lucky.ph
Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how lucky.ph ("the Platform," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "the Player," or "the User") who access or use the lucky.ph website and its associated services, including online casino games, sports betting, live dealer games, and any mobile application offered by lucky.ph.

lucky.ph is committed to protecting the privacy and personal data of all Filipino players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission of the Philippines.

By registering an account on lucky.ph or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the lucky.ph Terms & Conditions and should be read alongside them.

If you do not agree with any part of this Policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

02 Personal Data We Collect

lucky.ph collects the following categories of personal data from players and platform visitors:

2.1 Identity and Contact Information

• Full legal name as it appears on a government-issued ID;
• Date of birth (for age verification — you must be 21 or older);
• Nationality and country of residence;
• Email address and mobile phone number;
• Residential address, including barangay, city or municipality, and province.

2.2 Identity Verification Documents

• Copies of government-issued identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID);
• Proof of address documents (e.g., utility bills, bank statements);
• Selfie or facial verification image where required for enhanced identity checks;
• Source of funds documentation where required under AML regulations.

2.3 Financial Information

• GCash or PayMaya mobile wallet number;
• BPI, BDO, or Metrobank account details used for deposits or withdrawals;
• Transaction history, including deposit amounts, withdrawal requests, and payment method used;
• Account balance and bonus credit history.

2.4 Gaming Activity Data

• Game history, including games played, bet amounts, wins, and losses;
• Session duration and frequency of play;
• Bonus and promotion usage history;
• Responsible gaming tool settings, including deposit limits and self-exclusion status.

2.5 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Unique device identifiers;
• Log data, including pages visited, time spent, and actions taken on the platform.

2.6 Communications Data

• Records of communications with customer support, including chat transcripts and email correspondence;
• Survey responses and feedback submitted through the platform.

03 How We Collect Your Data

lucky.ph collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse the lucky.ph website or use the mobile app;
• From third parties — including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and regulatory databases where permitted by law;
• From public sources — including publicly available government databases and sanctions lists, where required for AML compliance.

04 How We Use Your Personal Data

lucky.ph uses your personal data for the following purposes:

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, lucky.ph processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfill our obligations under the Terms & Conditions, including account management and payment processing;
• Legal obligation — processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legislation;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

6.1 Third-Party Service Providers

lucky.ph shares personal data with carefully selected third-party service providers who assist in operating the platform. These include:

• Payment processors — GCash, PayMaya, BPI, BDO, and Metrobank — for processing deposits and withdrawals;
• Identity verification and KYC providers for age and identity checks;
• Fraud detection and AML screening services;
• Cloud hosting and data storage providers;
• Customer support platform providers;
• Game software providers and content licensors.

All third-party service providers are contractually required to process your data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable Philippine data protection laws.

6.2 Regulatory and Legal Disclosure

lucky.ph may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required by law or where we have a good-faith belief that disclosure is necessary to:

• Comply with a legal obligation, court order, or regulatory directive from PAGCOR or the NPC;
• Investigate or prevent fraud, money laundering, or other illegal activity;
• Protect the rights, property, or safety of lucky.ph, its players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of lucky.ph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

6.4 No Sale of Data

lucky.ph does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is an absolute commitment.

07 Data Retention

lucky.ph retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and identity data — retained for a minimum of five (5) years following account closure, as required by PAGCOR and AML regulations;
• Transaction and financial records — retained for a minimum of five (5) years in accordance with Philippine tax and AML laws;
• Gaming activity logs — retained for three (3) years following the date of the activity;
• Customer support communications — retained for two (2) years from the date of the last communication;
• Marketing consent records — retained for the duration of your account and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

08 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the lucky.ph website. They help us recognize your browser, remember your preferences, and understand how you interact with the platform.

8.2 Types of Cookies We Use

• Strictly necessary cookies — essential for the platform to function, including session management and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and login status to improve your experience.
• Analytics cookies — collect anonymized data about how players use the platform to help us improve performance and game offerings.
• Marketing cookies — used to deliver relevant promotional content. These are only placed with your consent.

8.3 Managing Cookies

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the lucky.ph platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate.

09 Your Data Subject Rights

• Right to be Informed — the right to know that your personal data is being collected and processed, and the purposes for which it is used;
• Right of Access — the right to request a copy of the personal data we hold about you;
• Right to Rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to Erasure — the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to Object — the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability — the right to receive your personal data in a structured, commonly used format and to transmit it to another controller;
• Right to Lodge a Complaint — the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

lucky.ph will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may request proof of identity before processing any request.

10 Children's Privacy

If you are a parent or guardian and believe that a minor has accessed lucky.ph or provided personal data to us, please contact our support team immediately. We take underage gambling prevention seriously and cooperate fully with parents, guardians, and regulatory authorities in such cases.

11 Data Security

lucky.ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Multi-factor authentication options for player accounts;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Continuous monitoring of platform infrastructure for suspicious activity;
• Secure data disposal procedures for data that has reached the end of its retention period.

While lucky.ph takes all reasonable steps to protect your personal data, no system is completely immune to security risks. You are responsible for maintaining the security of your account credentials and for notifying us immediately of any suspected unauthorized access.

12 International Data Transfers

lucky.ph primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software licensors with servers in other countries.

Where such transfers occur, lucky.ph ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that meet the standards required by the National Privacy Commission. We will not transfer your personal data to a country that does not provide an adequate level of data protection without your explicit consent or without appropriate contractual safeguards.

13 Marketing Communications

With your consent, lucky.ph may send you promotional emails, SMS notifications, or in-app messages about bonuses, new games, VIP offers, and platform updates. You can withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your communication preferences in your account settings;
• Contacting our customer support team.

Withdrawal of marketing consent will not affect the delivery of transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts. These are necessary for the operation of your account and cannot be opted out of while your account remains active.

14 Updates to This Privacy Policy

lucky.ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — lucky.ph will provide advance notice via email or a prominent notice on the platform prior to the changes taking effect. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how lucky.ph protects your personal information.

15 Contact Us & Data Protection Officer

lucky.ph has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

Data Protection Officer, lucky.ph

Email: privacy@luckyph.net

General Support: support@luckyph.net

FAQ & Help Center: Visit our FAQ page

We aim to respond to all privacy-related inquiries within fifteen (15) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

For responsible gaming concerns, including self-exclusion requests, please visit our Responsible Gaming page.