Privacy Policy

This Privacy Policy is published by luckwin ("luckwin," "we," "us," or "our"), the operator of luckwin.win — a PAGCOR-supervised online gaming platform serving players in the Philippines. luckwin is committed to processing personal data responsibly and in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA"), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission ("NPC") of the Philippines.

This Policy applies to all personal information that luckwin collects, processes, stores, or discloses in connection with your use of the luckwin.win website, any luckwin mobile application, and all services, games, promotions, payment facilities, and customer support channels operated by luckwin. It applies to registered players, prospective players who interact with the Platform without completing registration, and any person who contacts luckwin's support team.

By accessing the luckwin Platform, creating an account, or using any of luckwin's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue your use of the Platform and contact our Data Protection Officer to request account closure.

luckwin collects the following categories of personal information from players and prospective players. The data collected varies depending on the services you use and the stage of your relationship with luckwin.

luckwin collects personal data through the following methods:

3.1 Direct Collection

• Information you provide at account registration, including your name, date of birth, email address, and Philippine mobile number.
• Identity and address documents you submit for KYC verification purposes.
• Payment method details you provide when making a deposit or requesting a withdrawal.
• Information you provide when contacting luckwin's customer support team via live chat or email.
• Responses to surveys, promotions, or voluntary feedback forms on the Platform.

3.2 Automated Collection

• Technical data automatically collected when you access the Platform, including your IP address, device identifiers, browser type, and session logs.
• Gaming activity data generated by your use of luckwin games, including bet history, game session durations, and bonus activity.
• Cookie and tracking technology data, as further described in Section 7 of this Policy.

3.3 Third-Party Collection

• Identity verification data obtained from licensed KYC service providers engaged by luckwin for document authentication purposes.
• Payment verification data obtained from GCash, Maya, and Philippine banking partners to confirm the authenticity of deposit and withdrawal transactions.
• Fraud prevention and anti-money laundering screening data from third-party compliance platforms as required by PAGCOR regulations.

luckwin uses the personal data we collect for the following purposes. Each purpose is matched to the specific data category used and the legal basis for that processing (see Section 5).

• Account Creation and Management: To register your luckwin account, verify your identity, maintain your account in good standing, and enable you to access all Platform features.
• Service Delivery: To provide you with access to all luckwin games, process bets and game outcomes, calculate and credit winnings, operate the VIP loyalty program, and deliver bonuses and promotions to eligible accounts.
• Payment Processing: To process deposits made via GCash, Maya, and Philippine banks; verify withdrawal requests; prevent payment fraud; and maintain accurate transaction records.
• Regulatory Compliance: To satisfy luckwin's obligations under PAGCOR licensing conditions, the Philippine Anti-Money Laundering Act, the DPA, and all other applicable Philippine laws and regulations, including mandatory reporting obligations.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling, enforce player-set deposit limits and self-exclusion decisions, and comply with PAGCOR's responsible gaming framework.
• Security and Fraud Prevention: To detect, investigate, and prevent unauthorized account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• Customer Support: To respond to your queries, investigate complaints, and resolve disputes through luckwin's formal complaints procedure and, where applicable, the PAGCOR dispute resolution mechanism.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates, where you have consented to receive such communications. You may withdraw marketing consent at any time through your account settings.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve Platform performance, game selection, user interface design, and mobile network optimization for Philippine players.

Under the Philippine Data Privacy Act and applicable NPC regulations, luckwin relies on the following legal bases for its personal data processing activities:

• Contractual Necessity: Processing necessary to perform our contractual obligations to you under the luckwin Terms and Conditions — including account management, game delivery, payment processing, and customer support.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the DPA, and other applicable Philippine laws, including mandatory identity verification and transaction reporting obligations.
• Consent: Processing for purposes where we have obtained your specific, informed, and freely given consent — including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate Interests: Processing necessary for luckwin's legitimate interests in preventing fraud, securing the Platform, improving our services, and conducting analytics — provided such interests are not overridden by your fundamental rights and freedoms under the DPA.

luckwin does not sell, rent, or trade your personal data. We may share your personal information with the following categories of third parties, in each case only to the extent necessary and subject to appropriate confidentiality and data processing obligations:

• Payment Service Providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, UnionBank, and other Philippine payment processors, solely to process your deposits and withdrawals and verify payment method ownership.
• KYC and Identity Verification Providers: Licensed third-party identity verification services engaged to authenticate documents and verify player identity in compliance with PAGCOR KYC requirements.
• Game Software Providers: Licensed casino game studios and live dealer operators whose software powers luckwin's game library. These providers may process certain technical data necessary for game delivery under binding data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any other Philippine government authority to which luckwin has a legal obligation to disclose personal data, including upon presentation of a valid legal order.
• Fraud Prevention and Compliance Platforms: Third-party anti-fraud and AML screening services used to detect suspicious activity and comply with PAGCOR's transaction monitoring requirements.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by luckwin, subject to professional confidentiality obligations.

luckwin uses cookies and similar tracking technologies on the luckwin.win website and mobile application to deliver and improve our services. Cookies are small text files stored on your device that allow luckwin to recognize returning visitors, maintain your session, and analyze Platform usage patterns.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Enable personalization features such as remembering your language preference, your last-played games, and your luckwin lobby view settings. Disabling these cookies may affect your Platform experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform — including pages visited, session durations, and navigation paths — to help luckwin improve the user experience. luckwin uses only first-party analytics tools for this purpose.
• Security Cookies: Used to detect suspicious login activity, prevent unauthorized account access, and identify bot or automated traffic patterns that may indicate fraud.

7.2 Managing Cookies

You can manage non-essential cookies through your browser settings or mobile device privacy controls. Most Philippine mobile browsers (including Chrome for Android and Safari for iOS) provide granular cookie management options. Please note that disabling certain cookies may affect the performance of the luckwin Platform on your device, including on Smart, Globe, and DITO mobile connections.

luckwin retains personal data for the periods specified below, or for such longer periods as may be required by applicable Philippine law, PAGCOR regulations, or the Anti-Money Laundering Act. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized.

luckwin implements technical and organizational security measures appropriate to the sensitivity of the personal data we process, designed to protect against unauthorized access, accidental loss, destruction, or alteration.

• Encryption in Transit: All data transmitted between your device and luckwin's servers is encrypted using 256-bit TLS/SSL protocols. This applies to all Platform interactions, including login, deposits, withdrawals, and game sessions.
• Encryption at Rest: Personal data stored in luckwin's databases is encrypted using AES-256 encryption. Financial data and sensitive personal information are subject to additional encryption layers and strict access controls.
• Access Controls: Access to systems containing personal data is restricted to authorized luckwin personnel on a strict need-to-know basis, using role-based access controls and multi-factor authentication for all administrative accounts.
• Penetration Testing and Audits: luckwin's systems are subject to regular independent security audits and penetration testing by qualified cybersecurity professionals, in addition to PAGCOR's periodic regulatory reviews.
• Incident Response: luckwin maintains a data breach incident response plan. In the event of a personal data breach that poses a real risk to the rights and freedoms of affected players, luckwin will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and affected players will be notified without undue delay as required by the DPA.

Under the Philippine Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights in respect of your personal data held by luckwin. To exercise any of these rights, contact luckwin's Data Protection Officer at the address set out in Section 13.

luckwin will respond to all data subject rights requests within 15 business days of receipt. Where a request is complex or involves a high volume of data, luckwin may extend this period by a further 15 business days, with prior written notice to the requestor. luckwin will not charge a fee for standard data access requests.

If you are not satisfied with luckwin's response to a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on the NPC complaints procedure is available on the NPC's official website.

The luckwin Platform is strictly intended for persons aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. luckwin does not knowingly collect or process personal data relating to individuals under the age of 21.

luckwin implements age verification controls at account registration and may request government-issued identification to confirm that a player meets the minimum age requirement. Any account found to belong to a person under the age of 21 will be immediately closed, all associated balances will be forfeited, and the personal data of the minor will be deleted from luckwin's systems as promptly as legally permissible.

If you are a parent or guardian and believe that a minor under your care may have registered an account on luckwin in breach of the age requirement, please contact luckwin's Data Protection Officer immediately using the contact details in Section 13. luckwin will investigate and act on all such reports promptly.

luckwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material changes to this Policy will be communicated to registered players via email notification or in-Platform alert at least fourteen (14) days before the revised Policy takes effect.

The effective date at the top of this page will be updated each time this Policy is revised. The version of the Privacy Policy published at luckwin.win/privacy-policy is the current binding version. We encourage you to review this Policy periodically to stay informed about how luckwin protects your personal data. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the revised Policy.

luckwin has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions about this Policy, wish to exercise a data subject right, or need to report a data privacy concern, please contact the luckwin DPO through the following channels:

luckwin will acknowledge all privacy-related inquiries and data subject rights requests within 3 business days and will provide a substantive response within 15 business days. This Privacy Policy was last reviewed on 1 January 2026 and is current as of that date.