phillucky
Privacy Policy

Overview

phillucky ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users who access phillucky.net and its associated services. This Privacy Policy describes how phillucky collects, uses, stores, shares, and protects personal information in connection with your use of the phillucky platform, including all games, account services, payment processing, and customer support functions.

This Privacy Policy applies to all registered players, visitors, and any other individuals whose personal data phillucky processes in connection with the operation of the Platform. It should be read together with phillucky's Terms & Conditions and Responsible Gaming Policy, both of which are available on this website.

phillucky processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, phillucky also observes internationally recognized data protection principles.

Data We Collect

phillucky collects the following categories of personal data in connection with the operation of the Platform:

2.1 Identity and Registration Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Gender (optional, where provided)
• Nationality and country of residence
• Government-issued identification numbers (e.g., Philippine passport number, SSS/UMID number, driver's license number) — collected during KYC verification

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including barangay, city/municipality, province, and postal code)

2.3 Financial Data

• GCash account details (mobile number linked to GCash)
• PayMaya / Maya account details
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where used for deposits or withdrawals
• Transaction history, including deposit amounts, withdrawal amounts, and dates
• Source of funds declarations where required by AML regulations

2.4 Gaming Activity Data

• Game session records, including games played, wager amounts, and outcomes
• Bonus and promotion usage history
• Account balance history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Session timestamps and duration
• Cookie identifiers and similar tracking technologies (see Section 10)

2.6 Communications Data

• Records of customer support interactions, including live chat transcripts and email correspondence
• Feedback and survey responses where voluntarily provided

How We Collect Data

phillucky collects personal data through the following means:

• Direct Collection: Data you provide when registering a phillucky account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access phillucky.net, including IP address, device information, and cookie data.
• Third-Party Sources: Identity verification data from KYC service providers; transaction data from payment processors such as GCash, PayMaya, and Philippine banking partners; fraud detection data from security service providers.
• Regulatory Sources: In certain circumstances, phillucky may receive data from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations.

Purpose of Processing

phillucky processes your personal data for the following specific purposes:

phillucky does not process your personal data for purposes incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for such processing.

Legal Basis for Processing

phillucky processes personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfill phillucky's obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate Interests: Processing necessary for phillucky's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as promotional communications, where phillucky has obtained your prior, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

phillucky does not sell your personal data. phillucky may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party service providers engaged to perform identity verification and document authentication as part of phillucky's KYC process.
• Fraud Prevention and Security Providers: Service providers that assist phillucky in detecting and preventing fraudulent activity, money laundering, and unauthorized account access.
• Game Technology Providers: Software providers whose games are offered on the phillucky platform, to the extent necessary for game operation and dispute resolution.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory directive.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by phillucky, subject to confidentiality obligations.

All third-party service providers engaged by phillucky are required to process personal data only on phillucky's instructions and in accordance with applicable data protection laws. phillucky does not authorize third parties to use your data for their own independent purposes.

Data Retention

phillucky retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active phillucky account, plus a minimum of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines.
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer Support Records: Retained for a minimum of two (2) years from the date of the last interaction.
• Technical and Device Data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.
• Marketing Consent Records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, phillucky will securely delete or anonymize your personal data in accordance with its data disposal procedures.

Data Security

phillucky implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phillucky's servers.
• Encryption of sensitive data at rest, including financial account details and government ID information.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of phillucky's systems.
• Multi-factor authentication requirements for administrative access to phillucky's data systems.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While phillucky takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your phillucky Login credentials and for notifying phillucky immediately if you suspect unauthorized access to your account.

Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phillucky:

• Right to be Informed: The right to be informed of how your personal data is collected, used, and processed — which this Privacy Policy fulfills.
• Right of Access: The right to request a copy of the personal data phillucky holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update certain account details directly through your phillucky account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phillucky's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phillucky has violated your data protection rights.

To exercise any of the above rights, please contact phillucky's Data Protection Officer using the contact details provided in Section 13 of this Policy. phillucky will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

Cookies Policy

phillucky uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit phillucky.net. The following categories of cookies are used:

phillucky does not use third-party advertising or behavioral tracking cookies. You may manage or disable cookies through your browser settings; however, disabling strictly necessary cookies may impair the functionality of the phillucky Platform, including your ability to log in and access games.

Minors

phillucky strictly prohibits access by persons under the age of 21. phillucky does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in the phillucky registration process, and phillucky employs KYC procedures specifically designed to detect and prevent underage registration.

If phillucky becomes aware that personal data has been collected from a person under the age of 21, phillucky will immediately close the relevant account, delete the associated personal data to the extent permitted by law, and take appropriate steps in accordance with applicable Philippine regulations.

If you are a parent or guardian and believe that a minor has registered on phillucky, please contact phillucky's support team immediately using the contact details in Section 13.

Policy Changes

phillucky reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or phillucky's data processing practices. The most current version of this Privacy Policy will always be available at phillucky.net/privacy-policy.

The effective date at the top of this document will be updated whenever a revision is made. Where changes are material, phillucky will notify registered players via email or an in-Platform notification prior to the changes taking effect. Your continued use of phillucky following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms.

Contact & Data Protection Officer

phillucky has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact phillucky through the following channels:

• Data Protection Officer Email: [email protected] (plain text — not a clickable link)
• General Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the phillucky Platform after phillucky Login.

phillucky aims to respond to all data subject requests and privacy-related inquiries within fifteen (15) business days. For complaints that cannot be resolved directly with phillucky, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines through official NPC channels.