phlucky Privacy Policy – How We Collect and Protect Your Data

When you register for an account on phlucky, we collect personal information that is necessary to verify your identity and provide you with a safe, compliant gaming experience in the Philippines. This includes your full legal name, date of birth, mobile number, and email address, all of which are required at the point of registration. When you make a deposit or request a withdrawal, we also collect transaction-related information such as your GCash or Maya account details, transaction reference numbers, and the amounts involved in each transaction. We automatically collect certain technical data when you access our platform, including your device type, operating system, browser version, IP address, and session timestamps, which help us detect unusual activity and maintain platform security. If you contact our support team, we retain records of those communications — including the content of your messages and any attachments you send — so that we can follow up accurately and improve our service over time. We do not collect sensitive personal information such as government-issued ID numbers unless you are required to complete identity verification as part of our compliance process, in which case that data is handled with the highest level of care. All information collected is limited to what is genuinely necessary for the purposes described in this policy, and we do not collect data speculatively or beyond what our operations require.

The personal information you provide to phlucky is used primarily to operate your account, process your deposits and withdrawals, and deliver the gaming services you have signed up for. We use your contact details to send you important account notifications — such as confirmation of deposits, withdrawal status updates, and security alerts — and we will only send you promotional communications if you have opted in to receive them. Your technical and session data is used to monitor platform performance, identify and resolve technical issues, and detect patterns that may indicate fraudulent or unauthorised activity on your account. We may use aggregated, anonymised data about how players interact with the platform to improve our game offerings, optimise the mobile experience, and develop new features that better serve players across the Philippines. Where required by Philippine law or applicable gaming regulations, we may use your information to fulfil our legal and compliance obligations, including anti-money laundering checks and responsible gaming assessments. We do not use your personal data to make automated decisions that produce legal or similarly significant effects on you without human review. Any use of your data beyond the purposes listed here will only occur with your explicit consent or where we are legally required to do so.

phlucky does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes — this is an absolute commitment we make to every player on our platform. We may share limited personal data with trusted service providers who assist us in operating the platform, such as payment processors (GCash, Maya), identity verification services, and cloud infrastructure providers, but only to the extent necessary for them to perform their specific function. All third-party service providers we work with are contractually required to handle your data in accordance with applicable Philippine data protection laws and to use it solely for the purpose for which it was shared. We may disclose your information to Philippine government authorities, law enforcement agencies, or regulatory bodies when we are legally required to do so, or when we have a good-faith belief that disclosure is necessary to protect the rights, safety, or property of phlucky, our players, or the public. In the event that phlucky undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the successor entity, and you will be notified of any such change in advance. We do not share your data with any entity located outside the Philippines unless that entity provides an equivalent or higher level of data protection as required under Philippine law. If you have questions about specific third parties we work with, you may contact our support team at the email address listed in the footer of this page.

phlucky implements a range of technical and organisational security measures designed to protect your personal information from unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and our platform is encrypted using industry-standard TLS (Transport Layer Security) protocols, ensuring that your login credentials and transaction details cannot be intercepted in transit. Account passwords are stored using one-way cryptographic hashing, which means that even our own staff cannot view your password — only you know it, and we will never ask you to share it with anyone. Access to personal data within our organisation is restricted on a strict need-to-know basis, and all staff who handle player data are trained in data protection responsibilities and bound by confidentiality obligations. We conduct regular internal reviews of our security practices and update our systems in response to emerging threats, ensuring that our protections remain current and effective. In the unlikely event of a data breach that poses a risk to your rights or freedoms, we will notify you and the relevant Philippine authorities within the timeframes required by law. We strongly encourage you to use a unique, strong password for your phlucky account and to enable any additional security features available in your account settings to further protect your information.

As a player based in the Philippines, you have specific rights over your personal data under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. You have the right to be informed about how your data is collected and used, which is the primary purpose of this Privacy Policy, and you may request a copy of the personal information we hold about you at any time by contacting our support team. You have the right to correct any inaccurate or incomplete personal data in your account, and we will process such correction requests promptly upon verification of your identity. If you wish to have your personal data deleted, you may submit a request to our support team, and we will action it to the extent permitted by our legal and regulatory obligations — some data may need to be retained for a minimum period under Philippine gaming regulations. You have the right to object to the processing of your personal data for direct marketing purposes, and you may withdraw any consent you have previously given at any time without affecting the lawfulness of processing carried out before the withdrawal. If you believe that your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. To exercise any of these rights, please contact us using the email address shown in the footer of this page, and we will respond within the timeframes required by applicable law.

phlucky may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine laws, or the services we offer on the platform. When we make material changes, we will update the effective date shown at the top of this page and, where appropriate, notify registered players through the contact details held on their account. We encourage you to review this page periodically so that you remain informed about how we are protecting your personal information. Your continued use of the phlucky platform after any changes have been published constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and contact our support team to request account closure and data deletion where applicable. For any questions or concerns about this Privacy Policy or our data handling practices, please reach out to us at the email address listed in the footer below — we are committed to responding promptly and transparently to all privacy-related enquiries.