cokecasino Privacy Policy

1.1 cokecasino ("we," "us," or "our") takes the privacy of every player on our platform seriously. This Privacy Policy describes how cokecasino collects, processes, stores, uses, and protects the personal information of individuals who access or use the cokecasino online gaming platform at cokecasino.app.

1.2 This Policy applies to all data processing activities conducted by cokecasino, including data collected through:

• Account registration and profile management;
• KYC identity verification processes;
• Payment transactions via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, and Cebuana;
• Customer support interactions via Live Chat and email;
• Gameplay data generated during your use of cokecasino games and services;
• Technical data collected through cookies and server logs while you use the Platform.

1.3 This Policy is intended to comply with the Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission of the Philippines. cokecasino also processes data in accordance with PAGCOR licensing requirements and the Anti-Money Laundering Act (Republic Act 9160, as amended).

1.4 This Policy does not apply to third-party websites, services, or platforms linked from cokecasino.app. cokecasino is not responsible for the privacy practices of third parties.

2.1 For the purposes of the Data Privacy Act of 2012, cokecasino is the Personal Information Controller (PIC) in respect of all personal data collected and processed through cokecasino.app.

2.2 As a PAGCOR-licensed online gaming operator, cokecasino is registered with the National Privacy Commission as required under NPC Circular 17-01. Our Data Protection Officer (DPO) is responsible for overseeing data protection compliance and can be reached through the contact information in Section 16.

2.3 Where cokecasino engages third-party service providers — such as payment processors, identity verification services, or game software providers — that process personal data on cokecasino's behalf, those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only as instructed by cokecasino and to maintain data security standards consistent with RA 10173.

3.1 cokecasino collects the minimum personal data necessary to operate the Platform, comply with regulatory obligations, and provide you with a secure gaming experience. The categories of personal data we collect are as follows:

3.2 Identity & Contact Data

• Full legal name (as appears on government-issued ID);
• Date of birth (to verify the 21+ age requirement);
• Residential address in the Philippines;
• Philippine mobile number;
• Email address;
• Government-issued ID number and document images (for KYC purposes);
• Selfie photograph submitted alongside KYC documents.

3.3 Financial & Transaction Data

• GCash or PayMaya account number (as linked to your cokecasino account);
• Bank account or card details where applicable for deposit or withdrawal processing;
• Transaction history: all deposits, withdrawals, and game wagers associated with your Account;
• Source of funds declarations where required under AMLA obligations.

3.4 Gaming & Behavioural Data

• Game session data: games played, bet amounts, win/loss records, session duration;
• Bonus participation history and wagering progress;
• Responsible gaming settings and self-exclusion status;
• Customer support interaction records, including chat transcripts and email correspondence.

3.5 Technical Data

• IP address and approximate geolocation (country/region level);
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Cookie identifiers and analytics data (see Section 7).

4.1 cokecasino processes your personal data for the following purposes:

5.1 cokecasino processes personal data under the following legal grounds as recognised under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations:

• Contractual Necessity: Processing required to perform the contract between you and cokecasino — i.e., to operate your Account, process deposits and withdrawals, and deliver gaming services;
• Legal Obligation: Processing required by Philippine law, including PAGCOR licensing conditions, AMLA reporting obligations under RA 9160, age verification requirements under RA 9287, and NPC registration requirements under RA 10173;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your privacy rights;
• Consent: Where cokecasino relies on your consent for a specific processing activity — such as sending promotional communications or using non-essential cookies — that consent is obtained separately, is freely given, specific, and informed, and may be withdrawn at any time without affecting the lawfulness of prior processing.

5.2 Where processing is based on consent and you withdraw that consent, cokecasino will cease the specific processing activity, provided that this does not conflict with processing required by law or contract.

6.1 cokecasino does not sell, rent, or commercially transfer your personal data to third parties. Data is shared only in the following circumstances:

6.2 Regulatory Authorities

cokecasino is legally obligated to share player data with the following Philippine government bodies upon lawful request or as part of mandatory reporting obligations:

• Philippine Amusement and Gaming Corporation (PAGCOR) — for licensing compliance, audits, and PAGCOR-mandated reporting;
• Anti-Money Laundering Council (AMLC) — for covered and suspicious transaction reporting under RA 9160;
• National Privacy Commission (NPC) — for data breach notification and compliance inquiries under RA 10173;
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) — where required by a valid court order or lawful law enforcement request.

6.3 Service Providers (Personal Information Processors)

cokecasino engages third-party service providers who process personal data on our behalf under written data processing agreements that require compliance with RA 10173 standards. These include:

• Payment processors facilitating GCash, PayMaya, and bank transfer transactions;
• KYC identity verification platforms;
• Game software providers (who receive anonymised or pseudonymised session data only);
• Cloud infrastructure providers hosting cokecasino platform data within or accessible from the Philippines;
• Customer support platform providers who operate Live Chat and ticketing systems.

7.1 cokecasino uses cookies and similar tracking technologies to operate the Platform, maintain your session state, and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and preference storage. These cannot be disabled without impairing core functionality;
• Functional Cookies: Store your preferences such as language, game lobby filters, and responsible gaming settings to improve your experience across sessions;
• Analytics Cookies: Collect anonymised or aggregated data about Platform usage patterns to help cokecasino improve performance and identify technical issues. These do not identify you individually;
• Marketing Cookies: Only used with your explicit consent, to serve relevant promotional communications about cokecasino games and offers. You can withdraw consent at any time through your Account settings.

7.2 You may control cookie preferences through your browser settings. Blocking strictly necessary cookies will impair Platform functionality, including login persistence. Blocking other cookie categories will not prevent you from using cokecasino but may affect your personalised experience.

8.1 cokecasino retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to mandatory retention requirements imposed by Philippine law.

8.2 The following retention periods apply:

• Account and KYC data: Retained for the duration of the Account relationship and for five (5) years following Account closure, consistent with AMLA and PAGCOR record-keeping requirements;
• Financial transaction records: Retained for five (5) years from the date of the transaction, consistent with AMLA obligations under RA 9160;
• Customer support records: Retained for three (3) years following resolution of the last interaction, unless a dispute or regulatory inquiry requires longer retention;
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period to demonstrate compliance;
• Technical logs and security records: Retained for twelve (12) months in active storage, then archived for a further twelve (12) months for security investigation purposes.

8.3 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with you.

9.1 cokecasino implements technical and organisational security measures appropriate to the nature and volume of personal data processed, consistent with industry standards and RA 10173 requirements. These measures include:

• Encryption in transit: All data transmitted between your device and cokecasino servers is protected by TLS 1.2 or higher (256-bit encryption);
• Encryption at rest: Sensitive personal data stored on cokecasino servers is encrypted using AES-256;
• Password security: Account passwords are stored using bcrypt one-way hashing — cokecasino staff cannot access or view your plaintext password;
• Access controls: Personal data is accessible only to cokecasino personnel and authorised service providers who require it to perform their functions, on a strict need-to-know basis;
• Two-factor authentication: Available for all player accounts and mandatory for administrative access by cokecasino staff;
• Regular security assessments: cokecasino conducts periodic vulnerability assessments and penetration testing of the Platform infrastructure;
• Incident response procedures: cokecasino maintains a documented data breach response plan consistent with NPC Circular 16-03.

9.2 While cokecasino takes all reasonable measures to protect your data, no online system is completely immune to security threats. You are responsible for maintaining the confidentiality of your cokecasino login credentials and for notifying cokecasino immediately if you suspect unauthorised access to your Account.

10.1 As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by cokecasino:

10.2 To exercise any of the above rights, contact cokecasino's Data Protection Officer via the contact details in Section 16. cokecasino will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days, consistent with NPC requirements.

10.3 cokecasino may decline requests where fulfilling them would conflict with mandatory legal obligations — for example, where AMLA or PAGCOR regulations require retention of data that you request to be deleted. In such cases, cokecasino will explain the basis for the limitation.

11.1 Pursuant to PAGCOR regulations and Republic Act 9287, the minimum permitted age for participation in real-money gaming activities in the Philippines is twenty-one (21) years. cokecasino strictly enforces this requirement through its KYC identity verification process, which requires submission of a government-issued photo ID confirming the applicant's date of birth.

11.2 Any Account found to belong to a person under 21 years of age will be immediately suspended, all winnings will be voided, and the Account will be reported to PAGCOR as required by regulation. The original deposit amount will be returned to the source payment method.

11.3 If a parent or guardian becomes aware that a minor has submitted personal data to cokecasino or accessed the Platform, they should contact cokecasino's Data Protection Officer immediately (Section 16) for assistance in closing the Account and arranging removal of the minor's data.

12.1 cokecasino integrates third-party game software, payment processing, and analytics services that may independently collect technical data through their own systems. These third-party providers have their own privacy policies and are not governed by this cokecasino Privacy Policy.

12.2 cokecasino selects third-party service providers who demonstrate privacy practices consistent with Philippine law requirements and, where applicable, international standards. All providers who act as Personal Information Processors under RA 10173 are bound by written data processing agreements.

12.3 cokecasino does not control, and is not responsible for, the privacy practices of third-party game software providers in respect of data they independently collect through their own systems. Players who have concerns about specific game providers' data practices should refer to those providers' own privacy policies.

13.1 cokecasino maintains a documented personal data breach response procedure consistent with NPC Circular 16-03 (Security of Personal Data in Government Agencies) and applicable private sector guidance.

13.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected data subjects, cokecasino will:

• Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, or as soon as practicable if the 72-hour period cannot be met;
• Notify affected data subjects without undue delay once the breach is confirmed, unless law enforcement considerations require a delay;
• Provide affected data subjects with a description of the nature of the breach, the categories of data involved, likely consequences, and measures taken or proposed to address the breach;
• Maintain an internal breach register documenting all incidents regardless of whether NPC notification is required.

13.3 cokecasino will cooperate fully with the NPC in any investigation arising from a personal data breach involving cokecasino data.

14.1 Some of cokecasino's third-party service providers — including certain game software providers and cloud infrastructure vendors — may process or store personal data in servers located outside the Philippines. Where such transfers occur, cokecasino ensures that:

• The recipient country or organisation provides adequate data protection standards consistent with RA 10173;
• Appropriate contractual safeguards are in place, including data processing agreements that bind the recipient to cokecasino's privacy and security standards;
• The transfer is limited to the minimum data necessary for the specific purpose;
• NPC requirements for cross-border transfers are complied with as applicable.

14.2 cokecasino's primary data processing infrastructure is maintained with providers accessible from the Philippines. Cross-border transfers are the exception rather than the rule and occur only where necessary for specific technical or operational purposes.

15.1 cokecasino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or technology. Material changes will be communicated to registered players via email to the address on file, or through a prominent notice displayed upon next login to the Platform.

15.2 The effective date of the current version of this Policy is stated at the top of the page and in the meta information above. The version published at cokecasino.app/privacy-policy is the governing version.

15.3 Your continued use of cokecasino after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not accept an amendment that materially affects your rights, you may close your Account by contacting support.

16.1 cokecasino has designated a Data Protection Officer (DPO) as required by the Data Privacy Act of 2012 and NPC Circular 17-01. The DPO is responsible for overseeing cokecasino's compliance with RA 10173 and serving as the primary point of contact for data privacy inquiries, rights requests, and complaints.

16.2 To exercise your data rights (Section 10), report a privacy concern, or submit a formal data privacy complaint to cokecasino, contact the Data Protection Officer through the following channels:

• Email: [email protected] (subject line: "Data Privacy / DPO Request");
• Live Chat: Available 24/7 through the cokecasino Platform — for urgent data concerns;
• Response Commitment: cokecasino's DPO will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days.

16.3 If you are not satisfied with cokecasino's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC's complaints process is accessible through the NPC's official website. cokecasino will cooperate fully with any NPC investigation.