lakiplay Privacy
Policy

1. Who We Are

lakiplay operates the online casino and sports betting platform accessible at lakiplay.club (the "Platform"). We are the data controller responsible for the personal information you provide when you register, deposit, play, or otherwise interact with the lakiplay Platform.

This Privacy Policy applies to all Players and visitors of the lakiplay Platform. It should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

If you have any questions about how lakiplay handles your personal data, please contact our Data Privacy team at [email protected]. We are committed to responding to all privacy-related enquiries within five (5) business days.

2. Personal Data We Collect

lakiplay collects the following categories of personal data from Players and Platform visitors:

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for responsible gaming purposes (e.g., self-exclusion records) or as required by applicable law.

3. How We Collect Your Data

lakiplay collects personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and similar tracking technologies (see Section 8);
• Third-party sources: Identity and financial verification data from payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and identity verification providers;
• Regulatory sources: Data received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or responsible gaming obligations.

4. How We Use Your Personal Data

lakiplay uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your lakiplay Account, including processing deposits and withdrawals in Philippine Peso;
• Identity verification: To verify your identity and age (21+) in compliance with applicable Philippine gaming regulations and anti-money laundering requirements;
• Service delivery: To provide access to games, sports betting, live dealer tables, bingo, sabong, and all other Platform features;
• Responsible gaming: To monitor gaming behaviour, enforce deposit and loss limits, process self-exclusion requests, and identify Players who may be at risk of gambling-related harm;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activities;
• Customer support: To respond to your enquiries, resolve disputes, and improve our support services;
• Marketing communications: To send you promotional offers, bonus notifications, and Platform updates where you have consented to receive such communications;
• Legal and regulatory compliance: To comply with our obligations under Philippine law, PAGCOR regulations, and applicable anti-money laundering legislation;
• Platform improvement: To analyse usage patterns, conduct research, and improve the features, performance, and security of the lakiplay Platform.

5. Legal Basis for Processing

lakiplay processes your personal data on the following legal bases under the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your Account and deliver Platform services);
• Legal obligation: Processing required to comply with applicable Philippine laws, PAGCOR regulations, and anti-money laundering requirements;
• Legitimate interests: Processing for fraud prevention, security, responsible gaming monitoring, and Platform improvement, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time by contacting us or updating your Account preferences.

6. Data Sharing & Disclosure

lakiplay does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and QR Ph, for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers engaged to verify Player identity and comply with regulatory requirements;
• Game software providers: Licensed game studios and content providers whose games are available on the lakiplay Platform, to the extent necessary to deliver game services;
• Regulatory authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law or regulatory obligation;
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by lakiplay in connection with its business operations;
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by court order, subpoena, or applicable law.

All third-party service providers engaged by lakiplay are contractually required to process personal data only for the specified purpose and in accordance with applicable data protection law.

7. Data Retention

lakiplay retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general, lakiplay applies the following retention periods:

• Account and transaction data: Retained for a minimum of five (5) years following Account closure, in accordance with Philippine anti-money laundering regulations;
• Identity verification documents: Retained for a minimum of five (5) years following Account closure or the completion of the relevant transaction;
• Responsible gaming records: Self-exclusion and responsible gaming records are retained for the duration of the exclusion period and for five (5) years thereafter;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications;
• Technical and usage data: Retained for up to two (2) years from the date of collection.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with lakiplay's data disposal procedures.

8. Cookies & Tracking Technologies

The lakiplay Platform uses cookies and similar tracking technologies to enhance your experience, analyse Platform usage, and support our security and fraud prevention measures. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled;
• Performance cookies: Used to collect anonymised data about how Players use the Platform, helping us identify and fix performance issues;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits;
• Analytics cookies: Used to understand aggregate usage patterns and improve Platform features. Data collected is anonymised where possible.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the lakiplay Platform. Strictly necessary cookies cannot be disabled as they are essential to Platform operation.

9. Data Security

lakiplay implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the lakiplay Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication for administrative access to systems containing personal data;
• Staff training on data protection obligations and security best practices.

While lakiplay takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lakiplay will notify you and the National Privacy Commission (NPC) in accordance with applicable Philippine law.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by lakiplay:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed;
• Right of access: The right to request a copy of the personal data lakiplay holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact lakiplay's Data Privacy team at [email protected]. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

11. Children's Privacy

The lakiplay Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. lakiplay does not knowingly collect personal data from persons under the age of 21.

If lakiplay becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated Account. If you believe that a person under 21 has registered on the lakiplay Platform, please notify us immediately at [email protected].

Parents and guardians are encouraged to make use of parental control tools and to monitor the online activities of minors in their care to prevent access to gambling platforms.

12. Changes to This Privacy Policy

lakiplay reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable notice by posting the updated Policy on the Platform and, where practicable, by notifying registered Players via email or in-platform notification prior to the changes taking effect.

The date at the top of this Privacy Policy indicates when it was last updated. Your continued use of the lakiplay Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way lakiplay handles your personal data, please reach out to our Data Privacy team:

• Email: [email protected]
• Support Hours: 24/7, Philippine Standard Time (PST, UTC+8)
• Response Time: We aim to respond to all privacy-related enquiries within five (5) business days.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been adequately addressed by lakiplay.