Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how luckyplay.ph ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects the personal information of users ("you," "Player," or "User") who access or use the luckyplay.ph website, mobile application, and all associated services (collectively, the "Services").

luckyplay.ph is committed to protecting the privacy and personal data of all its users in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. We take our obligations as a personal information controller seriously and have implemented comprehensive technical, organizational, and administrative measures to safeguard your personal data.

By creating an account, accessing the platform, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any part of this Policy, you must immediately cease using luckyplay.ph.

2. Data We Collect

luckyplay.ph collects several categories of personal information to provide, maintain, and improve our Services. The types of data we collect include:

2.1 Account Registration Data

When you create an account on luckyplay.ph, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years old)
• Email address
• Mobile phone number
• Residential address (street, barangay, city/municipality, province, postal code)
• Username and password (password is stored in hashed form only)
• Preferred currency (PHP)

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and responsible gaming requirements, we may collect:

• Government-issued identification documents (Philippine passport, driver's license, SSS/GSIS ID, Voter's ID, PRC ID, etc.)
• Proof of address documents (utility bills, bank statements, government correspondence)
• Selfie photographs for identity verification purposes
• Source of funds documentation (for high-value transactions)

2.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

• Payment method details (GCash mobile number, PayMaya account, bank account name and number for BPI/BDO/Metrobank transfers)
• Transaction amounts, dates, and times
• Transaction IDs and reference numbers
• Payment processor information (we do not store full credit card numbers or CVV codes)

2.4 Gameplay and Activity Data

To operate the platform and ensure fair play, we automatically collect:

• Game history (games played, bets placed, wins, losses)
• Bonus and promotion participation records
• Account balance and transaction history
• Login timestamps and session duration
• Responsible gaming settings (deposit limits, self-exclusion status)

2.5 Technical and Device Data

When you access luckyplay.ph, we automatically collect certain technical information:

• IP address and geolocation data (to verify you are accessing from the Philippines)
• Device type, operating system, and browser type
• Screen resolution and device identifiers
• Referring URLs and pages visited on our platform
• Cookies and similar tracking technologies (see Section 6)

2.6 Communications Data

When you contact luckyplay.ph customer support or communicate with us, we collect:

• Support ticket content (messages, attachments, screenshots)
• Live chat transcripts
• Email correspondence
• Phone call recordings (with your consent, for quality assurance purposes)

3. How We Use Your Data

luckyplay.ph uses your personal information for the following purposes:

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, luckyplay.ph processes your personal data based on the following legal grounds:

• Consent: You have given explicit consent for us to process your personal data for specific purposes (e.g., marketing communications).
• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the Services you have requested).
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including age verification, KYC/AML requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental rights and freedoms.

5. Data Sharing and Disclosure

luckyplay.ph does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the platform, including:

• Payment processors (GCash, PayMaya, bank partners) to process deposits and withdrawals
• Identity verification services to conduct KYC checks
• Cloud hosting providers to store data securely
• Customer support platforms to manage support tickets
• Analytics providers to understand user behavior (data is anonymized where possible)

All service providers are contractually required to protect your data and use it only for the purposes we specify.

5.2 Game Providers

When you play games on luckyplay.ph, certain gameplay data (username, bet amounts, game results) may be shared with our licensed game providers to operate the games and ensure fair play. Game providers are bound by strict data protection agreements.

5.3 Legal and Regulatory Authorities

We may disclose your personal information to Philippine government agencies, law enforcement, or regulatory bodies when required by law, including:

• In response to a valid court order, subpoena, or legal process
• To comply with anti-money laundering investigations
• To report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• To cooperate with PAGCOR or other gaming regulators

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of luckyplay.ph's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change via email and/or a prominent notice on our platform.

6. Cookies and Tracking Technologies

luckyplay.ph uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our Services.

Types of Cookies We Use:

• Essential Cookies: Required for the platform to function (e.g., session management, security). These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, currency) to provide a personalized experience.
• Analytics Cookies: Help us understand how users interact with luckyplay.ph so we can improve the platform.
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements (only with your consent).

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent you from using certain features of luckyplay.ph.

7. Data Retention

luckyplay.ph retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Data is retained for the duration of your account's active status.
• Closed Accounts: After account closure, we retain certain data for up to seven (7) years to comply with Philippine tax, accounting, and anti-money laundering regulations.
• Marketing Data: If you opt out of marketing communications, we will retain only the minimum data necessary to honor your opt-out request.
• Legal Holds: Data may be retained longer if required for ongoing legal proceedings, investigations, or regulatory inquiries.

After the retention period expires, your personal data will be securely deleted or anonymized so that it can no longer be associated with you.

8. Data Security

luckyplay.ph employs industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same technology used by major Philippine banks.
• Secure Data Storage: Personal data is stored on secure servers with restricted access controls and regular security audits.
• Password Protection: User passwords are hashed using strong cryptographic algorithms and are never stored in plain text.
• Two-Factor Authentication (2FA): Available as an optional security feature to protect your account from unauthorized access.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing to identify and address security risks.
• Employee Training: All luckyplay.ph staff with access to personal data undergo regular data privacy and security training.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to your request within fifteen (15) days, as required by Philippine law.

10. Children's Privacy

luckyplay.ph is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect, use, or disclose personal information from individuals under 21 years old. If we become aware that a user is under 21, we will immediately:

• Suspend and permanently close the account
• Delete all personal data associated with the account
• Forfeit any winnings (deposits may be returned at our discretion)
• Report the incident to relevant authorities if required by law

If you believe that a minor has created an account on luckyplay.ph, please contact us immediately at [email protected].

11. International Data Transfers

luckyplay.ph primarily operates within the Philippines, and your personal data is stored on servers located in the Philippines or in secure data centers within the Asia-Pacific region. In some cases, your data may be transferred to service providers located outside the Philippines (e.g., cloud hosting providers, payment processors).

When we transfer data internationally, we ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by the National Privacy Commission
• Ensuring the recipient country has adequate data protection laws
• Obtaining your explicit consent where required by law

12. Third-Party Services and Links

luckyplay.ph may contain links to third-party websites, payment processors, or services (e.g., GCash, PayMaya, game providers). This Privacy Policy applies only to luckyplay.ph. We are not responsible for the privacy practices of third-party services.

When you interact with third-party services through luckyplay.ph, you are subject to their respective privacy policies. We encourage you to review the privacy policies of any third-party services you use.

13. Changes to This Privacy Policy

luckyplay.ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. Any changes will be effective immediately upon posting to the luckyplay.ph website.

We will notify you of material changes by:

• Updating the "Effective Date" at the top of this Policy
• Sending an email notification to your registered email address
• Displaying a prominent notice on the luckyplay.ph homepage

Your continued use of luckyplay.ph after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the platform and close your account.

14. Contact Information and Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or how luckyplay.ph handles your personal data, or if you wish to exercise any of your data privacy rights, please contact our Data Protection Officer (DPO):