How is it that such a supposed classified data of information was easily hacked ?! Oh, I forgot it's a centralized server and not inevitable to security risk.
That's the thing, the list is available for every casino in the country.
It's not different from how those lists work in the EU or US, so you don't need to hack any government central server, you just need one licensed casino to gain access to that, so any rogue employee could have done so.
It has nothing to do with centralization, everyone should be able to check if the name of any of their customers is on that list, so you can't make it secret!