Maybe yes, maybe no.

We didn't know how often he share his phone number, if he buy phone credit or internet package from many local sellers, there's a chance the local seller sold his KYC. If he create an account in many sites that require KYC, we wouldn't know which one sold his data.

I'm not saying if your KYC in a casino is safe, but we can't just draw conclusion from this one and ignore the other thing you did.