I'm with Grandmaster.
A casino has NO BUSINESS WHATSOEVER (did I make myself clear?
) sharing your information with ANYONE, even the GOVERNMENT, unless REQUIRED by law.
So whichever accredited casino did this, you better fix your procedures doubly quick before you get found out.
By the way, this is directed towards third-party processors - if the processor is contracted directly by the casino for fraud prevention and payment processing, that's a different issue entirely.
Btw, aodat, how certain are you that the casino actually did this?