luckypot Privacy Policy

1. Introduction

luckypot is a Philippines-focused online casino and sports betting platform. We are committed to protecting the privacy and personal data of every player who registers with or visits luckypot. This Policy applies to all personal data collected through luckypot.asia, our mobile app, and any communication channels between you and luckypot support.

We process personal data in a manner consistent with the applicable data protection laws of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Where applicable, we also observe industry best practices aligned with internationally recognised data protection standards.

As an online casino serving Filipino players — from Metro Manila to Cebu City, Davao, Cagayan de Oro, and everywhere in the archipelago — luckypot handles personal data responsibly, securely, and transparently. We do not sell your personal information to any third party, period.

2. Personal Data We Collect

luckypot collects the following categories of personal data:

luckypot does not collect sensitive personal data (such as health information or biometric data) unless specifically required for a legally mandated compliance process, in which case you will be informed separately.

3. How We Collect Your Data

luckypot collects personal data through the following methods:

• Direct collection: Data you provide when registering an account, completing KYC, depositing funds, or contacting luckypot support.
• Automated collection: Technical data (IP address, device identifiers, session logs) collected automatically when you access the luckypot platform, via cookies and similar tracking technologies described in Section 9.
• Third-party sources: Identity and fraud risk data received from KYC verification service providers, payment processors (e.g., GCash, PayMaya network), and fraud detection partners — used solely for compliance and security purposes.

4. Purposes of Processing

luckypot processes your personal data for the following purposes:

• Account management: Creating and maintaining your luckypot account, verifying your identity, and managing your login credentials.
• Payment processing: Facilitating GCash, PayMaya, BPI, BDO, Metrobank, and crypto deposit and withdrawal transactions denominated in Philippine Peso (PHP).
• Gaming services: Operating slots, live casino, bingo, sports betting, and other luckypot game products; maintaining accurate bet and win records.
• Legal compliance: Meeting Know Your Customer (KYC), Anti-Money Laundering (AML), and other regulatory obligations applicable to luckypot's operations.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling; enforcing deposit limits, self-exclusion requests, and age restrictions (21+ requirement).
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, and abuse of bonus promotions.
• Customer support: Responding to inquiries, complaints, and disputes submitted via live chat or email.
• Marketing communications: Sending promotional offers and relevant updates via email or SMS — only with your consent, and you may opt out at any time via your account notification settings.
• Platform improvement: Analysing usage patterns and technical performance data (in aggregated, anonymised form) to improve the luckypot user experience.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 and applicable data protection principles, luckypot processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the luckypot Terms & Conditions contract with you — including account creation, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and responsible gaming compliance obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. Consent may be withdrawn at any time via account settings.

6. Data Sharing & Disclosure

luckypot does not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency wallet providers receive only the transaction data necessary to process your deposit or withdrawal.
• KYC and fraud detection providers: Identity verification and fraud screening services receive identity data solely for the purpose of account verification and fraud risk assessment.
• Legal and regulatory authorities: luckypot will disclose personal data to government agencies, law enforcement, or regulatory bodies when required to do so by applicable Philippine law, court order, or regulatory directive.
• Service providers: Third-party vendors who provide IT infrastructure, customer support tooling, or analytics services to luckypot — subject to data processing agreements that bind them to confidentiality and security obligations no less stringent than this Policy.
• Responsible gaming organisations: In cases of confirmed self-exclusion or problem gambling referral, relevant information may be shared with approved responsible gaming support programmes.

All data sharing is subject to appropriate contractual, technical, and organisational safeguards. luckypot does not transfer personal data outside the Philippines except where strictly necessary and subject to equivalent data protection safeguards.

7. Data Retention

luckypot retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. General retention guidelines:

• Active account data: Retained for the duration of your active luckypot account relationship.
• KYC and financial records: Retained for a minimum of five (5) years following account closure, in compliance with AML and financial record-keeping obligations under Philippine law.
• Gaming records: Bet and transaction histories retained for five (5) years, or longer if subject to an ongoing dispute or regulatory inquiry.
• Support communications: Live chat transcripts and support emails retained for three (3) years.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Security Measures

luckypot implements industry-standard technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption on all data transmitted between your device and luckypot servers.
• Password hashing — luckypot never stores plain-text passwords. All credentials are hashed using modern cryptographic algorithms.
• Two-factor authentication (2FA) available to all players via SMS OTP to a Philippine mobile number.
• Access controls — luckypot staff access to personal data is restricted on a strict need-to-know basis, with access logging and regular access reviews.
• Intrusion detection and monitoring — luckypot's systems are monitored 24/7 for unauthorised access attempts and unusual activity.
• Regular security assessments — Periodic vulnerability testing and security audits of the luckypot platform.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights, luckypot will notify affected players and relevant authorities as required by the Data Privacy Act of 2012.

9. Cookies & Tracking Technologies

luckypot uses cookies and similar technologies to operate and improve the platform. Cookies are small data files stored on your device. The categories of cookies used by luckypot are:

• Strictly necessary cookies: Required for luckypot to function — maintaining your login session, security tokens, and language preferences. These cannot be disabled.
• Performance cookies: Collect anonymised data on how players use the luckypot platform (e.g., pages visited, time on site) to help us improve performance. No personally identifiable information is collected.
• Functional cookies: Remember your account preferences — such as game filters, notification settings, and last-visited sections — to personalise your experience.
• Marketing cookies: Used only where you have provided consent to receive targeted promotional communications. You may withdraw consent at any time via account settings.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in and use luckypot's core features.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by luckypot:

• Right to be informed: The right to know what personal data luckypot collects and how it is used — fulfilled by this Policy.
• Right of access: The right to request a copy of the personal data luckypot holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. Withdrawal of marketing consent may be done via account settings at any time.
• Right to complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe luckypot has violated your data privacy rights.

To exercise any of these rights, contact luckypot's Data Privacy Officer at [email protected] with the subject line "Data Privacy Request." luckypot will respond within fifteen (15) business days.

11. Minors

luckypot's services are strictly restricted to individuals who are 21 years of age or older in accordance with Philippine gambling age requirements. luckypot does not knowingly collect personal data from persons under 21. If we become aware that a registered account belongs to a person under 21, the account will be immediately closed and all associated personal data deleted, except where retention is required for legal compliance purposes. If you believe a minor has accessed luckypot, please contact us immediately.

12. Third-Party Links

luckypot.asia does not contain links to third-party websites. luckypot's platform is self-contained and all navigational links lead exclusively to internal pages of luckypot.asia. Accordingly, this Policy does not govern the data practices of any third-party platform or service.

13. Changes to This Policy

luckypot reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent in-platform notice at least seven (7) days before the changes take effect, where practicable. The current version of this Policy is always available at luckypot.asia/privacy-policy. Continued use of luckypot's services following any update constitutes your acceptance of the revised Policy.

14. Contact & Data Privacy Officer

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data by luckypot, please contact:

• Data Privacy Officer Email: [email protected] (Subject: "Data Privacy Request")
• Live Chat: Available 24/7 on the luckypot platform
• Response Time: Within 15 business days for written data privacy requests
• Platform: luckypot.asia, operating in Philippine Standard Time (UTC+8)

Complaints that are not resolved satisfactorily through luckypot's internal process may be escalated to the National Privacy Commission (NPC) of the Philippines.