luckph Privacy Policy

1. Introduction

luckph ("luckph," "we," "us," or "our") is an online gaming platform built for Filipino players, offering slots, live casino games, sports betting, sabong, bingo, keno, and more. We are committed to protecting the privacy and security of personal data belonging to our players and website visitors.

This Privacy Policy describes how luckph collects, uses, stores, shares, and protects your personal information in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering an account on luckph, depositing funds, playing games, or otherwise using any part of the luckph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read together with luckph's Terms & Conditions and Responsible Gaming Policy. If there is a conflict between those documents and this Privacy Policy on data protection matters, this Privacy Policy shall prevail.

2. Personal Data We Collect

luckph collects the following categories of personal data from players and website visitors. We only collect information that is necessary and proportionate to the stated purpose.

3. How We Collect Your Data

luckph collects personal data through a variety of direct and automated means during your interaction with the luckph platform:

• Account Registration: When you create a luckph account, you provide identity, contact, and authentication information directly.
• KYC Verification: When you submit government-issued identification documents for age and identity verification prior to your first withdrawal or as requested by luckph.
• Deposits & Withdrawals: When you conduct financial transactions on luckph using GCash, PayMaya, BPI, BDO, Metrobank, or UnionBank, we receive transaction data including account references and amounts.
• Gameplay: Automatically as you interact with games on the platform. This includes bet placement, game outcomes, session duration, and bonus activity.
• Cookies & Tracking Technologies: Automatically via browser cookies, local storage, and similar technologies when you visit the luckph website. See Section 10 for full details.
• Customer Support: When you contact luckph support via live chat or email, we collect the content of your communications and any information you provide to resolve your inquiry.
• Third-Party Verification Services: luckph may receive identity verification results from licensed KYC service providers as part of the player verification process.
• Device & Network Data: Automatically collected by luckph's servers when your device connects to the platform, including IP address, device identifiers, and browser characteristics used for security and fraud detection.

4. How We Use Your Personal Data

luckph uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without your prior consent.

• Account management: Creating, maintaining, and securing your luckph player account, including password recovery and session management.
• Identity and age verification: Confirming that you are at least 21 years of age and are who you say you are, as required by PAGCOR and the DPA.
• Payment processing: Facilitating deposits and withdrawals through supported Philippine payment channels including GCash, PayMaya, and local banks.
• Game delivery: Providing access to the full range of luckph gaming products including slots, live casino, sports betting, sabong, bingo, and keno.
• Bonus and promotions management: Crediting eligible bonuses, tracking wagering requirements, and administering loyalty rewards.
• Regulatory compliance: Meeting obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act (DPA), and other applicable Philippine laws.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and unauthorized account access.
• Responsible gaming: Monitoring gaming activity to identify at-risk behaviour, honoring self-exclusion requests, and enforcing deposit limits and cooling-off periods set by players.
• Customer support: Responding to inquiries, resolving disputes, and maintaining records of communications for quality assurance.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
• Marketing communications: Sending promotions, bonus offers, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

luckph processes your personal data under one or more of the following lawful bases, as recognized under the Data Privacy Act of 2012 and NPC regulations:

• Contractual necessity: Processing required to perform our obligations under the luckph Terms & Conditions, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws including PAGCOR licensing requirements, AMLA obligations, and DPA compliance.
• Legitimate interest: Processing conducted for luckph's legitimate business interests where these do not override your fundamental rights — including fraud prevention, platform security, and service improvement using aggregated analytics.
• Consent: Processing for purposes that are not strictly necessary for the contract, such as marketing communications and certain non-essential cookie categories. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

luckph does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Licensed game providers: Game software providers such as Jili Games, Pragmatic Play, PG Soft, and Spadegaming receive the minimum data necessary to deliver game sessions (typically a session token and currency denomination). They do not receive your full identity details.
• Payment processors: GCash, PayMaya, and partner banks receive the payment reference and amount data necessary to process your deposit or withdrawal. These parties are bound by their own data protection obligations under Philippine law.
• KYC verification service providers: Licensed identity verification partners receive your submitted KYC documents solely for the purpose of verifying your identity and age. They are contractually bound to use this data only for that purpose.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government bodies may receive your data where luckph is legally required to report or cooperate with an investigation.
• Law enforcement: Where luckph receives a lawful court order or official request from Philippine law enforcement authorities, we may be required to disclose specific player data.
• Fraud prevention networks: luckph may share flagged account or transaction data with industry fraud prevention databases to protect the integrity of online gaming in the Philippines.
• IT and hosting providers: Cloud hosting and infrastructure service providers may process data on luckph's behalf. These providers are bound by data processing agreements that prohibit independent use of your data.
• Business transfer: In the event of a merger, acquisition, or transfer of the luckph business, player data may be transferred to the successor entity. You will be notified prior to any such transfer that affects your data rights.

7. Data Retention

luckph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

After the applicable retention period has expired, luckph will securely delete or anonymise your personal data so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for analytical and reporting purposes.

8. Data Security

luckph takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

• TLS/SSL encryption: All data transmitted between your device and the luckph platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Encrypted storage: Sensitive data including financial account details and KYC documents is stored in encrypted form at rest using AES-256 encryption.
• Access controls: Access to player personal data is restricted to luckph employees and contractors who require it to perform their job functions. All staff with data access undergo data protection training.
• Two-factor authentication: luckph offers two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorized access.
• Regular security audits: luckph conducts periodic security assessments and vulnerability scans of its platform infrastructure.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, luckph will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected players without undue delay in accordance with DPA requirements.

9. Your Privacy Rights

Under the Data Privacy Act of 2012 and NPC regulations, you have the following rights in relation to your personal data held by luckph. These rights may be subject to limitations where legal, regulatory, or fraud-prevention obligations apply.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Privacy Request." luckph will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. We may require proof of identity before processing your request to protect against fraudulent access to another person's data.

10. Cookies & Tracking Technologies

luckph uses cookies and similar technologies on the luckph website. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies allow luckph to recognise your device on subsequent visits and provide a personalised, functional experience.

luckph uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the luckph platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional cookies: These cookies remember your preferences such as language settings, notification preferences, and responsible gaming limits. Disabling them may reduce the quality of your experience on luckph.
• Analytical cookies: luckph uses anonymised analytics tools to understand how players interact with the platform — including which pages are visited most frequently, session duration, and navigation patterns. This data is used in aggregate form only and cannot identify individual players.
• Marketing cookies: Where you have opted in to receive marketing communications, cookies may be used to track whether you have opened a promotional email or clicked a promotion banner within the luckph platform. These cookies are not used for cross-site tracking.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using luckph. Instructions for managing cookies are available in your browser's help documentation.

11. Minors & Age Restriction

luckph does not direct its platform, content, or marketing communications at individuals under 21 years of age. All registration flows include an age declaration, and KYC verification is conducted to confirm that each player meets the 21-year minimum age requirement.

If luckph becomes aware that personal data has been collected from an individual under 21 years of age, luckph will immediately suspend the associated account, delete the data, and take appropriate action in accordance with PAGCOR regulations and the DPA. Any deposits associated with an underage account will be handled in accordance with luckph's Terms & Conditions on underage registration.

Parents or guardians who believe their child may have registered on luckph should contact [email protected] immediately. luckph treats all such reports as priority matters.

12. International Data Transfers

luckph's primary data processing activities take place within the Philippines. However, certain service providers — such as cloud hosting infrastructure, game software providers, and KYC verification partners — may process data in server facilities located outside the Philippines.

Where personal data is transferred outside the Philippines, luckph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act. These safeguards may include:

• Data processing agreements incorporating NPC-approved standard contractual clauses;
• Transfer to jurisdictions that the NPC has recognised as providing adequate data protection standards; or
• Binding corporate rules where the recipient is part of the same corporate group as luckph.

You may request information about the specific safeguards luckph has in place for any international data transfer by contacting our Data Protection Officer at the address provided in Section 14.

13. Changes to This Privacy Policy

luckph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes to this policy, we will notify registered players by email to the address on file and by posting a prominent notice on the luckph platform for a reasonable period prior to the changes taking effect.

The "Last updated" date displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically so you remain informed about how luckph processes your personal data.

Your continued use of the luckph platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any changes, you should cease using the luckph platform and contact support to close your account and request data deletion where applicable.

14. Contact Our Data Protection Officer

luckph has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by luckph, please contact our DPO using the details below.

When submitting a data privacy request, please include your registered email address, the nature of your request, and any relevant details that will help luckph locate and action your request efficiently. We may ask you to verify your identity before processing any data access, correction, or deletion request.

If you are not satisfied with luckph's response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). The NPC handles complaints related to violations of the Data Privacy Act of 2012 and can be reached through their official government channels.