phlucky7 Privacy Policy

1. Who We Are and How to Contact Us

This Privacy Policy is issued by phlucky7 ("phlucky7," "we," "us," or "our"), the operator of the online gaming platform accessible at phlucky7.vip. phlucky7 acts as the data controller in respect of the personal data of registered players and visitors to the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) at:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by phlucky7 in connection with:

• Your registration and use of a phlucky7 player account;
• Your visits to the phlucky7.vip website, including browsing without registration;
• Your participation in games, promotions, tournaments, and other Platform features;
• Your communications with phlucky7 customer support; and
• Your completion of KYC (Know Your Customer) verification procedures.

This Policy does not apply to third-party websites or services that may be linked from the Platform. phlucky7 is not responsible for the privacy practices of any third-party sites.

3. Personal Data We Collect

phlucky7 collects the following categories of personal data from players and Platform visitors:

4. How We Collect Your Data

phlucky7 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and similar technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from GCash, PayMaya/Maya, and Philippine banking partners.

5. Purposes and Legal Bases for Processing

phlucky7 processes your personal data for the following purposes, each supported by a lawful basis under the Philippine Data Privacy Act:

6. Sharing Your Personal Data

phlucky7 does not sell or rent your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya/Maya, and Philippine banking partners to process deposits and withdrawals.
• KYC and identity verification providers: Accredited third-party services used to verify your identity and age in compliance with Philippine regulations.
• Fraud prevention and security partners: Services that help detect and prevent unauthorized access, money laundering, and fraudulent activity.
• Game software providers: Licensed game studios whose titles are hosted on the phlucky7 Platform, to the extent required for game operation and fairness auditing.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law.
• IT and hosting providers: Cloud infrastructure and technical service providers operating under strict data processing agreements with phlucky7.

All third parties with whom phlucky7 shares personal data are required to process that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the one for which it was shared.

7. International Data Transfers

Some of phlucky7's service providers and technology partners may be located outside the Philippines. Where personal data is transferred internationally, phlucky7 ensures that appropriate safeguards are in place as required by the Philippine Data Privacy Act, including contractual clauses that impose data protection obligations equivalent to those applicable in the Philippines. phlucky7 will not transfer your personal data to a country that does not provide an adequate level of data protection without implementing appropriate safeguards.

8. Data Retention

phlucky7 retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law. Specific retention periods include:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act of the Philippines.
• Transaction records: Retained for a minimum of five (5) years in accordance with AMLC reporting requirements.
• Support communications: Retained for two (2) years from the date of the last interaction, or longer if required for ongoing dispute resolution.
• Technical and usage data: Retained for up to twelve (12) months for security and analytics purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phlucky7's data disposal procedures.

9. Cookies and Tracking Technologies

phlucky7 uses the following types of cookies and similar technologies on the Platform:

phlucky7 does not use advertising or cross-site tracking cookies. You may disable non-essential cookies through your browser settings; however, doing so may affect the functionality of certain Platform features.

10. Security of Your Personal Data

phlucky7 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and phlucky7 servers;
• AES-256 encryption for sensitive data stored at rest;
• Bcrypt hashing for all stored passwords;
• Multi-factor authentication options for player accounts;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• 24/7 security monitoring and intrusion detection systems.

11. Your Rights Under the Philippine DPA

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phlucky7:

• Right to be informed: You have the right to know what personal data phlucky7 collects about you and how it is processed.
• Right of access: You may request a copy of the personal data phlucky7 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing or where processing is based on legitimate interest.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days.

12. Children's Privacy

The phlucky7 Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. phlucky7 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

13. Responsible Gaming and Data

phlucky7 uses gaming activity data — including bet frequency, session duration, deposit patterns, and loss history — to monitor for signs of problem gambling and to fulfill our responsible gaming obligations. This processing is carried out in the legitimate interest of player welfare and in compliance with PAGCOR responsible gaming guidelines.

Where our responsible gaming systems identify a player who may be at risk, phlucky7 may use contact data to reach out with support information, apply account restrictions, or refer the player to professional help resources. Players may also proactively request self-exclusion, deposit limits, or cooling-off periods at any time via account settings or by contacting support.

14. Changes to This Privacy Policy

phlucky7 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will notify registered players via email and/or a prominent notice on the Platform. The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

15. How to Exercise Your Rights

To submit a data subject request, file a privacy complaint, or ask any question about this Privacy Policy, please contact phlucky7's Data Protection Officer using the details below. To protect your privacy, we may ask you to verify your identity before processing your request.

• DPO Email: [email protected]
• General Support: [email protected]
• Response Time: Within 30 days of verified request receipt

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you are not satisfied with our response.