Privacy Policy — vegasstar Philippines

This Privacy Policy ("Policy") is issued by vegasstar ("vegasstar," "we," "us," "our") and applies to all personal information collected from individuals ("you," "Data Subject") who access, register on, or interact with the vegasstar platform at vegasstar.app, including all games, betting services, promotional programmes, customer support channels, and payment processes.

vegasstar is committed to protecting the privacy and security of your personal data. This Policy has been prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC) of the Philippines.

By accessing or using vegasstar, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the vegasstar platform.

For the purposes of the Philippine Data Privacy Act of 2012, vegasstar acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes from players and platform users in the Philippines.

vegasstar operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). All data processing activities on the vegasstar platform are conducted in compliance with PAGCOR's licensing conditions, which themselves incorporate data protection requirements aligned with Philippine law.

vegasstar serves players throughout the Philippines — including Metro Manila, Cebu City, Davao, Iloilo, Cagayan de Oro, and all other regions — and is subject exclusively to Philippine jurisdiction with respect to the personal data of its registered players.

vegasstar collects the following categories of personal data from players and platform users:

3.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify 21+ age requirement);
• Philippine mobile number or email address used as login credential;
• Username or display name on the platform.

3.2 KYC & Identity Verification Data

• Government-issued Philippine ID (PhilSys, driver's licence, passport, SSS, UMID) — document type, ID number, expiry date, and issuing authority;
• Selfie or facial verification photograph submitted for identity matching;
• Proof of address documentation where required by PAGCOR or AMLC compliance.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, payment methods, and reference numbers;
• GCash wallet identifiers, PayMaya account details, or Philippine bank account information registered for deposit and withdrawal;
• Responsible gaming limit settings (deposit limits, loss limits, session limits) set on your account.

3.4 Gaming & Betting Activity Data

• Game session records including games played, bet amounts, win/loss outcomes, and session duration;
• Sports betting selections, stake amounts, and bet settlement records;
• Bonus claims, wagering history toward bonus requirements, and promotional participation records.

3.5 Technical & Device Data

• IP address and geolocation data at login and during active sessions;
• Device type, operating system, browser type and version;
• Session timestamps, login history, and access logs;
• Cookies and similar tracking technologies (see Section 8).

3.6 Communications Data

• Customer support interactions via live chat — content, timestamps, and resolution records;
• Email correspondence sent to or received from vegasstar support;
• Complaint and dispute records.

vegasstar collects personal data through the following channels and mechanisms:

vegasstar processes your personal data on one or more of the following lawful bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and vegasstar — including account management, game access, deposit and withdrawal processing, and bonus administration;
• Legal Obligation: Processing required to comply with PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, AMLC reporting duties, and other applicable Philippine law;
• Legitimate Interests: Processing necessary for fraud prevention, responsible gaming monitoring, platform security, and improving the vegasstar service, provided such interests do not override your fundamental rights;
• Consent: Where required by law and where you have provided explicit consent, for example for certain marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vegasstar uses the personal data it collects for the following specific purposes:

6.1 Account & Service Delivery

• Creating and managing your vegasstar account;
• Authenticating your login and securing your session;
• Providing access to games, live casino, sports betting, sabong, and other platform features;
• Processing deposits and withdrawals to and from your verified Philippine payment methods.

6.2 Regulatory Compliance

• Verifying your identity and age (21+) in accordance with PAGCOR requirements;
• Complying with Anti-Money Laundering Act (AMLA) obligations including transaction monitoring, suspicious transaction reporting to the AMLC, and record-keeping requirements;
• Responding to lawful requests from PAGCOR, the NPC, the AMLC, or other competent Philippine authorities.

6.3 Responsible Gaming

• Monitoring gaming patterns to identify potential problem gambling behaviour and triggering responsible gaming interventions where appropriate;
• Enforcing player-set deposit limits, loss limits, and self-exclusion requests;
• Maintaining self-exclusion records to prevent re-registration during an active exclusion period.

6.4 Fraud Prevention & Security

• Detecting and preventing fraudulent registrations, fraudulent transactions, and prohibited conduct under vegasstar's Terms and Conditions;
• Investigating and resolving disputes, chargebacks, and suspicious account activity;
• Protecting the integrity of vegasstar games and betting markets.

6.5 Customer Support

• Responding to your inquiries, complaints, and account-related requests via live chat and email;
• Training and quality assurance for vegasstar customer support staff, using anonymised or aggregated interaction data.

6.6 Marketing Communications

Where you have provided consent or where permitted under applicable law, vegasstar may use your contact information to send promotional communications about bonuses, new games, and special offers available on the vegasstar platform. You may opt out of marketing communications at any time by contacting vegasstar support.

vegasstar does not sell, rent, or license your personal information to third parties for commercial marketing purposes. Your data may be shared with the following categories of recipients in the following circumstances:

All third-party service providers who process personal data on vegasstar's behalf are required to enter into data processing agreements that obligate them to process data only in accordance with vegasstar's instructions and in compliance with the Philippine Data Privacy Act.

vegasstar uses cookies and similar technologies on the platform to operate core functionality, improve user experience, and support security and fraud prevention. The following types of cookies are deployed on vegasstar:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to vegasstar, security cookies for CSRF protection, and cookies that preserve your language and responsible gaming settings. These cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players navigate the vegasstar platform, identify game performance issues, and improve the overall player experience. Data collected is aggregated and anonymised.
• Functionality Cookies: Store your preferences such as remembered login credentials (where you have chosen "Remember Me") and display settings.
• Fraud Prevention Cookies: Used by vegasstar's security systems to identify suspicious access patterns, detect bot activity, and protect accounts from unauthorised access.

You can manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will prevent the vegasstar platform from functioning correctly.

vegasstar retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by law:

vegasstar implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the vegasstar platform is encrypted in transit using industry-standard TLS protocols;
• Encryption at Rest: Sensitive personal data including KYC documents and financial records are encrypted in vegasstar's data storage infrastructure;
• Access Controls: Access to personal data is restricted to vegasstar staff and service providers who have a legitimate operational need. Access is governed by role-based permissions and is logged;
• Multi-Factor Authentication: Internal vegasstar systems handling personal data require multi-factor authentication for staff access;
• Regular Security Audits: vegasstar undergoes periodic security assessments and penetration testing of its platform and data infrastructure;
• Data Breach Response: vegasstar maintains an incident response plan. In the event of a personal data breach, vegasstar will notify the National Privacy Commission (NPC) within 72 hours of becoming aware and will notify affected Data Subjects where required under the DPA.

Some of vegasstar's third-party service providers — including game providers such as Evolution Gaming and Ezugi, and KYC verification technology providers — may process personal data outside the Republic of the Philippines. Where personal data is transferred outside the Philippines, vegasstar ensures that appropriate safeguards are in place in accordance with the DPA and NPC guidelines, including:

• Requiring the recipient to provide a comparable level of protection as afforded under the Philippine Data Privacy Act through contractual clauses;
• Conducting due diligence on the data protection practices of offshore recipients before entering into data processing agreements.

vegasstar does not transfer personal data to jurisdictions where adequate data protection standards cannot be maintained.

Under the Philippine Data Privacy Act of 2012, you are entitled to the following rights in relation to your personal data held by vegasstar. To exercise any of these rights, contact vegasstar's Data Protection Officer as described in Section 15.

vegasstar is strictly for users who are twenty-one (21) years of age or older. vegasstar does not knowingly collect, process, or retain the personal data of individuals under 21 years of age.

Age verification is conducted during account registration through mobile number ownership and is further enforced through government ID verification (KYC) before withdrawal processing. Any account discovered to belong to a person under 21 will be immediately closed. Personal data associated with the underage account will be retained only for the minimum period required to comply with PAGCOR reporting obligations and will then be permanently deleted.

vegasstar may update this Privacy Policy from time to time to reflect changes in our data practices, changes in Philippine law or NPC guidance, or changes to the vegasstar platform. When material changes are made, vegasstar will notify registered players by email to their registered address and/or by posting a prominent notice on the vegasstar platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of vegasstar after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must discontinue use of vegasstar and may request account closure under the Terms and Conditions.

vegasstar has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Policy. To exercise your data subject rights, raise a privacy concern, or report a suspected data breach, contact vegasstar through the following channels:

• Live Chat: Available 24/7 from within your logged-in vegasstar account. Select "Privacy / Data Request" from the support topic menu.
• Email (DPO): [email protected] — please include "DATA PRIVACY REQUEST" in your subject line.

vegasstar will acknowledge data subject rights requests within five (5) business days and will respond substantively within thirty (30) calendar days unless the complexity of the request requires additional time, in which case you will be notified of the extended timeline and reason.

If you believe your data subject rights have not been adequately addressed by vegasstar, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at its official address.