luckyplay Privacy Policy

This Privacy Policy ("Policy") describes how luckyplay ("luckyplay", "we", "us", "our") collects, uses, stores, shares, and protects personal information about players, visitors, and other individuals ("you", "your") who interact with the luckyplay platform at luckyplay.vu. This Policy forms part of your agreement with luckyplay and should be read in conjunction with our Terms & Conditions.

By registering an account, depositing funds, or otherwise using luckyplay, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the platform immediately.

1. Introduction

1.1 luckyplay is committed to handling personal data responsibly and in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC").

1.2 This Policy applies to all personal data collected through the luckyplay website, mobile interface, customer support channels, payment processing integrations, and any other touchpoints through which you interact with luckyplay.

1.3 luckyplay takes the security and confidentiality of personal data seriously. Our platform serves players across the Philippines — from Metro Manila and Cebu City to Davao and beyond — and we recognise that the trust of our player community is foundational to everything we do.

2. Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012 and other applicable data protection legislation, luckyplay acts as the personal information controller in respect of player data collected through the luckyplay platform.

2.2 Questions, requests, or complaints regarding this Policy or our data practices may be directed to our Data Protection Officer via the customer support contact details listed in Section 15 of this Policy.

3. Information We Collect

luckyplay collects personal information in the following categories:

3.1 Registration Data. When you create a luckyplay account, we collect your legal full name, date of birth, email address, Philippine mobile number, and any username you choose. This information is required to establish your account, verify your age (21+ requirement), and comply with KYC obligations.

3.2 Identity Verification Data. To comply with anti-money laundering ("AML") regulations and PAGCOR-aligned KYC requirements, luckyplay collects copies of government-issued identification documents such as passports, driver's licences, UMID cards, SSS IDs, and similar valid Philippine identification. We may also request proof of address and proof of payment method.

3.3 Financial Data. luckyplay collects and processes transaction data including deposit and withdrawal amounts, GCash or PayMaya account references, bank account details (BPI, BDO, Metrobank), and payment history. We do not store full card numbers or other sensitive payment credentials on our servers — payment processing is handled by certified third-party payment service providers.

3.4 Technical Data. When you access luckyplay, we automatically collect technical data including your IP address, device type, browser type and version, operating system, session timestamps, and page interaction data. This data is used for security monitoring, fraud detection, and platform optimisation.

3.5 Gaming Activity Data. luckyplay records all gaming activity associated with your account, including game sessions, bet amounts, game outcomes, bonus usage, and responsible gaming tool activations. This data is necessary to operate the platform, resolve disputes, and comply with regulatory record-keeping obligations.

3.6 Communications Data. When you contact luckyplay's customer support via live chat, email, or any other channel, we retain records of those communications including timestamps, agent responses, and any personal information you voluntarily provide during the interaction.

3.7 Marketing Preferences. With your consent, luckyplay may collect your communication preferences for promotional purposes, including email and SMS marketing opt-in status.

4. How We Use Your Data

luckyplay uses the personal data it collects for the following purposes:

• To create, verify, and maintain your luckyplay player account;
• To process deposits, withdrawals, and other financial transactions;
• To verify your identity and age in compliance with KYC and AML obligations;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities;
• To provide customer support and resolve account queries or disputes;
• To administer bonuses, promotions, and loyalty rewards;
• To operate and improve the technical performance of the luckyplay platform;
• To send transactional communications including account confirmations, deposit receipts, and security alerts;
• To send marketing communications where you have provided consent, which you may withdraw at any time;
• To comply with applicable Philippine law, PAGCOR regulations, and any other legal obligation to which luckyplay is subject;
• To support responsible gaming objectives, including operating deposit limits, self-exclusion, and player protection tools.

5. Legal Basis for Processing

5.1 Contractual necessity. Processing of account registration data, payment data, and gaming activity data is necessary to perform our contract with you as a registered luckyplay player.

5.2 Legal obligation. Processing of KYC and AML data is required by applicable Philippine law, including the Anti-Money Laundering Act ("AMLA") and PAGCOR regulatory obligations.

5.3 Legitimate interests. Processing of technical and security data is based on luckyplay's legitimate interest in maintaining a secure, fair, and well-functioning platform for all Filipino players.

5.4 Consent. Processing for marketing communications is based on your explicit consent, which can be withdrawn at any time by contacting our support team or updating your account preferences.

6. Data Sharing and Disclosure

6.1 luckyplay does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances.

6.2 luckyplay may share your personal data with the following categories of third parties in the circumstances described:

• Payment service providers (including GCash, PayMaya, and banking partners) for the sole purpose of processing your deposits and withdrawals;
• Game software providers to the extent necessary to resolve technical disputes or audit game outcomes;
• Identity verification services used to support KYC compliance;
• Regulatory authorities including PAGCOR, the Anti-Money Laundering Council ("AMLC"), and the NPC, where required by law or regulatory mandate;
• Law enforcement agencies where required by a valid legal process, court order, or to prevent imminent harm;
• Professional advisors including legal counsel, auditors, and accountants, bound by confidentiality obligations.

6.3 All third parties with whom luckyplay shares data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

7. International Data Transfers

7.1 luckyplay's primary data processing infrastructure is located in servers that may be situated outside the Philippines. Where personal data is transferred internationally, luckyplay ensures that appropriate safeguards are in place consistent with the requirements of the Philippine Data Privacy Act of 2012.

7.2 By using luckyplay, you acknowledge that your data may be transferred to and processed in jurisdictions outside the Philippines. luckyplay will only make such transfers to countries that provide an adequate level of protection or where appropriate contractual safeguards are in place.

8. Data Retention

8.1 luckyplay retains personal data for as long as your account is active and for such additional period as is required by applicable law and regulatory obligations. In general:

• Account and identity data is retained for a minimum of five (5) years from the date of account closure, as required by AML and KYC regulations;
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications are retained for three (3) years;
• Marketing preference data is retained until you withdraw consent or for three (3) years of inactivity, whichever is earlier.

8.2 After the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

9. Security Measures

9.1 luckyplay implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and luckyplay's servers;
• AES-256 encryption for sensitive data at rest;
• Bcrypt hashing for stored passwords — luckyplay never stores plaintext passwords;
• Two-factor authentication (2FA) available for all player accounts;
• Automated intrusion detection and real-time security monitoring;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular independent security audits of the luckyplay platform.

9.2 Despite these measures, no online platform can guarantee absolute security. If you become aware of any security vulnerability or unauthorised access to your luckyplay account, please contact our support team immediately.

10. Cookies and Tracking Technologies

10.1 luckyplay uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us recognise you across sessions, maintain your login state, and improve platform performance.

10.2 luckyplay uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These cannot be disabled without breaking core functionality such as login sessions and game loading.
• Performance cookies: Used to collect anonymous data about how players use luckyplay, including which games are most visited and where technical errors occur. This data is used exclusively to improve the platform.
• Preference cookies: Used to remember your display preferences and language settings across sessions.

10.3 luckyplay does not use third-party advertising cookies or cross-site tracking technologies. You may configure your browser to refuse all cookies, but note that doing so may affect your ability to use certain features of luckyplay.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by luckyplay:

• Right to be informed: You have the right to be notified of how your personal data is collected and processed.
• Right of access: You may request a copy of the personal data luckyplay holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to object: You may object to certain forms of processing, including direct marketing.
• Right to data portability: You may request a copy of your data in a commonly used electronic format.
• Right to damages: You have the right to claim compensation for any damages caused by inaccurate, incomplete, or outdated personal data, or processing in violation of applicable law.

To exercise any of these rights, please contact our Data Protection Officer via the customer support channels described in Section 15. luckyplay will respond to verified requests within thirty (30) days of receipt.

12. Children and Minors

12.1 luckyplay does not knowingly collect personal data from individuals under the age of twenty-one (21). All registration processes include age verification steps, and accounts created by individuals who are found to be below the minimum age requirement will be immediately closed.

12.2 If you believe that a minor has registered or is using a luckyplay account, please contact our support team immediately. We take underage gambling prevention very seriously as part of our responsible gaming commitments.

13. Third-Party Links

13.1 The luckyplay platform may contain links to third-party websites or services (for example, payment provider portals). luckyplay is not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policies of any third-party services you access from luckyplay.

14. Changes to This Policy

14.1 luckyplay reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or via a prominent notice on the luckyplay platform at least seven (7) days before the revised Policy takes effect.

14.2 Your continued use of luckyplay following notification of any changes to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must close your account and cease using the platform.

14.3 The "Last updated" date at the top of this page reflects when this Policy was most recently revised. Archived versions of this Policy are available upon request from our customer support team.

15. Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to luckyplay's data practices generally, please contact our customer support team via the 24/7 live chat available on the luckyplay platform.

15.2 Our support email address is displayed as plain text in the footer of this website. Please do not send sensitive personal data or legal notices by email without first confirming the appropriate channel with our support team.

15.3 Registered players who wish to file a formal data privacy complaint with a regulatory authority may do so with the Philippine National Privacy Commission (NPC). luckyplay will cooperate fully with any NPC investigation or inquiry.

This Privacy Policy was last reviewed and updated in June 2026. luckyplay reserves the right to update this Policy at any time in accordance with Section 14.