Casino Lus Privacy Policy — Your Data, Your Rights

Casino Lus is the data controller responsible for your personal information under this Privacy Policy. As a PAGCOR-licensed online gaming platform operating in the Philippines, Casino Lus determines the purposes and means by which your personal data is processed.

Casino Lus has appointed a Data Protection Officer (DPO) who oversees all data privacy matters in accordance with the DPA. The DPO is your primary contact for any privacy-related concerns, data access requests, or complaints regarding how Casino Lus handles your personal information.

Casino Lus collects personal information that is necessary to provide our services, comply with regulatory requirements, and protect both you and the integrity of the platform. The categories of data we collect are described below.

Under the Philippines Data Privacy Act, Casino Lus must have a lawful basis for processing your personal data. We rely on the following legal grounds:

• Contract Performance: We process identity, contact, financial, and gaming data to fulfil our contractual obligations to you as a Casino Lus player — including account management, processing bets, handling deposits and withdrawals, and providing customer support.
• Legal and Regulatory Obligation: Casino Lus is legally required by PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission to collect and retain certain player data. This includes KYC verification, transaction records, and responsible gaming monitoring.
• Legitimate Interest: We process technical and gaming activity data to maintain platform security, detect fraud, prevent money laundering, and improve the Casino Lus player experience — balanced against your privacy rights.
• Consent: For optional activities such as marketing communications and the use of non-essential cookies, Casino Lus relies on your freely given, specific, and informed consent — which you can withdraw at any time.

Casino Lus uses your personal data strictly for the purposes described at the time of collection and the lawful bases outlined above. Specific uses include:

• Creating and managing your Casino Lus player account, including identity verification and age confirmation as required by PAGCOR.
• Processing deposits, withdrawals, and all financial transactions in Philippine Peso through GCash, Maya, and other supported payment channels.
• Providing customer support, resolving disputes, and responding to your inquiries through live chat, email, and other support channels.
• Monitoring for responsible gaming indicators and implementing player protection measures where risk factors are detected, in compliance with PAGCOR's responsible gaming framework.
• Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Casino Lus platform.
• Sending you transactional communications — account confirmations, withdrawal receipts, security alerts — which cannot be opted out of as they are essential for account security.
• Sending marketing communications about Casino Lus promotions, bonuses, and new products — only where you have opted in and subject to your right to opt out at any time.
• Complying with our legal obligations to PAGCOR, the AMLC, the Bureau of Internal Revenue (BIR), and other relevant Philippine government bodies.
• Improving the Casino Lus platform through analysis of aggregated, anonymised usage data.

Casino Lus uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your overall experience. Here is how we categorise our cookie use:

You can manage your cookie preferences at any time through your browser settings or the Casino Lus cookie preference centre within your account. Disabling non-essential cookies will not affect your ability to play or access Casino Lus services.

Casino Lus does not sell your personal data. We share your information only in the limited circumstances described below, and only with parties who are bound by appropriate data protection obligations:

• PAGCOR and Philippine Regulators: Casino Lus is legally required to share player data with PAGCOR, the AMLC, the NPC, and other competent Philippine authorities on request or as mandated by law. This includes suspicious transaction reporting under the AMLA.
• Payment Processors: Your financial data is shared with our payment processing partners (including GCash, Maya, and bank partners) only to the extent necessary to process your deposits and withdrawals securely.
• Game Providers: Game providers integrated into Casino Lus may receive anonymised or pseudonymised session data for game performance and fairness verification purposes. They do not receive your full identity or financial information.
• Identity Verification Partners: For KYC compliance, Casino Lus works with licensed identity verification service providers who process your identity documents under strict data processing agreements.
• Fraud Prevention Networks: In cases of suspected fraud or money laundering, Casino Lus may share limited data with fraud prevention agencies and, if required, with Philippine law enforcement.
• Professional Advisers: Lawyers, auditors, and compliance advisers engaged by Casino Lus may access relevant data under professional secrecy obligations.

Casino Lus retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. Specific retention periods are:

• Active Account Data: Retained for the full duration of your Casino Lus account plus five (5) years after account closure, in line with PAGCOR record-keeping requirements and standard Philippine financial record retention periods.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and PAGCOR regulations.
• KYC Verification Documents: Retained for five (5) years after account closure or the last transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction unless a longer period is required by an ongoing dispute or regulatory matter.
• Marketing Consent Records: Retained while you hold an active Casino Lus account and for one (1) year after account closure, or until consent is withdrawn, whichever occurs first.

When personal data is no longer required and the applicable retention period has expired, Casino Lus will securely delete or anonymise the data in accordance with its internal data disposal protocols.

As a data subject under Republic Act 10173, you have the following rights with respect to your personal data held by Casino Lus. We take these rights seriously and have built processes to honour them promptly.

To exercise any of these rights, contact our Data Protection Officer at privacy@casinolus.net. Please include your full name, registered email address, and a description of your request. Casino Lus will verify your identity before processing any data rights request to protect your account security.

Casino Lus implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Casino Lus servers.
• Encrypted storage of passwords using one-way hashing algorithms — Casino Lus employees cannot access your password.
• Role-based access controls ensuring that Casino Lus staff access only the data necessary for their specific job function.
• Regular third-party security audits, penetration testing, and vulnerability assessments of Casino Lus infrastructure.
• 24/7 automated anomaly detection systems monitoring for unusual account activity, login attempts, and financial transaction patterns.
• Incident response procedures in place to contain and report data breaches within 72 hours to the NPC as required under the DPA's breach notification rules.

Casino Lus strictly prohibits the use of its platform by anyone under the age of 21. We do not knowingly collect or process personal data from individuals under 21 years of age.

If Casino Lus becomes aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete all associated personal data, and forfeit any associated balance in accordance with our Terms and Conditions and PAGCOR regulations.

If you are a parent or guardian and believe that your child has registered on Casino Lus, please contact us immediately at privacy@casinolus.net with the relevant account details so we can investigate and act accordingly.

Casino Lus primarily stores and processes your data within the Philippines. However, some of our third-party service providers — including certain game providers, cloud infrastructure providers, and fraud prevention services — may process data in other countries.

Where data is transferred outside the Philippines, Casino Lus ensures that adequate protections are in place as required by Section 21 of the DPA. This includes contractual safeguards (standard contractual clauses), ensuring the recipient country has an equivalent level of data protection, or relying on derogations permitted under the DPA such as contractual necessity.

Casino Lus may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When we make material changes — meaning changes that significantly affect how your personal data is handled — we will notify you by:

• Sending a notification to your registered Casino Lus email address at least 14 days before the changes take effect.
• Displaying a prominent notice on the Casino Lus platform when you log in.
• Updating the "Effective Date" at the top of this page.

Your continued use of Casino Lus after the effective date of any updated Privacy Policy constitutes your acceptance of the revised practices. If you do not agree with the updated policy, you should stop using Casino Lus and contact us to close your account.

For all privacy-related inquiries, data rights requests, or complaints, please contact the Casino Lus Data Protection Officer. We are committed to responding to all legitimate data privacy concerns promptly and transparently.