casinous Privacy Policy

1Introduction

casinous ("casinous," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the casinous Platform at casinous.app. This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information when you access or use the casinous website, mobile experience, games, and related services (collectively, the "Platform").

This Privacy Policy applies to all registered players, prospective players, and visitors to the casinous Platform, including those accessing from Metro Manila, Cebu, Davao, Quezon City, Makati, and all other parts of the Philippines. By accessing the casinous Platform or creating a casinous account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

casinous operates in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. We are committed to upholding the rights of data subjects under Philippine law and to processing personal data lawfully, fairly, and transparently.

2Personal Data We Collect

casinous collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include the following:

casinous does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required for responsible gaming assessments or as mandated by applicable Philippine law.

3How We Use Your Personal Data

casinous uses the personal data we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which casinous processes your personal data are as follows:

• Account Management: To create, maintain, and manage your casinous player account, including processing your registration, verifying your identity, and enabling casinous login access.
• Service Delivery: To provide you with access to all casinous games, features, promotions, and customer support services.
• Financial Transactions: To process deposits and withdrawals in Philippine Peso (₱ PHP) via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Legal Compliance: To comply with our obligations under Philippine law, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and PAGCOR regulatory directives.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats on the casinous Platform.
• Responsible Gaming: To monitor gaming behaviour, identify signs of problem gambling, and administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion on casinous.
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates), security alerts, and — where you have opted in — promotional communications about casinous offers and new games.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the casinous Platform's performance, design, and game offering.
• Personalisation: To tailor your casinous experience, including game recommendations and promotional offers relevant to your preferences and gaming history.

4Legal Basis for Processing

casinous processes your personal data on one or more of the following legal bases, as recognised under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary to perform the contract between you and casinous — specifically, to provide you with access to the casinous Platform and its services in accordance with the casinous Terms & Conditions.
• Legal Obligation: Processing is required for casinous to comply with applicable Philippine laws and regulations, including AML obligations, KYC requirements, and PAGCOR directives.
• Legitimate Interests: Processing is necessary for casinous's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: Where casinous relies on your consent as the legal basis for processing — for example, for marketing communications — you have the right to withdraw that consent at any time by contacting our support team or updating your account preferences.

5Cookies & Tracking Technologies

casinous uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support our security and fraud prevention measures. A cookie is a small text file placed on your device when you visit the casinous website.

The types of cookies casinous uses include:

• Strictly Necessary Cookies: Essential for the casinous Platform to function correctly. These include session cookies that keep you logged in to your casinous account and security cookies that help protect against fraudulent activity. These cannot be disabled.
• Performance & Analytics Cookies: Help casinous understand how players interact with the Platform — which pages are visited most, where players encounter errors, and how long sessions last. This data is aggregated and anonymised.
• Functional Cookies: Remember your preferences on casinous, such as your preferred language, game display settings, and responsible gaming tool configurations.
• Marketing Cookies: Used to deliver relevant casinous promotional content. These are only placed with your consent and can be withdrawn at any time via your browser settings or account preferences.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the casinous Platform and your ability to access some features.

6Data Sharing & Disclosure

casinous does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers require certain personal and financial data to process your deposits and withdrawals in PHP.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist casinous in verifying player identities and screening against sanctions lists and politically exposed persons (PEP) databases.
• Game Providers: Licensed game studios and software providers whose games are available on the casinous Platform may receive limited technical and gaming data necessary to deliver their games and resolve disputes.
• Regulatory Authorities: PAGCOR (Philippine Amusement and Gaming Corporation) and other competent Philippine regulatory bodies, where disclosure is required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, courts, or other government bodies where casinous is legally required to disclose personal data, for example in connection with an AML investigation or court order.
• Professional Advisers: Lawyers, auditors, accountants, and insurers who provide professional services to casinous, subject to strict confidentiality obligations.
• Group Companies: Affiliated entities within the casinous corporate group, where necessary for internal administrative purposes and the provision of shared services.

7Data Retention

casinous retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide, casinous applies the following retention periods:

• Account Data: Retained for the duration of your active casinous account and for a minimum of five (5) years following account closure, in accordance with Philippine AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering law.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory authority.
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Communications Data: Support communications and live chat transcripts are retained for up to two (2) years for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.

When personal data is no longer required, casinous will securely delete or anonymise it in accordance with our internal data disposal procedures.

8Your Data Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by casinous. To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 13.

• Right to Be Informed: You have the right to be informed about how casinous collects and processes your personal data, as set out in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data casinous holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that casinous correct any inaccurate or incomplete personal data we hold about you. You can update basic account information directly through your casinous account settings.
• Right to Erasure: You have the right to request that casinous delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where casinous relies on legitimate interests as the legal basis, or where your data is being processed for direct marketing purposes.
• Right to Withdraw Consent: Where casinous processes your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe casinous has not handled your personal data in accordance with applicable law.

9Data Security

casinous implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the casinous Platform is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on casinous servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within casinous is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: casinous supports two-factor authentication (2FA) for player accounts to provide an additional layer of security beyond your casinous login password.
• Penetration Testing: casinous conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in our systems.
• Incident Response: casinous maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players in accordance with applicable Philippine law.

While casinous takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your casinous login credentials and for ensuring that your device is adequately protected.

10Children & Minors

The casinous Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing online gambling and casino-style gaming. casinous does not knowingly collect personal data from individuals under the age of 21.

If casinous discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data in question, and take appropriate action in accordance with our age verification procedures and applicable Philippine law.

casinous encourages parents and guardians to make use of parental control software and device-level restrictions to prevent minors from accessing online gambling platforms, including casinous.

11Third-Party Links & Services

The casinous Platform may contain references to third-party services, including payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank, as well as game providers and other service partners. When you interact with these third-party services, you are subject to their own privacy policies and terms of use, which are separate from and independent of this casinous Privacy Policy.

casinous is not responsible for the privacy practices, data handling, or content of any third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the casinous Platform.

casinous does not control how third-party payment processors handle your financial data once a transaction has been initiated. All such processing is governed by the respective provider's terms and privacy policy.

12Changes to This Privacy Policy

casinous reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, casinous will notify registered players via email and/or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the casinous Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how casinous is protecting your personal data. If you have any concerns about a change to this policy, please contact our Data Protection Officer before continuing to use the Platform.

13Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way casinous handles your personal data, please contact our Data Protection Officer (DPO). We aim to respond to all privacy-related enquiries within 15 business days.

• Data Protection Officer: casinous DPO
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the casinous Platform

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012 in the Philippines.