phillucky Privacy Policy

This Privacy Policy ("Policy") describes how phillucky ("phillucky," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "the Player," or "the User") who access or use the phillucky website, mobile platform, games, and related services (collectively, the "phillucky Platform").

This Policy applies to all personal data collected through the phillucky Platform, including data collected during account registration, identity verification, gameplay, payment processing, customer support interactions, and marketing communications.

By accessing or using the phillucky Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using phillucky immediately.

This Policy should be read alongside phillucky's Terms & Conditions, which govern your overall use of the phillucky Platform.

phillucky is the data controller responsible for your personal data collected through the phillucky Platform. As data controller, phillucky determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

phillucky has designated a Data Protection Officer ("DPO") who is responsible for overseeing phillucky's data protection practices and ensuring compliance with applicable Philippine privacy law. You may contact phillucky's DPO using the contact details provided in Section 14 of this Policy.

phillucky collects the following categories of personal data, depending on how you interact with the phillucky Platform:

phillucky does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. phillucky does not collect biometric data except where required by specific KYC verification processes mandated by Philippine regulations.

phillucky collects your personal data through the following means:

• Direct Collection: Data you provide when registering a phillucky account, completing KYC verification, making deposits or withdrawals, contacting phillucky support, or participating in promotions;
• Automated Collection: Technical and usage data collected automatically when you access the phillucky Platform, including through cookies, web beacons, and server logs;
• Third-Party Sources: Identity and fraud-screening data received from KYC verification providers, payment processors (such as GCash and Maya), and Philippine government databases where permitted by law;
• Regulatory Sources: Data received from PAGCOR or other Philippine regulatory authorities in connection with phillucky's licensing and compliance obligations.

phillucky uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your phillucky account, including verifying your identity and age (21+ requirement) in compliance with Philippine law;
• Service Delivery: To provide access to phillucky's games, promotions, and platform features;
• Payment Processing: To process deposits and withdrawals through your chosen Philippine payment method (GCash, Maya, bank transfer, or debit card);
• Regulatory Compliance: To fulfill phillucky's obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the phillucky Platform;
• Responsible Gaming: To monitor gameplay patterns and identify players who may be experiencing gambling-related harm, and to administer self-exclusion and deposit limit tools;
• Customer Support: To respond to your inquiries, resolve disputes, and improve phillucky's support services;
• Marketing Communications: To send you promotional offers, bonus notifications, and phillucky news, where you have consented to receive such communications. You may opt out at any time;
• Platform Improvement: To analyze usage patterns and improve the phillucky Platform's performance, features, and user experience.

phillucky processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform phillucky's obligations under the Terms & Conditions you have agreed to, including account management and payment processing;
• Legal Obligation: Processing required to comply with phillucky's obligations under Philippine law, including PAGCOR regulations, AMLA requirements, and the Data Privacy Act;
• Legitimate Interests: Processing necessary for phillucky's legitimate interests in fraud prevention, platform security, and responsible gaming, where such interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phillucky does not sell, rent, or trade your personal data to third-party advertisers or data brokers. phillucky may share your personal data only in the following circumstances:

• Service Providers: phillucky shares data with trusted third-party service providers who assist in operating the phillucky Platform, including KYC verification providers, payment processors (GCash, Maya, Philippine banks), IT infrastructure providers, and customer support platforms. These providers are contractually bound to process your data only on phillucky's instructions and in compliance with the DPA;
• Regulatory Authorities: phillucky is required to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where required by law or regulatory directive;
• Law Enforcement: phillucky may disclose personal data to Philippine law enforcement agencies where required by a valid legal order, warrant, or subpoena;
• Business Transfers: In the event of a merger, acquisition, or sale of phillucky's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections;
• With Your Consent: phillucky may share your data with third parties where you have given explicit consent for such sharing.

phillucky retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements under Philippine law.

As a general guide, phillucky applies the following retention periods:

• Account and KYC data: Retained for the duration of your phillucky account plus a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering regulations;
• Support and communications data: Retained for up to three (3) years from the date of the interaction;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted or anonymized within a reasonable period.

When personal data is no longer required, phillucky securely deletes or anonymizes it in accordance with industry best practices and NPC guidelines.

phillucky implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. phillucky's security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and phillucky's servers;
• Encryption of sensitive data at rest, including financial and identity data;
• Role-based access controls limiting phillucky staff access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of phillucky's infrastructure;
• Multi-factor authentication requirements for phillucky staff accessing systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

phillucky uses cookies and similar tracking technologies (such as web beacons and local storage) on the phillucky Platform. Cookies are small text files stored on your device that help phillucky recognize you, remember your preferences, and improve your experience.

phillucky uses the following types of cookies:

• Strictly Necessary Cookies: Essential for the phillucky Platform to function. These cannot be disabled as they are required for security, session management, and core platform features;
• Performance & Analytics Cookies: Help phillucky understand how players use the platform, which pages are most visited, and where errors occur. This data is used in aggregate and anonymized form to improve phillucky;
• Functional Cookies: Remember your preferences (such as language settings) to provide a more personalized phillucky experience;
• Marketing Cookies: Used to deliver relevant phillucky promotions and measure the effectiveness of marketing campaigns. These are only set with your consent.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the phillucky Platform. For more information on managing cookies, refer to your browser's help documentation.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phillucky:

• Right to Be Informed: The right to be informed of how phillucky collects and processes your personal data – which this Policy fulfills;
• Right of Access: The right to request a copy of the personal data phillucky holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data phillucky holds about you;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phillucky's legal retention obligations;
• Right to Object: The right to object to phillucky's processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phillucky has violated your data privacy rights.

To exercise any of these rights, please contact phillucky's Data Protection Officer using the contact details in Section 14. phillucky will respond to all valid requests within thirty (30) days in accordance with NPC guidelines.

If you believe that a minor has registered a phillucky account or provided personal data to phillucky, please contact phillucky's support team immediately using the contact details in Section 14 so that appropriate action can be taken.

phillucky reserves the right to update or modify this Privacy Policy at any time to reflect changes in phillucky's data practices, applicable Philippine law, or NPC guidance. When phillucky makes material changes to this Policy, we will post a notice on the phillucky Platform and, where practicable, notify registered players by email.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of the phillucky Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy.

phillucky encourages you to review this Privacy Policy periodically to stay informed about how phillucky protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or phillucky's handling of your personal data, please contact phillucky's Data Protection Officer:

If you are not satisfied with phillucky's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.