pgplus Privacy Policy

This Privacy Policy ("Policy") describes how pgplus ("pgplus", "we", "us", "our"), the operator of the online casino and sports betting platform at https://pgplus.vu ("the Platform"), collects, uses, stores, and discloses personal information about individuals ("you", "Player", "User") who access or use the pgplus platform.

pgplus is committed to protecting the privacy and security of all personal data entrusted to us by our players. This Policy is written in clear, plain English so that every Filipino player can understand exactly how their data is handled — no confusing legalese, just straightforward information.

This Policy should be read together with the pgplus Terms and Conditions and Responsible Gaming Policy. By registering a pgplus account or using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of the Data Privacy Act of 2012 and applicable international data protection frameworks, pgplus is the personal information controller responsible for the personal data collected through the pgplus platform.

pgplus has appointed a dedicated Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. If you have any privacy-related queries, concerns, or requests, you may direct them to our support team at the contact details provided in Section 14 of this Policy, and your communication will be forwarded to the DPO.

pgplus collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in certain cases from third-party identity verification and payment processing providers. The categories of personal data we collect include:

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including barangay, city, and province)
• Email address
• Mobile phone number (used for OTP verification and account security)
• Username and hashed password (passwords are never stored in plain text)
• Security question responses

3.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., SSS Unified Multi-Purpose ID, PhilHealth ID, driver's licence, Philippine passport, Postal ID, or UMID)
• Selfie or liveness-check image where required for identity matching
• Proof of address documents (e.g., utility bills, bank statements addressed to your registered address)
• Tax Identification Number (TIN) where required for large transaction reporting

3.3 Financial and Transaction Data

• GCash mobile wallet account number or PayMaya account details
• Bank account details for BPI, BDO, or Metrobank transfers (account name and number only — pgplus does not store full bank credentials)
• Cryptocurrency wallet addresses where applicable
• Deposit and withdrawal transaction history
• Betting and gaming activity records

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser or app version
• Session timestamps, login history, and platform navigation patterns
• Cookie identifiers and similar tracking technologies (see Section 8)

3.5 Communications Data

• Records of live chat, email, and in-app messages exchanged with pgplus support staff
• Responses to surveys, promotions, or feedback requests

pgplus processes your personal data for the following purposes:

pgplus processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and applicable data protection frameworks:

• Contractual necessity: Processing required to fulfil the pgplus Terms and Conditions to which you are a party — including account creation, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering laws, tax reporting obligations, and lawful directives from regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC).
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate platform analytics, where our legitimate interests are not overridden by your rights and interests.
• Consent: Processing for optional marketing communications, where you have provided explicit, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

pgplus does not sell or rent your personal data to third parties. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing partners receive transaction data strictly as needed to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and anti-fraud service providers receive identity document data to assist with age verification and fraud prevention. These providers are contractually bound to process your data only as instructed by pgplus.
• Regulatory authorities: pgplus will disclose personal data to PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue (BIR), or any other competent Philippine authority when required to do so by law, court order, or lawful directive.
• Technology and infrastructure partners: Cloud hosting, platform software, and security service providers who process data on our behalf under strict data processing agreements that prohibit any use of your data beyond the services they provide to pgplus.
• Business transfers: In the event of a merger, acquisition, or sale of pgplus assets, your personal data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy. Affected players will be notified in advance of any such transfer.

In all cases where pgplus engages third-party processors, we require appropriate contractual data protection safeguards to be in place before any data is shared.

pgplus retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Where data is retained solely to meet legal obligations, it will be securely archived with access restricted to authorised compliance personnel only. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

The pgplus platform uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, maintain your login session, and analyse how the platform is used. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the platform to function. These cookies maintain your login session, remember your currency and language preferences, and enable core gaming functions. They cannot be disabled without affecting platform functionality.
• Functional cookies: Allow the platform to remember choices you have made (such as your preferred payment method or responsible gaming settings) to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised information about how players interact with the pgplus platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics tools in this context.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the pgplus platform and player accounts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the pgplus platform. pgplus does not use cookies to track your activity on third-party websites unrelated to the pgplus platform.

As a player and data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by pgplus:

• Right to be informed: You have the right to be informed of how your personal data is collected, processed, and used — which is the primary purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data pgplus holds about you, along with information about how it is being processed.
• Right to correction: You may request that any inaccurate, incomplete, or outdated personal data in your pgplus account be corrected or updated. Many basic details can be updated directly within your account profile.
• Right to erasure (right to be forgotten): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires its retention. Note that regulatory retention requirements (see Section 7) may limit the scope of erasure requests.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to other processing activities based on legitimate interests, subject to pgplus's overriding legal obligations.
• Right to data portability: You may request a copy of the personal data you have provided to pgplus in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Privacy Request". We will verify your identity before processing any data subject request and will respond within thirty (30) days of receipt of a verified request.

pgplus implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pgplus platform.
• Encryption of sensitive personal data and financial information at rest within our secure database infrastructure.
• Strict role-based access controls ensuring that only authorised pgplus personnel who require access to personal data for their specific job function are granted it.
• Regular security assessments, vulnerability testing, and penetration testing of the pgplus platform and underlying infrastructure.
• Multi-factor authentication (MFA) requirements for all internal pgplus systems that process personal data.
• Comprehensive audit logging of all access to and modifications of personal data by pgplus personnel.

While pgplus takes all reasonable steps to protect your data, no system is completely immune to security risks. You also play an important role in keeping your data safe by protecting your pgplus login credentials, using strong and unique passwords, and not sharing your OTP verification codes with anyone — including persons claiming to be pgplus staff.

The pgplus platform is strictly intended for adults aged 21 years or older in accordance with Philippine gaming regulations. pgplus does not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is a mandatory step in the pgplus account registration process.

If pgplus becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately close the affected account, delete the associated personal data to the extent permitted by law, and void any transactions carried out on that account. Any balance associated with an underage account will be handled in accordance with applicable gaming regulations.

If you are a parent or guardian and believe that a minor in your care has registered a pgplus account, please contact our support team immediately at [email protected].

The pgplus platform's primary operations and data processing infrastructure are oriented to serve Philippine players. In certain cases, personal data may be processed by service providers whose infrastructure is located outside the Philippines — for example, cloud hosting providers or identity verification partners operating in other jurisdictions.

Whenever personal data is transferred outside the Philippines, pgplus ensures that appropriate safeguards are in place to provide a level of protection equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:

• Contractual data processing agreements incorporating the standard data protection clauses recognised by the National Privacy Commission.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules or equivalent intra-group data transfer mechanisms where applicable.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting [email protected].

pgplus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. When material changes are made to this Policy, pgplus will notify registered players by email to their registered address and/or by displaying a prominent notice on the pgplus platform for a reasonable period before the changes take effect.

The most current version of this Privacy Policy will always be available at https://pgplus.vu/privacy-policy, together with the effective date of the current version. Continued use of the pgplus platform following publication of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should stop using the platform and may request account closure in accordance with the Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how pgplus has handled your personal information, please contact our support team:

We aim to acknowledge all privacy-related correspondence within five (5) business days and to resolve substantive complaints within thirty (30) days. Complex matters may require additional time, and we will keep you informed of progress throughout.

If you are not satisfied with pgplus's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available on the NPC's official website. pgplus fully cooperates with all NPC investigations and inquiries.