88lucky.ph Privacy Policy

1.1  This Privacy Policy ("Policy") describes how 88lucky.ph ("we", "us", "our", "the Platform") collects, uses, discloses, stores, and otherwise processes the personal information of individuals ("you", "your", "Data Subject") who access or use the 88lucky.ph website at 88luckyph.co, including all associated services, games, and features (collectively, "the Platform").

1.2  This Policy applies to all personal data collected from:

• Registered players with active 88lucky.ph accounts;
• Prospective players who commence but do not complete registration;
• Visitors who browse the 88lucky.ph website without registering;
• Individuals who contact 88lucky.ph customer support by any channel.

1.3  This Policy should be read together with the 88lucky.ph Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated herein by reference.

1.4  This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission of the Philippines ("NPC").

2.1  88lucky.ph is the personal information controller responsible for your data. As the controller, 88lucky.ph determines the purposes and means by which your personal data is processed.

2.2  88lucky.ph has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act and NPC regulations. The DPO is responsible for ensuring 88lucky.ph's compliance with applicable data protection law and serves as the primary point of contact for all privacy-related inquiries.

2.3  Contact details for the 88lucky.ph Data Protection Officer are provided in Section 15 of this Policy.

3.1  88lucky.ph collects the following categories of personal data, depending on your level of interaction with the platform:

3.2  Sensitive Personal Information: Government-issued ID copies and financial account data may constitute sensitive personal information under the DPA. 88lucky.ph handles this data with heightened security controls and processes it solely for the purposes of identity verification and regulatory compliance.

3.3  88lucky.ph does not collect payment card (credit/debit card) numbers directly. Where card-based payments are available, they are processed by certified third-party payment service providers operating under their own PCI DSS compliance frameworks.

4.1  88lucky.ph collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, contacting customer support, or participating in promotions;
• Automated Technical Collection: Technical data collected automatically through your browser, mobile device, or the platform's systems when you access 88lucky.ph, including cookies, log files, and server-side analytics;
• Transaction Records: Payment and wagering data generated automatically as a result of your transactions and gaming activity on the platform;
• Third-Party Sources: In certain cases, identity or fraud verification data may be obtained from licensed third-party KYC and identity verification service providers who process data on our behalf under strict data processing agreements.

4.2  You are under no general legal obligation to provide personal data to 88lucky.ph. However, failure to provide certain mandatory data (such as mobile number, date of birth, and government ID for KYC) will prevent you from creating an account or accessing the platform's full functionality.

5.1  88lucky.ph processes your personal data for the following specific, legitimate, and declared purposes:

• Account Management: To register, maintain, administer, and, where necessary, close your 88lucky.ph account;
• Identity Verification and KYC: To verify your identity, age (21+), and eligibility to use the platform in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act;
• Payment Processing: To process deposits, withdrawals, and refunds through your registered payment methods including GCash, Maya, BDO, and BPI;
• Platform Delivery: To provide you with access to games, promotions, bonuses, and all other features of the 88lucky.ph platform;
• Customer Support: To respond to inquiries, resolve disputes, process complaints, and provide technical assistance;
• Regulatory Compliance: To meet our obligations under PAGCOR, AMLA, and DPA requirements, including transaction monitoring, suspicious activity reporting, and record-keeping;
• Fraud Prevention and Security: To detect, prevent, and investigate fraud, collusion, money laundering, unauthorized access, and other prohibited activities;
• Responsible Gaming: To monitor player behavior for signs of problem gambling and to facilitate the responsible gaming tools available on the platform;
• Service Improvement: To analyze platform usage patterns and technical performance for the purpose of improving the 88lucky.ph user experience;
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and platform updates. You may withdraw this consent at any time.

6.1  Under the Data Privacy Act of 2012, 88lucky.ph relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and 88lucky.ph — including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine statutes;
• Legitimate Interests: Processing necessary for the legitimate interests of 88lucky.ph, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential analytics, where your prior consent has been obtained. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

7.1  88lucky.ph does not sell, rent, or otherwise commercialize your personal data. We share your data only in the following limited circumstances:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), and other Philippine government authorities where disclosure is required by law or regulatory obligation;
• Payment Service Providers: GCash, Maya, banks, and other payment processors necessary to execute your deposit and withdrawal transactions. These providers process your data under their own privacy policies and are independently regulated;
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by 88lucky.ph to assist with regulatory compliance. These providers operate under data processing agreements aligned with the DPA;
• IT Infrastructure and Security Providers: Cloud hosting, cybersecurity, and fraud detection service providers who process data on 88lucky.ph's behalf under binding data processing agreements;
• Legal Proceedings: Courts, law enforcement agencies, or legal advisors where disclosure is required in connection with legal proceedings or to protect the rights and interests of 88lucky.ph or third parties;
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of the 88lucky.ph business, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

7.2  All third parties who receive your personal data from 88lucky.ph are contractually obligated to process such data only for the specified purpose and in accordance with applicable Philippine data protection law.

8.1  88lucky.ph uses the following types of cookies and tracking technologies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your 88lucky.ph account during an active session. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Store your platform preferences such as language settings and game lobby display options to improve your experience;
• Analytics Cookies: Collect anonymized or pseudonymized data about how visitors use the platform, which pages are visited most frequently, and how users navigate between sections. This data is used to improve platform performance and user experience;
• Security Cookies: Used for fraud detection, bot prevention, and unauthorized access identification.

8.2  Most web browsers allow you to control cookies through browser settings. Disabling strictly necessary cookies may prevent certain features of the 88lucky.ph platform from functioning correctly. Disabling analytics cookies will not affect your ability to play games or access your account.

8.3  88lucky.ph does not use third-party advertising cookies or behavioral retargeting technologies that track your activity across websites outside of 88luckyph.co.

9.1  88lucky.ph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 88lucky.ph platform;
• AES-256 encryption for sensitive data stored in our databases;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Multi-factor authentication for administrative access to systems containing personal data;
• Regular security audits and penetration testing of the platform infrastructure;
• Incident response procedures to detect, contain, and report personal data breaches in accordance with NPC reporting requirements.

9.2  Notwithstanding the security measures described above, no data transmission over the internet is completely secure. 88lucky.ph cannot guarantee the absolute security of data transmitted to the platform and is not liable for unauthorized interception beyond our reasonable control.

9.3  In the event of a personal data breach that is likely to affect your rights and freedoms, 88lucky.ph will notify you and the National Privacy Commission within the timeframes prescribed by the DPA and NPC regulations.

10.1  88lucky.ph retains personal data for the periods specified below, or for as long as required by applicable law:

• Account and identity data: For the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations;
• Transaction and financial data: Minimum of five (5) years from the date of each transaction, as required by AMLA and BIR regulations;
• KYC and verification documents: For the duration of account activity and a minimum of five (5) years post-closure;
• Customer support communications: For a period of three (3) years from the date of the communication, or longer if the matter is subject to ongoing legal proceedings;
• Technical and analytics data: Generally retained in anonymized or aggregated form for up to two (2) years.

10.2  Upon expiry of the applicable retention period, your personal data will be securely destroyed, deleted, or anonymized using industry-standard data destruction practices.

10.3  Where you exercise your right to erasure, 88lucky.ph will assess whether we are legally permitted to fulfill your request, given the mandatory retention periods imposed by PAGCOR, AMLA, and other applicable law. We will inform you of the outcome of that assessment within the prescribed period.

11.1  Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 88lucky.ph:

• Right to be Informed — You have the right to be informed that your personal data is being processed, the purpose of processing, and the identity of the data controller. This Policy serves as that notification.
• Right to Access — You may request a copy of the personal data 88lucky.ph holds about you, together with information about how it is being processed.
• Right to Rectification — If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure — You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR, AMLA, and other applicable law.
• Right to Object — You may object to the processing of your personal data, in particular where processing is based on legitimate interests or is used for direct marketing purposes.
• Right to Block or Restrict — You may request the suspension of processing of your personal data in certain circumstances, including while a rectification request is being assessed.
• Right to Data Portability — You may request a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Complain — If you believe that 88lucky.ph has not handled your personal data in compliance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11.2  To exercise any of the above rights, please contact the 88lucky.ph Data Protection Officer through the channels specified in Section 15. We will respond to your request within fifteen (15) business days of receipt, or within the period required by applicable NPC guidelines.

12.1  The 88lucky.ph platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21.

12.2  If you are a parent or guardian and believe that a person under 21 has provided personal data to 88lucky.ph or has accessed the platform, please contact us immediately via the channels in Section 15. We will promptly investigate, close the account, and securely delete the data collected.

12.3  Age verification is conducted at registration through the collection of date of birth information and government-issued ID. 88lucky.ph may supplement this with third-party age verification technology. Any account found to belong to an individual under 21 will be immediately terminated and all associated funds will be handled in accordance with applicable regulatory requirements.

13.1  The primary infrastructure and data storage systems of 88lucky.ph are located within or are managed in compliance with Philippine data protection law.

13.2  Where it is necessary to transfer your personal data to service providers located outside the Philippines — for example, cloud infrastructure providers or game content providers — 88lucky.ph ensures that such transfers are subject to appropriate safeguards, including binding contractual obligations equivalent in protection to those required under the DPA.

13.3  You consent to such cross-border transfers when you accept this Privacy Policy, subject to the safeguards described above.

14.1  88lucky.ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform functionality. The "Last Updated" date at the top of this Policy will reflect the most recent revision.

14.2  For material changes — such as changes to the categories of data collected, the purposes of processing, or your rights — we will endeavor to provide advance notice to registered players through their account notification channel or registered mobile number, where practicable.

14.3  Your continued use of the 88lucky.ph platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and consent to the revised Policy. We recommend reviewing this Policy periodically.

15.1  For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact the 88lucky.ph Data Protection Officer through any of the following channels:

• Email: [email protected] — please include "Data Privacy Request" in your subject line (email is plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week on the 88lucky.ph website — please state "Data Privacy Inquiry" at the start of your message
• Messenger / Viber: Via 88lucky.ph's official accounts — average response within 15–30 minutes

15.2  If you are not satisfied with our response to a data privacy inquiry or request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through its official complaint process.

15.3  All privacy-related communications with 88lucky.ph should be made in English to ensure accurate and timely handling by the appropriate team members.