Privacy Policy

1. Introduction

casi646 ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of every player who uses the casi646 platform at casi646.app. This Privacy Policy ("Policy") describes how casi646 collects, uses, stores, shares, and protects personal information in connection with the operation of our online casino platform, which is directed at players in the Philippines.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. casi646 acts as the personal information controller in respect of the data described in this Policy.

By registering an account on casi646, accessing the Platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree with this Policy, you must not use casi646.

This Policy should be read alongside casi646's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

casi646 collects the following categories of personal data from players and prospective players:

2.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (to verify the 21+ age requirement);
• Gender;
• Nationality and country of residence;
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license, SSS/GSIS number).

2.2 Contact Data

• Email address;
• Mobile phone number (Philippine format);
• Residential address (city, province, postal code).

2.3 Financial & Transaction Data

• GCash or Maya account details (mobile number linked to the wallet);
• Philippine bank account details (bank name, account number) for bank transfer transactions;
• Debit card details (card number, expiry — stored in tokenized form only);
• Deposit and withdrawal history;
• Account balance and transaction records.

2.4 Gaming Activity Data

• Game session history, including games played, wagers placed, and outcomes;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session timestamps and login history;
• Cookie identifiers and similar tracking data (see Section 7).

2.6 Communications Data

• Records of communications with casi646 support (live chat transcripts, email correspondence);
• Feedback, complaints, and dispute records.

3. How We Collect Your Data

casi646 collects personal data through the following means:

3.1 Directly From You

The majority of data casi646 holds about you is provided directly by you during the registration process, identity verification, payment transactions, and communications with our support team. You are responsible for ensuring that the information you provide is accurate and up to date.

3.2 Automatically Through Platform Use

When you access and use the casi646 Platform, we automatically collect technical and device data through cookies, server logs, and similar technologies. This data is collected to ensure platform security, detect fraud, and improve the player experience.

3.3 From Third Parties

casi646 may receive personal data about you from the following third-party sources:

• Identity Verification Providers: Third-party KYC services that assist casi646 in verifying your identity documents against government databases;
• Payment Processors: GCash, Maya, and banking partners may share transaction confirmation data with casi646;
• Fraud Prevention Services: Third-party services that flag suspicious account activity or payment patterns;
• Regulatory Authorities: PAGCOR or other Philippine government bodies may share information relevant to compliance obligations.

4. How We Use Your Personal Data

casi646 uses the personal data it collects for the following purposes:

casi646 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5. Legal Basis for Processing

casi646 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfill our obligations under the casi646 Terms & Conditions, including account management, payment processing, and game operation;
• Legal Obligation: Processing required to comply with Philippine law, including AML regulations, PAGCOR licensing requirements, and NPC guidelines;
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent that you may withdraw at any time.

6. Data Sharing & Disclosure

casi646 does not sell, rent, or trade your personal data to any third party. We may share your data only in the following circumstances:

6.1 Service Providers

casi646 engages trusted third-party service providers who process data on our behalf under strict data processing agreements. These include identity verification providers, payment processors (GCash, Maya, Philippine banks), fraud detection services, and cloud infrastructure providers. All such providers are contractually bound to process your data only as instructed by casi646 and in compliance with applicable Philippine data protection law.

6.2 Regulatory & Legal Disclosure

casi646 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other government bodies where required by Philippine law, court order, or regulatory directive. casi646 will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of casi646's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.

6.4 With Your Consent

casi646 may share your data with third parties in circumstances not described above where you have provided explicit prior consent to such sharing.

7. Cookies & Tracking Technologies

casi646 uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform to help casi646 improve performance and user experience.
• Marketing Cookies: Used only with your consent to deliver relevant casi646 promotions. You may opt out at any time.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the casi646 Platform.

8. Data Retention

casi646 retains your personal data for as long as your account is active and for a period thereafter as required by Philippine law and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Communications records: Retained for three (3) years from the date of the communication;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of consent.

Upon expiry of the applicable retention period, casi646 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9. Data Security

casi646 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and casi646's servers;
• AES-256 encryption for sensitive data stored at rest;
• Multi-factor authentication options for player accounts;
• Regular security audits and penetration testing of the Platform;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Staff training on data protection and information security obligations.

While casi646 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, casi646 will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by casi646:

• Right to be Informed: The right to know what personal data casi646 collects about you and how it is used — which this Policy fulfills;
• Right of Access: The right to request a copy of the personal data casi646 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to casi646's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe casi646 has violated your data privacy rights.

To exercise any of these rights, please contact casi646's Data Protection Officer using the contact details in Section 14. casi646 will respond to all verified data rights requests within thirty (30) days of receipt.

11. Children & Minors

casi646 is strictly intended for individuals aged 21 years and above. casi646 does not knowingly collect personal data from individuals under the age of 21. If casi646 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be suspended.

If you are a parent or guardian and believe that a minor has registered on casi646 or provided personal data to us, please contact casi646 support immediately so that we can take appropriate action.

12. Marketing Communications

casi646 will only send you promotional emails, SMS messages, or in-platform notifications if you have explicitly opted in to receive marketing communications during registration or through your account settings.

Each marketing communication from casi646 will include a clear and easy mechanism to unsubscribe or opt out. You may also withdraw your marketing consent at any time by:

• Updating your communication preferences in your casi646 account settings;
• Contacting casi646 support and requesting removal from marketing lists.

Withdrawal of marketing consent will not affect the lawfulness of any processing carried out prior to withdrawal, and will not affect your ability to use the casi646 Platform.

13. Changes to This Privacy Policy

casi646 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, casi646 will notify you by posting a notice on the Platform and, where appropriate, by sending an email to your registered address.

The effective date of the current version of this Policy is indicated at the top of this page. Your continued use of casi646 following the posting of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or casi646's handling of your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official government website.