88 Lucky Casino – Privacy Policy

This Privacy Policy ("Policy") describes how 88 Lucky Casino ("88 Lucky," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Player") who access or use the 88 Lucky platform at https://88-lucky.org ("Platform"), including all associated games, features, and services.

This Policy applies to all personal data processed by 88 Lucky in connection with your use of the Platform, whether you are a registered player, a visitor browsing the site, or a person who contacts us through our support channels. It covers data collected online through the Platform as well as data collected through other means in connection with your account, such as KYC documentation submitted by email or through our support team.

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

88 Lucky Casino is the data controller responsible for your personal information collected through the Platform. As data controller, 88 Lucky determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

88 Lucky has appointed a Data Privacy Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.

88 Lucky collects the following categories of personal data in connection with your use of the Platform:

• Full legal name (as it appears on your government-issued ID)
• Date of birth
• Nationality and country of residence
• Residential address (including barangay, city/municipality, province)
• Email address
• Mobile phone number
• Government-issued ID number and copies of ID documents (for KYC purposes)

• Username and encrypted password
• Account registration date and history
• Deposit and withdrawal history, including amounts, dates, and payment methods used
• GCash or PayMaya account details (mobile number and registered name) or bank account details (BPI, BDO, Metrobank) used for transactions
• Bonus and promotion history
• Account balance and transaction records

• Games played, bet amounts, win/loss records, and session durations
• Responsible gaming settings (deposit limits, session limits, self-exclusion status)
• Game preferences and platform usage patterns

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Session logs, including login times, pages visited, and actions taken on the Platform
• Cookie identifiers and similar tracking data (see Section 8)

• Records of communications with our customer support team, including live chat transcripts, email correspondence, and support ticket history
• Feedback, complaints, and survey responses submitted by you

88 Lucky does not intentionally collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive information is collected (such as government ID numbers), it is handled with heightened security measures.

88 Lucky collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, server logs, and similar technologies (see Section 8).
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud and anti-money laundering screening services; payment data from payment processors (GCash, PayMaya, BPI, BDO, Metrobank) to the extent necessary to process your transactions.

88 Lucky processes your personal data on the following legal bases and for the following purposes:

88 Lucky does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

Third-party service providers who assist 88 Lucky in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, fraud prevention services, cloud hosting providers, and customer support platform providers. These service providers are contractually bound to process your data only on 88 Lucky's instructions and in accordance with applicable data privacy laws.

88 Lucky may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.

In the event of a merger, acquisition, restructuring, or sale of all or part of 88 Lucky's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

88 Lucky may share your personal data with other third parties where you have given your explicit consent to such sharing. You may withdraw your consent at any time by contacting our Data Privacy Officer.

88 Lucky retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five (5) years from the date of the last transaction or account closure, as required by Philippine anti-money laundering regulations (RA 9160, as amended).
• KYC documents: Retained for a minimum of five (5) years from account closure or the date of the last transaction, whichever is later.
• Gaming activity data: Retained for three (3) years from the date of the activity, unless a longer retention period is required for regulatory or dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless the matter is subject to ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent.
• Technical and device data (logs): Retained for ninety (90) days for security monitoring purposes, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 88 Lucky's data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated and protected from further processing until deletion is possible.

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device, remember your preferences, and collect information about how you use the site. 88 Lucky uses cookies and similar technologies (such as local storage and session storage) on the Platform.

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymized information about how players use the Platform, such as which pages are visited most frequently and whether error messages are received. This data helps us improve the Platform's performance and user experience.
• Functional Cookies: These cookies allow the Platform to remember your preferences, such as your preferred language or display settings, to provide a more personalized experience.

88 Lucky does not use third-party advertising or tracking cookies. We do not allow third-party advertisers to place cookies on the Platform.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the Platform, including logging in to your account.

88 Lucky takes the security of your personal data seriously and implements a range of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS technology. Sensitive data stored in our databases, including passwords and payment details, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorized 88 Lucky personnel and service providers who require it to perform their functions. All staff with access to personal data are subject to confidentiality obligations and receive regular data privacy training.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for and respond to suspicious activity in real time.
• Regular Security Audits: 88 Lucky conducts regular security assessments and penetration testing to identify and address vulnerabilities in our systems.
• Incident Response: In the event of a personal data breach, 88 Lucky has procedures in place to contain the breach, assess its impact, notify affected individuals and the National Privacy Commission (NPC) as required by law, and take remedial action.

While 88 Lucky takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 88 Lucky:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data 88 Lucky holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update basic account information directly through your account settings.
• Right to Erasure or Blocking: You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing is unlawful. Note that this right is subject to 88 Lucky's legal obligations to retain certain data under Philippine law.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may exercise this right at any time by opting out of marketing communications.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 88 Lucky has violated your data privacy rights.

To exercise any of these rights, please contact our Data Privacy Officer using the contact details in Section 14. We will respond to your request within fifteen (15) business days. We may need to verify your identity before processing your request.

The 88 Lucky Platform is strictly intended for individuals who are at least twenty-one (21) years of age. 88 Lucky does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered an account on the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

88 Lucky primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in other countries, for example where we use cloud hosting services or third-party service providers whose servers are located outside the Philippines.

Where personal data is transferred outside the Philippines, 88 Lucky ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law. These safeguards may include contractual clauses approved by the National Privacy Commission, or transfers to countries that have been assessed as providing an adequate level of data protection.

88 Lucky reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. The date of the most recent revision is indicated at the top of this page.

Where changes are material, 88 Lucky will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree to the amended Policy, you should cease using the Platform and may close your account in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact 88 Lucky's Data Privacy Officer through the following channels:

• Data Privacy Officer: 88 Lucky Casino – Data Privacy Office
• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on the Platform
• Response Time: We aim to respond to all privacy-related inquiries within 15 business days

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available on the NPC's official website.

This Privacy Policy was last reviewed and updated in May 2026. 88 Lucky Casino is committed to protecting the privacy and personal data of all players in accordance with Republic Act No. 10173 (Data Privacy Act of 2012) and PAGCOR regulatory requirements. All rights reserved.