luckyplus Privacy Policy

1. Introduction

luckyplus ("luckyplus," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the luckyplus Platform at https://luckyplus.asia. This Privacy Policy ("Policy") describes how luckyplus collects, uses, discloses, stores, and protects personal information in connection with your use of our website, games, and related services (collectively, the "Platform").

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

By registering an account or using the luckyplus Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.

2. Personal Data We Collect

luckyplus collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., PhilSys National ID, passport number, driver's license number).
• Contact Data: Email address, mobile number, and residential address (including city, province, and postal code within the Philippines).
• Account Data: Username, encrypted password, account preferences, and communication history with luckyplus support.
• Financial Data: GCash account details, PayMaya account details, BPI/BDO/Metrobank account information, transaction history, deposit and withdrawal records, and balance information.
• Gaming Data: Game history, betting activity, session duration, wagering patterns, and bonus usage records.
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and cookies or similar tracking technologies.
• KYC Documentation: Copies of government-issued identification documents and selfie verification images submitted during the identity verification process.

luckyplus does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance purposes.

3. How We Use Your Personal Data

luckyplus uses the personal data we collect for the following purposes:

• To create, verify, and manage your luckyplus account.
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and anti-money laundering (AML) requirements.
• To provide customer support and respond to your inquiries via live chat or email.
• To send you transactional communications, including account notifications, deposit confirmations, and withdrawal updates.
• To send promotional communications about luckyplus bonuses, new games, and special offers — only where you have provided consent or where permitted by applicable law.
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities on the Platform.
• To comply with legal and regulatory obligations, including reporting requirements under Philippine law.
• To analyze Platform usage and improve the luckyplus user experience.
• To enforce our Terms & Conditions and other Platform policies.

4. Legal Basis for Processing

luckyplus processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and luckyplus (i.e., to provide the gaming services you have registered for).
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AML laws, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for luckyplus's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

luckyplus does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions.
• Identity Verification Providers: Third-party KYC service providers engaged to assist with identity and age verification.
• Game Software Providers: Licensed game studios and software providers whose games are available on the luckyplus Platform, to the extent necessary for game delivery and fairness auditing.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies, where required by law.
• Legal and Professional Advisors: Lawyers, auditors, and other professional advisors engaged by luckyplus, subject to confidentiality obligations.

All third parties with whom luckyplus shares personal data are required to handle such data in accordance with applicable data privacy laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

6. Data Retention

luckyplus retains personal data for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your account relationship with us and for a period thereafter as required by applicable law.

Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML and PAGCOR record-keeping requirements.
• KYC documentation is retained for the same minimum five-year period.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter for compliance purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our internal data disposal procedures.

7. Cookies and Tracking Technologies

luckyplus uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with the Platform, helping us identify areas for improvement.
• Preference Cookies: Used to remember your settings and preferences, such as language and display options.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the luckyplus Platform. luckyplus does not use cookies to track your activity across unrelated third-party websites.

8. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by luckyplus:

• Right to be Informed: The right to know how your personal data is being collected and processed.
• Right of Access: The right to request a copy of the personal data luckyplus holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 12 of this Policy.

9. Children's Privacy

The luckyplus Platform is strictly intended for individuals aged 21 years and above. luckyplus does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated account.

If you believe that a minor has registered on the luckyplus Platform, please contact us immediately so we can investigate and take appropriate action.

10. Data Security

luckyplus implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data, including passwords (stored as salted hashes) and financial information.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While luckyplus takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, luckyplus will notify you and the National Privacy Commission in accordance with applicable law.

11. Changes to This Privacy Policy

luckyplus reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered users via email or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of the luckyplus Platform following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you must discontinue use of the Platform and may request account closure.

12. Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by luckyplus, please contact our Data Protection Officer (DPO):

luckyplus Data Protection Officer
Email: [email protected]
Available: Monday to Friday, 9:00 AM – 6:00 PM (Philippine Standard Time)

luckyplus aims to respond to all data privacy inquiries within 15 business days of receipt, in accordance with NPC guidelines. For complaints that cannot be resolved directly with luckyplus, you may escalate to the National Privacy Commission of the Philippines.