luckycol Privacy Policy

This Privacy Policy ("Policy") describes how luckycol ("luckycol", "we", "us", "our") collects, uses, stores, and protects the personal information of users ("Player", "User", "you") who access or use the luckycol online gaming platform at luckycol.club and all associated services (collectively, the "Platform").

By registering an account or using any part of the luckycol Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

01 Introduction

luckycol is committed to protecting the privacy and personal data of every player on our platform. We understand that Filipino players trust us with sensitive information – from identity documents to financial transaction records – and we take that responsibility seriously.

This Policy applies to all personal data collected through the luckycol website, mobile platform, customer support channels, and any other touchpoint where you interact with luckycol. It covers data collected from players based in the Philippines and is designed to comply with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

luckycol acts as the Personal Information Controller in respect of the personal data described in this Policy. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.

02 Personal Data We Collect

luckycol collects the following categories of personal data from players:

03 How We Collect Your Data

luckycol collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the luckycol Platform, including IP addresses, device identifiers, browser information, and session data via cookies and similar tracking technologies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment data from GCash, PayMaya, and banking partners in connection with your transactions.
• Regulatory Sources: In certain circumstances, luckycol may receive information from regulatory authorities or law enforcement agencies in connection with compliance obligations.

04 How We Use Your Personal Data

luckycol uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your luckycol player account, including verifying your identity and age (21+ requirement ).
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in Philippine Peso (₱).
• Legal Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and reporting obligations to relevant regulatory authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming activity and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 Filipino support team.
• Marketing & Promotions: To send you information about luckycol promotions, bonuses, and offers where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, improve game offerings, and enhance the overall luckycol player experience.

05 Legal Basis for Processing

luckycol processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173):

• Contractual Necessity: Processing required to perform our contract with you, including operating your account, processing payments, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and gaming regulatory obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights.
• Consent: Processing for marketing communications and certain optional features, where you have given explicit consent. You may withdraw consent at any time by contacting our support team.

06 Data Sharing & Disclosure

luckycol does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only as necessary and as described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions.
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age in compliance with regulatory requirements.
• Fraud Prevention Partners: Anti-fraud and security service providers who assist luckycol in detecting and preventing fraudulent activity.
• Game Providers: Third-party game software providers may receive limited technical data necessary to deliver their games on the luckycol Platform.
• Regulatory Authorities: Philippine gaming regulators, the National Privacy Commission, law enforcement agencies, and other government bodies where disclosure is required by law or court order.
• Professional Advisers: Legal, accounting, and auditing firms engaged by luckycol, subject to strict confidentiality obligations.

All third parties with whom luckycol shares personal data are required to implement appropriate data protection measures and to process your data only for the specified purpose.

07 Cookies & Tracking Technologies

luckycol uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the luckycol website. We use the following types of cookies:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session and security features. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how players use the Platform, helping us identify areas for improvement.
• Functional Cookies: Remember your preferences such as language settings and display options to personalise your experience.
• Analytics Cookies: Used to understand aggregate player behaviour and Platform usage patterns.

You can control non-essential cookies through your browser settings. However, disabling certain cookies may affect the functionality of the luckycol Platform. By continuing to use the Platform, you consent to our use of cookies as described in this Policy.

08 Data Retention

luckycol retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.

Specifically:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with Philippine AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Retained for the period required by applicable Philippine regulations, typically five (5) years from the end of the business relationship.
• Support Communications: Retained for up to three (3) years from the date of the interaction.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.

When personal data is no longer required, luckycol will securely delete or anonymise it in accordance with our data retention procedures.

09 Data Security

luckycol implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and the luckycol Platform is encrypted using industry-standard SSL/TLS protocols.
• Secure Data Storage: Personal data is stored on secure servers with restricted access controls and regular security audits.
• Access Controls: Only authorised luckycol personnel with a legitimate business need may access your personal data, and all such access is logged and monitored.
• Two-Factor Authentication: Available for player accounts to provide an additional layer of security for your luckycol login.
• Regular Security Testing: luckycol conducts regular penetration testing and vulnerability assessments to identify and address potential security weaknesses.

10 Your Data Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by luckycol:

• Right to Be Informed: The right to know what personal data luckycol collects and how it is used – which is the purpose of this Policy.
• Right of Access: The right to request a copy of the personal data luckycol holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at: [email protected]. We will respond to all verified requests within thirty (30) days.

11 Children's Privacy

The luckycol Platform is strictly intended for adults. In the Philippines, the minimum legal age for casino-style gambling is 21 years. luckycol does not knowingly collect personal data from any person under the age of 21.

All accounts are subject to age verification during the KYC process. If luckycol discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all data will be securely deleted, and any balances will be held pending investigation in accordance with applicable regulations.

If you believe a minor has registered on the luckycol Platform, please contact our support team immediately at [email protected].

12 Third-Party Links

The luckycol Platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies only to the luckycol Platform. luckycol is not responsible for the privacy practices of any third-party websites, and we encourage you to review the privacy policies of any third-party sites you visit.

13 Changes to This Policy

luckycol reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We recommend reviewing this Policy periodically. Your continued use of the luckycol Platform after any amendment constitutes your acceptance of the revised Policy.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the luckycol Data Protection Officer:

Email: [email protected]

Our support team is available 24/7 in English and Filipino. For formal data subject requests, please include your full name, registered email address, and a description of your request so we can verify your identity and respond promptly.