Privacy Policy

1.1 For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and this Privacy Policy, the personal information controller responsible for your personal data is:

luckypiso

Platform: https://luckypiso.vip

Email (Data Privacy): [email protected]

Regulatory Status: PAGCOR-regulated online gaming platform

Applicable Law: Republic Act No. 10173, Data Privacy Act of 2012

1.2 luckypiso has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. The DPO may be contacted via the details in Section 15 of this document.

1.3 In certain processing activities, luckypiso acts as a personal information processor on behalf of PAGCOR and other regulatory authorities as required by applicable law. In such cases, luckypiso processes your data strictly pursuant to the instructions of the relevant regulatory body and applicable legal obligations.

2.1 This Privacy Policy applies to all personal data collected by luckypiso in connection with your use of the luckypiso platform, including:

• The luckypiso website accessible at https://luckypiso.vip and all subdomains;
• The mobile web interface of luckypiso accessible via any internet-connected browser;
• Account registration, KYC verification, and identity management processes;
• All financial transactions, including deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, GrabPay, QR Ph, and 7-Eleven CLiQQ;
• Customer support interactions via Live Chat or email;
• All gaming activity and session data generated while using luckypiso services.

2.2 This Privacy Policy does not apply to third-party payment processors, game providers, or other external services that you may interact with through or alongside luckypiso. Those entities process data under their own privacy policies and are independently responsible for their data practices.

3.1 luckypiso collects the following categories of personal data. The specific data collected depends on how you interact with the platform:

3.2 Data You Provide Voluntarily. Most of the personal data luckypiso holds is provided directly by you during registration, KYC verification, payment processing, and your interactions with the platform and support team. Providing accurate information is a condition of using luckypiso.

3.3 Automatically Collected Data. Certain technical and usage data is collected automatically when you access luckypiso, using cookies and similar technologies as described in Section 9. This data is used to ensure platform security, prevent fraud, and improve the user experience.

4.1 luckypiso processes your personal data only for specific, lawful purposes. The following table maps each processing purpose to the relevant data categories:

• Account Registration & Management: To create and maintain your luckypiso account, authenticate your identity at login, and manage account settings and preferences;
• KYC & Age Verification: To verify that you are at least 21 years of age and are the person you claim to be, as required by PAGCOR regulations and applicable Philippine law;
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, GrabPay, QR Ph, and 7-Eleven CLiQQ;
• Game Provision: To provide access to casino games, sports betting markets, and all other luckypiso services;
• Legal & Regulatory Compliance: To meet obligations under PAGCOR licensing, the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and other applicable Philippine law;
• Anti-Money Laundering (AML): To screen transactions, detect suspicious financial activity, and comply with AMLC reporting requirements;
• Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and abuse of platform systems;
• Responsible Gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion periods, and provide player protection tools as required by PAGCOR;
• Customer Support: To respond to your queries, complaints, and support requests through Live Chat and email;
• Marketing & Promotions: To send you relevant promotional offers, bonus notifications, and luckypiso news, where you have consented to receive such communications;
• Platform Improvement: To analyze usage data and improve the performance, features, and design of luckypiso;
• Dispute Resolution: To investigate and resolve disputes regarding game outcomes, transactions, or account activity.

5.1 Under the Data Privacy Act of 2012, luckypiso processes personal data on the following lawful bases:

• Contract Performance: Processing necessary to perform the contract between luckypiso and the User — including account creation, payment processing, and game provision;
• Legal Obligation: Processing required to comply with luckypiso's obligations under PAGCOR regulations, the Data Privacy Act, AMLA, and other Philippine law, including KYC, AML reporting, and regulatory record-keeping;
• Legitimate Interest: Processing necessary for luckypiso's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights;
• Consent: Processing based on your freely given, specific, and informed consent, such as the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 We Do Not Sell Your Data. luckypiso does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data shared with third parties is shared only for the specific purposes described in this section.

6.2 Categories of Recipients. luckypiso may share your personal data with the following categories of recipients:

• PAGCOR: As luckypiso's primary gaming regulator, PAGCOR may require player activity data, KYC records, financial transaction reports, and responsible gaming data for compliance and oversight purposes;
• Anti-Money Laundering Council (AMLC): luckypiso is required to file covered and suspicious transaction reports with the AMLC as mandated by the Anti-Money Laundering Act and PAGCOR directives;
• National Privacy Commission (NPC): The NPC may receive data in connection with data breach notifications, compliance audits, or formal complaints as required by RA 10173;
• Payment Service Providers: GCash (GXI), Maya (PayMaya Philippines), BPI, BDO Unibank, Metrobank, Instapay operators, PesoNet operators, GrabPay, and 7-Eleven CLiQQ operators receive the minimum necessary financial data to process your deposit and withdrawal transactions;
• Game Providers: Licensed game software providers supplying the casino titles on luckypiso may receive anonymized session data required for game operation, RNG certification, and responsible gaming monitoring;
• KYC & Identity Verification Services: Accredited third-party identity verification providers may process your KYC documents on luckypiso's behalf under strict data processing agreements;
• Law Enforcement & Courts: luckypiso may disclose personal data in response to lawful court orders, subpoenas, or requests from Philippine law enforcement authorities acting within their legal authority;
• Professional Advisers: Legal counsel, auditors, and accountants subject to professional confidentiality obligations, where necessary for compliance or dispute resolution purposes.

7.1 luckypiso retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention standards apply:

• Active Account Data: Retained for the duration of your active luckypiso account relationship plus a minimum of five (5) years following account closure, as required for PAGCOR compliance and AMLA record-keeping;
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure (whichever is later), in compliance with AMLA record-keeping requirements applicable to covered institutions;
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, as required by PAGCOR regulations and AMLA requirements;
• Gaming Session Logs: Retained for a minimum of two (2) years from the date of each session for dispute resolution and regulatory audit purposes;
• Customer Support Communications: Retained for two (2) years from the date of the relevant interaction or closure of the related issue;
• Marketing Consent Records: Retained from the date of consent until withdrawal of consent, plus a reasonable period to demonstrate compliance;
• Technical & Usage Data: Retained for up to twelve (12) months for fraud detection, security analysis, and platform performance purposes.

7.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where deletion is not immediately technically feasible, the relevant data is isolated and protected pending secure deletion at the earliest practicable time.

8.1 luckypiso implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and luckypiso is encrypted using SSL/TLS protocols. The padlock icon in your browser's address bar confirms the secure connection;
• Data Encryption at Rest: Sensitive personal data, including KYC documents and financial information, is encrypted in storage using industry-standard encryption algorithms;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Personnel with access to player data are subject to confidentiality obligations and undergo regular security training;
• Segregated Player Funds: Player account balances are held in accounts segregated from luckypiso's operating accounts, reducing the risk of financial data commingling;
• Two-Factor Authentication: Account login supports 2FA via SMS OTP to your registered Philippine mobile number or via authenticator app, reducing the risk of unauthorized account access;
• Fraud Detection Systems: Automated systems monitor transactions and login activity for patterns indicative of fraud or unauthorized access;
• Regular Security Assessments: luckypiso conducts periodic reviews of its data processing and security practices to identify and address potential vulnerabilities.

8.2 Your Role in Security. While luckypiso takes reasonable steps to protect your data, account security also depends on you. You are responsible for maintaining the confidentiality of your luckypiso login credentials and for enabling available security features such as 2FA. Notify luckypiso immediately if you suspect your account has been compromised.

9.1 luckypiso uses cookies and similar browser-based technologies to enhance your experience on the platform, maintain session security, and analyze usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and login state cookies. These cannot be disabled without preventing normal platform operation;
• Functional Cookies: Store your preferences and settings (such as language, last-played games, and notification settings) to provide a personalized experience across sessions;
• Analytics Cookies: Collect anonymized or pseudonymized information about how users navigate luckypiso, which pages are most visited, and where users encounter errors. This data helps luckypiso improve the platform. Used with your consent;
• Security Cookies: Support fraud detection and bot prevention systems by analyzing behavioral patterns during your session.

9.2 Managing Cookies. You can manage non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet) allow you to view, delete, and block cookies. Blocking strictly necessary cookies will impair your ability to use luckypiso. For mobile devices, cookie settings are typically found in your browser's Privacy or Site Settings section.

10.1 luckypiso is strictly prohibited from being used by individuals under 21 years of age in accordance with PAGCOR's player protection framework and applicable Philippine law. luckypiso does not knowingly collect or process personal data of persons under 21.

10.2 All registrants are required to complete KYC age verification before withdrawal privileges are activated. luckypiso reserves the right to request age verification at any stage of account use where there is reasonable suspicion that the account holder may not meet the minimum age requirement.

10.3 If luckypiso discovers that a luckypiso account has been registered by or on behalf of a person under 21 years of age, the Account will be immediately suspended, the matter reported to PAGCOR as required by its regulations, and any funds deposited returned subject to verification of the source of funds and applicable regulatory requirements.

11.1 Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by luckypiso:

11.2 Exercising Your Rights. To exercise any of the above rights, contact luckypiso's Data Protection Officer via Live Chat or at [email protected] with the subject line "Data Privacy Request." luckypiso will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days, extendable by a further fifteen (15) business days where the complexity of the request requires it.

11.3 Verification. For the security of your data, luckypiso may require you to verify your identity before processing a data subject rights request. This is to ensure that personal data is not disclosed to or amended by unauthorized persons.

12.1 luckypiso's primary data processing is conducted within the Philippines. Certain data processing activities may involve transfer of personal data to third-party service providers or game platform suppliers located outside the Philippines, including within the Asia-Pacific region.

12.2 Where personal data is transferred outside the Philippines, luckypiso ensures that such transfers are subject to appropriate safeguards, including:

• Contractual clauses requiring the recipient to protect personal data to the standard required by the Data Privacy Act of 2012;
• Verification that the recipient jurisdiction provides an adequate level of protection for personal data;
• Additional technical and organizational measures where the level of protection in the recipient jurisdiction is assessed as lower than the Philippine standard.

12.3 Details of the specific safeguards applied to any cross-border data transfer may be requested from luckypiso's Data Protection Officer.

13.1 If you have a concern about how luckypiso has handled your personal data, we encourage you to contact the luckypiso Data Protection Officer in the first instance (see Section 15). luckypiso will endeavour to address your concern promptly and fairly.

13.2 If your concern is not resolved to your satisfaction through luckypiso's internal process, you have the right to file a complaint with the National Privacy Commission of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.

13.3 Details about how to file a complaint with the NPC are available on the official website of the National Privacy Commission of the Philippines. luckypiso respects the NPC's authority and will cooperate fully with any NPC investigation or inquiry.

14.1 luckypiso may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements.

14.2 Material changes to this Privacy Policy will be communicated to registered users via email to the address on file, or via a notice displayed prominently on the luckypiso platform prior to the changes taking effect. The revised effective date at the top of this document will be updated with each revision.

14.3 Your continued use of luckypiso following notification of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the updated policy, you must cease using luckypiso and may request account closure in accordance with the Terms & Conditions. See the Terms & Conditions for the account closure process.

For all privacy-related queries, data subject rights requests, or concerns regarding this Privacy Policy, contact luckypiso's designated Data Protection Officer:

This Privacy Policy was last reviewed and updated on 1 January 2026. luckypiso recommends that all users review this document periodically to remain informed of the current data practices governing the platform.