luckyplay.ph
Privacy Policy

Introduction & Scope

luckyplay.ph ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all users who access and interact with our online gaming platform at luckyplayph.club ("the Site"). This Privacy Policy has been prepared in accordance with the requirements of Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Republic of the Philippines, and its implementing rules and regulations, as enforced by the National Privacy Commission (NPC).

This Policy applies to all personal data collected by luckyplay.ph in connection with your use of the Site and associated services — including account registration, gameplay, deposits and withdrawals, customer support interactions, and participation in promotions. It applies regardless of the device or channel through which you access luckyplay.ph, including mobile browsers, web applications, and any future native applications.

By registering an account on luckyplay.ph or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. Where we rely on consent as a legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Personal Data We Collect

luckyplay.ph collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identification document;
• Date of birth (for age verification — must be 21 years or older);
• Residential address, including barangay, city/municipality, province, and postal code;
• Email address and mobile phone number registered to the account;
• Username and hashed password credential.

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., UMID, PhilSys ID, passport, driver's licence, SSS ID, GSIS ID, voter's ID, PRC ID);
• Proof of address documentation (e.g., utility bill, barangay certificate, bank statement);
• Selfie or liveness verification image where required by anti-money laundering procedures;
• Proof of ownership of the payment method used for deposits (e.g., screenshot of GCash account showing name match).

2.3 Financial & Transaction Data

• Payment method details (GCash mobile number, Maya account identifier, bank account number, or other payment channel reference — we do not store full card numbers);
• Deposit and withdrawal amounts, timestamps, and transaction reference numbers;
• Account balance history and bonus credit history.

2.4 Gaming Activity Data

• Game sessions, bet amounts, outcomes, and win/loss records across all games on luckyplay.ph;
• Bonus claims, wagering progress, and rewards points balance;
• Game preferences, search queries within the Platform, and game favorites.

2.5 Technical & Device Data

• IP address and approximate geographic location derived from it;
• Browser type and version, operating system, and device type;
• Session identifiers, cookies, and similar tracking technologies (see Section 6);
• Login timestamps, session duration, and pages visited within the Platform.

2.6 Communications Data

• Records of live chat, email, and support ticket communications you initiate with our support team;
• Survey responses, feedback submissions, and promotion participation records.

How luckyplay.ph Uses Your Personal Data

luckyplay.ph processes your personal data for the following specified, legitimate purposes:

• Account administration: creating and maintaining your luckyplay.ph account, verifying your identity, managing your login credentials, and communicating account-related updates;
• Service delivery: enabling access to the game library, processing deposits and withdrawals in PHP, crediting bonuses, and maintaining your rewards balance;
• Age and identity verification: confirming that all players accessing luckyplay.ph are 21 years of age or older, as required by PAGCOR regulations and our own Terms & Conditions;
• Payment processing: facilitating secure transactions via GCash, Maya, BPI, BDO, Metrobank, and other accepted Philippine payment channels;
• Legal and regulatory compliance: fulfilling obligations under Philippine anti-money laundering law (AMLA), PAGCOR regulations, and the Data Privacy Act — including record-keeping, suspicious transaction reporting, and audit responses;
• Fraud detection and security: identifying and investigating unusual account activity, attempted unauthorized access, multi-accounting, and other security incidents;
• Responsible gaming: monitoring gaming patterns to identify signs of problem gambling, enforcing self-exclusion requests, and delivering responsible gaming notifications;
• Customer support: responding to account queries, payment issues, and responsible gaming requests submitted to luckyplay.ph support;
• Platform improvement: analysing aggregated, anonymised usage data to improve the Platform's performance, game selection, and user experience;
• Marketing communications: sending you promotional offers and platform updates by email or SMS, where you have provided consent and have not subsequently opted out.

Legal Basis for Processing

luckyplay.ph processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent (Section 12(a) DPA): where you have provided explicit consent, including for marketing communications and optional analytics;
• Contractual necessity (Section 12(b) DPA): where processing is necessary to perform the service contract established when you register an account — this includes account creation, payment processing, and game delivery;
• Legal obligation (Section 12(c) DPA): where processing is required to comply with applicable Philippine law, including anti-money laundering obligations, PAGCOR requirements, and tax regulations;
• Legitimate interests (Section 12(f) DPA): where processing is necessary for the legitimate interests of luckyplay.ph, including fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement, provided those interests are not overridden by your fundamental rights.

Data Sharing & Third-Party Disclosure

luckyplay.ph does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing purposes. We may share your data with the following categories of parties solely for the purposes described in this Policy:

• Payment service providers: GCash (GXI), Voyager Innovations (Maya/PayMaya), BancNet, BPI, BDO, Metrobank, and other Philippine payment processors necessary to execute your deposits and withdrawals. These providers receive only the data necessary to process your specific transaction;
• KYC and identity verification partners: third-party identity verification services engaged to assist with document authentication and age verification, acting as data processors under contract with luckyplay.ph;
• Game content providers: licensed game studios (e.g., slot providers, live casino operators) receive anonymised player session data for game performance and fairness audit purposes only — they do not receive your personal identity data;
• Technology and infrastructure providers: cloud hosting, security monitoring, and customer support platform providers who process data on our behalf under binding data processing agreements;
• Regulatory and law enforcement authorities: the National Privacy Commission (NPC), PAGCOR, the Anti-Money Laundering Council (AMLC), the Philippine National Police (PNP), or any other competent Philippine authority when required by law, court order, or regulatory directive;
• Professional advisors: lawyers, auditors, and accountants who are bound by professional confidentiality obligations, where necessary for legal or financial compliance purposes.

All third parties who process personal data on behalf of luckyplay.ph are bound by data processing agreements that prohibit them from using your data for any purpose other than that for which it was shared, and that require them to maintain appropriate security standards.

Cookies & Tracking Technologies

luckyplay.ph uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the Platform and improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: required for the Platform to function — including session authentication, security tokens, and load-balancing. These cannot be disabled without preventing access to the Platform;
• Functional cookies: remember your preferences such as language settings, display preferences, and game lobby filters across sessions;
• Performance and analytics cookies: collect anonymised data about how pages are used and how the Platform performs, allowing us to improve the service. This data is aggregated and not linked to individual identities;
• Security cookies: used for fraud detection, device fingerprinting for login security, and CSRF protection.

luckyplay.ph does not use third-party advertising cookies or allow external ad networks to place tracking technologies on the Platform. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform.

Data Retention

luckyplay.ph retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. Data subject to an active legal hold or regulatory investigation will be retained until the hold or investigation is resolved.

Security Measures

luckyplay.ph implements a layered security framework to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Encryption in transit: all data transmitted between your device and luckyplay.ph servers is encrypted using TLS 1.2 or higher. HTTPS is enforced site-wide with strict transport security headers;
• Encryption at rest: sensitive data fields — including KYC documents, payment identifiers, and password hashes — are encrypted at rest using AES-256 or equivalent standards;
• Password hashing: passwords are never stored in plaintext. They are processed using a salted cryptographic hashing algorithm before storage, meaning even internal systems cannot read your password;
• Access controls: access to personal data within the luckyplay.ph organisation is restricted to employees and contractors with a documented business need. Access logs are maintained and reviewed;
• Two-factor authentication: luckyplay.ph offers and strongly recommends two-factor authentication (2FA) for all player accounts. Internal administrative access to production data systems requires 2FA as a mandatory control;
• Penetration testing and vulnerability management: the Platform undergoes regular security assessments conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited;
• Incident response: luckyplay.ph maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission as required by law.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights in relation to your personal data held by luckyplay.ph. To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 14. We will respond to all valid requests within thirty (30) calendar days.

• Right to be informed (Section 16(a) DPA): the right to know what personal data is being collected, the purpose of collection, and how it will be used — addressed by this Privacy Policy;
• Right to access (Section 16(b) DPA): the right to request a copy of the personal data luckyplay.ph holds about you, including information about how it has been processed and with whom it has been shared;
• Right to correction (Section 16(c) DPA): the right to request correction of inaccurate, incomplete, or outdated personal data. Minor details such as contact number and address can be updated directly in your account settings;
• Right to erasure or blocking (Section 16(d) DPA): the right to request deletion or blocking of your personal data where it is no longer necessary for its original purpose, where you withdraw consent (and there is no other legal basis), or where it is being processed unlawfully — subject to overriding legal retention obligations;
• Right to object (Section 16(f) DPA): the right to object to processing of your personal data on the basis of legitimate interests, including profiling and direct marketing. If you object to marketing processing, we will stop that processing immediately;
• Right to data portability (Section 18 DPA): the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible;
• Right to damages (Section 16(e) DPA): the right to claim compensation for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of personal data, consistent with applicable law;
• Right to complain: the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your personal data rights have been violated.

Children's Privacy & Age Restriction

The luckyplay.ph Platform is strictly limited to persons who are 21 years of age or older, in accordance with applicable Philippine gaming regulations. luckyplay.ph does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the associated account, delete the data without undue delay, and refund any real-money balance in accordance with applicable regulations.

If you are a parent or guardian and believe that your child has accessed luckyplay.ph and provided personal data without your knowledge, please contact us immediately at the details in Section 14. We take underage access extremely seriously and will act promptly on any credible report.

Third-Party Links

The luckyplay.ph Platform may, from time to time, contain references or navigational elements that direct you to other websites or services operated by third parties. This Privacy Policy applies solely to the luckyplay.ph Platform and does not cover the data practices of any third-party site.

We are not responsible for the privacy practices, content, or security of any third-party website. We encourage you to review the privacy policies of any external sites you visit. The presence of a reference to a third-party service on luckyplay.ph does not constitute an endorsement of that service's privacy or security practices.

International Data Transfers

luckyplay.ph primarily stores and processes personal data within the Republic of the Philippines. Where engagement of third-party technology or game content providers requires transfer of certain data categories to servers or processors located outside the Philippines, luckyplay.ph ensures that such transfers are conducted under appropriate safeguards in compliance with the Data Privacy Act of 2012 and relevant NPC advisories.

Safeguards employed for international transfers include:

• Contractual data processing agreements that impose obligations equivalent to Philippine data protection standards on the receiving party;
• Transfer only to jurisdictions that the NPC has determined to provide an adequate level of data protection, or to processors who have implemented binding corporate rules or equivalent mechanisms;
• Minimisation of the data transferred internationally — only the data fields necessary for the specific processing purpose are transferred.

Updates to This Privacy Policy

luckyplay.ph reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable law. Material changes will be communicated to registered users via the email address on file and by a prominent notice on the Platform at least fourteen (14) days before the revised Policy takes effect.

The effective date at the top of this Policy reflects the date of the most recent revision. By continuing to use luckyplay.ph after a revised Privacy Policy takes effect, you confirm your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may request account closure.

Contact & Data Protection Officer

luckyplay.ph has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing compliance with this Policy and with Philippine data protection law.

To exercise your data subject rights, raise a privacy concern, or request a copy of this Policy in an alternative format, please contact:

If you are not satisfied with the response provided by luckyplay.ph, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC's contact information and complaint procedures are published on their official website.