lackywin Privacy Policy

lackywin ("lackywin," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the lackywin online gaming platform available at lackywin.club (the "Platform"). This Privacy Policy describes how lackywin collects, uses, stores, shares, and protects your personal information when you access or use the Platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. By registering an account or using the lackywin Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with the lackywin Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2.1 Registration Data. When you create a lackywin account, we collect the personal information you provide, including:

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including barangay, city/municipality, and province)
• Email address and mobile phone number
• Username and encrypted password
• Nationality and country of residence

2.2 Identity Verification (KYC) Data. To comply with Philippine anti-money laundering regulations and PAGCOR requirements, lackywin may collect:

• Copies of government-issued photo identification (PhilSys National ID, passport, driver's license, SSS/GSIS ID, PRC ID)
• Proof of residential address (utility bill, bank statement, or barangay certificate)
• Selfie photographs for identity verification purposes
• Proof of payment method ownership

2.3 Financial Data. lackywin collects transaction data necessary to process deposits and withdrawals, including payment method type (GCash, PayMaya, BPI, BDO, Metrobank), transaction amounts, dates, and reference numbers. lackywin does not store full account numbers, PINs, or passwords for any payment method.

2.4 Gaming Activity Data. We collect records of your gaming activity on the Platform, including games played, wagers placed, wins and losses, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, and regulatory compliance.

2.5 Technical Data. When you access the lackywin Platform, we automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, referring URLs, and pages visited. This data is used for security monitoring, fraud prevention, and Platform optimisation.

2.6 Communications Data. If you contact lackywin support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

lackywin collects personal data through the following means:

• Directly from you — when you register, complete KYC verification, make deposits or withdrawals, contact support, or update your account settings
• Automatically — through cookies, web beacons, and server logs when you access the Platform
• From third parties — from identity verification providers, payment processors, and fraud prevention services where necessary to verify your identity or process transactions
• From public sources — where permitted by law, from publicly available databases for fraud prevention and compliance purposes

lackywin uses your personal data for the following purposes:

• To create and manage your lackywin account
• To verify your identity and age (21+ requirement) in compliance with Philippine regulations
• To process deposits, withdrawals, and other financial transactions
• To provide customer support and respond to your enquiries
• To detect, prevent, and investigate fraud, money laundering, and other illegal activity
• To monitor your gaming activity for responsible gaming purposes and apply any limits or restrictions you have requested
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and security alerts
• To send you promotional and marketing communications, where you have opted in to receive them
• To personalise your experience on the Platform and recommend relevant games or promotions
• To comply with our legal and regulatory obligations under Philippine law
• To enforce our Terms & Conditions and other policies

lackywin processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

5.1 Contractual Necessity. Processing is necessary to perform the contract between you and lackywin — specifically, to operate your account, process transactions, and provide the gaming services you have requested.

5.2 Legal Obligation. Processing is necessary for lackywin to comply with applicable Philippine laws and regulations, including anti-money laundering requirements, PAGCOR regulatory obligations, and the Data Privacy Act of 2012.

5.3 Legitimate Interests. Processing is necessary for lackywin's legitimate interests in preventing fraud, ensuring Platform security, improving our services, and managing our business operations, provided these interests are not overridden by your rights and interests.

5.4 Consent. Where lackywin relies on your consent as the legal basis for processing — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

lackywin does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Payment Processors. lackywin shares necessary transaction data with payment service providers including GCash, PayMaya, BPI, BDO, and Metrobank to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.

6.2 Identity Verification Providers. lackywin uses third-party KYC and identity verification services to verify your identity and age. These providers process your identification documents and biometric data solely for verification purposes and are contractually prohibited from using your data for any other purpose.

6.3 Regulatory Authorities. lackywin may be required to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law or in response to a lawful request.

6.4 Fraud Prevention Services. lackywin shares limited technical data with fraud detection and prevention service providers to protect the integrity of the Platform and safeguard all players.

6.5 Professional Advisers. lackywin may share your data with legal counsel, auditors, and other professional advisers where necessary for the conduct of our business, subject to strict confidentiality obligations.

lackywin retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulation. Specifically:

• Account registration data is retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering regulations
• KYC and identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later
• Financial transaction records are retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act (AMLA) of the Philippines
• Gaming activity logs are retained for a minimum of three (3) years for regulatory compliance and dispute resolution purposes
• Customer support communications are retained for two (2) years from the date of the interaction
• Marketing consent records are retained for the duration of your consent and for one (1) year following withdrawal of consent

Upon expiry of the applicable retention period, lackywin will securely delete or anonymise your personal data in accordance with our data destruction procedures.

lackywin uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse how the Platform is used.

8.1 Essential Cookies. These cookies are strictly necessary for the Platform to function. They enable core features such as account login, session management, and security. You cannot opt out of essential cookies without affecting your ability to use the Platform.

8.2 Analytics Cookies. lackywin uses analytics tools to understand how players interact with the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised where possible.

8.3 Preference Cookies. These cookies remember your settings and preferences — such as your preferred language or display settings — so you do not need to re-enter them each time you visit.

8.4 Managing Cookies. You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the lackywin Platform. For more information on managing cookies, refer to your browser's help documentation.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by lackywin:

• Right to be Informed — you have the right to know what personal data lackywin collects and how it is used, as set out in this Privacy Policy
• Right of Access — you have the right to request a copy of the personal data lackywin holds about you
• Right to Rectification — you have the right to request correction of any inaccurate or incomplete personal data we hold about you
• Right to Erasure — you have the right to request deletion of your personal data, subject to our legal retention obligations
• Right to Object — you have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests
• Right to Data Portability — you have the right to receive your personal data in a structured, commonly used format where technically feasible
• Right to Lodge a Complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated

To exercise any of these rights, please contact the lackywin Data Protection Officer via our support team. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

lackywin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the lackywin Platform
• Encryption of sensitive data at rest, including identity documents and financial records
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits and penetration testing of Platform infrastructure
• Multi-factor authentication requirements for account access and administrative systems
• Continuous monitoring for suspicious activity, unauthorised access attempts, and data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lackywin will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

The lackywin Platform is strictly intended for individuals aged 21 years and above. lackywin does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the data, and handle any funds in accordance with applicable Philippine law.

If you believe that a minor has registered on the lackywin Platform, please contact our support team immediately at [email protected] so that we can take prompt action.

lackywin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify registered players by email to the address on file and by posting a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how lackywin protects your personal data. Your continued use of the Platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the lackywin support team via live chat (available 24/7) or at [email protected]. We aim to respond to all privacy-related enquiries within 30 minutes during business hours.