luky88 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how luky88 ("we," "us," "our," "Company") collects, uses, discloses, stores, and protects personal information obtained from users ("you," "your," "User," "Player") of the luky88 website located at https://luky88.lat (the "Platform") and all associated gaming services, mobile applications, customer support channels, and related services (collectively, the "Services").

luky88 is committed to protecting your privacy and complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its implementing rules and regulations, and all applicable Philippine data protection laws. This Policy applies to all personal information we collect, regardless of the channel or method of collection.

By creating an account, accessing the Platform, or using any Services, you acknowledge that you have read, understood, and consent to the collection, use, disclosure, and processing of your personal information as described in this Privacy Policy. If you do not agree with any provision of this Policy, you must immediately cease using all Services and refrain from providing any personal information.

2. Data Controller and Contact Information

luky88 is the data controller responsible for your personal information. For questions, concerns, or requests regarding this Privacy Policy or our data processing practices, you may contact our Data Protection Officer:

• Email: [email protected]
• Customer Support: Available 24/7 via live chat on the Platform
• Website: https://luky88.lat

We will respond to all privacy inquiries within fifteen (15) business days or as required by applicable law.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account, use our Services, or communicate with us, we collect personal information you voluntarily provide, including:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., passport, driver's license, national ID, SSS number).
• Contact Information: Email address, mobile phone number, residential address, postal code.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers.
• Financial Information: Payment method details (GCash account, bank account number, PayMaya account), transaction history, deposit and withdrawal records, billing address.
• Verification Documents: Copies of government-issued identification, proof of address (utility bills, bank statements), selfie photos for identity verification.
• Communication Data: Customer support inquiries, chat transcripts, emails, feedback, survey responses.
• Marketing Preferences: Promotional communication opt-in status, preferred communication channels.

3.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain technical and usage information through cookies, web beacons, and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, advertising ID), mobile network information.
• Connection Data: IP address, internet service provider, time zone, geographic location (country, city), connection type.
• Usage Data: Pages visited, features used, games played, bet amounts, win/loss records, session duration, referring/exit pages, clickstream data.
• Cookies and Similar Technologies: Session cookies, persistent cookies, preference cookies, analytics cookies, advertising cookies. See Section 10 for detailed cookie information.

3.3 Information from Third Parties

We may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment Providers: GCash, PayMaya, banks, and other payment processors provide transaction confirmation, payment method verification, and fraud detection signals.
• Identity Verification Services: Third-party verification providers confirm identity documents, detect fraudulent documents, and perform age verification checks.
• Fraud Prevention Services: Data from fraud databases, credit bureaus, and security services to identify high-risk users and prevent fraudulent activity.
• Marketing Partners: Information about how you found our Platform, referral sources, and marketing campaign performance (no personally identifiable information is shared without your consent).

4. How We Use Your Information

luky88 processes your personal information for the following lawful purposes under the Data Privacy Act:

4.1 Service Provision and Account Management

• Create, maintain, and manage your player account.
• Verify your identity, age, and eligibility to use gaming services.
• Process deposits, withdrawals, and other financial transactions.
• Provide access to games, features, and promotional offers.
• Maintain game history, transaction records, and account statements.
• Communicate with you regarding your account, transactions, and service updates.

4.2 Legal and Regulatory Compliance

• Comply with Philippine gaming regulations and licensing requirements.
• Fulfill anti-money laundering (AML) and know-your-customer (KYC) obligations.
• Respond to lawful requests from law enforcement, regulatory authorities, and courts.
• Maintain records required by applicable laws and regulations.
• Report suspicious transactions or activities as required by law.

4.3 Fraud Prevention and Security

• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activities.
• Monitor for multiple accounts, bonus abuse, and terms violations.
• Protect the security and integrity of the Platform and Services.
• Prevent money laundering, terrorist financing, and other financial crimes.
• Enforce our Terms and Conditions and other policies.
• Protect the rights, property, and safety of luky88, our users, and the public.

4.4 Service Improvement and Analytics

• Analyze usage patterns, preferences, and behaviors to improve Services.
• Conduct research and development for new features and games.
• Optimize Platform performance, user experience, and technical infrastructure.
• Generate aggregated, anonymized statistics and reports for business intelligence.
• Test new features, layouts, and functionalities.

4.5 Marketing and Promotional Communications (With Consent)

• Send promotional offers, bonuses, and marketing communications via email or SMS (only if you have opted in).
• Personalize content, offers, and recommendations based on your preferences and activity.
• Conduct surveys, contests, and promotional campaigns.
• Inform you about new games, features, and services that may interest you.

4.6 Customer Support

• Respond to inquiries, questions, and support requests.
• Investigate and resolve complaints and disputes.
• Provide assistance with account issues, payment problems, and technical difficulties.
• Follow up on support interactions to ensure satisfactory resolution.

5. Disclosure and Sharing of Information

luky88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may disclose your information to the following categories of recipients for the purposes described in this Policy:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: GCash, PayMaya, banks, and payment gateways to process transactions.
• Identity Verification Providers: KYC verification services, document validation, and fraud detection.
• Cloud Hosting and IT Services: Server hosting, data storage, technical support, and infrastructure management.
• Customer Support Services: Live chat platforms, email services, and helpdesk software.
• Analytics and Marketing Tools: Website analytics, performance monitoring, email marketing platforms (only with your consent).

All service providers are contractually bound to process your information only for the purposes we specify, maintain confidentiality, and comply with data protection standards equivalent to those in this Policy.

5.2 Legal and Regulatory Authorities

We may disclose personal information to government authorities, regulatory bodies, law enforcement agencies, and courts when:

• Required or permitted by applicable law, regulation, or legal process.
• Necessary to comply with valid subpoenas, court orders, or government requests.
• Required to report suspicious transactions under anti-money laundering laws.
• Necessary to respond to claims of illegal activity or policy violations.
• Required to protect the rights, property, or safety of luky88, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction, your personal information may be transferred to the acquiring or successor entity, subject to the same privacy protections outlined in this Policy.

5.4 With Your Consent

We may share your information with third parties when you have provided explicit consent for such disclosure, such as participating in partner promotions, third-party surveys, or integrated services.

6. Data Retention

luky88 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your account's active status and for a period of time after account closure as required by law.
• Transaction Records: Financial transaction data, game history, and audit logs are retained for a minimum of five (5) years or as required by gaming regulations and tax laws.
• Identity Verification Documents: KYC documents are retained for the duration of the account relationship and for five (5) years following account closure to comply with anti-money laundering regulations.
• Marketing Communications: Marketing data is retained until you withdraw consent or request deletion, or for a maximum of three (3) years of inactivity.
• Cookies and Technical Data: Cookie data is retained according to the cookie-specific retention periods outlined in Section 10.

After the applicable retention period, personal information is securely deleted or anonymized in accordance with industry best practices. You may request early deletion of certain data subject to legal and regulatory requirements (see Section 8 for data subject rights).

7. Data Security

luky88 implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, destruction, loss, or misuse. Our security practices include:

7.1 Technical Security Measures

• Encryption: All data transmission is protected using 256-bit SSL/TLS encryption. Sensitive data at rest, including passwords and financial information, is encrypted using industry-standard algorithms.
• Secure Servers: Personal information is stored on secure servers located in certified data centers with 24/7 monitoring, redundancy, and disaster recovery capabilities.
• Access Controls: Strict access controls limit employee and contractor access to personal information based on role necessity and the principle of least privilege.
• Authentication: Multi-factor authentication (MFA) is required for administrative access to systems containing personal information.
• Firewalls and Intrusion Detection: Network security includes firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
• Regular Security Audits: We conduct regular vulnerability assessments, penetration testing, and third-party security audits.

7.2 Organizational Security Measures

• Employee Training: All employees and contractors receive mandatory data protection and security awareness training.
• Confidentiality Agreements: Employees, contractors, and service providers sign confidentiality and data protection agreements.
• Incident Response: We maintain a data breach response plan to quickly identify, contain, and remediate security incidents.
• Background Checks: Employees with access to personal information undergo background verification.

7.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your information:

• Choose a strong, unique password and do not share it with anyone.
• Enable two-factor authentication (2FA) when available.
• Log out after each session, especially on shared or public devices.
• Keep your contact information current to receive security notifications.
• Report suspicious activity or unauthorized access immediately.
• Be cautious of phishing emails or messages claiming to be from luky88.

8. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information. luky88 is committed to facilitating the exercise of these rights:

8.1 Right to Be Informed

You have the right to be informed about the collection, use, and processing of your personal information. This Privacy Policy serves as our primary means of providing such information.

8.2 Right to Access

You have the right to obtain confirmation of whether we are processing your personal information and to access such information. You may request copies of your personal data by contacting our Data Protection Officer.

8.3 Right to Rectification

You have the right to correct inaccurate, incomplete, or outdated personal information. You can update most information directly through your account settings or by contacting customer support.

8.4 Right to Erasure or Blocking

You have the right to request deletion or blocking of your personal information when:

• The information is no longer necessary for the purposes for which it was collected.
• You withdraw consent on which processing is based (where applicable).
• You object to processing and there are no overriding legitimate grounds.
• The information was unlawfully processed.
• Deletion is required to comply with a legal obligation.

Please note that deletion requests may be subject to legal retention requirements, such as financial transaction records required by tax and gaming regulations.

8.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications through your account settings, by clicking "unsubscribe" in emails, or by contacting customer support.

8.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller when technically feasible.

8.7 Right to File a Complaint

If you believe your data protection rights have been violated, you have the right to file a complaint with:

• luky88 Data Protection Officer: [email protected]
• National Privacy Commission of the Philippines: www.privacy.gov.ph

8.8 Exercising Your Rights

To exercise any of the above rights, submit a written request to [email protected] with the following information:

• Your full name and account username (if applicable).
• A clear description of the right you wish to exercise.
• Sufficient information to verify your identity (we cannot process requests from unverified individuals).
• Preferred method of response (email, mail, or through your account).

We will respond to your request within fifteen (15) business days or as required by law. In some cases, we may need additional time to process complex requests; we will inform you of any delays and expected timelines.

9. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries outside the Philippines where our service providers, hosting facilities, or business partners are located. These countries may have data protection laws different from Philippine law.

When we transfer personal information internationally, we ensure that:

• The receiving country provides an adequate level of data protection as determined by the National Privacy Commission.
• Appropriate contractual safeguards are in place, such as Standard Contractual Clauses or Data Processing Agreements.
• The transfer is necessary for the performance of our contract with you or for the establishment, exercise, or defense of legal claims.

You may request information about the specific safeguards applied to international transfers of your data by contacting our Data Protection Officer.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They enable the website to remember your preferences, recognize you on subsequent visits, and provide certain functionalities.

10.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly, including session management, security features, and load balancing. These cookies cannot be disabled.
• Functionality Cookies: Remember your preferences, settings, and login status to enhance your experience. Examples: language preference, display settings, account information.
• Analytics Cookies: Collect anonymous information about how visitors use the Platform, including pages visited, time spent, and navigation paths. We use this data to improve performance and user experience.
• Marketing Cookies: Track your activity across websites to deliver relevant advertising and measure campaign effectiveness (only used with your consent).

10.3 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can:

• Block all cookies.
• Accept or reject cookies on a case-by-case basis.
• Delete cookies already stored on your device.
• Set your browser to notify you when a website attempts to place a cookie.

Please note that blocking or deleting essential cookies may impair your ability to use certain features of the Platform. Analytics and marketing cookies can be disabled without affecting core functionality.

10.4 Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. At present, there is no universal standard for how websites should respond to DNT signals. luky88 does not currently respond to DNT signals, but we respect your privacy choices and provide cookie management options described above.

11. Third-Party Links and Services

The Platform may contain links to third-party websites, applications, or services not owned or controlled by luky88, including payment providers, social media platforms, and affiliate sites. This Privacy Policy does not apply to third-party services.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any third-party services you access. Providing personal information to third parties is at your own risk.

12. Children's Privacy

The Services are intended exclusively for individuals who are at least 21 years of age. luky88 does not knowingly collect personal information from minors under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information from our systems.

If you are a parent or guardian and believe your child has provided personal information to luky88, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

luky88 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy.
• Notify you via email or prominent notice on the Platform.
• Provide a reasonable period for you to review the changes before they take effect.
• Where required by law, obtain your consent to material changes affecting your rights.

Continued use of the Services after changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

14. Contact Information and Complaints

For questions, concerns, requests to exercise data subject rights, or complaints regarding this Privacy Policy or our data processing practices, please contact:

• Data Protection Officer: [email protected]
• Customer Support: Available 24/7 via live chat on the Platform
• Website: https://luky88.lat

We are committed to addressing your concerns promptly and fairly. If you are not satisfied with our response, you may file a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission: www.privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228