01
Who We Are
philucky ("we," "us," "our," or "the Company") operates the online gaming platform accessible at philucky.vip. philucky is a licensed online gaming operator serving players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), philucky acts as the Personal Information Controller in respect of the personal data you provide when registering for and using our platform. This means we determine the purposes and means by which your personal data is processed.
This Privacy Policy applies to all personal data collected through the philucky.vip website, mobile-optimized platform, and any related communications between you and philucky. It applies to all registered players, prospective players, and visitors to our platform.
Scope: This policy covers data collected directly by philucky. It does not cover the privacy practices of third-party game providers, payment processors, or other external services that may be accessible through our platform. We encourage you to review the privacy policies of those third parties separately.
02
Data We Collect
philucky collects personal data that is necessary to operate your account, process transactions, comply with legal obligations, and deliver a safe and enjoyable gaming experience. The categories of personal data we collect include:
| Category |
Examples |
Purpose |
| Identity Data |
Full name, date of birth, gender, nationality |
Account registration, age verification, KYC compliance |
| Contact Data |
Email address, mobile number, home address |
Account communications, support, verification |
| Verification Data |
Government-issued ID, proof of address, selfie photos |
KYC/AML compliance, age and identity verification |
| Financial Data |
GCash number, bank account details (BPI, BDO, Metrobank), PayMaya account |
Processing deposits and withdrawals |
| Transaction Data |
Deposit history, withdrawal records, bet history, bonus usage |
Account management, AML monitoring, dispute resolution |
| Technical Data |
IP address, device type, browser, operating system, session logs |
Security, fraud prevention, platform optimization |
| Usage Data |
Pages visited, games played, session duration, click patterns |
Platform improvement, personalization, responsible gaming monitoring |
| Communications Data |
Support chat logs, email correspondence, feedback submissions |
Customer support, quality assurance, dispute resolution |
We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by law (for example, in the context of responsible gaming assessments or self-exclusion requests).
03
How We Collect Data
philucky collects your personal data through the following means:
- Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in promotions, you provide us with personal data directly.
- Automated technologies: When you access and use the philucky platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 7 for full details on our cookie practices.
- Third-party sources: We may receive personal data about you from third-party identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and publicly available sources, where this is necessary to verify your identity or comply with our legal obligations.
- Responsible gaming tools: If you interact with our responsible gaming features — such as setting deposit limits, requesting a cooling-off period, or initiating self-exclusion — we collect and record that information as part of our duty of care obligations.
Voluntary Provision: Where the provision of personal data is optional, we will make this clear at the point of collection. However, certain data — such as identity and contact information — is mandatory for account registration and operation. Failure to provide mandatory data may prevent us from opening or maintaining your account.
04
How We Use Your Data
philucky uses your personal data for the following purposes:
- Account management: To create, maintain, and administer your philucky player account, including processing your registration, verifying your identity, and managing your account settings.
- Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment methods, and to maintain accurate records of all financial transactions.
- Legal and regulatory compliance: To comply with our obligations under Philippine law, including the Data Privacy Act of 2012, Anti-Money Laundering Act, and applicable gaming regulations. This includes conducting Know Your Customer (KYC) checks and filing reports with relevant authorities where required.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the philucky platform.
- Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 support channels.
- Platform improvement: To analyze usage patterns, identify technical issues, and improve the features, performance, and user experience of the philucky platform.
- Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce self-exclusion and deposit limit requests, and fulfill our duty of care obligations to players.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
- Personalization: To tailor your philucky experience, including game recommendations and promotional offers relevant to your preferences and gaming history.
Marketing Opt-Out: If you no longer wish to receive marketing communications from philucky, you can unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting our support team. Opting out of marketing will not affect transactional or account-related communications.
05
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, philucky processes your personal data on the following legal bases:
- Contractual necessity: Processing is necessary to perform the contract between you and philucky — specifically, to operate your player account, process transactions, and deliver gaming services.
- Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including KYC/AML requirements, gaming regulations, and tax reporting obligations.
- Legitimate interests: Processing is necessary for philucky's legitimate business interests, including fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights and interests.
- Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
06
Data Sharing & Disclosure
philucky does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment service providers, to process your deposits and withdrawals.
- Identity verification providers: Third-party KYC and AML service providers who assist us in verifying your identity and complying with our legal obligations.
- Game providers: Licensed third-party game studios and live casino operators whose games are available on the philucky platform. These providers may receive limited technical data necessary to deliver their games.
- Regulatory authorities: PAGCOR and other relevant Philippine government agencies, where disclosure is required by law or regulation.
- Law enforcement: Philippine law enforcement agencies or courts, where we are legally required to disclose personal data in connection with a criminal investigation, court order, or other legal process.
- IT and security service providers: Third-party providers who assist us in operating, maintaining, and securing the philucky platform, subject to strict data processing agreements.
- Professional advisors: Lawyers, auditors, and other professional advisors who require access to personal data in the course of providing services to philucky, subject to professional confidentiality obligations.
All third parties with whom philucky shares personal data are required to handle that data in accordance with applicable Philippine data privacy laws and our contractual requirements. We do not permit third parties to use your personal data for their own purposes beyond the specific service they provide to us.
International Transfers: Some of our third-party service providers may be located outside the Philippines. Where personal data is transferred internationally, philucky ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and the standards set by the National Privacy Commission.
07
Cookies & Tracking Technologies
philucky uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve our platform. Cookies are small text files stored on your device when you visit philucky.vip.
We use the following categories of cookies:
- Strictly necessary cookies: These cookies are essential for the philucky platform to function. They enable core features such as session management, account authentication, and security. These cookies cannot be disabled.
- Functional cookies: These cookies remember your preferences — such as your language settings and display options — to provide a more personalized experience on philucky.
- Analytics cookies: These cookies help us understand how players use the philucky platform by collecting aggregated, anonymized data about page visits, session duration, and feature usage. This information is used to improve our platform.
- Marketing cookies: These cookies are used to deliver relevant promotional content and track the effectiveness of our marketing campaigns. They are only placed with your explicit consent.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the philucky platform. For strictly necessary cookies, no opt-out is available as they are required for the platform to operate.
Session Cookies vs. Persistent Cookies: Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a set period or until you delete them. philucky uses both types, depending on the purpose of the cookie.
08
Data Retention
philucky retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
- Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and related regulations.
- KYC and verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
- Support communications: Retained for up to three (3) years from the date of the communication, for quality assurance and dispute resolution purposes.
- Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.
- Technical and usage data: Typically retained for up to twelve (12) months, after which it is aggregated or anonymized.
When personal data is no longer required, philucky will securely delete or anonymize it in accordance with our data disposal procedures. Where deletion is not immediately possible due to technical constraints, the data will be securely isolated and protected from further processing until deletion is feasible.
09
Data Security
philucky takes the security of your personal data seriously and implements a range of technical and organizational measures to protect it against unauthorized access, loss, alteration, or disclosure. These measures include:
- TLS encryption: All data transmitted between your device and the philucky platform is encrypted using Transport Layer Security (TLS) protocols.
- Password hashing: Account passwords are stored using industry-standard one-way hashing algorithms. philucky staff cannot view your password in plain text.
- Two-factor authentication (2FA): philucky offers 2FA as an additional layer of account security. We strongly encourage all players to enable this feature.
- Access controls: Access to personal data within philucky is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
- Regular security assessments: philucky conducts regular security reviews and vulnerability assessments of our platform and infrastructure.
- Incident response: philucky maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players in accordance with our legal obligations.
Your Role in Security: While philucky implements robust security measures, the security of your account also depends on you. Please use a strong, unique password for your philucky account, enable 2FA, and never share your login credentials with anyone. philucky staff will never ask for your password.
10
Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by philucky:
- Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
- Right of access: You have the right to request a copy of the personal data philucky holds about you, along with information about how it is being processed.
- Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account information directly through your philucky account settings.
- Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal obligations.
- Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
- Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that philucky has processed your personal data in violation of the Data Privacy Act of 2012.
To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. philucky will respond to all data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.
Identity Verification: To protect your privacy and security, philucky may require you to verify your identity before processing a data subject request. This is to ensure that personal data is not disclosed to unauthorized parties.
11
Children & Minors
The philucky platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. philucky does not knowingly collect personal data from persons under the age of 21.
philucky employs age verification procedures at the point of registration and at the point of withdrawal to enforce this requirement. Any account found to be held by a person under 21 years of age will be immediately closed, all funds will be forfeited, and any personal data collected will be securely deleted.
If you are a parent or guardian and believe that a minor has registered an account on philucky or provided personal data to us, please contact our support team immediately. We will take prompt action to investigate and, where confirmed, close the account and delete the associated data.
21+ Strictly Enforced: Gambling is prohibited for persons under 21 years of age in the Philippines. philucky takes this obligation seriously and will not hesitate to close accounts and report suspected underage gambling to the relevant authorities.
12
Third-Party Services
The philucky platform integrates with a number of third-party services to deliver a complete gaming experience. These include game providers, payment processors, and customer support tools. While philucky carefully selects its third-party partners and requires them to maintain appropriate data protection standards, we are not responsible for the privacy practices of these third parties.
When you interact with a third-party game or payment service through the philucky platform, that third party may collect and process personal data about you in accordance with their own privacy policies. philucky encourages you to review the privacy policies of any third-party services you use in connection with our platform.
philucky does not control and is not responsible for the content, privacy practices, or data handling of any third-party services. Any links to third-party services within the philucky platform are provided for your convenience only and do not constitute an endorsement of those services.
13
Changes to This Privacy Policy
philucky reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The most current version of this Privacy Policy will always be available at philucky.vip/privacy-policy.
Where we make material changes to this Privacy Policy — that is, changes that significantly affect your rights or how we process your personal data — we will notify registered players by email and/or by displaying a prominent notice on the philucky platform at least fourteen (14) days before the changes take effect.
Your continued use of the philucky platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you should cease using the philucky platform and contact our support team to close your account.
Version History: philucky maintains a record of previous versions of this Privacy Policy. If you would like to review a previous version, please contact our Data Protection Officer using the details in Section 14.
14
Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the way philucky processes your personal data, please contact our Data Protection Officer (DPO) through the following channels:
- Email: [email protected]
- Subject Line: Please include "Privacy / Data Request" in the subject line of your email to ensure prompt routing to our DPO.
- Live Chat: Available 24/7 via the philucky platform for general privacy inquiries.
- Response Time: philucky aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within thirty (30) days.
If you are not satisfied with philucky's response to your privacy inquiry or data subject request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.
Effective Date: This Privacy Policy is effective as of January 1, 2026 and supersedes all previous versions. philucky is committed to protecting your privacy and to being transparent about how we handle your personal data.