42vip Privacy Policy
How we collect, use, protect, and handle your personal information

The data controller responsible for the personal information collected through the 42vip platform is the 42vip operating entity incorporated in the Philippines and operating under the PAGCOR regulatory framework. As data controller, 42vip determines the purposes for which and the manner in which your personal data is processed.

42vip has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for ensuring that our data processing activities comply with RA 10173 and its implementing rules. You may contact the DPO using the details set out in Section 15 of this Policy.

42vip collects the following categories of personal data in connection with your use of the platform:

42vip does not collect sensitive personal information as defined under RA 10173 (such as health data, religious belief, or sexual orientation) except where strictly required by law — for instance, responsible gaming assessments where a player discloses a health-related gambling concern voluntarily.

42vip collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, respond to a survey, or update your account preferences;
• Automatically — when you browse or use the 42vip platform, our servers and analytics systems record Technical Data including IP address, device information, session duration, and pages visited, using cookies and similar tracking technologies (see Section 6);
• From payment processors — GCash, Maya, bank partners, and other payment service providers share transaction confirmation data with 42vip as part of payment processing. The financial data shared is limited to what is necessary to confirm, reconcile, and record the transaction;
• From identity verification partners — where required for KYC compliance, 42vip may use third-party identity verification services that cross-reference your submitted documents against government databases accessible in the Philippines;
• From PAGCOR and regulatory authorities — regulatory notifications, self-exclusion database checks, and AML-related information may be received from PAGCOR and other applicable Philippine regulatory bodies.

42vip processes your personal data for the following specific and legitimate purposes:

4.1 Account Registration and Management

To create and maintain your 42vip account, verify your eligibility to use the platform (including age verification), authenticate your identity during login, manage account settings, and enable all platform features.

4.2 KYC and AML Compliance

To verify your identity as required under PAGCOR regulations and the Philippine Anti-Money Laundering Act. This includes cross-referencing your identity documents and monitoring transactions for suspicious activity indicators as required by law.

4.3 Payment Processing

To process your deposits via GCash, Maya, BPI, BDO, Metrobank, QR Ph, GrabPay, InstaPay, PesoNet, and 7-Eleven CLiQQ, and to process withdrawals to your nominated payment method. All transaction data is retained for financial record-keeping and regulatory reporting purposes.

4.4 Gameplay and Platform Operation

To provide access to all games on the 42vip platform including bingo, live casino, slots, Dragon Tiger, WL Live, and sports betting. Gaming session data is retained for dispute resolution, RTP verification, and regulatory audit purposes.

4.5 Responsible Gaming

To monitor account activity for indicators of problem gambling behaviour, to administer voluntary and mandatory responsible gaming tools (deposit limits, session limits, self-exclusion), and to comply with PAGCOR's responsible gaming requirements.

4.6 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance. Support communications are retained for quality assurance and regulatory compliance.

4.7 Security and Fraud Prevention

To detect and prevent fraud, multi-accounting, bonus abuse, unauthorised access, money laundering, and other prohibited conduct. Security monitoring uses automated systems that analyse Technical Data and gaming behaviour patterns.

4.8 Marketing Communications (with consent)

Where you have provided explicit consent, to send you promotional offers, bonus notifications, game announcements, and other marketing communications via SMS and/or email. You may withdraw consent at any time (see Section 12).

4.9 Legal and Regulatory Obligations

To comply with applicable Philippine laws, PAGCOR regulations, NPC requirements, tax obligations, and court orders or lawful regulatory requests.

42vip processes your personal data on the following legal bases under RA 10173:

• Performance of a contract — processing necessary to provide the 42vip platform services you have subscribed to, including account management, gameplay, and payment processing;
• Compliance with a legal obligation — processing required to fulfil our obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), RA 10173, and other applicable Philippine law;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where our interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for marketing communications and, where applicable, the use of non-essential cookies, based on your freely given and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

42vip uses cookies and similar tracking technologies when you access the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these without ceasing to use the platform.
• Functional Cookies: Remember your platform preferences such as language settings, game layout preferences, and responsible gaming tool configurations. These improve your experience but are not essential.
• Analytics Cookies: Aggregate, anonymised data about how players use the platform — page load times, navigation patterns, feature usage — used to improve the 42vip product. Individual player behaviour is not sold or shared with advertisers.
• Security Cookies: Assist with fraud detection and account security by identifying unusual patterns in session behaviour.

You may control non-essential cookies through your browser settings. Note that disabling functional cookies may affect your platform experience.

42vip does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the minimum extent necessary:

• Payment Service Providers: GCash (Mynt), Maya (PayMaya Philippines), Grab Financial Group, BancNet, BPI, BDO, Metrobank, and 7-Eleven Philippines — for processing your deposit and withdrawal transactions. Each provider is bound by their own data protection obligations under Philippine law and our data processing agreements.
• Game Studio Providers: Licensed game technology companies that provide game software to 42vip receive limited session data necessary for game operation, RNG certification, and support purposes. No identity or payment data is shared with game studios beyond what is technically necessary.
• Identity Verification Providers: Third-party KYC service providers authorised to verify identity documents against Philippine government databases. Data shared is limited to what is required for identity matching purposes.
• PAGCOR and Regulatory Authorities: We are legally required to share certain player data with PAGCOR upon request, including transaction reports, self-exclusion notifications, and AML suspicious transaction reports. We may also respond to lawful orders from Philippine courts and law enforcement agencies.
• 42vip Group Companies: Where applicable, data may be shared within the 42vip corporate group for internal administration, consolidated compliance reporting, or shared technology infrastructure. All group entities are bound by equivalent privacy standards.
• Professional Advisors: Lawyers, accountants, and auditors who provide services to 42vip may access limited personal data under strict confidentiality obligations.

42vip retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account plus five (5) years following account closure, in compliance with PAGCOR requirements and applicable AML record-keeping obligations under Philippine law.
• Transaction and Financial Data: Retained for ten (10) years from the date of each transaction, as required under the Philippines' AML framework and Bureau of Internal Revenue (BIR) record-keeping requirements.
• Gaming Session Data: Retained for five (5) years from the date of each session for RNG certification verification, dispute resolution, and regulatory audit purposes.
• Customer Support Communications: Retained for three (3) years from the date of the final communication in each support thread.
• Technical and Analytics Data: Anonymised or aggregated analytics data may be retained indefinitely. IP logs are retained for twelve (12) months unless required for an active security investigation.
• Marketing Preference Data: Retained until you withdraw consent or request deletion, plus twelve (12) months to maintain suppression records.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures.

42vip implements technical and organisational security measures appropriate to the risk level of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 42vip servers;
• AES-256 encryption for sensitive data at rest, including identity documents and financial details stored in our databases;
• One-way cryptographic hashing for all stored account passwords — 42vip staff cannot read your password;
• Multi-factor authentication options for player accounts and mandatory multi-factor authentication for all 42vip staff accessing personal data;
• Role-based access controls ensuring that staff access to personal data is limited to what is required for their specific job function;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Intrusion detection systems and real-time monitoring of network traffic for anomalous activity;
• Documented incident response procedures tested through regular simulated breach exercises.

Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by 42vip:

To exercise any of these rights, submit a written request to our Data Protection Officer using the contact details in Section 15. 42vip will respond within thirty (30) calendar days of receiving a complete request. If your request is complex or voluminous, we may extend this period by a further thirty (30) days with notice. There is no charge for standard requests.

If you are not satisfied with 42vip's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The 42vip platform is strictly restricted to persons aged 21 years and above. 42vip does not knowingly collect personal data from persons under the age of 21.

All registration requests are subject to age verification. Where 42vip discovers or reasonably suspects that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the personal data to the extent legally permissible, withhold any balance pending investigation, and report the matter to PAGCOR as required by our regulatory obligations.

42vip will only send you marketing communications — including promotional offers, bonus notifications, new game announcements, and VIP programme updates — where you have provided explicit consent to receive such communications during registration or through your account settings.

You may withdraw your consent and opt out of marketing communications at any time by:

• Updating your communication preferences in your 42vip account settings under "Notifications";
• Replying STOP to any SMS message received from 42vip;
• Clicking the unsubscribe link in any email marketing communication from 42vip; or
• Contacting 42vip support via live chat or email and requesting removal from marketing communications.

Opt-out requests are processed within five (5) business days. Withdrawing marketing consent does not affect your ability to receive transactional and account-related communications (such as deposit confirmations, withdrawal notifications, security alerts, and responsible gaming messages), which are sent on the basis of contract performance or legal obligation regardless of marketing preferences.

Some of the third-party service providers engaged by 42vip — particularly game studio technology providers and cloud infrastructure partners — may process data in servers located outside the Philippines. Where personal data is transferred outside the Philippines, 42vip ensures that such transfers are subject to appropriate safeguards, which may include:

• Data processing agreements that impose obligations on the recipient equivalent to those required under RA 10173;
• Transfer to countries that have been recognised as providing adequate data protection by the National Privacy Commission;
• Standard contractual clauses approved for cross-border data transfers by the NPC.

42vip does not transfer personal data to jurisdictions that do not provide adequate legal protection for the rights of Filipino data subjects without implementing the safeguards described above.

42vip may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable law. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Material changes — those that significantly affect your rights or the way we process your personal data — will be communicated to registered players via SMS to the registered mobile number and/or email to the registered address at least fourteen (14) days before the change takes effect, or immediately where required by law.

Continued use of the 42vip platform after the effective date of any amended Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Privacy Policy, you should close your account and cease using the platform.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by 42vip, please contact our Data Protection Officer:

For complaints not resolved through our internal process, you may submit a complaint to the National Privacy Commission (NPC) of the Philippines, which has jurisdiction over data privacy disputes involving Philippine data subjects.