LuckPot Privacy Policy

LuckPot is an online gaming and sports betting platform licensed by the Philippine Amusement and Gaming Corporation (PAGCOR). We operate the website at luckpot.best and any associated mobile interfaces. For the purposes of this Privacy Policy, LuckPot acts as the data controller for all personal information collected from registered members and visitors to the platform.

This Privacy Policy applies to all personal data processed by LuckPot in connection with your registration, use of the sportsbook and casino, customer support interactions, and any marketing communications we send to you. It applies whether you access LuckPot from a mobile browser, desktop browser, or any other device.

By registering a LuckPot account or continuing to use the platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, you should not register or continue to use LuckPot. This Privacy Policy should be read alongside our Terms and Conditions.

LuckPot collects personal data in three ways: information you give us directly, information we collect automatically when you use the platform, and information we receive from third parties such as payment providers and identity verification services.

Every piece of personal data LuckPot collects is used for a specific purpose. We do not use your data beyond the purposes listed here without first obtaining your consent or establishing a new legal basis under the Data Privacy Act.

• Account creation and management — Processing your registration, verifying your identity, and maintaining your LuckPot account in a secure and accurate state.
• KYC and regulatory compliance — Meeting PAGCOR licensing requirements and Philippine anti-money laundering obligations. This includes verifying your age, identity, and source of funds when required.
• Processing deposits and withdrawals — Facilitating payments via GCash, Maya, and other supported methods, and ensuring funds reach the correct recipient.
• Providing platform services — Delivering the sportsbook, casino games, sabong betting, and all other features you use on LuckPot.
• Fraud prevention and security — Monitoring for unusual account activity, multiple account creation, bonus abuse, and other prohibited conduct described in the Terms and Conditions.
• Customer support — Responding to your queries, resolving disputes, and maintaining records of interactions for quality assurance purposes.
• Responsible gaming monitoring — Identifying patterns that may suggest problem gambling behaviour and taking appropriate action in line with our Responsible Gaming policy.
• Platform improvement — Analysing aggregated and anonymised usage data to understand how members use LuckPot and to guide product development decisions.
• Marketing communications — Sending you relevant offers and promotions via email or SMS, where you have consented to receive these. You can opt out at any time.

Under the Philippine Data Privacy Act, LuckPot must have a valid legal basis for processing your personal data. We rely on the following bases, depending on the type of processing activity:

Contractual Necessity

Most of the data processing LuckPot carries out is necessary to provide you with the services you signed up for — operating your account, processing bets, and handling payments. Without this processing, we cannot fulfil our obligations to you as a member.

Legal Obligation

PAGCOR licensing requirements and Philippine anti-money laundering laws (Republic Act No. 9160 and its amendments) impose specific data collection and retention obligations on LuckPot. KYC checks and transaction record-keeping fall under this basis and cannot be opted out of.

Legitimate Interests

LuckPot processes certain data — such as technical and usage data for fraud prevention and platform security — on the basis of legitimate interests. We have assessed that these interests do not override your rights and freedoms, particularly where the data is used only in aggregated form or for security purposes that directly protect members.

Consent

Where LuckPot sends marketing communications or uses optional cookies beyond those strictly necessary, we rely on your consent. You can withdraw consent at any time by adjusting your marketing preferences in your account settings or by contacting support@luckpot.best.

LuckPot does not sell your personal data. We share it only in the specific, limited circumstances described below, and only with parties who are contractually required to handle it with the same standard of care we apply ourselves.

Payment Processors

To process your deposits and withdrawals, LuckPot must share certain data with payment providers including GCash, Maya, and banking partners. These providers receive only the minimum data necessary to complete the transaction — typically your account reference and the transaction amount. They are bound by their own regulatory obligations as licensed Philippine financial services providers.

Identity Verification Providers

LuckPot uses third-party KYC services to verify government-issued IDs and confirm your identity. These providers process your identity documents on our behalf and are contractually prohibited from using your data for any other purpose.

Regulatory Authorities

LuckPot may be required to share member data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine government bodies in response to a lawful order, investigation, or audit. LuckPot will comply fully with such requests and, where permitted by law, will notify affected members.

Platform Infrastructure Providers

LuckPot uses cloud infrastructure and software services from reputable technology providers to run the platform. These providers may technically process data as part of hosting and operating the service. They are bound by data processing agreements and have no independent right to use member data.

LuckPot uses cookies and similar tracking technologies to make the platform function properly and to understand how members use it. Here is a plain-language breakdown of the cookie types we use:

You can manage your cookie preferences at any time through the cookie settings in your LuckPot account. Blocking strictly necessary cookies will impair or prevent access to the platform entirely.

LuckPot retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable Philippine law. Below are the standard retention periods we apply:

• Account data (identity, contact) — Retained for the duration of your account and for 5 years after closure, as required by PAGCOR and anti-money laundering regulations.
• Transaction and betting records — Retained for 5 years from the date of the transaction, in compliance with Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR audit requirements.
• KYC documents — Retained for 5 years after the end of the customer relationship, consistent with AMLC regulations.
• Support communications — Retained for 2 years from the date of the interaction, or longer if related to an active dispute or investigation.
• Marketing preferences and consent records — Retained for as long as your account is active, and for 1 year after consent is withdrawn, to demonstrate compliance.
• Technical and device data — Retained in aggregated form for up to 12 months for platform security and fraud monitoring purposes.

Once the applicable retention period has elapsed, LuckPot will securely delete or anonymise your personal data. Where complete deletion is not technically possible due to backup systems, the data will be isolated from active use until it can be deleted.

LuckPot uses technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS encryption for all data transmitted between your device and the LuckPot platform
• Encryption of stored personal and financial data at rest
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular penetration testing and security audits of the LuckPot platform
• Multi-factor authentication options for member accounts
• Automated monitoring for suspicious login activity and account takeover attempts

Despite our best efforts, no online platform can guarantee 100% security. If you become aware of any security issue affecting your LuckPot account, contact us immediately at support@luckpot.best.

Under the Philippine Data Privacy Act, you have specific rights over the personal data LuckPot holds about you. Here is what each right means in practice and how to exercise it:

To exercise any of these rights, email LuckPot's Data Privacy Officer at support@luckpot.best with the subject line "DATA SUBJECT REQUEST" and a description of your request. We will verify your identity before processing the request and respond within 15 business days.

LuckPot is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18 years old. If you believe a minor has registered a LuckPot account, please contact support@luckpot.best immediately. We will investigate and, if confirmed, will close the account and delete all associated personal data without delay.

LuckPot uses age verification as part of the registration and KYC process. Any account found to belong to a person under 18 will be closed, regardless of activity or balance, and any winnings on the account will be forfeited in line with PAGCOR requirements.

LuckPot may update this Privacy Policy from time to time to reflect changes in our data practices, new PAGCOR requirements, or updates to Philippine data protection law. The "Last updated" date at the top of this page will always reflect when the most recent revision was made.

For material changes — those that significantly affect how we use your personal data or reduce your rights — LuckPot will notify you by email at least 7 days before the changes take effect. For minor updates such as clarifications and formatting improvements, the updated policy will be published without separate notification.

LuckPot has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and responding to member queries about personal data. If you have any question about this Privacy Policy, want to exercise a data subject right, or have a concern about how your data has been handled, please reach out using the details below.

You also have the right to direct complaints to the National Privacy Commission of the Philippines. However, we encourage you to contact LuckPot's DPO first so we have the opportunity to resolve the matter directly. Our goal is to handle every privacy concern thoroughly and transparently.