1. Information We Collect
When you use BYU Casino, we collect different types of information depending on how you interact with the platform. Here's a breakdown of what we gather and why:
Personal Identification Data
When you register an account, we collect your full name, date of birth, email address, mobile number, and residential address in the Philippines. This information is needed to verify your identity, comply with regulatory requirements, and make sure you're of legal gambling age (21 years old and above as per Philippine law).
Financial Information
To process deposits and withdrawals, we collect details related to your chosen payment method. This may include your GCash or Maya mobile number, bank account details for BDO, BPI, or UnionBank transfers, or card information for Visa/Mastercard transactions. We do not store full card numbers on our servers — payment data is handled through PCI-DSS compliant processors.
Technical and Usage Data
We automatically collect data about how you use the platform: your IP address, device type, browser, operating system, pages visited, games played, session duration, and betting patterns. This helps us improve the platform, detect fraud, and personalise your experience.
Communications Data
If you contact our support team via email or live chat, we keep records of those conversations to help resolve issues faster and improve our service quality.
2. How We Use Your Information
BYU Casino uses your privacy data for specific, legitimate purposes. We don't collect anything we don't actually need:
- Account management: Creating, maintaining, and securing your player account.
- Payment processing: Facilitating deposits and withdrawals through GCash, Maya, GrabPay, InstaPay/PESONet, and other supported channels.
- Identity verification (KYC): Complying with PAGCOR licensing requirements and anti-money laundering (AML) obligations.
- Personalisation: Tailoring game recommendations, bonus offers, and VIP Club rewards to match your preferences.
- Fraud prevention and security: Detecting suspicious activity, preventing unauthorised access, and protecting your account.
- Customer support: Resolving account issues, processing complaints, and responding to your queries.
- Legal compliance: Meeting our obligations under Philippine law, including the Data Privacy Act of 2012 (Republic Act 10173).
- Marketing communications: Sending promotions, bonus alerts, and platform updates — only if you've opted in, and only to the channels you've agreed to.
3. Legal Basis for Processing
BYU Casino processes your personal data under the following legal grounds, consistent with the Philippine Data Privacy Act of 2012:
- Contractual necessity: Processing needed to provide you with our gaming services under the terms of your account agreement.
- Legal obligation: Compliance with PAGCOR regulations, AML laws, and other applicable Philippine legislation.
- Legitimate interests: Fraud detection, platform security, and improving our services — balanced against your rights.
- Consent: For marketing communications and optional features — you're always free to withdraw consent.
4. Data Sharing and Disclosure
We don't sell your data. We don't trade it. But there are limited situations where sharing is necessary:
Service Providers
We work with trusted third-party vendors who help us run the platform — payment processors, cloud hosting providers, fraud detection services, and customer support tools. These partners can only access the data they need to do their specific job, and they're bound by strict confidentiality agreements.
Regulatory and Legal Requirements
We may disclose your information to PAGCOR, AMLC (Anti-Money Laundering Council), law enforcement, or other government authorities if required by Philippine law, a court order, or to protect the rights and safety of our players and the platform.
Business Transfers
In the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity. We'll notify you before any such transfer and ensure the receiving party upholds the same privacy standards.
5. Cookies and Tracking Technologies
BYU Casino uses cookies and similar technologies to make the platform work better for you. Here's what we use and why:
| Cookie Type |
Purpose |
Can You Opt Out? |
| Essential Cookies |
Keep you logged in, remember session data, enable core functions |
No — these are required for the site to work |
| Performance Cookies |
Track page load times, error rates, and usage patterns to improve the platform |
Yes — via cookie settings |
| Functional Cookies |
Remember your language preferences, game settings, and lobby layout |
Yes — via cookie settings |
| Marketing Cookies |
Serve relevant promotions and track campaign effectiveness |
Yes — via cookie settings or opt-out |
You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect platform functionality.
6. Data Retention
We keep your personal data only as long as necessary for the purposes it was collected, or as required by Philippine law. Here's our general retention schedule:
- Active account data: Retained for the duration of your account plus 5 years after closure, in line with AML recordkeeping requirements.
- Transaction records: Kept for a minimum of 5 years to comply with PAGCOR and AMLC obligations.
- KYC documents: Retained for 5 years after account closure or the last transaction, whichever is later.
- Support communications: Kept for 3 years after the conversation is closed.
- Marketing data: Deleted or anonymised within 12 months of you opting out.
When data is no longer needed, we securely delete or anonymise it so it can't be linked back to you.
7. Your Rights Under Philippine Law
Under the Data Privacy Act of 2012, you have the following rights as a data subject:
- Right to be informed: Know what data we collect and how we use it — which is exactly what this policy is for.
- Right of access: Request a copy of the personal information we hold about you.
- Right to rectification: Ask us to correct any inaccurate or incomplete data.
- Right to erasure: Request deletion of your data, subject to legal retention requirements.
- Right to object: Opt out of processing based on legitimate interests, particularly for direct marketing.
- Right to data portability: Request your data in a structured, machine-readable format.
- Right to file a complaint: Lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.
To exercise any of these rights, email us at privacy@byucasino.app. We'll respond within 15 business days.
8. Security Measures
BYU Casino takes the security of your personal data seriously. We've put in place both technical and organisational measures to protect your information from unauthorised access, loss, or misuse:
- SSL/TLS encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Multi-factor authentication (MFA) for staff accessing player data
- Regular third-party security audits and vulnerability assessments
- Role-based access controls — staff can only see data relevant to their job
- 24/7 intrusion detection and monitoring systems
- Strict data breach response procedures aligned with NPC requirements
No system is 100% impenetrable, but we go well beyond minimum standards to keep your BYU Casino account and data safe. If we ever detect a breach that affects your data, we'll notify you and the NPC within 72 hours — as required by law.
9. Children's Privacy
BYU Casino is strictly for adults. We do not knowingly collect personal data from anyone under 21 years of age. If we discover that a minor has created an account, we will immediately close it, erase the associated data, and return any deposited funds to the source payment method. If you believe a minor has registered on our platform, please contact us immediately at support@byucasino.app.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal obligations. When we make significant changes, we'll let you know via email or a prominent notice on the platform — at least 30 days before the changes take effect. The "Last Updated" date at the top of this page always reflects the most recent version. Continued use of BYU Casino after the effective date means you accept the updated policy.
