Finding out that someone used your name, ID, selfie, mobile number, or e-wallet details to register for an online casino can feel frightening because it may connect you to gambling activity you never authorized. In the Philippines, this is not merely a “wrong account” problem. It can involve computer-related identity theft, misuse of personal data, possible financial account fraud, and regulatory issues with the online gaming operator. The safest approach is to create a clear paper trail, freeze the account quickly, preserve evidence before anything is deleted, and report to the right agencies in the right order.

What Counts as Identity Theft in Online Casino Registration?

Identity theft in this situation usually means someone used your identifying information to create or verify an online gaming account without your permission.

Common examples include:

Your government ID was uploaded for casino KYC verification.
Your selfie, passport, driver’s license, UMID, PhilID, PRC ID, or ACR I-Card was used.
Your mobile number or email address received casino OTPs or account notices.
Your GCash, Maya, bank, or card details were linked to a gaming account.
Your name appears in withdrawal, deposit, bonus, or betting records.
A casino account exists under your identity even though you never registered.

“KYC” means Know Your Customer. Casinos and online gaming platforms use it to verify the person opening the account. The problem is that once your identity is placed in a gambling platform’s KYC system, records may later show transactions, withdrawals, or compliance flags under your name even if someone else controlled the account.

This is why the first goal is not simply “delete the account.” The first goal is to freeze the account, preserve the records, and obtain written confirmation that the registration was disputed as unauthorized.

Why the Type of Online Casino Matters

Before reporting, identify whether the platform is:

Type of platform	Why it matters	What to do
PAGCOR-authorized online gaming site	The operator is under Philippine gaming regulation and should have compliance, KYC, AML, and data privacy obligations.	Report to the operator, PAGCOR, law enforcement, and NPC if needed.
Site claiming to be PAGCOR-licensed	Some scam sites display fake seals, fake licenses, or copied brand names.	Verify through official PAGCOR channels before sending more personal data.
Unlisted or illegal gambling site	It may be a scam, phishing site, or unauthorized operator.	Report to PNP-ACG/NBI Cybercrime, CICC/Scam Watch, and PAGCOR if it uses PAGCOR’s name.
Foreign offshore gambling site	Philippine agencies may have limited direct reach, but they can still act if the victim, data, payment channel, or operator has links to the Philippines.	Preserve evidence and report locally, especially if Philippine IDs, e-wallets, banks, or phone numbers were used.

PAGCOR maintains a public PAGCOR Guarantee site listing PAGCOR-authorized online gaming websites, and PAGCOR says the page is intended to help the public verify legitimate online gaming providers and avoid fraudsters. (pagcorguarantee.ph) PAGCOR’s Electronic Gaming Licensing Department also states that it regulates local gaming operations offering eCasino games, eBingo, sports betting, specialty games, online poker, and numeric games, including the online operation of licensed platforms. (PAGCOR)

Legal Basis in the Philippines

Cybercrime Law: RA 10175

The main criminal law is Republic Act No. 10175, the Cybercrime Prevention Act of 2012. It covers computer-related offenses, including computer-related identity theft. The law penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or entity without right. (Legal Resource PH)

This matters because casino registration is normally done through a website or app. If someone uploaded your ID, entered your personal details, verified an OTP, or linked your e-wallet through a digital system, the act may fall within cybercrime investigation.

The Supreme Court reviewed RA 10175 in Disini, Jr. v. Secretary of Justice, G.R. No. 203335, where the Court ruled on the constitutionality of several provisions of the Cybercrime Prevention Act. (Lawphil)

Data Privacy Law: RA 10173

Republic Act No. 10173, the Data Privacy Act of 2012, protects personal information in government and private-sector information systems. It recognizes privacy as a fundamental right and requires personal information controllers to secure personal data. (National Privacy Commission)

For casino identity theft, RA 10173 is important because the casino or gaming platform may be processing your personal data. You may assert data subject rights such as access, correction, blocking, erasure, and the right to complain when personal information is misused or your data privacy rights are violated. The National Privacy Commission states that a person may file a complaint if personal information has been misused, maliciously disclosed, improperly disposed, or if data privacy rights were violated. (National Privacy Commission)

The Data Privacy Act also requires notification to the NPC and affected data subjects when sensitive personal information or other information that may enable identity fraud is reasonably believed to have been acquired by an unauthorized person and there is real risk of serious harm. (National Privacy Commission)

Casino Regulation, AML, and KYC Rules

Casinos are not ordinary entertainment websites. RA 10927 of 2017 amended the Anti-Money Laundering Act to include casinos as covered persons. (Lawphil) PAGCOR’s AML supervision page explains that anti-money laundering laws now cover casinos, including internet-based casinos, and that the Casino Implementing Rules and Regulations were issued to implement RA 10927. (PAGCOR)

This is why online casinos collect IDs and verify users. But it also means that when someone uses a stolen identity, the operator should treat the matter seriously because the account may be connected to suspicious transactions, money laundering controls, or fraudulent withdrawals.

Financial Account Scams: RA 12010

If your bank account, e-wallet, card, or financial account was used, the incident may also involve Republic Act No. 12010, the Anti-Financial Account Scamming Act, enacted in 2024. It protects the public from cybercrime schemes involving financial accounts and penalizes financial account scamming and related offenses. (Supreme Court E-Library)

This becomes relevant if:

Someone opened or used a financial account under your identity.
Your e-wallet was linked to the casino account.
Money was deposited or withdrawn using your account details.
A scammer used you as a “money mule” without your consent.
You received suspicious OTPs, login alerts, or fund transfer notices.

Revised Penal Code and Civil Code

Depending on the facts, other Philippine laws may apply:

Estafa under Article 315 of the Revised Penal Code, if the identity theft was used to defraud a person or entity.
Falsification under Articles 171 or 172 of the Revised Penal Code, if documents, signatures, IDs, or declarations were falsified.
Civil Code Articles 19, 20, and 21, for damages caused by abuse of rights, acts contrary to law, or willful acts contrary to morals, good customs, or public policy.
Civil Code Article 26, if the misuse of identity caused privacy invasion, embarrassment, harassment, or damage to personal dignity.

What to Do First: The First 24 Hours

1. Do Not Log In, Gamble, Withdraw, or “Test” the Account

Avoid doing anything that could make it look like you accepted or used the casino account. Do not deposit, claim bonuses, click “withdraw,” or change account settings unless the platform instructs you to complete a secure verification process for identity-theft reporting.

Your position should be clear: you did not create, authorize, use, or benefit from the account.

2. Preserve Evidence Before Reporting

Take screenshots and save files immediately. Online gambling sites can change pages, delete accounts, or restrict access after a complaint.

Preserve:

The website URL or app name.
The account username, player ID, or registered phone/email if visible.
Login alerts, OTP messages, emails, or SMS.
Screenshots showing your name, ID, selfie, or personal data.
Casino chat transcripts.
Deposit or withdrawal records.
GCash, Maya, bank, or card transaction reference numbers.
Any social media ad or message that led to the platform.
The exact date and time you discovered the account.
Names of customer service agents you spoke with.
Case numbers from the casino, bank, e-wallet, PAGCOR, PNP, NBI, or NPC.

For electronic evidence, do not rely only on cropped screenshots. Keep the original email, SMS, chat export, PDF, downloaded statement, or screen recording when possible. Philippine courts require electronic documents to be authenticated, and the Rules on Electronic Evidence place the burden on the person presenting an electronic document to prove authenticity. (Lawphil)

3. Secure Your Accounts

Change passwords and enable two-factor authentication for:

Email accounts.
Mobile number-linked accounts.
GCash, Maya, banks, and cards.
Social media accounts.
Government portals.
Cloud storage where ID photos may be saved.

If your SIM or mobile number was compromised, report to your telco immediately. If unauthorized financial transactions occurred, report to the bank or e-wallet first because time matters for account restriction, reversal attempts, and tracing.

Step-by-Step: How to Report Identity Theft Used for Online Casino Registration

Step 1: Send a Written Fraud and Data Privacy Notice to the Casino

Use the platform’s official support, fraud, compliance, or Data Protection Officer channel. If the site is PAGCOR-listed, use the contact information found on the official site, not a random Facebook page or Telegram agent.

Ask for these specific actions:

Freeze or suspend the account immediately.
Block withdrawals, transfers, bonuses, and further bets.
Preserve all KYC records, registration logs, IP logs, device IDs, transaction records, and communications.
Mark the account as disputed due to identity theft.
Confirm that you are not the authorized account holder.
Tell you what personal data they hold about you.
Provide their Data Protection Officer contact details.
Explain their process for identity-theft investigation.
Confirm whether the platform is PAGCOR-authorized and under what registered operator.

A useful subject line is:

Identity Theft Report — Unauthorized Casino Account Registered Under My Name

A clear message can say:

I am reporting an unauthorized online casino account registered using my name and/or personal information. I did not create, authorize, access, fund, gamble through, or benefit from this account. Please immediately freeze the account, prevent withdrawals or transfers, preserve all registration/KYC/login/device/IP/payment records, and provide a written incident or case number. Please also identify your Data Protection Officer and confirm the process for correcting, blocking, or deleting my personal data after evidence preservation.

Do not send a full unmasked ID to an unofficial channel. If the operator requires identity verification, send it only through an official secure channel and watermark the copy, for example: “For identity theft report to [casino name] only — [date].”

Step 2: Verify the Site Through PAGCOR

Check whether the site appears on PAGCOR’s official authorized online gaming list. PAGCOR’s guarantee page lists authorized online gaming websites and allows users to verify gaming platforms. (pagcorguarantee.ph)

If the site is listed or claims to be licensed, report to PAGCOR with:

Website URL.
Brand name and operator name, if known.
Screenshots of the account or messages.
Your written complaint to the casino.
The casino’s reply or failure to reply.
A statement that your identity was used without consent.
Any financial transaction references.

PAGCOR’s regulatory contact page lists contact details for departments including the Electronic Gaming Licensing Department, while PAGCOR’s support contact page provides its general public inquiry channel and corporate contact information. (PAGCOR)

If the site is not listed but uses PAGCOR’s name, logo, or fake license, report it as a suspected illegal or fraudulent online gambling site.

Step 3: File a Cybercrime Complaint With PNP-ACG or NBI Cybercrime Division

For a criminal case, report to either:

PNP Anti-Cybercrime Group (PNP-ACG), including regional anti-cybercrime units; or
NBI Cybercrime Division / Cybercrime Investigation and Assessment Center.

The NBI Citizen’s Charter page for computer-crime victims states that the NBI Cybercrime Division handles investigative assistance for victims of computer crimes, and the NBI divisions page lists the Cybercrime Division and its official contact. (National Bureau of Investigation) A Philippine government FOI response also directed cybercrime concerns to the PNP-ACG eComplaint system and official PNP-ACG email channel. (www.foi.gov.ph)

Bring or prepare:

Complaint-affidavit describing what happened.
Valid government ID.
Screenshots and printouts.
Electronic copies of evidence in a USB drive or secure folder.
Casino emails or chat transcripts.
PAGCOR verification result, if available.
Bank/e-wallet records, if any.
Written denial that you created or used the account.
Special Power of Attorney, if someone will file for you.

Your complaint-affidavit should state:

Your full name, address, contact details, and ID used.
How you discovered the unauthorized casino account.
What personal information was used.
Why the registration was unauthorized.
Whether money, e-wallets, or bank accounts were involved.
The platform URL and account details.
The evidence attached.
The harm or risk caused to you.
A request for investigation for computer-related identity theft and related offenses.

In practice, intake may happen the same day if your documents are complete, but cybercrime investigations can take weeks or months, especially when investigators need platform records, IP logs, payment records, telco information, or warrants to search, seize, and examine computer data.

Step 4: Report to CICC or Scam Watch for Urgent Online Scam Routing

If the site appears to be a scam, fake casino, phishing page, or active fraud campaign, report it to the Cybercrime Investigation and Coordinating Center (CICC) or Scam Watch channels. Scam Watch Pilipinas lists the 1326 hotline for online scam reports, and government information campaigns have referred cyber fraud victims to 1326. (ScamWatch Pilipinas)

This is useful when:

The site is still collecting IDs from other people.
The casino link is spreading through Facebook, Telegram, SMS, or ads.
You received phishing messages.
Other victims are being lured to upload IDs.
You need fast routing before a formal criminal complaint is completed.

CICC/Scam Watch reporting does not replace a sworn complaint with PNP-ACG or NBI if you want a criminal investigation, but it helps flag active scams.

Step 5: File a Data Privacy Complaint With the NPC if the Platform Does Not Act Properly

If the casino refuses to freeze the account, ignores your written request, continues processing your data, or fails to correct the problem, file with the National Privacy Commission.

The NPC says a formal complaint must be filed in a specific format, printed and filled out, notarized, and submitted personally, by courier, or by scanned email to the NPC complaints channel. (National Privacy Commission) Under the NPC complaint mechanics, a data subject may file a complaint, and the complaint should include supporting documents and affidavits. (National Privacy Commission)

Important practical rule: the NPC generally requires exhaustion of remedies. This means you should first inform the respondent in writing and give it a chance to address the privacy violation. The NPC states that proof must be attached showing that the respondent failed to take timely or appropriate action or gave no response within 15 calendar days from receipt of the written information. (National Privacy Commission)

NPC fees may apply. NPC Circular No. 2023-01 lists a ₱500 filing fee for complaints, plus additional fees if damages are claimed. (National Privacy Commission) The NPC also states that, from receipt of complaints, its Complaints and Investigation Division has 30 calendar days to give due course or dismiss without prejudice, and the full process up to final adjudication may take about 10 to 12 months. (National Privacy Commission)

Step 6: Report to Your Bank, Card Issuer, or E-Wallet Provider

If any bank, credit card, debit card, GCash, Maya, or other payment account was used, report to the financial provider immediately.

Ask for:

Account restriction or temporary hold, where appropriate.
Fraud investigation.
Transaction dispute.
Merchant trace.
Written case number.
Copies of transaction references.
Confirmation whether your account was linked to the casino.

For unresolved financial institution complaints, the BSP states that consumers should first report to the financial institution’s Financial Consumer Protection Assistance Mechanism. If unsatisfied, they may escalate to BSP through the BSP Online Buddy or, if BOB is unavailable, by sending the required form and supporting documents to BSP’s consumer affairs channel. (Bangko Sentral ng Pilipinas)

If the case involves financial account scamming, suspicious use of accounts, or unauthorized access to an account, RA 12010 may also become relevant. (Supreme Court E-Library)

Documents to Prepare

Document	Purpose	Practical notes
Valid government ID	Proves your identity as complainant	For foreigners, passport and ACR I-Card, if any, are useful.
Complaint-affidavit	Main sworn narrative for PNP, NBI, or prosecutor	Have it notarized unless the receiving office provides oath assistance.
Screenshots of casino account	Shows unauthorized registration	Include full URL, date/time, account ID, and visible personal data.
Emails, SMS, OTPs, chat logs	Shows how the account was created or discovered	Preserve original messages; do not only keep cropped screenshots.
Bank/e-wallet statements	Shows unauthorized payments or linked accounts	Include reference numbers and timestamps.
Written notice to casino/DPO	Shows you reported and requested action	Needed for NPC exhaustion of remedies.
Casino reply or non-response	Shows whether the platform acted properly	Save ticket numbers and agent names.
PAGCOR verification result	Shows whether the platform is authorized	Screenshot the PAGCOR listing or absence from the list.
Police/NBI report or acknowledgment	Creates criminal-report record	Useful for banks, e-wallets, NPC, and future disputes.
SPA or authorization letter	Needed if a representative files for you	If executed abroad, notarization, consularization, or apostille may be required.

Typical Timelines and Fees

Action	Typical timing	Usual cost
Casino fraud report	Same day to several business days	Usually none
PAGCOR complaint or inquiry	Varies depending on completeness and routing	Usually none
PNP-ACG or NBI intake	Same day to appointment-based	Usually none for filing; photocopying/notarization costs may apply
NPC complaint	30 calendar days for due course/dismissal; full process may take 10–12 months	₱500 filing fee, plus possible additional fees
Bank/e-wallet dispute	Immediate report recommended; resolution varies	Usually none
BSP escalation	After first reporting to financial provider	Usually none
Affidavit notarization	Same day	Often a few hundred pesos, depending on notary
Consular notarization abroad	Depends on embassy/consulate schedule	Varies by post

If You Are a Filipino Abroad or a Foreigner Outside the Philippines

You can still report even if you are outside the Philippines.

Practical options:

Send written reports by email to the casino, PAGCOR, bank/e-wallet, and relevant cybercrime agency.
Execute a Special Power of Attorney authorizing a trusted person in the Philippines to file or follow up.
Have your affidavit or SPA notarized at a Philippine Embassy or Consulate, or notarized locally and apostilled if the country is part of the Apostille Convention.
Attach a clear copy of your passport and proof of address, but send sensitive ID copies only through official channels.
Keep timezone-specific records of messages and transactions.

DFA apostille guidance explains that an Apostille certifies the origin of a public document, while Philippine embassies and consulates can notarize private documents such as affidavits and special powers of attorney for use in the Philippines. (Apostille Services) Some Philippine consular posts also state that personal appearance is required for consular notarization. (Philippine Consulate LA)

Foreigners may file complaints if their identity was used in a Philippine-facing platform, if Philippine payment systems were involved, or if the operator, data processing, victimization, or transaction has a Philippine connection.

Common Mistakes to Avoid

Asking for Immediate Deletion Before Evidence Is Preserved

It is natural to want the account deleted. But if the operator deletes everything too early, important evidence may disappear. First ask for freeze, restriction, and preservation. After the account records are preserved, you can request correction, blocking, or deletion of your personal data as appropriate.

Reporting Only to Customer Support

Customer support may treat the issue as an account concern. Use words like:

“identity theft”
“unauthorized registration”
“KYC misuse”
“data privacy complaint”
“preserve records”
“fraud investigation”
“Data Protection Officer”

This helps route your complaint to compliance or legal teams.

Sending More IDs to Fake Pages

If the site is illegal or fake, do not upload more documents. Verify through PAGCOR first. Use only official websites, official email domains, or in-app secure support channels.

Using the Account to Investigate

Do not place bets, withdraw funds, claim promotions, or communicate as if you are the account owner. Your evidence should show that you rejected the account from the moment you discovered it.

Posting Your Full Details Publicly

Avoid posting your complete name, ID number, address, phone number, or screenshots of your ID on Facebook groups. Public posts can cause another round of identity misuse.

Assuming a Barangay Blotter Is Enough

A barangay or local police blotter can help timestamp your discovery, but it is not a substitute for a cybercrime complaint with PNP-ACG or NBI when online identity theft is involved.

Frequently Asked Questions

Is it identity theft if no money was lost?

Yes, it can still be identity theft. Under RA 10175, computer-related identity theft may involve unauthorized use or possession of identifying information. The law even contemplates a lower penalty if no damage has yet been caused, which means financial loss is not always required before the conduct becomes legally serious. (Legal Resource PH)

Should I report to PAGCOR or to the police first?

If the account is active and your identity is being used, report to the casino immediately to freeze and preserve records. Then verify the site through PAGCOR. For criminal investigation, file with PNP-ACG or NBI Cybercrime. If the site is fake or unlisted, report to law enforcement and CICC/Scam Watch, and notify PAGCOR if the site uses PAGCOR’s name or logo.

Can the casino refuse to tell me who created the account?

The casino may refuse to disclose another user’s personal data directly to you because of privacy and security rules. But it should still investigate, freeze the disputed account, preserve logs, and cooperate with lawful requests from investigators, regulators, or courts. You may also request access to personal data about you and ask for correction, blocking, or deletion after preservation.

Can I force the casino to delete my ID and selfie?

You can request deletion, blocking, or correction under data privacy principles, but in fraud cases the operator may need to preserve records for investigation, regulatory compliance, AML obligations, or legal defense. A practical request is: freeze the account now, preserve evidence, stop further processing for gambling use, and delete or block my personal data when retention is no longer legally necessary.

What if the online casino is not on PAGCOR’s list?

Treat it as high risk. Preserve evidence, avoid sending more documents, report to PNP-ACG or NBI, and submit the URL to CICC/Scam Watch. If it claims to be PAGCOR-licensed, report that claim to PAGCOR as well.

Can I be charged for gambling if someone else used my identity?

A person should not be treated as a bettor merely because someone misused that person’s identity. Your documents should clearly show that you did not create, authorize, control, fund, or benefit from the account. This is why a timely affidavit, written casino report, and cybercrime complaint are important.

What should I do if my e-wallet was linked to the casino?

Report to the e-wallet provider immediately and request account restriction, transaction review, and written confirmation. Save reference numbers. If the response is inadequate, escalate through BSP’s consumer assistance process after first reporting to the financial provider. (Bangko Sentral ng Pilipinas)

Do screenshots count as evidence in the Philippines?

Screenshots can help, but electronic evidence must be authenticated. Keep original emails, SMS, files, URLs, app notifications, downloaded statements, and metadata where possible. The Rules on Electronic Evidence require proof of authenticity and reliability before electronic documents are given weight. (Lawphil)

Can I file with the NPC right away?

You can prepare the NPC complaint right away, but the NPC generally requires proof that you first informed the respondent in writing and gave it a chance to address the violation. The NPC’s mechanics refer to a 15-calendar-day period from receipt of your written notice, unless the situation fits an urgent or special remedy. (National Privacy Commission)

What if I am abroad and cannot personally appear?

You can send written reports online and authorize someone in the Philippines through a Special Power of Attorney. For documents executed abroad, use Philippine consular notarization or local notarization with apostille where applicable. Keep scans of all submissions and courier receipts.

Key Takeaways

Unauthorized online casino registration using your identity may involve cybercrime, data privacy violations, financial account fraud, and casino regulatory issues.
Do not use the account. Freeze it, preserve evidence, and make your denial clear in writing.
Verify whether the site is PAGCOR-authorized through official PAGCOR channels.
File criminal reports with PNP-ACG or NBI Cybercrime for investigation.
File with the NPC if your personal data was misused and the platform fails to act properly after written notice.
Report immediately to your bank, card issuer, or e-wallet if any financial account was linked or used.
Keep originals, screenshots, reference numbers, affidavits, and all written responses because electronic evidence must be authenticated.
For Filipinos abroad and foreigners, notarized, consularized, or apostilled affidavits and SPAs can help a representative file or follow up in the Philippines.