megavip99 Privacy Policy

megavip99 is an online gaming and casino platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We understand that when you share your personal information with us, you are placing your trust in megavip99 — and we take that responsibility seriously.

This Privacy Policy applies to all personal data collected through the megavip99 website at megavip99.vip, any associated mobile-optimized interfaces, customer support channels, and any other services we provide. It applies to all registered players, visitors, and any other individuals whose personal data we process in connection with the megavip99 platform.

This Policy should be read together with the megavip99 Terms & Conditions, which govern your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, megavip99 is the Personal Information Controller in respect of the personal data collected through the megavip99 platform. This means megavip99 determines the purposes and means of processing your personal data.

megavip99 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.

megavip99 collects personal data in the following categories, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Email address
• Mobile number
• Username and encrypted password
• Residential address (province, city, barangay)

3.2 Identity Verification (KYC) Data

• Government-issued ID (e.g., Philippine passport, SSS ID, PhilSys ID, driver's license)
• Selfie or facial verification image (where required)
• Proof of address documents

3.3 Financial & Transaction Data

• GCash account reference (masked)
• PayMaya / Maya account reference (masked)
• Bank account details (bank name, masked account number)
• Deposit and withdrawal transaction history
• Account balance information

3.4 Gaming Activity Data

• Game history, bet amounts, and outcomes
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Bonus and promotion redemption history

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Platform access logs and timestamps

3.6 Communications Data

• Records of your communications with megavip99 customer support
• Feedback, complaints, and dispute records
• Marketing communication preferences

megavip99 uses the personal data we collect for the following purposes:

• Account creation and management: To register your megavip99 account, verify your identity, and maintain your player profile.
• Age verification: To confirm that you meet the 21+ age requirement mandated under Philippine law for casino-style gaming.
• Transaction processing: To process deposits via GCash, PayMaya, bank transfer, and debit card, and to process withdrawal requests to your registered payment method.
• Platform delivery: To provide access to megavip99 games, features, and services, and to personalize your experience on the platform.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Regulatory compliance: To comply with PAGCOR regulations, anti-money laundering (AML) obligations under the AMLA, and other applicable Philippine laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits, session limits, and self-exclusion.
• Marketing communications: To send you promotional offers, bonuses, and platform updates — only where you have provided consent, and subject to your right to opt out at any time.
• Platform improvement: To analyze usage patterns and improve the megavip99 platform, user interface, and service quality.

Under the Philippine Data Privacy Act of 2012, megavip99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account registration, transaction processing, and platform delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Legitimate interests: Processing necessary for megavip99's legitimate interests, including fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — including for marketing communications and certain cookie uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

megavip99 does not sell, rent, or trade your personal data to third parties. We may share your personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, and Philippine banking partners, solely to process your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Game content providers: Licensed game software providers who supply the games available on the megavip99 platform, to the extent necessary for game delivery and fairness auditing.
• IT and hosting providers: Cloud infrastructure and hosting providers who store and process platform data on megavip99's behalf, under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or court order.
• Professional advisors: Legal, accounting, and auditing professionals, subject to professional confidentiality obligations.

All third-party service providers who process personal data on megavip99's behalf are required to enter into data processing agreements that obligate them to protect your data to standards consistent with the Philippine Data Privacy Act of 2012.

megavip99 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act.
• KYC verification documents: Retained for the duration of your account plus five (5) years, or longer if required by a regulatory investigation or legal proceeding.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of prior consent.
• Technical and device logs: Retained for up to twelve (12) months, unless required for longer periods for security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with megavip99's data disposal procedures.

megavip99 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the megavip99 platform is encrypted using TLS 1.2 or higher (HTTPS).
• Encryption at rest: Sensitive personal data stored in megavip99's systems is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized megavip99 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Regular security audits: megavip99's systems undergo regular internal and third-party security audits and penetration testing.
• Incident response: megavip99 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, megavip99 will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by the Data Privacy Act of 2012.

megavip99 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. Cookies are small text files stored on your device when you visit the megavip99 website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies: Used to collect anonymized data about how players use the megavip99 platform, helping us identify areas for improvement. This data does not identify you personally.
• Marketing cookies: Used to deliver relevant promotional content within the megavip99 platform, based on your activity. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the megavip99 platform. megavip99 does not use cookies to track your activity across unrelated third-party websites.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by megavip99:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data megavip99 holds about you, and information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to megavip99's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact megavip99's Data Protection Officer using the contact details in Section 14. We will respond to all verified data subject rights requests within thirty (30) days of receipt, as required by the Data Privacy Act of 2012.

The megavip99 platform is strictly intended for adults aged 21 years and above, as required under Philippine law for casino-style gaming. megavip99 does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that your child under 21 has registered on the megavip99 platform, please contact us immediately using the details in Section 14 so we can take prompt action.

megavip99 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game content suppliers operating internationally.

Where such cross-border transfers occur, megavip99 ensures that appropriate safeguards are in place to protect your personal data, consistent with the requirements of the Philippine Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses requiring the recipient to protect personal data to standards equivalent to Philippine law.
• Transfers to countries or organizations recognized by the National Privacy Commission as providing adequate data protection.
• Your explicit consent to the transfer, where required.

megavip99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered players via email or in-platform notification.

Your continued use of the megavip99 platform following any update to this Privacy Policy constitutes your acknowledgment of the revised Policy. We encourage you to review this page periodically to stay informed of how megavip99 protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by megavip99, please contact our Data Protection Officer:

• Data Protection Officer: megavip99 DPO
• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via the megavip99 platform
• Response Time: Data subject rights requests responded to within 30 days

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the supervisory authority for data protection in the Philippines.