Privacy Policy — luckyplay.ph

This Privacy Policy ("Policy") describes how luckyplay.ph ("we," "us," "our," or "the Platform") — the operator of the online casino and sports betting platform accessible at luckyplayph.co — collects, uses, stores, and discloses personal data in connection with the operation of the luckyplay.ph platform and related services.

luckyplay.ph operates under the regulatory framework of the Philippine Amusement and Gaming Corporation ("PAGCOR") and is committed to compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) ("DPA"), its Implementing Rules and Regulations ("IRR"), and applicable issuances of the National Privacy Commission ("NPC").

By creating an account on luckyplay.ph, using the luckyplay.ph Login, or otherwise accessing the platform's services — including slots, live casino, sports betting, bingo, e-sabong, and associated account features — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with the terms of this Policy, please do not register an account or use the luckyplay.ph platform. This Policy should be read together with the luckyplay.ph Terms and Conditions, available at /terms-conditions.

For the purposes of the Philippine Data Privacy Act of 2012, the data controller in respect of personal data collected through the luckyplay.ph platform is the operator of luckyplayph.co ("luckyplay.ph").

luckyplay.ph has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and with the DPA. The DPO can be contacted through the luckyplay.ph 24/7 live support channel or by email at [email protected] (plain text — not a clickable link). Data subject rights requests and privacy concerns should be directed to the DPO.

luckyplay.ph maintains registration with the National Privacy Commission as required under the DPA and its IRR.

luckyplay.ph collects personal data through multiple touchpoints. The categories of personal data we collect are set out in the table below.

Where the collection of certain personal data is mandatory (e.g., for KYC or PAGCOR compliance), failure to provide the required data may result in luckyplay.ph being unable to open or maintain your account or process withdrawal requests.

Under the Philippine Data Privacy Act, personal data processing must have a lawful basis. luckyplay.ph processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to enter into and perform the account agreement with you, including account registration, identity verification, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the DPA itself, and other applicable Philippine laws and regulations. This includes mandatory KYC data collection, transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain cookie uses, where consent has been obtained and may be withdrawn at any time through your account settings or by contacting support.

luckyplay.ph uses the personal data it collects for the following purposes:

• Account Management: Creating, verifying, maintaining, and closing player accounts; processing luckyplay.ph Login authentication; enforcing the 21+ age requirement.
• Payment Processing: Processing GCash, PayMaya, BPI, BDO, and Metrobank deposits and withdrawals; reconciling transactions; managing refunds where applicable.
• PAGCOR Regulatory Compliance: Fulfilling mandatory KYC, AML, and player data reporting obligations to PAGCOR and other relevant Philippine regulatory authorities.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, multiple account creation, bonus abuse, money laundering, and unauthorised account access.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour; administering deposit limits, session alerts, cooling-off periods, and self-exclusion at player request or as required by PAGCOR responsible gaming standards.
• Customer Support: Responding to enquiries, complaints, and disputes submitted via live chat, email, or other support channels.
• Platform Improvement: Analysing aggregated usage data and gaming patterns to improve platform performance, user experience, and game content selection — using anonymised or aggregated data where possible.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. Players may withdraw consent at any time via account settings.

luckyplay.ph will not use your personal data for any purpose that is incompatible with the purposes for which it was originally collected, without first obtaining your explicit consent or establishing another lawful basis for the new processing.

luckyplay.ph uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that help the platform function correctly, remember your preferences, and collect analytical data to improve the user experience for Filipino players.

The categories of cookies used by luckyplay.ph include:

• Essential Cookies: Strictly necessary for the platform to function. These include session authentication cookies that maintain your luckyplay.ph Login state during an active session. Essential cookies cannot be disabled without impairing platform functionality.
• Performance / Analytics Cookies: Collect anonymous data on how players use the platform — pages visited, session duration, game sections accessed. This data is used to improve platform performance and content.
• Functional Cookies: Remember your preferences, such as language settings and notification preferences, to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content. These cookies are only set with your consent and may be withdrawn at any time.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of the luckyplay.ph platform, including the ability to log in and maintain a game session.

luckyplay.ph does not sell, rent, or trade personal data. We disclose personal data to third parties only in the circumstances described below:

• PAGCOR and Regulatory Authorities: luckyplay.ph is legally required to submit player data and gaming activity reports to PAGCOR as part of its licence obligations. Data may also be disclosed to other Philippine regulatory bodies (including the Anti-Money Laundering Council) in response to lawful requests.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and relevant Philippine financial regulations.
• KYC and Identity Verification Providers: Third-party KYC service providers may process identity documents and verification data on behalf of luckyplay.ph under data processing agreements that require compliance with the DPA.
• Game Content Providers: Third-party game studios and live casino operators may receive session data necessary to deliver their game services to your account. This is limited to the data required for game functionality and fairness certification.
• IT and Platform Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers may process technical data in the course of providing services to luckyplay.ph. These providers are contractually bound to process data only on luckyplay.ph's instructions and to maintain appropriate security standards.
• Law Enforcement and Courts: luckyplay.ph may disclose personal data in response to a lawful court order, subpoena, or request from a competent Philippine law enforcement authority.

Some of luckyplay.ph's third-party service providers — including certain game content providers, cloud infrastructure providers, and KYC processors — may be located outside the Philippines and may process personal data in jurisdictions other than the Philippines.

Where personal data is transferred outside the Philippines, luckyplay.ph takes steps to ensure that the transfer is compliant with the DPA and NPC guidelines on cross-border data transfers. These steps include ensuring that the recipient jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards are in place between luckyplay.ph and the data recipient.

Players who wish to obtain further information about the safeguards applicable to any specific international data transfer may contact the luckyplay.ph Data Protection Officer via live support or email.

luckyplay.ph retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or PAGCOR regulatory obligations.

The general retention principles applied by luckyplay.ph are:

• Active Accounts: All account data, KYC documents, transaction records, and gaming history are retained for the duration of the account relationship.
• Closed Accounts: Following account closure, luckyplay.ph retains account data, KYC documents, and financial transaction records for a minimum period of five (5) years, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations.
• Dormant Accounts: Accounts inactive for twelve (12) consecutive months are subject to the dormant account policy set out in the Terms and Conditions. Data associated with dormant accounts is retained in accordance with the general retention schedule above.
• Support and Communications Data: Customer support correspondence is retained for two (2) years from the date of the most recent interaction, or longer if relevant to an unresolved dispute.
• Marketing Consent Records: Records of marketing consent (and its withdrawal) are retained for a minimum of three (3) years from the date of the last consent event.

Upon expiry of the applicable retention period, luckyplay.ph will securely delete or irreversibly anonymise the relevant personal data.

luckyplay.ph implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the luckyplay.ph platform is encrypted using industry-standard SSL/TLS protocols — the same standard used by Philippine banks for online banking sessions.
• Access Controls: Personal data is accessible only to luckyplay.ph personnel and authorised processors who require access to perform their specific roles. Access is governed by role-based permissions and is reviewed periodically.
• Password Security: Account passwords are stored using one-way cryptographic hashing. luckyplay.ph does not store plaintext passwords at any point.
• Two-Factor Authentication: Players are encouraged to enable 2FA via their registered Philippine mobile number for additional account security. 2FA is available via the luckyplay.ph account settings.
• Security Monitoring: The platform employs continuous fraud detection and anomaly monitoring to identify and respond to suspicious activity patterns.
• Incident Response: luckyplay.ph maintains a data breach response plan in accordance with NPC Circular No. 16-03. In the event of a personal data breach that poses a real risk to player rights, affected players and the NPC will be notified within 72 hours of the breach being identified.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is fully guaranteed against all risks. Players are responsible for maintaining the security of their own device and luckyplay.ph Login credentials.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by luckyplay.ph:

luckyplay.ph does not knowingly collect personal data from individuals under the age of 21. The minimum age to register an account and use any service on luckyplay.ph is 21 years, in compliance with PAGCOR regulations governing online casino and gaming platforms in the Philippines.

Age verification is conducted for all new accounts through the KYC process. If luckyplay.ph becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, the data will be securely deleted to the extent not required for legal or regulatory purposes, and the matter will be reported to PAGCOR as required.

If you are a parent or guardian and believe that your child has registered an account on luckyplay.ph, please contact the support team immediately. We will act promptly to investigate and, where confirmed, close the account and delete the associated data.

The luckyplay.ph platform may reference or integrate third-party game providers, payment processors, and technology partners whose services are subject to their own independent privacy policies. luckyplay.ph is not responsible for the data practices of third-party providers, except to the extent that such providers are acting as data processors under an agreement with luckyplay.ph.

Players who interact directly with third-party services (for example, GCash's own application or a bank's online portal during a deposit or withdrawal) do so subject to the privacy policies of those respective third parties. luckyplay.ph encourages you to review the privacy policies of any third-party service with which you interact.

luckyplay.ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable legal and regulatory obligations. When material changes are made — particularly changes that affect how we use your personal data or your rights as a data subject — we will notify registered players by displaying a prominent notice on the platform or by sending a notification to your registered email address.

The "Last Reviewed" date at the top of this Policy indicates when it was most recently updated. Continued use of the luckyplay.ph platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may request account closure through the support team.

We encourage you to review this Privacy Policy periodically. The most current version will always be available at luckyplayph.co/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by luckyplay.ph, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the luckyplay.ph platform — the fastest channel for data subject requests and privacy queries.
• Email (DPO): [email protected] — please include "Data Privacy Request" in your subject line.

If you are not satisfied with our response to a privacy concern or believe we have not handled your data in compliance with the Philippine Data Privacy Act, you may file a complaint with the National Privacy Commission of the Philippines. The NPC's official website and complaint procedures are available through PAGCOR and NPC official channels.