CasinoLab Privacy Policy

Last updated: June 8, 2026

This privacy policy sets out how CasinoLab collects, uses and protects personal information through the casino platform at casinolabofficial.com. The policy applies to all users who register, browse or interact with the casino. Processing activities include registration, account management, gameplay tracking, payment handling, compliance checks and communication with support. The operator Liernin Enterprises LTD works with service provider Mirata Services LTD to deliver the casino platform. All processing aligns with applicable privacy legislation and PAGCOR licence obligations under the Philippines gaming jurisdiction.

This policy explains what data is collected, why it is processed, how it is protected and what rights users have. Personal information enters the system when users register, log in, deposit, play casino games, request withdrawals or contact support. Data collected includes identity, contact, financial, device and behavioural records. The platform uses data to provide casino services, run security checks, meet legal obligations and manage player accounts. Users retain rights to access, correct or delete personal information subject to regulatory and technical requirements.

Definitions and Interpretation

This section clarifies terminology used throughout the privacy policy. Definitions connect legal terms to real platform interactions so users understand how concepts apply to their casino activity.

Account and User Terms

An account refers to the player profile created during registration at CasinoLab. Each account is linked to one user, one email address, one phone number and one household address. The platform enforces a one-account policy that prevents duplicate registrations through checks on IP, device fingerprint, payment ownership and login credentials. Users must provide accurate identity and contact details during account creation. Account ownership is verified through KYC documents such as Australian passport, driver licence or proof of address dated within the last three months.

Device and Service Scope

Device refers to any hardware used to access the casino, including desktop computers, mobile phones and tablets. The casino tracks device identifiers, IP addresses, browser type and operating system to manage security, detect fraud and deliver mobile-optimised gameplay. Services include all casino products such as pokies, live dealer games, jackpot games, table games, instant games, tournaments, leaderboard events and VIP Club rewards. Platform interactions also cover deposits, withdrawals, cashier transactions, bonus activation and support requests through live chat or email channels.

Personal Data Collection

CasinoLab collects personal data during registration, account activity, gameplay sessions and compliance checks. Data collection occurs automatically through platform use and manually when users submit documents or contact support. The casino gathers information needed to operate services, process payments, verify identity and meet regulatory obligations.

Registration and Identity Data

Registration requires users to provide full name, date of birth, email address, phone number and residential address. The platform verifies age to confirm users meet the 18+ restriction. Identity verification occurs through KYC checks that require certified ID such as Australian passport or driver licence. Proof of address must show current residence within the past 30 days and can include utility bills, bank statements or government letters. Identity data is cross-checked against payment ownership records to confirm account details match financial instruments used for deposits and withdrawals.

Financial and Payment Records

Financial data includes payment method details, transaction histories, deposit amounts, withdrawal requests, bonus balances and cashier activity. The casino records card numbers, PayID account links, e-wallet identifiers and crypto wallet addresses. Payment ownership is verified through card statements, bank account records and source-of-funds documentation. Large deposits trigger reviews that require proof of transaction history and financial source. Large withdrawals require enhanced AML checks including source-of-wealth records and income evidence. All payment data is encrypted during transmission and stored securely in compliance with financial processing standards.

Technical and Device Information

Technical data is collected automatically during platform use. The casino tracks IP address, device type, browser version, operating system, screen resolution and connection source. Cookies and tracking technologies record session duration, page views, game interactions and navigation patterns. VPN or proxy use triggers additional checks on IP location, account eligibility and security status. Device fingerprints help detect duplicate accounts and prevent bonus abuse. Login timestamps, session activity and geolocation data support fraud prevention and compliance monitoring across the casino network.

Behavioural and Usage Data

Behavioural data includes game selection, bet sizes, win and loss records, bonus activation, tournament participation and VIP level progression. The platform tracks wagering patterns to identify low-turnover withdrawals, irregular gameplay and bonus manipulation. Usage statistics show session frequency, favourite games, cashier visits and support interactions. Responsible gambling tools monitor time and spend metrics to support self-assessment and account controls. Marketing preferences are recorded when users opt in or out of promotional emails, SMS messages or personalised offers through account settings or support channels.

Purpose of Data Processing

CasinoLab processes personal data to deliver casino services, manage player accounts, handle payments and meet compliance obligations. Data use is tied to specific platform functions and regulatory requirements. Processing activities occur during registration, gameplay, transactions and security reviews.

Service Provision and Account Management

Personal information enables account creation, login authentication, game access and cashier functionality. Registration data allows the platform to assign player accounts, track session activity and deliver personalised gameplay experiences. Payment records support deposit processing, withdrawal approvals and balance management across the casino wallet. Account management includes bonus activation, VIP level tracking, tournament entry and reward distribution through the Coin Shop, Collections and Spinoleague systems. Support interactions require contact and account data to resolve issues, answer queries and process requests through live chat, email or VIP manager channels.

Compliance and Verification Checks

KYC checks use identity, residence and payment data to verify age, confirm account ownership and meet regulatory obligations under the PAGCOR gaming licence. First-time withdrawals trigger identity verification that requires certified ID and proof of address. AML reviews analyse transaction histories, source-of-funds documentation and payment ownership to prevent money laundering and detect suspicious activity. Duplicate account checks use IP, device and contact data to enforce the one-account policy. Security reviews monitor login patterns, device changes and VPN use to protect accounts from unauthorised access and fraud.

Marketing and Communication

Marketing data supports promotional emails, bonus offers, VIP invitations and personalised campaigns sent through email or SMS channels. Users can opt out of marketing messages through account settings or unsubscribe links in communications. Transactional emails such as deposit confirmations, withdrawal notifications and KYC requests are sent regardless of marketing preferences. Support communication relies on contact data to respond to queries, resolve disputes and provide account assistance. VIP players receive tailored offers, cashback notifications and higher-limit invitations from personal managers at VIP levels 4 and 5.

Analytics and Platform Improvement

Usage data is analysed to improve casino performance, optimise game selection and enhance user experience. Behavioural tracking shows which pokies attract the most play, how users navigate the lobby and where players encounter technical issues. Session statistics support mobile optimisation for Android Chrome and iOS Safari access. Responsible gambling analytics monitor time and spend patterns to refine account controls and self-exclusion tools. Aggregated data informs platform updates, game provider selection and promotional strategy without identifying individual players outside internal compliance systems.

Legal Basis for Processing

Data processing at CasinoLab is based on legal grounds defined by privacy legislation. Each processing activity aligns with consent, contractual necessity, legal obligation or legitimate interests. Users trigger specific legal bases through actions such as registration, deposit or withdrawal requests.

Consent and User Agreement

Consent is obtained during registration when users accept the Terms and Conditions and confirm understanding of the privacy policy. Marketing consent is collected separately through opt-in checkboxes for promotional emails and SMS messages. Users can withdraw consent at any time through account settings, unsubscribe links or support requests. Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn. Consent is required for certain cookies, personalised marketing and optional data uses beyond core casino functionality.

Contractual Necessity

Processing is necessary to perform the casino service contract when users register, deposit, play games or request withdrawals. Account creation requires identity and contact data to establish the contractual relationship. Payment processing relies on financial records to handle deposits and payout requests. Bonus activation and VIP rewards require behavioural tracking to apply wagering requirements, release caps and cashback calculations. Without this processing, the platform cannot deliver the casino services users request through account registration and gameplay activity.

Legal Obligations

Regulatory compliance under the PAGCOR gaming licence requires KYC verification, AML checks and responsible gambling monitoring. Age verification confirms users meet the 18+ restriction mandated by gaming legislation. Transaction records and source-of-funds documentation support anti-money laundering obligations enforced by the Philippine Amusement and Gaming Corporation. Fraud prevention and account security checks protect the platform and users from financial crime. Data retention for compliance purposes follows regulatory timelines that extend beyond account closure to meet audit and legal requirements.

Legitimate Interests

Legitimate interests support fraud prevention, security monitoring and platform optimisation. IP tracking and device fingerprinting prevent duplicate accounts and bonus abuse. Session monitoring detects unauthorised access and suspicious login activity. Usage analytics improve casino performance without compromising user privacy. Marketing to existing players promotes relevant offers and VIP benefits. Legitimate interests are balanced against user privacy through data minimisation, encryption and access controls that limit internal data use to authorised personnel and compliance systems.

Data Sharing and Disclosure

CasinoLab shares personal data with service providers, regulators and affiliates when necessary to operate the casino, meet legal obligations and process transactions. Data is not sold to third parties or shared for purposes outside the scope of this policy. Sharing occurs under strict controls and confidentiality agreements.

Service Providers and Technical Partners

Mirata Services LTD operates the casino website on behalf of Liernin Enterprises LTD. Payment processors handle deposits and withdrawals through Visa, Mastercard, PayID, Neteller, Cash2Code, MiFinity and crypto networks. Game providers such as Pragmatic Play, Spinomenal, Yggdrasil and Microgaming deliver pokies, live dealer games and jackpot titles through integrated platform APIs. Hosting providers manage server infrastructure and data storage. Analytics tools track usage statistics and session behaviour. All service providers operate under data processing agreements that require confidentiality, security and limited data use aligned with this privacy policy.

Regulators and Legal Authorities

Personal data is disclosed to the Philippine Amusement and Gaming Corporation when required to meet licensing obligations. Compliance reports include KYC records, AML checks and responsible gambling data. Law enforcement requests are processed when supported by valid legal authority such as court orders or regulatory investigations. Tax authorities may receive financial records when required by applicable legislation. Fraud investigations can involve sharing account, payment and device data with anti-fraud agencies and financial crime units. All regulatory disclosures are documented and limited to information necessary to meet legal obligations.

Affiliates and Marketing Partners

Affiliate partners receive limited data such as referral source, registration status and deposit activity to track promotional performance. Marketing platforms process email addresses and contact data to deliver promotional campaigns under the casino's instruction. VIP partners may receive contact details to support personalised offers and high-level account management. Affiliates and marketing partners operate under confidentiality agreements and are prohibited from using data for purposes beyond their contracted services. Users can opt out of marketing sharing through account settings or support requests.

Business Transfers

Personal data may be transferred if CasinoLab undergoes a merger, acquisition or sale of business assets. Users will be notified of ownership changes and any impact on data processing. The new operator would be required to honour this privacy policy or provide notice of policy updates. Data would remain subject to confidentiality and security obligations during any ownership transition. Users retain rights to access, correct or delete personal information regardless of business structure changes.

Data Retention and Deletion

CasinoLab retains personal data for the duration of the account relationship and for compliance periods after account closure. Retention timelines are based on regulatory obligations, legal requirements and operational needs. Data is deleted or anonymised when retention purposes no longer apply.

Active Account Retention

Data is retained while accounts remain active to support ongoing gameplay, cashier transactions, bonus tracking and VIP progression. Identity and KYC records are stored to meet continuous compliance obligations. Payment records remain accessible for withdrawal processing, refund requests and transaction history reviews. Behavioural data supports responsible gambling monitoring and account security checks. Users can request deletion of optional data such as marketing preferences or device records, but core account data must be retained while the account is active to deliver casino services and meet regulatory requirements.

Post-Closure Retention Periods

After account closure, personal data is retained for compliance purposes as required by gaming legislation and financial regulations. KYC documents, transaction histories and AML records are stored for audit and legal timelines that extend beyond account termination. Payment records support dispute resolution, chargeback investigations and refund processing. Retention periods typically range from five to seven years depending on data type and regulatory requirements. Data is securely stored with restricted access during post-closure retention. Anonymisation or deletion occurs once legal and compliance obligations expire.

Deletion and Anonymisation Rules

Users can request data deletion through support channels when permitted by legal and compliance frameworks. Marketing data, device records and optional usage statistics can be deleted upon request. Core account data such as identity, financial and transaction records must be retained for regulatory periods even after deletion requests. Anonymisation converts personal data into aggregated statistics that cannot identify individual users. Deletion requests are processed within 30 days when applicable law permits removal. Compliance hold requirements override deletion requests when data is needed for active investigations, legal disputes or regulatory audits.

User Rights and Data Control

Users have rights to access, correct, delete and control personal data processed by CasinoLab. Rights are exercised through support channels and are subject to verification checks and legal limitations. The casino responds to valid requests within established timeframes.

Access and Portability

Users can request a copy of personal data held by the casino through email support or live chat. Access requests are processed within 10 days after identity verification. Data is provided in a structured format such as PDF or CSV files. Portability requests allow users to receive identity, contact, financial and usage records in a machine-readable format. Access includes account details, transaction histories, KYC documents, bonus records and VIP status. The casino may charge a reasonable fee for excessive or repetitive requests. Access is restricted when requests compromise security, fraud prevention or legal compliance obligations.

Correction and Update Rights

Users can update contact details, address information and account preferences through account settings or support channels. Identity corrections require submission of new KYC documents to verify updated information. Payment records are corrected when supported by evidence such as updated card statements or bank records. Correction requests are processed within 10 days after document submission and verification checks. Users must provide accurate information, as incorrect data can trigger account suspension or withdrawal holds. The casino may reject corrections that conflict with verified KYC records or create compliance risks.

Deletion and Restriction

Users can request account closure and data deletion through support channels. Deletion is subject to compliance retention periods that require storage of KYC, financial and transaction records for regulatory timelines. Marketing data, device records and optional usage statistics can be deleted upon request. Restriction requests limit processing to storage only, preventing active use of data for marketing or analytics. Restriction applies when users dispute data accuracy, object to processing or request deletion during compliance hold periods. Deletion and restriction requests are processed within 30 days when legal frameworks permit removal or limitation.

Objection and Complaint Rights

Users can object to marketing processing by opting out through account settings, unsubscribe links or support requests. Objections to legitimate interest processing are reviewed case by case and granted unless compelling legal grounds require continued processing. Users have the right to lodge complaints with supervisory authorities if they believe data processing violates privacy legislation. Complaints should be submitted to the relevant data protection regulator in the user's jurisdiction. CasinoLab encourages users to contact support before escalating complaints to allow internal resolution of privacy concerns.

Security Measures and Protection

CasinoLab implements technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration and loss. Security controls cover data transmission, storage, access and processing activities. Protection measures align with industry standards and regulatory requirements.

Encryption and Secure Transmission

All data transmitted between user devices and casino servers is encrypted using SSL/TLS protocols. Payment information is encrypted during deposit and withdrawal processing to prevent interception. Login credentials are hashed and stored securely to protect account access. Crypto transactions use blockchain encryption to secure wallet transfers and transaction records. Encryption applies to sensitive data such as identity documents, card numbers, bank details and personal information submitted through account forms or support channels.

Access Control and Internal Protection

Access to personal data is restricted to authorised personnel who require information to perform compliance, support or operational functions. Role-based access controls limit internal visibility to relevant data types. KYC and AML teams access identity and financial records, while support staff access account and contact information. VIP managers access player preferences and bonus history for personalised offers. Audit logs track internal access to monitor security and detect unauthorised activity. Service providers operate under data processing agreements that enforce confidentiality and limited access aligned with contracted services.

Fraud Prevention and Monitoring

Fraud detection systems monitor login activity, device changes, IP shifts and unusual transaction patterns. Duplicate account checks use IP, device fingerprint and contact data to prevent multi-accounting and bonus abuse. VPN and proxy use triggers additional security reviews to confirm location eligibility and account ownership. Payment ownership checks cross-reference card statements, bank records and transaction histories to detect stolen credentials or unauthorised payment sources. Behavioural monitoring identifies irregular gameplay, low-turnover strategies and bonus manipulation that indicate fraud or Terms violations.

Limitations and User Responsibility

No security system is completely immune to breaches or unauthorised access. Users are responsible for protecting login credentials, avoiding password sharing and reporting suspicious account activity. The casino is not liable for security breaches caused by user negligence, weak passwords or credential sharing. Users should enable two-factor authentication when available, use strong passwords and avoid accessing accounts on shared or public devices. Security incidents are investigated promptly, and affected users are notified when breaches involve personal data exposure or account compromise.

Cookies and Tracking Technologies

CasinoLab uses cookies and tracking technologies to enhance user experience, monitor platform performance and deliver personalised content. Cookies are small files stored on user devices that record session activity, preferences and login status. Users can control cookie settings through browser configurations.

Types of Cookies

Essential cookies are required for login authentication, session management and secure cashier access. These cookies enable account navigation, game loading and payment processing. Performance cookies track page load times, server response and technical errors to optimise platform functionality. Analytics cookies record session duration, page views, game interactions and navigation patterns to support usage reporting. Marketing cookies deliver personalised offers, track promotional campaigns and support affiliate attribution. Third-party cookies are used by game providers, payment processors and analytics platforms to deliver integrated services.

Cookie Lifespan and Storage

Session cookies expire when users close their browser and are used for login authentication and temporary session tracking. Persistent cookies remain on user devices for defined periods to store preferences, login status and personalised settings. Analytics cookies typically last 12 to 24 months to track long-term usage patterns. Marketing cookies have variable lifespans based on campaign duration and user consent. Users can delete cookies through browser settings, though removal may affect login persistence, game loading and personalised content delivery.

User Control and Deactivation

Users can disable cookies through browser settings in Chrome, Safari, Firefox or Edge. Disabling cookies may prevent login, limit game access or reduce platform functionality. Essential cookies cannot be fully disabled without affecting core casino services. Marketing and analytics cookies can be controlled through cookie consent banners or browser privacy settings. Users can opt out of third-party tracking by adjusting browser privacy controls or using ad-blocking extensions. Cookie preferences can be updated at any time, though changes apply to future sessions rather than retroactively altering stored data.

Third-Party Links and External Services

The casino platform may include links to external websites, payment providers, game studios or affiliate partners. CasinoLab is not responsible for the privacy practices, content or security of third-party sites. Users leave the casino's privacy framework when accessing external links.

External Website Disclaimer

Third-party websites operate under their own privacy policies and terms of use. The casino does not control external content, data collection or security measures. Users should review privacy policies of external sites before submitting personal information. Payment processors such as PayID, Neteller, MiFinity and crypto wallet providers collect transaction data under their own policies. Game providers such as Pragmatic Play, Spinomenal and Yggdrasil may use cookies and tracking technologies when users launch games through the casino lobby.

Affiliate and Marketing Links

Affiliate links direct users to partner sites that may collect contact information, browsing data or referral tracking. Marketing partners operate under their own data processing rules and are not covered by this privacy policy. Users can avoid external tracking by declining affiliate offers or limiting third-party cookie storage. The casino is not liable for data breaches, privacy violations or security issues on third-party platforms accessed through casino links or promotional materials.

Children and Underage Protection

CasinoLab enforces an 18+ age restriction across all casino services. The platform does not knowingly collect or process personal data from users under the legal gambling age. Age verification occurs during registration and KYC checks.

Age Verification and Compliance

Registration requires users to confirm they are 18 years or older. KYC checks verify age through certified ID such as Australian passport, driver licence or photo ID card. Accounts found to belong to underage users are suspended immediately and any deposits are returned after identity verification. The platform does not accept registration from users under 18 regardless of jurisdiction. Age checks are cross-referenced with payment ownership records to prevent minors from using adult payment methods to bypass registration controls.

Parental Controls and Removal

Parents or guardians who discover underage account creation should contact support immediately through live chat or email. The casino will close the account, delete personal data and return deposits after verifying guardian identity. Parental filtering software can block access to gambling sites and prevent underage users from reaching the casino platform. The casino cooperates with age verification systems and responsible gambling organisations to strengthen underage protection measures and prevent access by minors.

Policy Updates and Changes

CasinoLab may update this privacy policy to reflect regulatory changes, platform updates or service expansions. Users are notified of material changes through email, account notifications or prominent website notices. Continued use of the casino after policy updates indicates acceptance of revised terms.

Update Frequency and Notification

The privacy policy is reviewed periodically to ensure compliance with applicable legislation and industry standards. Material changes are communicated through email to registered users and displayed in the account dashboard or help centre. The effective date at the top of this policy shows when the current version was last updated. Users are encouraged to review the policy regularly to stay informed of data processing practices. Notifications include a summary of key changes and a link to the updated policy text.

User Acceptance and Continued Use

By continuing to use the casino after receiving notice of policy updates, users accept the revised privacy terms. Users who do not agree with updated terms can close their account and request data deletion subject to compliance retention periods. Material changes that affect user rights or data use require explicit consent before new terms take effect. The casino provides a notice period for significant policy changes to allow users to review updates and make informed decisions about account continuation.

Contact Information and Privacy Requests

Users can contact CasinoLab to submit privacy requests, ask data protection questions or exercise user rights. Support channels include live chat, email and help centre guidance. Requests are processed after identity verification and within established response timeframes.

Support Channels for Privacy Requests

Email support handles data access requests, deletion inquiries, correction submissions and privacy complaints. Live chat is available 24/7 for urgent privacy questions and account-security issues. VIP manager support is available for higher VIP levels to address personalised data concerns and account-control requests. Help centre articles provide guidance on exercising user rights, managing cookie settings and understanding data processing practices. Call-back support can be requested for complex privacy matters requiring detailed discussion or document submission.

Request Processing and Response Times

Privacy requests are acknowledged within 24 hours and processed within 10 days after identity verification. Complex requests involving extensive data retrieval or legal review may require up to 30 days. Users receive confirmation when requests are completed, along with details of actions taken. The casino may request additional information or documentation to verify identity before processing sensitive requests such as data deletion or account closure. Response times exclude delays caused by incomplete requests, missing verification documents or compliance hold requirements tied to active investigations or regulatory audits.