88lucky.ph Privacy Policy

1. Overview and Scope

This Privacy Policy ("Policy") describes how 88lucky.ph, operating through the website 88luckyph.vip ("the Platform", "we", "us", "our"), collects, stores, uses, discloses, and protects the personal data of individuals ("you", "your", "Data Subject") who access or use our Platform and associated services.

This Policy is drafted in compliance with the Republic Act No. 10173 — Philippine Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable circulars issued by the National Privacy Commission (NPC) of the Philippines. Our data processing activities are also conducted in alignment with requirements set by the Philippine Amusement and Gaming Corporation (PAGCOR), under whose licence 88lucky.ph operates.

By registering an account on 88lucky.ph, depositing funds, participating in games, or otherwise using our Platform, you acknowledge that you have read, understood, and agree to the data processing practices described in this Policy. This Policy is incorporated by reference into the 88lucky.ph Terms and Conditions.

2. Identity of the Personal Information Controller

For the purposes of the Philippine Data Privacy Act of 2012 and applicable NPC regulations, the Personal Information Controller (PIC) in respect of all personal data processed under this Policy is:

Queries regarding this Policy or 88lucky.ph's data processing activities may be directed to our Data Protection Officer (DPO) at the contact details set out in Section 15 of this Policy.

3. Categories of Personal Data We Collect

88lucky.ph collects personal data that is necessary for the lawful operation of our licensed gaming platform, fulfilment of PAGCOR regulatory requirements, and provision of our Services to Filipino players. The categories of personal data we process are set out in the table below.

We do not intentionally collect sensitive personal information as defined under the Data Privacy Act — such as racial or ethnic origin, political opinions, religious beliefs, or health records — unless directly relevant to a regulatory obligation (for example, documentation relating to a self-exclusion based on a disclosed gambling disorder).

4. How We Collect Personal Data

4.1 Directly from You

The majority of personal data we hold about you is provided directly by you through the following interactions:

• Completing the account registration form on 88lucky.ph;
• Submitting KYC identity verification documents;
• Making deposits and requesting withdrawals via GCash, Maya, or other payment channels;
• Contacting our customer support team via live chat or email;
• Setting responsible gaming preferences such as deposit limits or self-exclusion;
• Responding to promotions, surveys, or competitions.

4.2 Automatically During Your Use of the Platform

Technical and behavioural data is collected automatically when you access and use 88lucky.ph:

• Login events, session timestamps, and device fingerprinting for security purposes;
• Game activity logs — bets placed, results, RNG outcomes — stored on our secure game servers;
• Cookies and similar tracking technologies (see Section 10);
• Geolocation data derived from your IP address to confirm Philippine-based access.

4.3 From Third Parties

We may receive personal data about you from the following third-party sources:

• Payment Providers (GCash, Maya, BPI, BDO, Metrobank): Transaction confirmation data, account reference identifiers;
• KYC / Identity Verification Partners: Results of document authentication and biometric checks;
• PAGCOR and AMLC: Regulatory directives, exclusion lists, or investigation requests issued under Philippine law;
• Fraud Prevention Services: Risk scores, device reputation data, and blacklist information from certified fraud detection partners.

5. Purposes and Use of Personal Data

88lucky.ph processes your personal data for the following defined purposes only:

1. Account Registration and Management: Creating and maintaining your 88lucky.ph player account, including identity verification and authentication;
2. Service Delivery: Enabling access to games, processing bets, crediting winnings, and providing all features of the Platform;
3. Payment Processing: Facilitating deposits via GCash, Maya, and other accepted channels, and processing withdrawal requests;
4. PAGCOR Regulatory Compliance: Fulfilling all obligations under PAGCOR's licensing conditions, including player identification, transaction reporting, and responsible gaming implementation;
5. Anti-Money Laundering (AMLA) Compliance: Conducting required due diligence and reporting to the Anti-Money Laundering Council (AMLC) as mandated by Philippine law;
6. Fraud Prevention and Security: Detecting and preventing fraudulent accounts, suspicious transactions, and platform abuse;
7. Customer Support: Responding to queries, resolving disputes, and maintaining support records;
8. Responsible Gaming: Monitoring gaming patterns for signs of problem gambling, implementing player-requested limits, and managing self-exclusion;
9. Platform Improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience;
10. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — strictly to Players who have given explicit consent and have not opted out.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, all processing of personal data must be based on at least one lawful criterion. 88lucky.ph relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform our obligations under the account registration agreement and Terms and Conditions — including operating your account, processing deposits and withdrawals, and providing game access;
• Legal Obligation: Processing required by Philippine law, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, National Internal Revenue Code obligations, and NPC data privacy requirements;
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform optimisation, and customer support — where our legitimate interests as a regulated gaming operator are not overridden by your privacy rights;
• Consent: Processing for marketing communications and optional personalisation features — where you have freely, specifically, and unambiguously given consent, which you may withdraw at any time through Account Settings or by contacting our DPO.

7. Disclosure and Sharing of Personal Data

88lucky.ph discloses personal data only where there is a lawful basis to do so and strictly on a need-to-know basis. The categories of recipients to whom we may disclose your data are as follows:

7.1 Regulatory and Government Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), and any other Philippine government body with lawful authority to require such disclosure. Disclosure to these bodies is mandatory and does not require your consent.

7.2 Payment Service Providers

GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BPI, BDO, Metrobank, and other accepted payment processors receive transaction data necessary to process your deposits and withdrawals. These processors operate under their own privacy frameworks and Philippine BSP regulations.

7.3 KYC and Identity Verification Partners

Certified identity verification service providers who process your submitted government ID documents and biometric data solely for the purpose of completing your account verification as required by PAGCOR.

7.4 Technology and Infrastructure Providers

Cloud hosting, cybersecurity, customer support software, and data analytics providers who process data on our behalf as Personal Information Processors (PIPs) under written data processing agreements that require them to maintain equivalent data protection standards.

7.5 Game Providers

Third-party game studios and live dealer operators receive the minimum data necessary to operate their games on the 88lucky.ph Platform — typically anonymised player session tokens rather than directly identifiable personal data.

8. Data Retention

88lucky.ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying applicable legal, regulatory, accounting, and reporting requirements.

As a PAGCOR-licensed operator subject to Philippine AMLA obligations, we are required to retain transaction records and identity verification documents for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later. Game activity logs and financial records may be retained for up to seven (7) years for audit purposes.

Marketing preference data is retained until you withdraw consent. Customer support communications are retained for three (3) years following resolution. Technical and analytical data in aggregated, anonymised form may be retained indefinitely as it no longer constitutes personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 88lucky.ph's internal data disposal procedures.

9. Security Measures

88lucky.ph implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 88luckyph.vip is encrypted using industry-standard TLS 1.3 protocols;
• Data Encryption at Rest: Sensitive data stored on our servers — including identity documents and financial records — is encrypted using AES-256 encryption;
• Access Controls: Personal data is accessible only to authorised 88lucky.ph personnel who require access for legitimate operational purposes, governed by role-based access controls and audit logging;
• Two-Factor Authentication (2FA): Available and recommended for all player accounts to prevent unauthorised access;
• Regular Security Audits: Our platform infrastructure and data security practices undergo periodic independent security assessments;
• Incident Response: 88lucky.ph maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify affected Data Subjects and the NPC within the timeframes required by applicable law.

10. Cookies and Tracking Technologies

88lucky.ph uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you visit 88luckyph.vip.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of the Platform — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Remember your preferences — such as language settings, preferred game lobby view, and responsible gaming limit displays;
• Analytical Cookies: Collect aggregated, anonymised data on how players navigate and use the Platform to help us improve performance and user experience;
• Security Cookies: Support fraud detection and account security functions, including device fingerprinting for suspicious login detection.

88lucky.ph does not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 88lucky.ph. These rights may be exercised by contacting our Data Protection Officer at the details in Section 15.

Requests to exercise your data subject rights will be acknowledged within 3 business days and fulfilled within 30 calendar days of receipt, or as otherwise required by NPC regulations. 88lucky.ph will not charge a fee for exercising your rights unless requests are manifestly excessive or repetitive.

12. Minors and Age Restriction

If 88lucky.ph discovers that personal data has been collected from a person under 21 years of age, all such data will be immediately deleted and the associated account will be closed. Any deposits made and winnings generated by an underage account are subject to forfeiture in accordance with PAGCOR regulations.

If you are a parent or guardian and believe your child may have registered an account on 88lucky.ph, please contact our Data Protection Officer immediately at [email protected] so that we can take prompt remedial action.

13. Cross-Border Data Transfers

Some of 88lucky.ph's technology and service providers are located outside the Philippines. Where personal data is transferred to recipients in other countries, 88lucky.ph ensures that such transfers comply with NPC Circular 16-01 on Cross-Border Data Flows and that appropriate safeguards are implemented, including:

• Execution of Data Processing Agreements (DPAs) containing data protection clauses at least equivalent to Philippine law requirements;
• Verification that the recipient jurisdiction has substantially equivalent personal data protection laws, or implementation of additional contractual safeguards where it does not;
• Limitation of transferred data to the minimum necessary for the specific processing purpose.

Specific categories of data subject to cross-border transfer include: technical platform data processed by cloud infrastructure providers; game transaction data processed by certified international game providers; and fraud prevention data processed by international risk management partners. In all cases, these transfers are governed by binding contractual obligations.

14. Changes to This Privacy Policy

88lucky.ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material changes — those that significantly affect your rights or how we process your data — will be communicated to you via email notification to your registered address and/or a prominent notice on the Platform, at least seven (7) days before taking effect.

The effective date displayed at the top of this Policy reflects the version currently in force. We recommend reviewing this Policy periodically, particularly after receiving notification of updates. Your continued use of the 88lucky.ph Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

15. Contact Information and Data Protection Officer

All data subject rights requests, privacy complaints, and queries regarding this Policy should be directed to the 88lucky.ph Data Protection Officer (DPO):