supercasino Privacy Policy – How We Protect Your Data

This Privacy Policy describes how supercasino ("we", "our", or "the platform") collects, uses, stores, and protects the personal information of players who register for and use the supercasino platform, including via the website and the mobile app.

supercasino operates as an online gaming platform for players in the Philippines. All personal data collected through the platform is handled in accordance with applicable data protection principles, including those set out under Philippine law (Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations).

We take data privacy seriously. This policy is written to be clear and practical — not to bury important information in legal language. If anything in this policy is unclear, you are encouraged to contact us at [email protected] before registering or using the platform.

The personal information we collect falls into three broad categories depending on how you interact with the platform:

Information you provide directly:

• Full legal name, date of birth, and gender (required at registration)
• Philippine mobile number and email address (required at registration)
• Password (stored in encrypted form — we never store passwords in plain text)
• Government-issued identification documents submitted during KYC verification (e.g., Philippine passport, LTO driver's licence, SSS ID, UMID, PhilSys National ID)
• Payment information associated with deposits and withdrawals, including GCash account reference, Maya account reference, or bank account details used for transactions — payment credentials themselves are processed by the payment provider, not stored directly by supercasino
• Communications sent to supercasino support, including the content of emails and chat messages

Information collected automatically when you use the platform:

• IP address and general geographic location (country and region level)
• Device type, operating system, browser type, and screen resolution
• Session data including login timestamps, pages visited, and session duration
• Game activity including games played, bets placed, game outcomes, and win/loss records
• Deposit and withdrawal transaction records including amounts, timestamps, and payment methods used
• Cookie and similar tracking data (see Section 7)

Information we may receive from third parties:

• Confirmation data from payment providers (GCash, Maya, Philippine banks) to verify that a transaction has been completed — this does not include your full payment credentials
• Fraud detection signals from third-party security tools where applicable

We do not use your personal data for any purpose beyond those described above. We do not use your data for third-party advertising profiling or sell it to any external marketing party.

Under the Philippine Data Privacy Act of 2012 (RA 10173), personal information must be processed on a legitimate legal basis. For supercasino, the legal bases for processing your personal data are:

• Performance of a contract — Processing your registration data, KYC documents, and financial transaction records is necessary to operate your account and provide the gaming services you have signed up for.
• Legal obligation — Retaining transaction records, identity documents, and account activity logs may be required under applicable Philippine laws, including those related to anti-money laundering compliance.
• Legitimate interests — Using device data, IP addresses, and session activity to detect fraud, prevent account misuse, and maintain platform security is necessary for the safe operation of the platform and the protection of all players.
• Consent — Where we send you promotional communications by email or SMS beyond what is necessary for account management, we do so only where you have opted in. You can withdraw this consent at any time by contacting support.

Personal data collected by supercasino is stored on secure servers. Access to personal data is restricted to supercasino staff who need it to perform specific job functions — for example, the support team can access account details to assist with your enquiry; the compliance team has access to KYC documents for verification purposes. No staff member has blanket access to all player data.

Passwords are stored using one-way cryptographic hashing. Even in the unlikely event of a server breach, stored passwords cannot be read in their original form. OTP codes are single-use and expire within a short time window after generation.

KYC identity documents are stored in encrypted form separately from your core account data, with additional access controls applied. These documents are reviewed only by personnel responsible for identity verification and compliance.

While supercasino takes reasonable and appropriate technical and organisational measures to protect your data, no digital system is completely immune to risks. You also have a role in keeping your account secure — use a strong, unique password and never share your OTP with anyone.

supercasino does not sell, rent, or trade your personal information to third parties. We may share your data in the following limited circumstances:

• Payment providers — When you make a deposit or request a withdrawal, relevant transaction data is shared with the payment gateway (GCash, Maya, or your bank) to process the transaction. These providers handle your payment credentials under their own privacy policies and security standards.
• Game software providers — Certain game titles on the platform are powered by third-party game development studios. Your account session data (a session token, not your personal details) may be passed to these providers to load and run the game correctly. These providers do not receive your name, ID documents, or financial details.
• Security and fraud detection services — We may use third-party tools to detect suspicious account activity or fraudulent transactions. These tools may process anonymised or pseudonymised data about platform sessions and transaction patterns.
• Legal authorities — Where required by Philippine law or a lawful order from a competent authority, supercasino may be required to disclose account information, transaction records, or identity documents. This includes anti-money laundering (AML) reporting obligations where applicable.
• Business transfers — In the event of a merger, acquisition, or sale of assets involving supercasino, player account data may form part of the transferred assets. Any new entity taking on responsibility for the data would be bound by this Privacy Policy or a replacement policy that provides equivalent protections.

In all cases where data is shared with third parties, we require those parties to handle the data securely and to use it only for the purpose for which it was shared.

Cookies are small data files stored on your device when you visit the supercasino website or use the platform. They help the platform function correctly and allow us to understand how players are using it so we can continue to improve.

supercasino uses the following types of cookies:

• Essential cookies — Required for the platform to work. These include session cookies that keep you logged in during your visit, security cookies that support OTP verification, and cookies that maintain your game session state. The platform cannot function correctly without these.
• Functional cookies — Remember your preferences, such as your preferred language settings or game lobby filters, so you don't have to set them again each time you visit.
• Analytics cookies — Help us understand how the platform is being used — which sections are visited most, where players spend time, and where technical issues may be occurring. This data is collected in aggregate and used only to improve the platform. It is not linked to individual player identities.

supercasino does not use third-party advertising or behavioural tracking cookies. Your platform activity is not shared with external advertising networks.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect the functionality of the platform — for example, you may be unable to stay logged in or complete game sessions normally.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have a number of rights in relation to the personal data that supercasino holds about you. These rights can be exercised at any time by contacting support at [email protected].

Requests to exercise any of these rights are typically processed within 30 days. We may need to verify your identity before acting on a request — this is to protect you from unauthorised access to your own data. In some cases, legal obligations may limit our ability to delete certain records (for example, transaction records required for compliance purposes).

supercasino retains your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable law.

• Active account data — Retained for the lifetime of your account plus a period following closure to allow for dispute resolution and legal compliance.
• KYC identity documents — Retained for the period required under applicable Philippine anti-money laundering regulations and any other applicable legal obligations, typically a minimum of five years from the date of verification or account closure, whichever is later.
• Transaction records — Retained for a minimum of five years in line with financial record-keeping requirements.
• Support communications — Retained for as long as relevant to your account and for a reasonable period following resolution, typically up to two years after the communication was made.
• Session and analytics data — Aggregated analytics data may be retained indefinitely in anonymised form. Individual session logs are retained for a shorter period and reviewed only where necessary for security or compliance purposes.

When data is no longer needed for any of the above purposes, it is securely deleted or permanently anonymised so that it can no longer be linked to you as an individual.

supercasino reserves the right to update this Privacy Policy from time to time. When changes are made, the "Last updated" date at the top of this page will be revised, and where the changes are material, registered players will be notified via the email address associated with their account or through a notice on the platform at their next login.

Continued use of the supercasino platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with changes to this policy, you should stop using the platform and contact support to request account closure.

We encourage you to review this page periodically, particularly if you have questions about how your data is being handled. The most current version of this policy is always available at supercasino.best/privacy-policy.

For any questions about this policy, or to exercise your data rights, contact us at [email protected].