Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how luckygameph ("we," "us," "our," or "the Company") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "User," or "Player") who access or use the luckygameph online gaming platform available at luckygameph.one ("the Platform").

luckygameph takes data privacy seriously. We understand that Filipino players entrust us with sensitive personal and financial information, and we are committed to handling that information responsibly, transparently, and in full compliance with applicable Philippine data protection law. This Policy applies to all personal data collected through the Platform, our customer support channels, and any other interaction you have with luckygameph.

Please read this Policy carefully. If you do not agree with the practices described herein, you should not use the luckygameph Platform. This Policy should be read together with our Terms & Conditions, which govern your use of the Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, luckygameph is the personal information controller responsible for the personal data collected through the Platform. Our designated Data Protection Officer ("DPO") can be contacted at the details provided in Section 14 of this Policy.

Where luckygameph engages third-party service providers to process personal data on its behalf (for example, payment processors, game providers, or identity verification services), those parties act as personal information processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.

3. Personal Data We Collect

luckygameph collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (used to verify the 21+ age requirement);
• Mobile number and email address;
• Residential address in the Philippines;
• Government-issued ID type and number (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, voter's ID).

3.2 Financial Data

• GCash or PayMaya (Maya) account number linked to your luckygameph account;
• Bank account details (bank name, account number) for bank transfer transactions;
• Debit card details (card number masked, expiry date) where applicable;
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers;
• Source-of-funds documentation submitted during KYC verification.

3.3 Gaming & Activity Data

• Game history, bet amounts, win/loss records, and session durations;
• Bonus claims, wagering activity, and promotional participation records;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, session reminders);
• Customer support interactions, including chat transcripts and email correspondence.

3.4 Technical & Device Data

• IP address and approximate geolocation (used to verify Philippine residency and detect fraud);
• Device type, operating system, browser type and version;
• Unique device identifiers;
• Login timestamps and session activity logs;
• Cookie and tracking data as described in Section 10.

4. How We Collect Your Data

luckygameph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from PAGCOR-approved KYC service providers; fraud detection signals from payment processors; and publicly available information used to verify your identity or comply with anti-money laundering obligations.

5. How We Use Your Personal Data

luckygameph uses your personal data for the following purposes:

luckygameph does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law (e.g., automated fraud screening that may temporarily restrict account access pending manual review).

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, luckygameph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our interests do not override your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

luckygameph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

7.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under strict contractual obligations, including: payment processors (GCash, Maya, Philippine banks), KYC and identity verification providers, game software providers, cloud hosting and infrastructure providers, and customer support platform providers. All processors are required to implement appropriate security measures and may not use your data for any purpose other than providing services to luckygameph.

7.2 Regulatory and Legal Disclosure

luckygameph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts where required by law, regulation, court order, or legal process. We will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of luckygameph's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer and any material changes to this Policy that result from it.

7.4 Cross-Border Transfers

Some of luckygameph's service providers may be located outside the Philippines. Where personal data is transferred internationally, luckygameph ensures that appropriate safeguards are in place in accordance with NPC guidelines, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under Philippine law.

8. Data Retention

luckygameph retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter;
• Technical and device logs: Retained for ninety (90) days for security monitoring purposes, unless required for longer in connection with an active investigation.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, luckygameph will securely delete or anonymize the data in accordance with NPC-approved disposal methods.

9. Data Security

luckygameph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the luckygameph Platform;
• Encryption of sensitive data at rest, including financial account details and government ID numbers;
• Role-based access controls ensuring that only authorized luckygameph personnel can access personal data, and only to the extent necessary for their job function;
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Staff training on data privacy obligations and secure data handling practices.

While luckygameph takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your luckygameph login credentials and for notifying us immediately if you suspect unauthorized access to your account.

10. Cookies & Tracking Technologies

luckygameph uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The categories of cookies we use are:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. No consent is required for strictly necessary cookies.

10.2 Functional Cookies

These cookies remember your preferences such as language settings and responsible gaming limits you have configured. Disabling them may affect your experience on the Platform.

10.3 Analytics Cookies

With your consent, luckygameph uses analytics cookies to understand how players interact with the Platform — for example, which games are most popular and where users encounter difficulties. This data is aggregated and anonymized where possible. You may opt out of analytics cookies at any time through your account privacy settings.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit the functionality of the luckygameph Platform. For more information on managing cookies in popular Philippine mobile browsers, refer to your browser's help documentation.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by luckygameph:

• Right to be informed: You have the right to know what personal data luckygameph collects about you and how it is used — which is the purpose of this Policy;
• Right of access: You may request a copy of the personal data luckygameph holds about you, including your account data, transaction history, and KYC records;
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For account details, you can update most information directly through your account dashboard;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to luckygameph's legal retention obligations under PAGCOR regulations and the Anti-Money Laundering Act;
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to luckygameph's overriding legal obligations;
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe luckygameph has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. luckygameph will respond to verified requests within fifteen (15) business days. We may require you to verify your identity before processing a request to protect against unauthorized access to your data.

12. Minors

If you are a parent or guardian and believe that a minor in your care has accessed luckygameph or provided personal data to us, please contact our support team immediately at [email protected] so we can take prompt action.

13. Changes to This Policy

luckygameph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the luckygameph Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how luckygameph protects your personal data.

Previous versions of this Policy are available upon request by contacting our Data Protection Officer.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or luckygameph's data processing practices, please contact our Data Protection Officer:

You also have the right to escalate unresolved privacy concerns to the National Privacy Commission of the Philippines. The NPC can be reached through their official government website and handles complaints from Filipino data subjects regarding violations of the Data Privacy Act of 2012.