kpvip Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "kpvip," "we," "us," "our" refers to the kpvip online gaming platform and its operating entity, responsible for processing personal data as described in this Policy.
• "Player," "you," "your" refers to any natural person who has registered for, or is in the process of registering for, a kpvip Account, as well as any visitor to the kpvip Platform.
• "Personal Data" means any information that relates to an identified or identifiable natural person, as defined under Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, transfer, disclosure, or deletion.
• "Data Controller" means kpvip in its capacity as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of kpvip, pursuant to a data processing agreement.
• "NPC" means the National Privacy Commission of the Republic of the Philippines, the independent body responsible for administering and implementing RA 10173.
• "DPO" means kpvip's designated Data Protection Officer, responsible for overseeing compliance with this Policy and applicable data protection laws.
• "Sensitive Personal Information" has the meaning ascribed to it under Section 3(l) of RA 10173, including government-issued identification numbers and financial information.
• "Platform" refers to the kpvip website, mobile web application, and all associated digital services available at kpvip.app.

kpvip operates as the Data Controller in respect of all Personal Data collected through the kpvip Platform. As Data Controller, kpvip is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently in compliance with RA 10173 and its Implementing Rules and Regulations.

kpvip has appointed a Data Protection Officer (DPO) who is responsible for monitoring internal compliance, informing and advising on data protection obligations, and serving as the primary point of contact for data subjects and the National Privacy Commission.

kpvip collects Personal Data that you voluntarily provide when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in any promotional activity on the Platform. This includes:

• Full legal name, date of birth, gender, and nationality as stated on your government-issued Philippine identification;
• Residential address within the Philippines (barangay, city or municipality, province);
• Philippine mobile number and email address used for account communications and OTP verification;
• Copies of government-issued Philippine identification documents submitted for KYC purposes (e.g., Philippine Passport, PhilSys National ID, UMID, SSS ID, or Driver's License);
• Payment account identifiers associated with GCash, PayMaya, BPI, BDO, Metrobank, or other supported payment methods;
• Source of funds declarations and supporting documentation where required by AML compliance procedures;
• Communications with kpvip support, including live chat transcripts and email correspondence.

When you access and use the kpvip Platform, we automatically collect certain technical and behavioural data through standard web technologies including cookies, server logs, and analytics tools. This includes:

• IP address and approximate geographic location derived from it;
• Device identifiers, operating system, browser type and version;
• Pages visited on the Platform, clickstream data, and session duration;
• Game session data including games played, bet amounts, and game outcomes (for regulatory compliance and dispute resolution purposes);
• Login timestamps and security event logs;
• Referral source data (how you arrived at the kpvip Platform).

kpvip may receive Personal Data about you from third-party sources in limited circumstances, including:

• Identity verification and KYC service providers who cross-reference your submitted documents against official Philippine government databases;
• Payment processors who provide transaction confirmation and fraud screening data;
• Self-exclusion databases operated under applicable Philippine responsible gaming frameworks, where kpvip is authorised to cross-check player eligibility.

kpvip uses your Personal Data only for specified, explicit, and legitimate purposes. The primary purposes for which we process your data are:

• Account Management: Creating, maintaining, and securing your kpvip Account, including authentication via SMS OTP and 2FA;
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) in compliance with applicable Philippine gaming and AML regulations;
• Transaction Processing: Facilitating deposits and withdrawals in Philippine Peso (₱ PHP) via your chosen payment method;
• Legal and Regulatory Compliance: Meeting our obligations under RA 10173, RA 9160 (Anti-Money Laundering Act as amended), and applicable PAGCOR regulatory requirements;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised Account access, and other security incidents;
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance in English and Filipino (Tagalog);
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administering responsible gaming tools such as deposit limits and self-exclusion;
• Platform Improvement: Analysing aggregated usage data to improve the kpvip Platform's features, performance, and user experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive them (see Section 12).

kpvip will not use your Personal Data for any purpose incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for such processing.

kpvip processes your Personal Data on the following legal bases as recognised under RA 10173:

• Contractual Necessity: Processing required to perform our obligations under the kpvip Terms and Conditions, including account administration, transaction processing, and customer support;
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, KYC requirements, and regulatory reporting to PAGCOR and other competent authorities;
• Legitimate Interest: Processing necessary for our legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kpvip may share your Personal Data with the following categories of third parties:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and approved cryptocurrency payment processors receive transaction data necessary to process your deposits and withdrawals;
• KYC and Identity Verification Partners: Third-party providers that verify your identity documents and cross-reference them against Philippine government and watchlist databases;
• Game Software Providers: Our game content partners receive anonymised session data necessary to deliver game content and calculate RNG outcomes;
• Regulatory Authorities: kpvip will disclose Personal Data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine authorities when required by law, court order, or regulatory direction;
• Cloud Infrastructure and IT Service Providers: kpvip uses cloud hosting and managed IT services provided by third parties who act as Data Processors under data processing agreements that impose equivalent data protection obligations;
• Professional Advisers: Lawyers, auditors, and compliance consultants retained by kpvip who are bound by duties of confidentiality.

All third-party Data Processors engaged by kpvip are required to process Personal Data only on kpvip's documented instructions, implement appropriate technical and organisational security measures, and comply with applicable Philippine data protection law.

kpvip uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and support our security and analytics functions. A cookie is a small text file placed on your device when you visit the kpvip Platform.

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that maintain your authenticated state and security cookies that support fraud detection. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language selection and display settings to provide a more personalised experience.
• Analytics Cookies: Collect aggregated information about how players use the Platform to help us understand performance and identify areas for improvement. Data is anonymised before analysis.
• Marketing Cookies: Used to track the effectiveness of our promotional campaigns with your consent. These are only activated where you have provided explicit consent to marketing communications.

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the kpvip Platform, particularly authentication and security features. Strictly necessary cookies cannot be disabled as the Platform cannot function without them.

kpvip implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security measures include:

• AES-256 encryption for Personal Data at rest across all kpvip database systems;
• TLS 1.3 protocol for all data in transit between your device and the kpvip Platform;
• Multi-factor authentication (MFA) enforcement for all kpvip internal staff accessing production systems containing Personal Data;
• Role-based access control (RBAC) ensuring that kpvip employees can only access Personal Data necessary for their specific job function;
• Regular third-party penetration testing and vulnerability assessments of the kpvip Platform infrastructure;
• 24/7 security monitoring and intrusion detection systems;
• ISO 27001-aligned information security management practices across our hosting infrastructure.

While kpvip takes every reasonable measure to protect your data, no system is completely immune to security risk. You are responsible for maintaining the confidentiality of your own Account credentials, and kpvip strongly recommends enabling 2FA on your Account and using a unique, strong password.

kpvip retains your Personal Data for as long as is necessary for the purposes described in this Privacy Policy or as required by applicable Philippine law. The following retention schedules apply:

• Account Data and KYC Documents: Retained for a minimum of five (5) years following Account closure, in compliance with Philippine AML obligations under RA 9160 as amended;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for AML reporting and audit trail purposes;
• Game Session Logs: Retained for a minimum of three (3) years for regulatory compliance and dispute resolution purposes;
• Customer Support Communications: Retained for two (2) years from the date of the last communication in a support thread;
• Marketing Consent Records: Retained for the duration of your Account plus two (2) years following Account closure, to evidence consent and opt-out history.

Following the expiry of applicable retention periods, Personal Data is either securely deleted using cryptographic erasure or irreversibly anonymised so that it can no longer be attributed to you. kpvip conducts periodic data retention reviews to ensure that Personal Data is not held beyond its required retention period.

kpvip operates primarily within the Philippines and processes the majority of Personal Data on infrastructure located within or serving the Philippine market. However, certain third-party service providers engaged by kpvip — including cloud infrastructure providers and game software partners — may process Personal Data in jurisdictions outside the Philippines.

Where Personal Data is transferred outside the Philippines, kpvip ensures that adequate safeguards are in place to protect that data in a manner consistent with RA 10173 and NPC guidelines. These safeguards may include:

• Standard contractual clauses approved or recognised by the NPC incorporated into data processing agreements with international service providers;
• Transfers to jurisdictions recognised by the NPC as providing an adequate level of data protection;
• Binding corporate rules where the recipient is part of a group of companies with approved intra-group data transfer mechanisms.

You may request information about the specific safeguards in place for any international transfer of your Personal Data by contacting our DPO at [email protected].

kpvip enforces age verification as a mandatory step in the Account registration process. Any Account subsequently identified as belonging to a person under 21 years of age will be immediately closed, all balances forfeited, and all associated Personal Data deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that your child has registered an Account on the kpvip Platform, please contact us immediately at [email protected] with the subject line "UNDERAGE ACCOUNT REPORT." We will investigate and take appropriate action within 48 hours of notification.

kpvip may send you promotional communications about bonuses, new game releases, tournaments, and special offers relevant to your interests as a kpvip player. We will only send you marketing communications where you have explicitly opted in to receive them, either during registration or subsequently through your Account communication preferences.

Marketing communications from kpvip may be delivered via:

• SMS to your registered Philippine mobile number;
• Email to your registered email address;
• Push notifications through the kpvip mobile web application (where enabled on your device).

You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in Account Settings or by contacting support at [email protected] with the subject line "UNSUBSCRIBE." Withdrawal of consent does not affect transactional communications — kpvip will continue to send you account security alerts, transaction confirmations, and service notifications that are necessary for Account operation regardless of your marketing preferences.

kpvip is committed to facilitating the exercise of your data privacy rights in a straightforward and timely manner. To submit a data privacy request, please contact our Data Protection Officer using the process below:

1. Submit Your Request: Email [email protected] with the subject line "DATA PRIVACY REQUEST." Include your full name, registered email address, the right you wish to exercise, and sufficient information to identify the Personal Data concerned;
2. Identity Verification: kpvip will verify your identity before processing your request to prevent unauthorised access to another person's data. We may request a copy of your government-issued Philippine ID to complete verification;
3. Processing Timeline: kpvip will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days from the date of identity verification. Where a request is complex or we receive multiple concurrent requests, we may extend this period by a further 30 days with prior written notice;
4. No Fee for Standard Requests: kpvip does not charge a fee for processing standard data privacy requests. Where a request is manifestly unfounded or excessive, kpvip reserves the right to charge a reasonable administrative fee or refuse the request, with written reasons provided;
5. Right to Complain: If you are not satisfied with kpvip's response to your data privacy request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

Despite the robust security measures kpvip maintains, no digital platform can guarantee absolute immunity from security incidents. In the event that kpvip becomes aware of a personal data breach, the following response procedure applies:

• Internal Assessment: Our security team will immediately assess the nature, scope, and severity of the breach to determine whether it poses a real risk to the rights and freedoms of affected players;
• NPC Notification: Where the breach poses a real risk to data subjects, kpvip will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03;
• Player Notification: kpvip will notify affected players whose Personal Data was compromised as soon as reasonably practicable following the NPC notification, providing details of the breach, the data affected, and recommended actions to protect themselves;
• Containment and Remediation: kpvip will take immediate steps to contain the breach, remediate the vulnerability, and prevent recurrence. A post-incident review will be conducted and findings documented;
• Regulatory Reporting: kpvip will cooperate fully with NPC investigations and provide all information requested by the Commission in connection with any notified breach.

If you suspect that your kpvip Account has been compromised or that your Personal Data has been accessed without authorisation, please contact us immediately at [email protected] with the subject line "SECURITY INCIDENT."

kpvip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance issued by the NPC. All changes will be posted on this page with an updated "Last Updated" date at the top of the Policy.

Where changes are material — meaning they significantly affect your rights or the way we process your Personal Data — kpvip will provide advance notice via email to your registered address and/or a prominent notice on the kpvip Platform at least fourteen (14) days before the changes take effect. Your continued use of the kpvip Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how kpvip protects your personal information. If you disagree with any changes to this Policy, you should discontinue use of the Platform and may request Account closure by contacting support at [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or kpvip's data processing practices, please contact our Data Protection Officer:

kpvip's DPO is registered with the National Privacy Commission in accordance with NPC registration requirements. You also have the right to contact the NPC directly at privacy.gov.ph if you have concerns about how kpvip handles your personal information.