At luckyph, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains exactly what personal data we collect from Filipino players, why we collect it, how we use it, and the rights you have over your own information.
Summary: luckyph collects only the personal data necessary to operate a safe, compliant, and enjoyable online casino experience for Filipino players. We do not sell your personal data to third parties. We do not use your data for purposes beyond those described in this policy.
This Privacy Policy ("Policy") describes how luckyph ("we," "us," "our," or "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you," "your," or "Player") who access or use the luckyph online casino platform, including its website, mobile interface, and all associated services.
luckyph is committed to protecting the privacy and personal data of all users in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). Where applicable, we also observe internationally recognised data protection principles.
By registering for a luckyph account or otherwise using our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the luckyph platform.
This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.
For the purposes of the Data Privacy Act of 2012 and this Policy, luckyph acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes. This means luckyph determines the purposes and means of processing your personal data.
Where luckyph engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or cloud infrastructure partners — those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with luckyph's instructions and this Policy.
luckyph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO using the details provided in Section 15 of this Policy.
luckyph collects the following categories of personal data, depending on how you interact with the platform:
Sensitive Personal Information: Certain data we collect — such as government ID numbers and financial account details — may qualify as sensitive personal information under the Data Privacy Act of 2012. luckyph applies heightened security and access controls to all sensitive personal information and processes it only where strictly necessary for regulatory compliance, identity verification, or payment processing.
luckyph collects personal data through the following means:
The table below sets out the purposes for which luckyph processes your personal data and the corresponding legal basis under the Data Privacy Act of 2012:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract; your consent |
| Identity verification (KYC) and age verification (21+) | Legal obligation (PAGCOR regulations, AML laws) |
| Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, etc. | Performance of a contract |
| Anti-money laundering (AML) and fraud prevention monitoring | Legal obligation; legitimate interest |
| Providing customer support and resolving disputes | Performance of a contract; legitimate interest |
| Administering bonuses, promotions, and loyalty programmes | Performance of a contract; your consent |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interest; your consent |
| Sending transactional notifications (deposit confirmations, withdrawal updates) | Performance of a contract |
| Sending marketing communications (where you have opted in) | Your consent (opt-in); you may withdraw at any time |
| Platform analytics and service improvement | Legitimate interest |
| Compliance with regulatory reporting obligations | Legal obligation |
Where luckyph relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact our Data Protection Officer using the details in Section 15.
luckyph does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data only in the following circumstances:
We engage trusted third-party service providers who process personal data on our behalf, including:
All such providers are bound by data processing agreements that require them to process your data only as instructed by luckyph and to maintain appropriate security standards.
luckyph may disclose personal data to the following authorities where required by law or regulation:
In the event of a merger, acquisition, restructuring, or sale of all or part of luckyph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.
No Unauthorised Disclosure: luckyph will never disclose your personal data to any third party not described in this section without your explicit prior consent, except where required by law.
luckyph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after closure |
| KYC verification documents | Duration of account plus 5 years after closure (AMLC requirement) |
| Financial transaction records | 5 years from the date of each transaction |
| Gaming activity logs | 3 years from the date of each session |
| Customer support records | 3 years from the date of each interaction |
| Marketing consent records | Until consent is withdrawn, plus 1 year |
| Technical and device logs | 12 months from collection |
Upon expiry of the applicable retention period, luckyph will securely delete or anonymise your personal data in accordance with its data disposal procedures. Where data is anonymised rather than deleted, the resulting anonymised data may be retained indefinitely for analytical purposes, as it can no longer be used to identify you.
luckyph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
Your Role in Security: While luckyph takes every reasonable precaution to protect your data, you also play an important role. Keep your luckyph account password strong and unique, enable two-factor authentication, and never share your login credentials with anyone. If you suspect your account has been compromised, contact our support team immediately.
luckyph uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the luckyph website. The following types of cookies are used:
These cookies are essential for the platform to function. They enable core features such as session management, login authentication, and security. You cannot opt out of strictly necessary cookies without disabling the platform entirely.
These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so you do not have to re-enter them on each visit.
luckyph uses analytics cookies to understand how players interact with the platform — which games are most popular, where players encounter difficulties, and how the platform can be improved. Analytics data is aggregated and does not identify individual players.
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the luckyph platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by luckyph:
To exercise any of the above rights, please submit a written request to our Data Protection Officer using the contact details in Section 15. luckyph will respond to all verified requests within fifteen (15) business days of receipt. We may need to verify your identity before processing your request.
21+ Only: The luckyph platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR regulations governing online gambling in the Philippines. luckyph does not knowingly collect personal data from individuals under the age of 21.
If luckyph discovers or has reason to believe that personal data has been collected from an individual under 21 years of age, it will promptly delete that data and close the associated account. Any funds deposited by an underage user will be handled in accordance with applicable law and PAGCOR guidelines.
If you are a parent or guardian and believe that your child under the age of 21 has registered on the luckyph platform, please contact us immediately using the details in Section 15 so that we can take appropriate action.
luckyph primarily stores and processes personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure and identity verification partners — may process data in other jurisdictions.
Where personal data is transferred outside the Philippines, luckyph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Data Privacy Act of 2012. Such safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other legally recognised transfer mechanisms.
By using the luckyph platform, you consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.
The luckyph platform may reference or integrate with third-party services — such as payment gateways (GCash, PayMaya) and game content providers — that have their own privacy policies. luckyph is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of luckyph.
luckyph does not embed third-party advertising networks or social media tracking pixels on its platform. Your gaming activity on luckyph is not shared with social media platforms or advertising networks.
luckyph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or an in-platform notification at least seven (7) days before the changes take effect.
The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the luckyph platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you must cease using the platform and may request account closure.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way luckyph handles your personal data, please contact our Data Protection Officer:
Data Protection Officer
Email: privacy@luckyph.app
Response Time: Within 15 business days of receiving your verified request.
If you are not satisfied with luckyph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.
For general platform support enquiries unrelated to data privacy, please contact our customer support team at support@luckyph.app. Our support team is available 24 hours a day, 7 days a week, including Philippine public holidays.
Six pillars that define how we handle every Filipino player's personal information — with transparency, security, and respect at the centre.
Every connection to luckyph is protected by bank-grade TLS encryption. Your personal and financial data travels securely — no exceptions, no shortcuts.
luckyph fully complies with Republic Act No. 10173 — the Data Privacy Act of 2012 — and operates under the oversight of the National Privacy Commission.
Your personal information is yours. luckyph does not sell, rent, or trade your data to advertisers or any third party for their own commercial purposes — ever.
Access, correct, or request deletion of your personal data at any time. Our Data Protection Officer is available to handle all privacy requests within 15 business days.
luckyph maintains a documented incident response plan. In the unlikely event of a data breach, we notify the NPC and affected players within 72 hours as required by law.
We use only the cookies necessary to run the platform and improve your experience. No third-party ad trackers. No social media pixels. Just clean, purposeful data use.
Now that you know exactly how we handle your data, join thousands of Filipino players from Manila to Davao who trust luckyph for a secure, fair, and transparent online casino experience. Must be 21 years or older to register.