Privacy Policy

1. Overview

y10 Casino ("y10," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the y10 platform. This Privacy Policy ("Policy") describes how y10 collects, uses, stores, shares, and protects personal information in connection with the operation of the y10 online gaming platform available at y10.club.

This Policy is drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC"). y10 is registered as a personal information controller under applicable Philippine data privacy regulations.

We understand that Filipino players entrust us with sensitive personal and financial information when they register and play at y10. We take that responsibility seriously. This Policy is designed to be transparent, straightforward, and easy to understand — because you deserve to know exactly how your data is handled.

This Policy applies to all personal data processed by y10 in connection with your use of the Platform, regardless of whether you access y10 from Metro Manila, Cebu, Davao, Quezon City, or anywhere else in the Philippines.

2. Personal Data We Collect

2.1 Registration & Identity Data

When you create a y10 account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify you are at least 21 years of age)
• Residential address, including city, province, and postal code
• Email address and mobile phone number
• Username and encrypted password
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine anti-money laundering laws, y10 may collect:

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of residential address (e.g., utility bill, bank statement dated within the last three months)
• Selfie photographs for identity verification purposes
• Source of funds documentation where required by applicable regulations

2.3 Financial & Transaction Data

In connection with deposits and withdrawals, y10 collects:

• GCash or PayMaya account details (mobile number associated with the account)
• Bank account details for bank transfer transactions (bank name, account number, account name)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers
• Debit card details where applicable (card number is tokenised and not stored in full)

2.4 Gaming & Activity Data

y10 automatically records data related to your use of the Platform, including:

• Game history, including games played, bets placed, wins, losses, and session durations
• Bonus and promotion usage history
• Login timestamps, session lengths, and logout times
• Responsible gaming tool settings (deposit limits, self-exclusion status, etc.)

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type and version
• Unique device identifiers
• Referring URLs and pages visited within the Platform

2.6 Communications Data

When you contact y10 customer support or communicate with us through any channel, we retain records of those communications, including chat transcripts, email correspondence, and support ticket history.

3. How We Collect Your Data

y10 collects personal data through the following means:

• Directly from you: Information you provide when registering, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automatically: Technical and activity data collected automatically when you access and use the Platform, through cookies, log files, and similar tracking technologies.
• From third parties: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment confirmation data from GCash, PayMaya, and banking partners.
• From regulatory bodies: Information shared with y10 by PAGCOR or other competent Philippine authorities in connection with regulatory compliance obligations.

4. Purpose of Processing

y10 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and managing your y10 player account.
• Identity verification: Verifying your identity and age (21+) in compliance with PAGCOR regulations and Philippine law.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, and bank transfer.
• Regulatory compliance: Complying with anti-money laundering (AML) obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR licensing requirements.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, cheating, and other prohibited conduct.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administering responsible gaming tools including self-exclusion.
• Customer support: Responding to your enquiries, complaints, and support requests.
• Marketing and promotions: Sending you information about y10 bonuses, promotions, and new games, where you have consented to receive such communications.
• Platform improvement: Analysing usage data to improve the y10 platform, fix bugs, and enhance the player experience.
• Legal proceedings: Establishing, exercising, or defending legal claims.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, y10 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your y10 account and provide gaming services).
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing conditions, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, security, and platform improvement, where our legitimate interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have given your explicit consent. You may withdraw consent at any time by contacting support or updating your account preferences.

6. Sharing Your Personal Data

y10 does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: GCash (Globe Fintech Innovations), PayMaya (Voyager Innovations), and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers that assist y10 in verifying player identities and ages in compliance with PAGCOR requirements.
• Fraud prevention and AML partners: Service providers that assist y10 in detecting and preventing fraud, money laundering, and other financial crimes.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or regulatory obligation.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers that support the operation of the y10 platform, subject to strict data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants where necessary for legal, compliance, or financial purposes.

7. Data Retention

y10 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Specifically:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AML record-keeping requirements.
• Transaction and financial data is retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC documentation is retained for a minimum of five (5) years after the end of the business relationship.
• Customer support communications are retained for three (3) years from the date of the last interaction.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter for compliance purposes.

When personal data is no longer required, y10 will securely delete or anonymise it in accordance with our data retention and disposal procedures.

8. Data Security

y10 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the y10 platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Multi-factor authentication options for player accounts
• Regular security audits and penetration testing
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Comprehensive staff training on data privacy and security obligations
• Incident response procedures for detecting and responding to data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, y10 will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

9. Cookies & Tracking Technologies

y10 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the y10 website. They help us remember your preferences, keep you logged in, and understand how players use the Platform.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players navigate the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised.
• Performance cookies: Monitor Platform performance and load times to ensure a smooth gaming experience for players across the Philippines.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the y10 Platform — in particular, disabling strictly necessary cookies may prevent you from logging in or using core features.

For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation. Common browsers used by Filipino players include Chrome, Firefox, Safari, and Edge.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by y10:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed. This Policy fulfils that obligation.
• Right of access: You may request a copy of the personal data y10 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data y10 holds about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: In certain circumstances, you may request that y10 delete your personal data. Note that this right is subject to y10's legal obligations to retain data under PAGCOR and AML regulations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
• Right to data portability: You may request that y10 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: If you believe y10 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days in accordance with the Data Privacy Act of 2012.

11. Minors & Age Policy

The y10 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law and PAGCOR regulations governing casino-style gambling. y10 does not knowingly collect personal data from individuals under the age of 21.

During the registration process, y10 collects date of birth information and conducts age verification checks to prevent underage access. If y10 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a minor has registered an account with y10, please contact us immediately at [email protected] so that we can take prompt action.

12. International Data Transfers

y10 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where y10 uses cloud infrastructure or third-party service providers whose servers are located abroad.

Where personal data is transferred outside the Philippines, y10 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses requiring the recipient to protect personal data to the same standard as required under Philippine law
• Transfers to countries that have been assessed as providing an adequate level of data protection
• Binding corporate rules where applicable

You may request further information about the safeguards in place for international data transfers by contacting our Data Protection Officer.

13. Amendments to This Policy

y10 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The date of the most recent revision is always displayed at the top of this page.

When material changes are made to this Policy, y10 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the y10 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage all y10 players to review this Policy periodically to stay informed about how we protect your personal data. If you have any concerns about changes to this Policy, please contact our Data Protection Officer before continuing to use the Platform.

14. Contact & Data Protection Officer

y10 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO using the details below.