luckwin Casino – Privacy Policy

1 Introduction

luckwin Casino ("luckwin," "we," "us," or "our") operates the online gaming platform accessible at luckwin.club. As a personal information controller under the Data Privacy Act of 2012, luckwin is responsible for the personal data you provide to us and the data we collect about you through your use of the luckwin platform.

This Privacy Policy applies to all personal data collected through the luckwin website, mobile platform, customer support channels, and any other touchpoints through which you interact with luckwin. It covers how we collect, use, disclose, store, and protect your personal information, as well as the rights you have over your data.

By registering an account on luckwin or otherwise using the luckwin platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the luckwin platform.

This Privacy Policy should be read alongside luckwin's Terms & Conditions, which govern your use of the platform.

2 Personal Data We Collect

luckwin collects personal data that is necessary for the provision of our gaming services, compliance with legal and regulatory obligations, and the improvement of your experience on the platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 years or older)
• Residential address in the Philippines
• Email address and mobile phone number
• Username and encrypted password
• Government-issued ID details (e.g., passport number, driver's license number, SSS/UMID/PhilHealth ID) submitted during KYC verification

2.2 Financial Data

• GCash or Maya account details used for deposits and withdrawals
• Bank account details (bank name, account number) for bank transfer transactions
• Debit card details (card number, expiry date) where applicable
• Transaction history, including deposit amounts, withdrawal amounts, and dates

2.3 Gaming & Activity Data

• Game history, including games played, bets placed, wins, and losses
• Session duration and frequency of play
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookies and similar tracking technologies (see Section 6)
• Log data, including access times, pages viewed, and error reports

2.5 Communications Data

• Records of your communications with luckwin customer support
• Feedback, survey responses, and promotional opt-in preferences

3 How We Use Your Personal Data

luckwin uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your luckwin account, including verifying your identity and age during registration and KYC processes.
• Service Delivery: To provide you with access to luckwin's games, features, promotions, and customer support services.
• Payment Processing: To process your deposits and withdrawals through supported Philippine payment methods (GCash, Maya, bank transfer, debit card).
• Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws and regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct.
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools, including deposit limits, cool-off periods, and self-exclusion, in accordance with our Responsible Gaming Policy.
• Marketing & Promotions: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the luckwin platform, games, and user experience.
• Legal Claims: To establish, exercise, or defend legal claims in connection with your use of the luckwin platform.

4 Legal Basis for Processing

luckwin processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and luckwin (i.e., the Terms & Conditions), including account management, game access, and payment processing.
• Legal Obligation: Processing is required for luckwin to comply with its legal and regulatory obligations under Philippine law, including PAGCOR licensing conditions, AMLA requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for luckwin's legitimate interests, including fraud prevention, platform security, and business analytics, provided such interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as marketing communications and the use of non-essential cookies, luckwin relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 Data Sharing & Disclosure

luckwin does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Game Providers: Third-party game software providers who supply games available on the luckwin platform. These providers may receive limited technical data necessary for game delivery and fairness auditing.
• Payment Processors: Philippine payment service providers (GCash, Maya, banks) who process your financial transactions. These providers are subject to their own privacy policies and regulatory obligations.
• KYC & Identity Verification Providers: Third-party identity verification services used to conduct KYC checks as required by PAGCOR and AMLA regulations.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory mandate.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and technical support providers who assist in operating and securing the luckwin platform. All such providers are bound by data processing agreements.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by luckwin, subject to professional confidentiality obligations.

Any third party with whom luckwin shares personal data is required to process such data only for the specified purpose and in accordance with applicable data protection laws. luckwin does not transfer personal data outside the Philippines except where necessary and subject to appropriate safeguards.

6 Cookies & Tracking Technologies

luckwin uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and deliver relevant content. The types of cookies we use include:

• Essential Cookies: Strictly necessary for the operation of the luckwin platform, including session management, login authentication, and security features. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with the luckwin platform, helping us identify areas for improvement.
• Preference Cookies: Used to remember your settings and preferences, such as language and display options, to personalize your experience.
• Marketing Cookies: Used to deliver relevant promotional content and track the effectiveness of luckwin's marketing campaigns. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the luckwin platform. For more information on managing cookies, refer to your browser's help documentation.

7 Data Retention

luckwin retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations. Specifically:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with AMLA and tax reporting requirements.
• KYC Documents: Retained for the period required by PAGCOR and AMLA regulations, typically five (5) years from the date of submission or account closure, whichever is later.
• Communications Records: Customer support communications are retained for up to three (3) years from the date of the interaction.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications or request deletion, subject to any overriding legal retention requirements.

Upon expiry of the applicable retention period, luckwin will securely delete or anonymize your personal data in accordance with its data disposal procedures.

8 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by luckwin:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data luckwin holds about you and information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by luckwin.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to luckwin's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact luckwin's Data Protection Officer (DPO) using the contact details provided in Section 12. luckwin will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

9 Data Security

luckwin implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and the luckwin platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and government ID details, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized luckwin personnel and service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data privacy training.
• Two-Factor Authentication: luckwin supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Regular Security Audits: luckwin conducts regular security assessments, penetration testing, and vulnerability scans to identify and address potential security risks.
• Incident Response: luckwin maintains a data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, luckwin will notify the NPC and affected data subjects within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act.

While luckwin takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your luckwin account credentials and should notify us immediately if you suspect any unauthorized access to your account.

10 Children's Privacy

The luckwin platform is strictly intended for persons who are at least 21 years of age, in accordance with Philippine law and PAGCOR regulations governing casino-style gambling. luckwin does not knowingly collect personal data from individuals under the age of 21.

If luckwin becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated account. Any deposits made by an underage user will be returned in accordance with applicable law.

If you are a parent or guardian and believe that your child under 21 has provided personal data to luckwin, please contact our Data Protection Officer immediately using the contact details in Section 12.

11 Updates to This Privacy Policy

luckwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

When material changes are made to this Privacy Policy, luckwin will notify registered players via email or a prominent notice on the luckwin platform prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how luckwin protects your personal data.

Your continued use of the luckwin platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you must cease using the platform and may request account closure by contacting luckwin support.

12 Contact Us & Data Protection Officer

luckwin has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact our DPO:

• Data Protection Officer: luckwin Casino DPO
• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days of receiving your verified request

If you are not satisfied with luckwin's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.