luck678 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how luck678 ("the Company," "we," "us," or "our"), operator of the online casino and sports betting platform accessible at https://luck678.app, collects, uses, stores, shares, and protects the personal information of its registered players and website visitors ("you" or "Data Subject").

luck678 is deeply committed to safeguarding the personal data of every Filipino player who trusts us with their information. Whether you are accessing our platform from Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines, the same high standard of data protection applies to you without exception.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. Together, these documents form the complete legal framework governing your relationship with luck678.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, luck678 acts as the Personal Information Controller (PIC) in respect of all personal data collected through this platform.

As the PIC, luck678 determines the purposes and means of processing your personal data and bears full accountability for ensuring that all processing activities comply with applicable Philippine data protection law and PAGCOR regulatory requirements.

3. Data We Collect

luck678 collects personal data that falls into the following categories. We collect only what is necessary and proportionate to the specific purpose for which it is being processed.

luck678 does not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, political affiliations, or religious beliefs) unless specifically required for regulatory compliance and with your explicit consent.

4. How We Collect Your Data

luck678 collects personal data through the following methods and channels:

• Direct Registration: Information you provide when creating your luck678 account, completing KYC verification, or updating your account profile
• Platform Activity: Data generated automatically as you use luck678 services, including game play, wagers placed, and deposits or withdrawals made
• Payment Processors: Transaction-related data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers when you conduct financial transactions
• Device and Browser: Technical data collected automatically via cookies, log files, and similar technologies when you visit or use the luck678 platform
• Support Interactions: Information you voluntarily provide when contacting our customer support team via live chat or email
• Identity Verification Services: Data received from third-party KYC and AML verification providers where required for compliance purposes

5. Legal Basis for Processing

luck678 processes your personal data only where a valid legal basis exists under the Philippine Data Privacy Act of 2012. The applicable legal bases are as follows:

• Contractual Necessity: Processing necessary to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including operating your account and processing transactions
• Legal Obligation: Processing required to comply with PAGCOR regulations, anti-money laundering (AML) laws, tax reporting obligations, and other applicable Philippine legal requirements
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear and freely given consent and retain the right to withdraw that consent at any time

6. How We Use Your Data

luck678 uses the personal data we collect for the following specific and legitimate purposes:

• Creating and managing your luck678 player account
• Verifying your identity and age (21+) in accordance with PAGCOR requirements
• Processing deposits, withdrawals, and other financial transactions via GCash, PayMaya, and Philippine banks
• Monitoring transactions for anti-money laundering (AML) compliance and fraud prevention
• Providing and improving our casino games, sports betting, bingo, crash, and mine game services
• Delivering customer support and resolving disputes in a timely manner
• Monitoring gameplay for responsible gaming indicators and applying protective interventions where necessary
• Sending account-related notifications, security alerts, and transaction confirmations
• Sending promotional communications about luck678 offers, where you have opted in to receive such communications
• Fulfilling reporting obligations to PAGCOR and other competent Philippine regulatory authorities
• Conducting internal analytics to improve platform performance, user experience, and security posture

7. Data Sharing & Disclosure

luck678 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data protection agreements:

7.1 Service Providers

Trusted third-party vendors who assist in delivering our platform services, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC/identity verification providers, cloud infrastructure providers, and customer support platforms. All service providers are contractually bound to handle your data in accordance with this Policy and applicable law.

7.2 Regulatory Authorities

luck678 is required to disclose player information to PAGCOR, the National Privacy Commission of the Philippines, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine authorities where mandated by law or regulatory order.

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or part of luck678's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer.

7.4 Legal Proceedings

luck678 may disclose personal data where required to comply with a court order, subpoena, or other legal process, or to protect the rights, property, or safety of luck678, its players, or the public.

8. Cookies & Tracking Technologies

luck678 uses cookies and similar tracking technologies to operate and improve our platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function, including maintaining your login session and processing transactions. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options to improve your experience on luck678.
• Analytics Cookies: Help us understand how players use luck678, which pages are most visited, and where technical issues arise, so we can continuously improve the platform.
• Security Cookies: Used for fraud detection, bot prevention, and maintaining the integrity of the luck678 platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the luck678 platform. luck678 does not use third-party advertising or behavioral tracking cookies.

9. Data Retention

luck678 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your active relationship with luck678
• Financial Records & Transaction History: Retained for a minimum of five (5) years following the last transaction, as required by PAGCOR and AMLC regulations
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later
• Support Communications: Retained for two (2) years following the resolution of the relevant support case
• Marketing Data: Retained until you withdraw your consent or for a maximum of three (3) years following your last engagement with marketing communications, whichever comes first

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our internal data lifecycle management procedures.

10. Data Security

luck678 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption for data stored on luck678 servers
• TLS/SSL encryption for all data transmitted between your device and the luck678 platform
• Bcrypt hashing for all account passwords — your password is never stored in readable form
• Role-based access controls ensuring that only authorized personnel can access personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing of platform infrastructure
• Incident response procedures enabling rapid detection, containment, and notification of any data security breach
• Staff training on data protection obligations and secure data handling practices

While luck678 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and notifying us immediately if you suspect any unauthorized access to your account.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by luck678:

• Right to Be Informed: The right to know that your personal data is being collected and processed, and to be provided with this Privacy Policy at the time of collection
• Right of Access: The right to request a copy of the personal data luck678 holds about you and information about how it is being processed
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held in your luck678 account
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another controller where technically feasible
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or based on legitimate interests, where your fundamental rights override those interests
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that luck678 has violated your data privacy rights

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 16 of this Policy. luck678 will respond to all verified data subject requests within thirty (30) days, as required by law.

12. Children & Minors

The luck678 platform is strictly intended for adults aged 21 years and above. luck678 does not knowingly collect personal data from persons under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will promptly delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has accessed or registered on the luck678 platform, please contact our support team immediately so that we can take the appropriate action without delay.

13. International Data Transfers

luck678 primarily stores and processes personal data within the Philippines or in jurisdictions that provide an equivalent level of data protection. Where it becomes necessary to transfer your personal data outside the Philippines — for example, to cloud infrastructure providers or KYC verification services operating in other countries — luck678 will ensure that such transfers are carried out in accordance with the requirements of the Philippine Data Privacy Act, including the use of appropriate contractual safeguards such as standard contractual clauses.

luck678 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards and, where required, obtaining your prior consent.

14. Third-Party Services

The luck678 platform may integrate with certain third-party service providers to deliver our gaming and payment services, including payment gateways (GCash, PayMaya, BPI, BDO, Metrobank), game software providers, and KYC verification services. These third parties may process your personal data as data processors acting on luck678's instructions, or in some cases as independent data controllers under their own privacy policies.

luck678 conducts due diligence on all third-party service providers to ensure that they meet appropriate data protection standards. We enter into data processing agreements with all providers who process personal data on our behalf.

Please note that luck678's Privacy Policy does not govern the data practices of any third-party service providers operating under their own independent privacy frameworks.

15. Updates to This Privacy Policy

luck678 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. The most current version of this Policy will always be available on this page, with the "Last Updated" date clearly indicated at the top.

Where changes to this Policy are material — meaning they meaningfully affect how we collect, use, or share your personal data — luck678 will notify you by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect. Your continued use of the luck678 platform following the effective date of any revised Policy constitutes your acceptance of those changes.

We encourage you to review this Privacy Policy periodically to stay informed about how luck678 is protecting your personal information.

16. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by luck678, please contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly on the luck678 platform — the fastest way to reach us
• Email: support [at] luck678.app — please include "Privacy Request" in the subject line for faster routing

luck678's DPO is responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. All data subject requests and privacy complaints are handled directly by the DPO and will receive a formal response within thirty (30) days of receipt.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the government body responsible for enforcing RA 10173.