Privacy Policy – 855u Casino

01 Introduction

Welcome to the 855u Privacy Policy. 855u Casino operates the online gaming platform accessible at https://855u.app, offering live casino games, slots, bingo, sports betting, and related entertainment services to players in the Philippines and other permitted jurisdictions.

We understand that your personal data is important to you, and we take our responsibility as a data controller seriously. This Privacy Policy explains in plain language what information we collect when you use the 855u platform, why we collect it, how we use and protect it, who we may share it with, and what rights you have regarding your own data.

This policy applies to all personal data processed by 855u in connection with your use of the Platform, including data collected through our website, mobile applications, customer support channels, and any other touchpoints where you interact with 855u.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By registering an account or using the 855u Platform, you confirm that you have read and agree to this Privacy Policy.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal data is 855u Casino, operating the platform at https://855u.app.

If you have any questions about how 855u processes your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this policy.

03 Personal Data We Collect

855u collects the following categories of personal data from players and visitors to the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Email address and mobile phone number
• Residential address (city, province, postal code)
• Government-issued ID number (e.g., Philippine passport, SSS, UMID, driver's license)
• Selfie or photograph for identity verification purposes

3.2 Financial Data

• GCash or PayMaya mobile wallet number
• Bank account details (BDO, BPI, Metrobank, or other Philippine banks) for withdrawal processing
• Transaction history, including deposits, withdrawals, and wager records

3.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Login timestamps and session duration
• Pages visited, games played, and features used on the Platform
• Clickstream data and interaction logs

3.4 Communications Data

• Records of your communications with 855u customer support (live chat transcripts, email correspondence)
• Feedback, survey responses, and promotional opt-in preferences

3.5 Responsible Gaming Data

• Self-exclusion requests and status
• Deposit limit settings and responsible gaming tool preferences
• Any information you voluntarily provide in connection with responsible gaming support

04 How We Collect Your Data

855u collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access and use the Platform.
• Third-party sources: Identity verification data from KYC/AML service providers; fraud prevention data from security partners; payment data from GCash, PayMaya, and banking partners.
• Publicly available sources: Information from public databases used for fraud prevention and regulatory compliance purposes.

05 How We Use Your Personal Data

855u uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 855u player account.
• Identity verification: Verifying your age (21+) and identity in compliance with KYC and AML requirements.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment methods.
• Platform operation: Delivering the games, features, and services you use on the 855u Platform.
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Fraud prevention & security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal conduct.
• Regulatory compliance: Meeting our obligations under Philippine law, including RA 9160 (Anti-Money Laundering Act), RA 10173 (Data Privacy Act), and applicable PAGCOR regulations.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behavior and administering responsible gaming tools such as deposit limits and self-exclusion.
• Marketing & promotions: Sending you promotional offers, bonuses, and news about 855u — but only where you have given your consent or where we have a legitimate interest to do so. You may opt out at any time.
• Platform improvement: Analyzing usage data to improve the performance, features, and user experience of the 855u Platform.

06 Legal Basis for Processing

855u processes your personal data on the following legal bases under RA 10173:

• Contractual necessity: Processing required to perform our contract with you (i.e., operating your player account and delivering the Platform's services).
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML, KYC, and gaming regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your data protection rights .
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Data Sharing & Disclosure

855u does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Identity verification providers: Third-party KYC and AML service providers who assist us in verifying your identity and complying with anti-money laundering obligations.
• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers necessary to process your deposits and withdrawals.
• Technology and hosting providers: Cloud infrastructure, platform hosting, and software service providers who process data on our behalf under strict data processing agreements.
• Fraud prevention and security partners: Service providers who help us detect and prevent fraudulent activity, unauthorized access, and other security threats.
• Regulatory and law enforcement authorities: The National Privacy Commission (NPC), PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and other professional advisers who are bound by confidentiality obligations.

All third parties with whom 855u shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

08 Data Retention

855u retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five (5) years from the date of account closure, in compliance with Philippine AML regulations under RA 9160.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Marketing preferences and consent records: Retained until you withdraw consent or request deletion, plus a reasonable period thereafter for compliance purposes.
• Technical and usage logs: Retained for up to twelve (12) months, unless a longer retention period is required for security investigations or legal proceedings.

When your personal data is no longer required, 855u will securely delete or anonymize it in accordance with our internal data disposal procedures.

09 Security Measures

855u implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the 855u Platform is protected using Transport Layer Security (TLS) encryption.
• Encryption at rest: Sensitive personal data, including financial information and identity documents, is encrypted when stored on our servers.
• Access controls: Access to personal data is restricted to authorized 855u personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: 855u supports and encourages the use of two-factor authentication (2FA) to protect player accounts from unauthorized access.
• Regular security assessments: 855u conducts regular vulnerability assessments and penetration testing to identify and address potential security weaknesses.
• Staff training: All 855u personnel who handle personal data receive regular training on data protection obligations and security best practices.

While 855u takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use a strong, unique password for your 855u account and to enable two-factor authentication.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 855u will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.

10 Cookies & Tracking Technologies

855u uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on the 855u Platform:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that help protect your account. These cookies cannot be disabled.
• Performance and analytics cookies: Help us understand how players use the Platform by collecting aggregated, anonymized usage data. This information is used to improve Platform performance and user experience.
• Functionality cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalized experience.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 855u Platform. For more information on managing cookies, refer to your browser's help documentation.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 855u:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to your request within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

Please note that some rights are subject to limitations under applicable law. For example, we may be unable to delete data that we are legally required to retain for AML or regulatory compliance purposes.

12 Minors & Age Restriction

The 855u Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. 855u does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that a minor has provided personal data to 855u or has registered an account on the Platform, please contact us immediately at the details provided in Section 14. Upon verification, we will promptly close the account, delete the associated personal data, and return any deposited funds in accordance with our account closure procedures.

855u employs age verification procedures during the registration process and may request additional documentary proof of age at any time. Any account found to be operated by a person under 21 years of age will be immediately suspended pending investigation.

13 Changes to This Privacy Policy

855u reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and notify registered players via email or a prominent notice on the Platform.

We encourage you to review this Privacy Policy periodically to stay informed about how 855u protects your personal data. Your continued use of the Platform after any changes to this policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should stop using the Platform and may request account closure as described in our Terms & Conditions.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 855u processes your personal data, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that 855u has not handled your personal data in accordance with RA 10173. The NPC can be reached through its official government channels.