicable.

If you believe that a minor has registered a 27vip account, please contact the 27vip support team immediately at the contact details in Section 14.

12. Cross-Border Data Transfers

Some of the third parties with whom 27vip shares personal data — including game technology providers and KYC service providers — may process data in countries outside the Philippines. When transferring personal data internationally, 27vip takes steps to ensure that the receiving entity provides a level of data protection consistent with the Data Privacy Act of 2012, including through contractual data protection clauses, adequacy assessments, or other legally recognised transfer mechanisms.

Where international transfers are necessary for the operation of the 27vip platform, 27vip will not authorise any such transfer unless appropriate safeguards are in place to protect your personal data.

13. Changes to This Privacy Policy

27vip may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, or platform operations. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Where a change materially affects how 27vip processes your personal data, we will notify you via in-platform notification or to your registered contact details prior to the change taking effect, giving you the opportunity to review the updated Policy before continuing to use the platform.

Your continued use of the 27vip platform after any update to this Policy constitutes your acknowledgment and acceptance of the revised terms. If you disagree with any changes, you may close your 27vip account by contacting our support team.

14. Contact & Complaints

For all data privacy queries, rights requests, or complaints, you may contact the 27vip Data Protection Officer:

27vip Data Protection Officer
Email: [email protected]
Subject line: Data Privacy Request – [Your Registered Mobile Number]
Response time: Within 15 working days of receipt

If you are not satisfied with 27vip's response to your data privacy query or complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.