lukywin Privacy Policy

1. Introduction

1.1 lukywin is committed to protecting the privacy and personal data of all players who use our online casino and sports betting platform. We understand that trust is the foundation of a good gaming relationship, and we take our data protection obligations seriously.

1.2 This Policy applies to all personal data collected through the lukywin website, mobile platform, customer support channels, and any other touchpoint through which you interact with lukywin. It covers data collected from players based in the Philippines and is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

1.3 Please read this Policy carefully. If you have any questions about how lukywin handles your personal data, you may contact our Data Protection Officer using the details provided in Section 14 of this Policy.

2. Data We Collect

2.1 Registration Data. When you create a lukywin account, we collect: full name, date of birth, email address, mobile number, residential address, and username. This information is required to verify your identity, confirm your eligibility (21+ age requirement), and set up your account.

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering (AML) regulations and to verify your identity before processing withdrawals, lukywin may collect copies of government-issued identification documents (e.g., Philippine passport, driver's license, SSS/UMID card), proof of address, and proof of payment method ownership.

2.3 Financial Data. We collect information about your deposits, withdrawals, and transaction history on the lukywin platform. We do not store full GCash PINs, PayMaya credentials, or complete card numbers. Payment processing is handled by certified third-party payment gateways.

2.4 Gaming Activity Data. We collect records of your gaming sessions, including games played, bets placed, wins and losses, bonus usage, and session duration. This data is used to provide our Services, detect fraud, and support responsible gaming monitoring.

2.5 Technical Data. When you access the lukywin platform, we automatically collect: IP address, device type and operating system, browser type and version, referring URL, pages visited, and session timestamps. This data helps us maintain platform security and improve user experience.

2.6 Communications Data. If you contact lukywin customer support, we retain records of your communications, including chat transcripts, emails, and support ticket history, to resolve your queries and improve our service quality.

2.7 Marketing Preferences. If you opt in to receive promotional communications from lukywin, we record your marketing preferences and the communications sent to you.

3. How We Use Your Data

3.1 lukywin uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your lukywin account, including processing deposits and withdrawals;
• Identity Verification: To verify your age (21+), identity, and eligibility to use the lukywin platform in compliance with Philippine gaming regulations;
• Service Delivery: To provide access to our games, sports betting, live casino, bingo, and other features of the lukywin platform;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to enforce responsible gaming tools such as deposit limits and self-exclusion;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Legal Compliance: To comply with applicable Philippine laws, regulations, and regulatory requirements, including PAGCOR guidelines and AML obligations;
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features and performance of the lukywin platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications.

4. Legal Basis for Processing

4.1 lukywin processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the lukywin Services as described in our Terms & Conditions);
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML requirements and PAGCOR regulatory obligations;
• Legitimate Interests: Processing is necessary for lukywin's legitimate interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights;
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time.

5. Data Sharing & Disclosure

5.1 lukywin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard payment gateways, for the purpose of processing your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist us in verifying player identities;
• Game Providers: Software providers whose games are hosted on the lukywin platform, to the extent necessary to deliver gaming services;
• Regulatory Authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law or regulatory obligation;
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by court order, legal process, or to prevent imminent harm;
• IT & Security Providers: Cloud hosting, cybersecurity, and fraud detection service providers who process data on our behalf under strict data processing agreements.

5.2 All third-party service providers engaged by lukywin are required to handle your personal data in accordance with applicable data protection laws and lukywin's data security standards.

6. Cookies & Tracking Technologies

6.1 lukywin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how our platform is used.

6.2 Types of Cookies We Use:

• Essential Cookies: Required for the platform to function correctly, including session management and security features. These cannot be disabled.
• Performance Cookies: Collect anonymized data about how players use the lukywin platform, helping us identify areas for improvement.
• Functional Cookies: Remember your preferences, such as language settings and display options , to provide a more personalized experience.
• Marketing Cookies: Used only where you have consented, to deliver relevant promotional content within the lukywin platform.

6.3 You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the lukywin platform. For instructions on managing cookies in your browser, refer to your browser's help documentation.

7. Data Retention

7.1 lukywin retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specifically:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Support Communications: Retained for two (2) years from the date of the last interaction, unless a longer retention period is required for dispute resolution;
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications.

7.2 When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, lukywin will securely delete or anonymize the data.

8. Data Security

8.1 lukywin implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive personal and financial data;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of our platform infrastructure;
• Multi-factor authentication for administrative access to systems containing personal data;
• Continuous monitoring for suspicious activity and potential data breaches.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lukywin will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Philippine Data Privacy Act and its Implementing Rules.

9. Your Rights

9.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by lukywin:

• Right to Be Informed: The right to be informed about how your personal data is collected and processed, as described in this Policy;
• Right of Access: The right to request a copy of the personal data lukywin holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

9.2 To exercise any of these rights, please contact lukywin's Data Protection Officer using the details in Section 14. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law.

10. Children's Privacy

10.1 The lukywin platform is strictly intended for persons aged 21 years and above. lukywin does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

10.2 If you believe that a minor has registered on the lukywin platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

11. International Data Transfers

11.1 lukywin primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, cloud infrastructure providers or game software suppliers), lukywin ensures that such transfers are conducted in accordance with the requirements of the Philippine Data Privacy Act, including the implementation of appropriate safeguards such as data processing agreements and standard contractual clauses.

11.2 By using the lukywin platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

12. Third-Party Services

12.1 The lukywin platform may integrate with third-party services such as payment gateways, game providers, and analytics tools. These third parties operate under their own privacy policies and data protection practices. lukywin is not responsible for the privacy practices of third-party services.

12.2 lukywin selects third-party service providers carefully and requires them to maintain data security standards consistent with our own. All third-party processors engaged by lukywin are bound by data processing agreements that restrict their use of your personal data to the specific purposes for which it was shared.

13. Changes to This Policy

13.1 lukywin reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify registered players by email or through a prominent notice on the lukywin platform, and update the "Last Updated" date at the top of this page.

13.2 Your continued use of the lukywin platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

14. Contact & Data Protection Officer

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact lukywin's Data Protection Officer:

14.2 If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.