cardtime Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how cardtime ("cardtime," "we," "us," "our") collects, uses, stores, and protects the personal data of individuals ("you," "your," "Player") who access or use the cardtime platform at cardtime.pro.

cardtime is committed to protecting the privacy and security of all personal data it processes. This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By registering a cardtime account or using any part of the cardtime platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the cardtime platform.

This Policy applies to all personal data collected through cardtime.pro, including data collected during account registration, identity verification, deposits, withdrawals, gameplay, customer support interactions, and marketing communications.

2. Data We Collect

cardtime collects personal data that is necessary to provide its services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of data we collect include:

cardtime does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly necessary for identity verification and legal compliance purposes.

3. How We Use Your Data

cardtime uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your cardtime account, including processing your registration, verifying your identity, and managing your account settings.
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Legal and regulatory compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and other applicable Philippine laws and regulations.
• Platform security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, cheating, and other prohibited conduct on the cardtime platform.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance with account-related matters.
• Service improvement: To analyze usage patterns, improve platform features, personalize your experience, and develop new products and services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. You may opt out at any time through your account settings.
• Responsible gaming: To monitor gameplay patterns and identify players who may be at risk of problem gambling, in accordance with our Responsible Gaming obligations.

cardtime will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

4. Legal Basis for Processing

cardtime processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform the contract between you and cardtime — specifically, to operate your account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AML laws, and tax reporting obligations.
• Legitimate interests: Processing is necessary for cardtime's legitimate interests in maintaining platform security, preventing fraud, and improving its services, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, cardtime relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data

cardtime does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and on a strictly need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements.
• Game content providers: Licensed game studios and live dealer operators whose games are available on the cardtime platform, to the extent necessary to deliver gameplay services.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or court order.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on cardtime's behalf under strict data processing agreements.

All third parties with whom cardtime shares personal data are required to maintain appropriate technical and organizational security measures and to process data only in accordance with cardtime's instructions and applicable Philippine law.

cardtime does not transfer personal data outside the Philippines except where necessary to deliver services and where appropriate safeguards are in place in accordance with NPC guidelines.

6. Cookies & Tracking Technologies

cardtime uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage, and deliver relevant content. The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled. They include session authentication cookies and security tokens.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set.
• Analytics cookies: Help cardtime understand how players use the platform so we can improve features and fix issues. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent and can be disabled through your browser settings or account preferences.

You can manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the cardtime platform.

7. Data Retention

cardtime retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Specific retention periods include:

• Account data: Retained for the duration of your active cardtime account, plus a minimum of five (5) years after account closure, in accordance with PAGCOR and AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• KYC documents: Retained for the duration of your account plus five (5) years after closure, or longer if required by a regulatory investigation.
• Support communications: Retained for three (3) years from the date of the interaction.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications.

When personal data is no longer required, cardtime will securely delete or anonymize it in accordance with its data disposal procedures.

8. Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by cardtime:

• Right to be informed: You have the right to know what personal data cardtime collects about you and how it is used.
• Right of access: You may request a copy of the personal data cardtime holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data in your cardtime account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cardtime's legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe cardtime has violated your data privacy rights.

To exercise any of these rights, please contact the cardtime Data Privacy Officer at [email protected]. cardtime will respond to all verified requests within fifteen (15) business days, as required under the Data Privacy Act.

9. Data Security

cardtime implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cardtime platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorized cardtime personnel can access personal data, and only to the extent required for their specific role.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified cybersecurity professionals.
• Multi-factor authentication (MFA) for cardtime staff accessing systems that contain personal data.
• Incident response procedures to detect, contain, and remediate data security incidents promptly.

While cardtime takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your cardtime account credentials and for notifying us immediately if you suspect unauthorized access to your account.

10. Children's Privacy

The cardtime platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. cardtime does not knowingly collect personal data from individuals under the age of 21.

If cardtime discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all funds will be frozen pending investigation, and the personal data will be deleted in accordance with applicable law.

If you believe that a minor has registered a cardtime account or provided personal data to the platform, please contact us immediately at [email protected].

11. Changes to This Policy

cardtime reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players via email or through a prominent notice on the cardtime platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the cardtime platform after any changes to this Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how cardtime protects your personal data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cardtime handles your personal data, please contact our Data Privacy Officer:

Email: [email protected]

cardtime's Data Privacy Officer is responsible for overseeing compliance with the Philippine Data Privacy Act and this Policy. All privacy-related inquiries will be acknowledged within five (5) business days and resolved within the timeframes prescribed by applicable law.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.