abon Casino Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by abon Casino ("the Company," "we," "us," or "our") in connection with your access to and use of the abon Casino platform at abon.app, including all associated mobile-optimised pages, customer support channels, and promotional communications.

This policy applies to all individuals who interact with abon Casino, including:

• Registered Players with active abon Casino accounts;
• Individuals who have initiated but not completed the registration process;
• Visitors who browse the abon Casino website without registering;
• Individuals who contact abon Casino through live chat, email, or other support channels.

This Privacy Policy should be read alongside abon Casino's Terms & Conditions, which together form the complete legal framework governing your relationship with the platform. In the event of any conflict between the two documents on a privacy matter, this Privacy Policy shall prevail.

abon Casino operates exclusively within the Philippines and directs its services to Filipino players. We do not knowingly collect personal data from individuals located outside the Philippines in connection with gaming activities.

abon Casino processes personal data only where a valid legal basis exists under the Data Privacy Act of 2012 and its implementing rules. The primary legal bases we rely on are as follows:

• Contractual Necessity: Processing is necessary to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account creation, identity verification, payment processing, and the delivery of gaming services;
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR licensing requirements, and the Data Privacy Act itself;
• Legitimate Interests: Processing is necessary for abon Casino's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming enforcement, provided these interests are not overridden by your rights and freedoms;
• Consent: Where we rely on your consent as a legal basis — particularly for direct marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

abon Casino collects only the personal data that is necessary for the purposes described in this policy. The categories of personal data we collect are detailed in the table below:

abon Casino collects personal data through the following channels and methods:

• Direct Submission: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or opting into promotional communications;
• Automated Technical Collection: Data collected automatically when you access the abon Casino platform, including IP address, device identifiers, browser fingerprint, session activity logs, and cookie-based identifiers (see Section 7 for full cookie details);
• Payment Processors: Transaction confirmation data and payment method verification details received from GCash, Maya, and partner banks when you conduct financial transactions on the platform;
• Identity Verification Partners: Verification status and document authenticity signals received from our third-party KYC and liveness verification technology providers;
• Fraud Prevention Systems: Risk signals and device reputation data from our internal and third-party fraud detection tools used to identify suspicious account activity;
• PAGCOR and Regulatory Bodies: In some cases, we may receive updated compliance information or flagged player data from PAGCOR or Philippine financial intelligence units as part of our regulatory obligations.

abon Casino does not purchase personal data lists from third-party data brokers, and we do not collect personal data from social media platforms without your explicit consent.

abon Casino uses the personal data we collect for the following specific and clearly defined purposes:

• Account Management: Creating, maintaining, and administering your abon Casino player account, including processing logins, password resets, and account settings updates;
• Identity & Age Verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years as mandated by PAGCOR regulations and Philippine gambling law;
• Payment Processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, and other accepted payment methods in Philippine Peso;
• AML & Compliance: Monitoring transaction patterns, conducting enhanced due diligence, and filing reports with the Anti-Money Laundering Council (AMLC) as required under RA 9160 as amended by RA 10365;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent account activity, unauthorised access, bonus abuse, money laundering, and other prohibited conduct;
• Responsible Gaming: Monitoring wagering behaviour to identify signs of problem gambling, enforcing deposit limits, session time limits, and self-exclusion requests, and providing intervention support where appropriate;
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and providing technical assistance via live chat and email;
• Personalisation: Tailoring game recommendations, bonus offers, and promotional communications to your preferences and gaming history — only where you have provided consent for this use;
• Platform Analytics: Analysing aggregated, anonymised usage data to improve the abon Casino platform, identify bugs, and optimise the player experience;
• Legal & Regulatory Obligations: Complying with all applicable Philippine laws, PAGCOR directives, court orders, and other lawful requests from competent authorities.

abon Casino does not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you, without first providing you with notice and an opportunity to contest the decision.

abon Casino does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

• PAGCOR: As a PAGCOR-licensed operator, we are required to provide player data, transaction reports, and compliance documentation to PAGCOR upon request or as part of regular regulatory reporting obligations;
• Anti-Money Laundering Council (AMLC): We are legally required to file Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) with the AMLC where transaction thresholds or suspicious patterns are detected;
• Payment Processors: GCash, Maya, partner banks, and cryptocurrency processors receive the minimum financial data necessary to process your deposit or withdrawal transaction;
• KYC & Identity Verification Providers: Third-party KYC technology partners process your identity documents and biometric liveness data solely for the purpose of verifying your identity on our behalf, under strict data processing agreements;
• Fraud Prevention Partners: Risk intelligence and device fingerprinting partners receive anonymised technical signals to help detect fraudulent account behaviour across the platform;
• Game Providers: Pragmatic Play, PG Soft, JILI Games, Evolution Gaming, and other certified providers may receive your player ID and session data necessary to render games and record game outcomes. They do not receive your full identity or financial data;
• Law Enforcement & Courts: We will disclose personal data to Philippine law enforcement agencies, courts, or other competent authorities when legally required to do so by court order, subpoena, or equivalent legal process;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of abon Casino's business, your personal data may be transferred to the acquiring entity, subject to the same protections described in this policy.

All third parties with whom abon Casino shares personal data are contractually bound to handle that data in compliance with the Data Privacy Act and are prohibited from using it for any purpose other than that for which it was shared.

abon Casino uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following categories of cookies:

You may manage your cookie preferences at any time by adjusting your browser settings or using abon Casino's cookie preference centre, accessible via the cookie banner displayed on your first visit. Disabling strictly necessary cookies will prevent you from accessing authenticated areas of the platform.

abon Casino does not use third-party advertising networks or cross-site tracking cookies that share your data with unrelated commercial entities.

abon Casino retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. Our retention periods are as follows:

• Active Account Data: Retained for the full duration of your account relationship with abon Casino and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, as required under AMLA record-keeping obligations. In cases where an account was subject to an STR or regulatory investigation, documents may be retained for up to ten (10) years;
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, consistent with AMLA and PAGCOR requirements;
• Customer Support Communications: Retained for two (2) years from the date of the interaction, unless the communication relates to an unresolved dispute or regulatory matter, in which case it is retained until resolution plus one (1) year;
• Marketing Consent Records: Retained for three (3) years from the date of consent, or until you withdraw consent, whichever is earlier;
• Website Analytics Data: Anonymised aggregated analytics data may be retained indefinitely, as it no longer constitutes personal data once fully anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with abon Casino's data destruction procedures. You may request earlier deletion of certain data categories subject to Section 10 of this policy.

Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your browser or device and abon Casino's servers is encrypted using TLS 1.2 or higher (HTTPS). Unencrypted HTTP connections are automatically redirected to HTTPS;
• Encryption at Rest: Sensitive personal data — particularly KYC documents, financial account details, and authentication credentials — is encrypted at rest using AES-256 or equivalent encryption standards;
• Access Controls: Personal data is accessible only to abon Casino personnel and authorised third-party processors who require it for their specific function. Role-based access controls and the principle of least privilege are enforced across all internal systems;
• Two-Factor Authentication (2FA): Internal system access for abon Casino staff is protected by mandatory two-factor authentication. Players are encouraged (and may be required) to enable 2FA on their player accounts;
• Penetration Testing & Security Audits: abon Casino's platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited;
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, abon Casino will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required under the Data Privacy Act.

While abon Casino implements robust security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring that your device is free from malware or unauthorised access.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by abon Casino. These rights are not absolute and may be subject to legal limitations where abon Casino has overriding legal obligations — particularly in relation to PAGCOR licensing, AML compliance, and active investigations.

If abon Casino becomes aware that personal data has been collected from an individual below the age of 21, whether through registration, a support interaction, or any other channel, we will:

• Immediately suspend the associated account pending review;
• Delete all personal data associated with the underage individual from our active systems as soon as reasonably practicable, subject to any legal hold obligations;
• Reverse any financial transactions associated with the account in accordance with our payment processing procedures;
• Report the incident to PAGCOR as required under our licensing obligations.

If you are a parent or guardian and you believe your child has registered on abon Casino, please contact our support team immediately at [email protected]. We will treat such reports as urgent and respond within twenty-four (24) hours.

abon Casino's primary data processing operations are conducted within the Philippines, consistent with our commitment to serving the Philippine market. However, certain third-party service providers — including game technology providers, KYC verification platforms, and cloud infrastructure partners — may be located outside the Philippines and may process your personal data in their respective jurisdictions.

Where personal data is transferred outside the Philippines, abon Casino ensures that appropriate safeguards are in place to protect your data, including:

• Entering into data processing agreements with all international processors that incorporate the standard contractual clauses approved by the NPC;
• Conducting due diligence to confirm that recipient countries or entities provide an adequate level of data protection;
• Limiting the scope of data transferred to the minimum necessary for the specific processing purpose;
• Ensuring all international transfers are documented and disclosed in abon Casino's Data Processing Register as maintained for NPC compliance purposes.

Game providers based outside the Philippines (including Malta, Gibraltar, Isle of Man, and other regulated jurisdictions) are selected partly on the basis of their own robust data protection frameworks and certifications, which are reviewed during the provider onboarding process.

abon Casino reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in our data processing practices, updates to Philippine privacy law or NPC guidance, changes to our platform or service offerings, or changes in PAGCOR's regulatory requirements.

When material changes are made to this Privacy Policy, abon Casino will notify registered Players via email to their registered address and display a prominent notice on the platform for a period of not less than seven (7) days prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the abon Casino platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated policy, you should cease using the platform and contact support to request account closure and data handling instructions.

abon Casino has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing compliance with this Privacy Policy and with Philippine data protection law, and serves as the primary point of contact for data subject rights requests, privacy complaints, and NPC correspondence.

You may contact abon Casino's Data Protection Officer through the following channels:

• Email: [email protected] — please include "Data Protection Officer" or "Privacy Request" in the subject line so your message is routed correctly;
• Live Chat: Available 24/7 within the abon Casino platform — request to speak with the Data Privacy team;
• Written Correspondence: Directed to abon Casino's registered business address in the Philippines, available upon request.

abon Casino aims to acknowledge all privacy-related inquiries within forty-eight (48) hours and to resolve substantive data subject requests within fifteen (15) business days. For complex requests that require additional time, we will inform you of the expected resolution timeline.

If you are dissatisfied with abon Casino's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on their official website.