This Privacy Policy explains how lucky.ph collects, uses, stores, and protects your personal information. We are committed to handling your data responsibly and in compliance with Philippine data protection law.
A plain-language overview of the key privacy commitments in this Policy.
We collect personal data you provide during registration and KYC verification — including your name, mobile number, email address, and government ID details — as well as technical data generated by your use of the lucky.ph Platform.
Your data is used to operate your Account, verify your identity as required by PAGCOR, process GCash and bank transactions, comply with Philippine anti-money laundering obligations, and provide customer support.
All data is encrypted in transit using 256-bit SSL and at rest using industry-standard encryption. Access to personal data is restricted to authorized lucky.ph personnel on a need-to-know basis.
We share data with PAGCOR and the Anti-Money Laundering Council (AMLC) as required by law, and with licensed third-party payment processors and game providers who operate under strict data processing agreements with lucky.ph.
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to access, correct, and — subject to legal retention requirements — request deletion of your personal data held by lucky.ph.
This Policy is governed by the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, administered by the National Privacy Commission (NPC) of the Philippines.
This Privacy Policy ("Policy") describes how lucky.ph ("lucky.ph," "we," "us," "our") collects, uses, discloses, stores, and protects personal information relating to registered players and visitors ("you," "your," "Data Subject") who access or use the lucky.ph website located at luckyph.asia and all associated services and gaming products (collectively, the "Platform").
Lucky.ph is a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines. As a regulated operator, lucky.ph is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and any issuances of the National Privacy Commission ("NPC"), in addition to data handling obligations prescribed by PAGCOR and the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended).
ℹ️ By registering for an Account on lucky.ph, using the Platform, or accessing any of our services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Policy.
This Policy should be read together with the lucky.ph Terms & Conditions and the Responsible Gaming Policy, both of which are available on the Platform. In the event of a conflict between this Policy and any other lucky.ph document regarding data privacy, this Policy prevails.
For the purposes of the Data Privacy Act of 2012, lucky.ph acts as the Personal Information Controller ("PIC") in respect of personal data collected from players and visitors of the Platform. As PIC, lucky.ph determines the purposes and means by which personal data is processed.
Lucky.ph has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and the DPA. Contact details for the DPO are set out in Section 16 of this Policy. The DPO can be contacted for any data privacy queries, rights requests, or complaints.
Where lucky.ph engages third-party service providers to process data on its behalf (such as payment processors or game providers), such parties act as Personal Information Processors ("PIP") under data processing agreements that require them to process personal data only on documented instructions from lucky.ph and in compliance with the DPA.
Lucky.ph collects personal data in the following categories:
⚠️ Lucky.ph does not collect full bank account or credit card numbers. We do not store complete payment credentials. All payment data is processed through PCI DSS-compliant third-party payment processors.
Lucky.ph collects personal data through the following channels:
The majority of personal data we hold is provided directly by you during account registration, KYC verification, payment processing, communications with our support team, and your interaction with responsible gaming tools. You are not obligated to provide personal data, but failure to provide required data will prevent you from accessing certain Platform features, including account creation, deposits, and withdrawals.
When you access and use the lucky.ph Platform, we automatically collect technical data including your IP address, device information, browser type, session timestamps, and navigation patterns. This data is collected using cookies, server logs, and similar tracking technologies as described in Section 10 of this Policy.
Lucky.ph may use third-party identity verification providers to assist with KYC processing. These providers may return verification status data and risk scores to lucky.ph as part of the identity verification process. Lucky.ph does not receive your raw ID data from these providers — they process your submitted documents on our behalf as Personal Information Processors under data processing agreements.
When you make a deposit or withdrawal via GCash, PayMaya, or bank transfer, our payment processors return transaction reference data to lucky.ph confirming payment status. The payment processor handles your complete payment credentials; lucky.ph receives only the information necessary to credit or debit your Platform Account.
Lucky.ph processes your personal data on the following lawful bases under the Data Privacy Act of 2012:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity — performance of the Terms & Conditions |
| KYC identity and age verification | Legal obligation — PAGCOR compliance requirements |
| Payment processing (deposits and withdrawals) | Contractual necessity — performance of the Terms & Conditions |
| Anti-money laundering monitoring | Legal obligation — Republic Act No. 9160 (AMLA) compliance |
| Responsible gaming monitoring and tools | Legal obligation — PAGCOR responsible gaming requirements |
| Customer support and dispute resolution | Contractual necessity and legitimate interest |
| Platform security and fraud prevention | Legitimate interest — protecting the Platform and our players |
| Marketing and promotional communications | Consent — only where you have opted in |
| Platform analytics and improvement | Legitimate interest — improving Platform performance |
| Legal claims and regulatory responses | Legal obligation and legitimate interest |
Lucky.ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose personal data only in the following circumstances:
Lucky.ph is required by PAGCOR and Philippine law to disclose player data to the following regulatory and law enforcement authorities upon lawful request or as mandated by regulation:
Lucky.ph shares personal data with third-party service providers who process data on our behalf under strict data processing agreements. These providers are permitted to use your data only for the specific purposes for which they are engaged. Categories of service providers include:
In the event of a merger, acquisition, corporate restructuring, or sale of all or part of lucky.ph's assets, personal data held by lucky.ph may be transferred to the successor entity. Players will be notified of any such transfer that materially affects the handling of their personal data, and the successor entity will be required to honor the terms of this Policy or provide equivalent protections.
Lucky.ph primarily processes personal data within the Philippines. Where the use of third-party service providers (such as game providers or cloud infrastructure providers) involves the transfer of personal data outside the Philippines, lucky.ph ensures that such transfers are protected by:
Lucky.ph does not transfer personal data to jurisdictions that do not provide adequate protection for personal data without appropriate contractual safeguards in place.
Lucky.ph retains personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal retention obligations, and resolve disputes. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original personal data.
Lucky.ph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:
⚠️ While lucky.ph implements strong technical security measures, no system is completely immune to security risks. You are responsible for maintaining the security of your lucky.ph login credentials. If you suspect unauthorized access to your Account, contact lucky.ph support immediately via 24/7 live chat.
Lucky.ph uses cookies and similar tracking technologies (such as local storage and session tokens) on the Platform. The cookies we deploy fall into the following categories:
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your lucky.ph Account. Detailed cookie management instructions are available in your browser's help documentation.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by lucky.ph:
Request a copy of the personal data lucky.ph holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your Account or in our records.
Request deletion of personal data where processing is no longer necessary, subject to legal retention obligations.
Object to processing of your data for direct marketing purposes or where we rely on legitimate interest as the legal basis.
Request a machine-readable copy of personal data you have provided to lucky.ph, where technically feasible.
Lodge a complaint with the National Privacy Commission (NPC) if you believe lucky.ph has violated your data privacy rights.
To exercise any of your rights, please contact lucky.ph via the channels described in Section 16. Lucky.ph will respond to rights requests within thirty (30) calendar days of receipt, or within such other timeframe as mandated by the NPC. We may request identity verification before processing certain rights requests to prevent unauthorized access to your data.
Please note that some rights are subject to limitations. For example, the right to erasure does not override lucky.ph's legal obligation to retain transaction and identity records for the periods prescribed by PAGCOR and the Anti-Money Laundering Act.
The lucky.ph Platform is strictly restricted to adults aged 21 years and above in accordance with PAGCOR regulations. Lucky.ph does not knowingly collect personal data from individuals under the age of 21.
All registrants are required to undergo KYC identity verification that confirms their age prior to withdrawal processing. Where lucky.ph becomes aware that personal data has been collected from a person under 21, the relevant Account will be immediately suspended, all funds will be handled in accordance with PAGCOR guidelines, and the personal data of the underage individual will be deleted as soon as legally permissible.
If you are a parent or guardian and believe that a minor in your household has created an Account on lucky.ph, please contact our support team immediately using the contact details in Section 16.
Lucky.ph may send you promotional communications regarding bonuses, promotions, new game releases, and other lucky.ph offers by email or SMS to your registered mobile number, where you have consented to receiving such communications. Consent to marketing is entirely voluntary and separate from the processing required to operate your Account.
You may withdraw your consent to marketing communications at any time by:
Withdrawal of marketing consent will not affect the processing of data necessary for the operation of your Account, payment processing, or PAGCOR compliance obligations. Unsubscribing from marketing does not constitute a request for Account closure.
The lucky.ph Platform integrates game content from third-party providers including JILI Games, PG Soft, Pragmatic Play, and others. When you play games provided by these partners, certain technical data (such as session tokens and game results) may be shared with the relevant game provider in order to operate the game. Game providers access this data as Personal Information Processors under data processing agreements with lucky.ph.
Lucky.ph is not responsible for the privacy practices of independent third-party websites or services that may be accessible from the Platform via external links, if any. This Policy applies solely to data processed by lucky.ph and its authorized processors in connection with the Platform.
Lucky.ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players by email to their registered email address and/or by prominent notice on the Platform, prior to the changes taking effect. The date of the most recent revision is shown in the Table of Contents sidebar and at the foot of this Policy.
Your continued use of the lucky.ph Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how lucky.ph protects your data.
📅 Current Policy Version: This Privacy Policy was last reviewed and updated on January 1, 2026. Previous versions are available upon request by contacting the lucky.ph Data Protection Officer.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by lucky.ph, please contact us using the following channels:
ℹ️ If you are not satisfied with lucky.ph's response to a privacy complaint or rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about filing an NPC complaint is available on the NPC's official government website.
Lucky.ph is PAGCOR-regulated and fully committed to protecting your personal data under the Philippine Data Privacy Act. Join thousands of Filipino players already on the Platform. 21+ only.
🔞 21+ only. Gambling is for entertainment. Play responsibly. PAGCOR regulated.