This Privacy Policy explains how croyale collects, uses, stores, and protects the personal information of Filipino players on our PAGCOR-licensed platform, in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
croyale processes all player personal data in accordance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and the regulations issued by the National Privacy Commission.
All personal and financial data transmitted between your browser and the croyale platform is encrypted using industry-standard 256-bit SSL technology, the same standard used by Philippine banks.
croyale does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data is used solely to provide and improve the croyale service.
Under the Philippine Data Privacy Act, you have the right to access, correct, and request deletion of your personal data held by croyale. You also have the right to object to certain types of processing.
Identity and age verification data collected during the KYC process is processed as a legal obligation under croyale's PAGCOR license. This data is retained for the periods required by Philippine gaming regulations.
croyale only collects personal data that is necessary for a specified, legitimate purpose. We will always tell you why we are collecting your data and how it will be used before or at the time of collection.
croyale respects your right to privacy and is committed to protecting the personal information of every Filipino player who uses our platform. This Privacy Policy sets out the basis on which croyale collects, processes, stores, shares, and protects personal data in connection with the operation of the croyale online casino platform accessible at croyale.co.
This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines. It is also informed by croyale's obligations as a PAGCOR-licensed gaming operator, which impose specific requirements regarding the collection and retention of player identity and transaction records.
By registering a croyale account or continuing to use the croyale platform, you acknowledge that you have read, understood, and consented to the processing of your personal data as described in this Policy. If you do not agree with this Policy, you should not use the croyale platform.
For the purposes of the Philippine Data Privacy Act of 2012, croyale acts as the Personal Information Controller in respect of all personal data collected from players through the croyale.co platform and related services. As Personal Information Controller, croyale determines the purposes for which, and the means by which, personal data is processed.
croyale operates under a valid PAGCOR license and is subject to regulatory oversight by both PAGCOR and the National Privacy Commission of the Philippines. croyale has appointed a Data Protection Officer responsible for overseeing compliance with this Policy and with the Data Privacy Act. Questions about croyale's data protection practices may be directed to the Data Protection Officer via the contact information in Section 15 of this Policy.
croyale collects the following categories of personal data from players:
croyale collects personal data through the following channels and mechanisms:
| Collection Method | Data Collected |
|---|---|
| Account Registration | Name, mobile number, email, date of birth, country of residence, password |
| KYC Verification Process | Government ID type and number, copy of ID document, selfie photograph |
| Deposit and Withdrawal Transactions | GCash/Maya account number or bank account details, transaction amounts and dates |
| Platform Usage | Gaming activity, session data, device and browser information, IP address |
| Cookies and Tracking Technologies | Session identifiers, preferences, analytical usage data (see Section 8) |
| Support Communications | Information you voluntarily provide in live chat, email, or support ticket interactions |
| Third-Party Payment Providers | Transaction verification data received from GCash, Maya, or bank payment gateways |
croyale processes personal data only where a valid legal basis exists under the Philippine Data Privacy Act of 2012. The applicable legal bases for croyale's processing activities are:
croyale uses the personal data it collects for the following purposes:
Where you have provided consent, croyale may use your contact details to send you information about promotions, new games, bonuses, and platform updates. You may withdraw consent to marketing communications at any time by selecting the opt-out option in any marketing message or by contacting croyale support. Withdrawal of marketing consent does not affect your account status or access to the platform.
croyale does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. croyale shares personal data only in the following circumstances and with the following categories of recipients:
The croyale platform uses cookies and similar technologies to enable core platform functionality, improve user experience, and support security and fraud prevention. A cookie is a small text file placed on your device by a website. Cookies do not contain executable code and cannot be used to access your device's data outside of the cookie itself.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security, and fraud detection. Required for the platform to function. | No — disabling will break core platform functions |
| Functional / Preference | Remembering your language preference, game lobby view, and account settings between sessions. | Yes — with reduced personalisation |
| Analytical | Aggregated, anonymised data about how players navigate the platform, used to improve performance and game discovery. | Yes — opt out via cookie settings |
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair platform functionality, including the ability to log in to your croyale account.
croyale retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable Philippine law and PAGCOR regulations, whichever is longer.
| Data Category | Retention Period | Basis |
|---|---|---|
| KYC Identity Documents | 5 years from account closure | PAGCOR licensing obligation and Anti-Money Laundering Act |
| Financial Transaction Records | 5 years from transaction date | Anti-Money Laundering Act of the Philippines |
| Account Registration Data | Duration of account plus 5 years post-closure | PAGCOR regulatory obligation |
| Gaming Activity Records | 3 years from account closure | Legitimate interest (dispute resolution and responsible gaming) |
| Support Communications | 3 years from date of communication | Legitimate interest (dispute resolution) |
| Marketing Preferences | Until withdrawal of consent or account closure | Consent |
| Analytical and Technical Data | 13 months in identifiable form; may be retained longer in anonymised form | Legitimate interest |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
croyale implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Despite these measures, no data transmission over the internet is entirely secure. croyale cannot guarantee the absolute security of your data in transit. You are responsible for maintaining the security of your account credentials — particularly your password and OTP. See the Account Security provisions in croyale's Terms and Conditions for player security obligations.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by croyale. These rights may be exercised by submitting a written request to croyale's Data Protection Officer via the contact details in Section 15.
You have the right to be informed of how croyale processes your personal data, including the purposes, legal bases, and retention periods — as set out in this Policy.
You may request a copy of the personal data croyale holds about you, together with information about how it is being processed.
You may request that inaccurate or incomplete personal data held by croyale be corrected or updated without undue delay.
You may request deletion of your personal data where it is no longer necessary for the original purpose, subject to croyale's legal retention obligations.
You may object to the processing of your personal data where it is based on croyale's legitimate interests, including for direct marketing purposes.
You may request a copy of the personal data you provided to croyale in a structured, commonly used, machine-readable format.
If you believe croyale has breached your privacy rights, you may lodge a complaint with the National Privacy Commission of the Philippines.
You have the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, falsely obtained, or unlawfully processed personal data.
croyale will respond to rights requests within 15 calendar days of receipt. Where the request is complex or involves a large volume of data, this period may be extended by a further 15 days, with notice to you. There is no charge for exercising your data subject rights.
The croyale platform is strictly prohibited for use by individuals under the age of 21, consistent with Philippine gambling regulations administered by PAGCOR. croyale does not knowingly collect personal data from persons under 21 years of age.
Where croyale discovers or has reasonable grounds to suspect that an account holder is under 21, the account will be suspended immediately, all gameplay records will be reviewed, and any winnings generated will be voided. The personal data of individuals found to be underage will be retained only for the minimum period required to complete the investigation and satisfy regulatory reporting obligations, and will thereafter be deleted.
If you are the parent or guardian of an individual under 21 who has accessed or registered a croyale account, please contact croyale support immediately via the live chat in your dashboard or via email at [email protected].
Some of croyale's third-party service providers — including game software providers and certain cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred outside the Philippines, croyale ensures that appropriate safeguards are in place in compliance with Section 21 of the Data Privacy Act and the National Privacy Commission's regulations on cross-border data transfers.
Such safeguards include ensuring that recipient organisations are subject to equivalent data protection standards, and where required, implementing contractual clauses approved by the National Privacy Commission to govern the transfer. croyale will not transfer personal data to jurisdictions that have been assessed as providing inadequate protection without implementing additional protective measures.
croyale may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, provide notice to registered players via the contact information held on their account.
We encourage you to review this Privacy Policy periodically to remain informed about how croyale protects your personal data. Your continued use of the croyale platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated Policy.
If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about croyale's handling of your personal data, please contact our Data Protection Officer through the following channels:
Data Protection Officer, croyale
Support Email: [email protected]
Subject Line: Data Privacy Request — [Your Full Name]
Live Chat: Available 24 hours a day, 7 days a week, from your croyale account dashboard
Response Time: Acknowledgement within 72 hours; full response within 15 calendar days
If you are not satisfied with croyale's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines — the independent regulatory authority responsible for overseeing compliance with the Data Privacy Act of 2012.
croyale operates under a valid PAGCOR license and is committed to the responsible, transparent, and lawful handling of all personal data entrusted to us by Filipino players. This platform is intended for players aged 21 and above. Gamble responsibly.
Your personal data is protected under the Philippine Data Privacy Act and our PAGCOR-regulated security standards. Sign in to your croyale account and enjoy the games.
Sign In to croyale21+ Only · PAGCOR Licensed · All amounts in PHP · Gamble Responsibly