Privacy Policy – croyale88

01 Introduction

This Privacy Policy ("Policy") describes how croyale88 ("we," "us," "our," or "the Company") collects, uses, stores, discloses, and protects the personal information of users ("you," "your," or "Player") who access or use the croyale88 website at https://croyale88.app and all associated services, games, and features (collectively, the "Platform").

croyale88 is committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. This Policy is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

This Policy applies to all personal data collected through the Platform, including data provided during registration, KYC verification, deposits, withdrawals, gameplay, customer support interactions, and any other use of our services. It applies to players based in the Philippines and any other jurisdiction where croyale88 operates.

02 Personal Data We Collect

croyale88 collects only the personal data necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Nationality and country of residence
• Residential address (including barangay, city, province, and ZIP code)
• Email address
• Mobile phone number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, driver's license, SSS/UMID card, PhilSys National ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or facial photograph for liveness verification
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account)

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (GCash number, PayMaya number, bank account details — stored in tokenized form only)
• Transaction amounts, dates, and reference numbers
• Bonus and promotion redemption history

2.4 Gaming & Activity Data

• Game history, bet amounts, wins, and losses
• Session duration and login timestamps
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Bonus wagering activity

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookies and session identifiers
• Referring URL and pages visited on the Platform

2.6 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback, complaints, and dispute records
• Marketing communication preferences

03 How We Collect Your Data

croyale88 collects your personal data through the following channels and methods:

3.1 Directly From You

The majority of your personal data is collected directly from you when you:

• Register a new account on the croyale88 Platform
• Complete KYC identity verification
• Make a deposit or request a withdrawal
• Contact our customer support team via live chat or email
• Participate in promotions, surveys, or feedback requests
• Update your account profile or settings

3.2 Automatically Through Technology

When you access and use the Platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device information, browser type, session data, and pages visited. This data is used to maintain Platform security, detect fraud, and improve user experience.

3.3 From Third-Party Service Providers

We may receive personal data about you from trusted third-party service providers, including:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank) — transaction confirmation and fraud signals
• Identity verification providers — KYC document verification results
• Anti-fraud and AML screening services — risk assessment data
• Analytics providers — aggregated, anonymized usage statistics

All third-party providers engaged by croyale88 are contractually required to handle your data in accordance with applicable data protection laws and our data processing standards.

04 How We Use Your Personal Data

croyale88 uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and manage your croyale88 account, including authentication and account security.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the full range of croyale88 services.
• Identity Verification: To verify your identity and age (21+) in compliance with Philippine gambling regulations and anti-money laundering requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct.
• Legal Compliance: To comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any directives from regulatory authorities.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gameplay patterns and implement responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion.
• Promotions & Marketing: To send you relevant promotional offers, bonuses, and updates — but only where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, security, and user experience of the croyale88 Platform.
• Legal Claims: To establish, exercise, or defend legal claims in the event of a dispute.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, croyale88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the gaming services you have registered for, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including KYC/AML obligations under the Anti-Money Laundering Act, age verification requirements under gambling regulations, and data breach notification obligations under the Data Privacy Act.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, we rely on your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Data Sharing & Disclosure

croyale88 does not share your personal data with third parties except in the following circumstances:

6.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, customer support platforms, and analytics services. All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to croyale88.

6.2 Regulatory & Law Enforcement Authorities

We may disclose your personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities where required by law or where we have a good-faith belief that disclosure is necessary to comply with a legal obligation, protect the rights or safety of croyale88 or others, or investigate suspected fraud or criminal activity. This includes disclosures to the Anti-Money Laundering Council (AMLC) and the National Privacy Commission (NPC).

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of croyale88's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Policy.

6.4 With Your Consent

We may share your personal data with other third parties where you have provided explicit consent for us to do so.

07 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the croyale88 Platform. They help us recognize your device, maintain your session, remember your preferences, and analyze how you use our services.

7.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalized experience.
• Analytics Cookies: Help us understand how players use the Platform by collecting aggregated, anonymized data on page visits, session duration, and feature usage. This data is used to improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and bot traffic on the Platform.

7.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect the functionality of the croyale88 Platform and prevent you from accessing certain features. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

08 Data Retention

croyale88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with Philippine AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.
• Technical Logs: Retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

09 Data Security

croyale88 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: All personal data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data protection training.
• Two-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Regular Security Audits: Our systems undergo regular penetration testing and security audits by independent third-party security firms.
• Incident Response: We maintain a documented data breach response plan and will notify affected players and the National Privacy Commission within 72 hours of discovering a breach that poses a risk to your rights and freedoms.
• Secure Data Centers: Player data is stored in secure, access-controlled data centers with physical security measures including CCTV, biometric access, and 24/7 monitoring.

10 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by croyale88:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request." We will respond to your request within fifteen (15) business days. We may need to verify your identity before processing your request.

11 Children's Privacy

The croyale88 Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we discover or have reason to believe that a registered user is under 21 years of age, we will immediately suspend the account, void any associated transactions, and delete the personal data of the underage individual from our systems as soon as reasonably practicable, subject to any overriding legal obligations.

If you are a parent or guardian and believe that your child under 21 has registered on the croyale88 Platform or provided us with personal data, please contact us immediately at [email protected] so we can take appropriate action.

12 Third-Party Links

The croyale88 Platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies solely to the croyale88 Platform and does not cover the privacy practices of any third-party websites or services.

We encourage you to review the privacy policies of any third-party websites you visit. croyale88 is not responsible for the privacy practices, content, or security of third-party websites, even if they are accessed through links on our Platform.

13 Changes to This Privacy Policy

croyale88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The most current version of this Privacy Policy will always be available at https://croyale88.app/privacy-policy. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

Your continued use of the croyale88 Platform after the effective date of any amendments constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the Platform and may request account closure by contacting our support team.

14 Contact Us & Data Protection Officer

croyale88 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Policy, please contact us through the following channels:

• Data Protection Officer Email: [email protected]
• Subject Line: Please use "Privacy Policy Inquiry" or "Data Rights Request" for faster routing
• Live Chat: Available 24/7 via the chat widget on the croyale88 Platform
• Response Time: We aim to respond to all privacy-related inquiries within 15 business days

For general customer support inquiries unrelated to data privacy, please contact our support team via live chat or at [email protected].