luxyplay Casino – Privacy Policy

1. Introduction

1.1 luxyplay Casino operates luxyplay.one, an online gaming platform offering casino games, live dealer tables, slots, bingo, cockfighting, and other entertainment products to players in the Philippines. In the course of providing these services, luxyplay collects and processes personal information about its users.

1.2 This Privacy Policy applies to all personal information collected by luxyplay through the luxyplay.one website, the luxyplay mobile platform, luxyplay customer support channels, and any other luxyplay service or communication channel. It applies to all registered luxyplay account holders and to visitors who browse luxyplay.one without registering.

1.3 This Privacy Policy should be read together with the luxyplay Terms & Conditions and the luxyplay Responsible Gaming Policy, both of which are incorporated herein by reference.

1.4 luxyplay is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC) of the Philippines.

2. Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012, luxyplay Casino is the personal information controller responsible for the personal data collected through the luxyplay platform.

2.2 luxyplay has appointed a Data Protection Officer (DPO) who is responsible for overseeing luxyplay's data protection compliance and serving as the primary point of contact for data privacy matters. Contact details for the luxyplay DPO are provided in Section 14 of this Privacy Policy.

3. Information We Collect

3.1 luxyplay collects personal information from you in the following ways: information you provide directly to luxyplay, information collected automatically when you use the luxyplay platform, and information received from third parties.

3.1 Information You Provide Directly

When you register a luxyplay account, make a deposit or withdrawal, contact luxyplay support, or participate in a luxyplay promotion, you may provide the following categories of personal information:

• Identity Data: Full legal name, date of birth, gender, nationality
• Contact Data: Philippine mobile number, email address, residential address
• Identity Verification (KYC) Data: Government-issued ID number and copies (PhilSys National ID, passport, driver's license, SSS ID, GSIS ID, PRC ID, Voter's ID), selfie or liveness check images
• Financial Data: GCash account number, PayMaya / Maya account number, bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), debit card details
• Account Data: luxyplay username, password (stored in hashed form), account preferences, communication preferences
• Support Data: Records of your communications with luxyplay customer support, including live chat transcripts and email correspondence

3.2 Information Collected Automatically

When you access and use the luxyplay platform, luxyplay automatically collects certain technical and behavioral information, including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited on luxyplay.one, games played, session duration, click patterns, search queries within the platform, deposit and withdrawal history, betting history
• Location Data: General geographic location derived from IP address (country and region level)
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 7

3.3 Information from Third Parties

luxyplay may receive personal information about you from third parties in the following circumstances:

• Identity verification and KYC service providers who assist luxyplay in verifying your identity documents
• Payment processors and e-wallet providers (GCash, PayMaya / Maya) who confirm transaction details
• Fraud prevention and anti-money laundering screening services
• Responsible gaming databases, including self-exclusion registries

4. How We Use Your Information

4.1 luxyplay uses the personal information it collects for the following purposes:

• Account Management: To create and manage your luxyplay account, verify your identity, and provide you with access to luxyplay games and services
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya / Maya, bank transfer, and debit card; to verify payment method ownership; and to maintain accurate financial records
• Legal & Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and reporting obligations to relevant Philippine regulatory authorities
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, bonus abuse, money laundering, and other prohibited conduct on the luxyplay platform
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to enforce self-exclusion requests, and to provide responsible gaming tools and interventions
• Customer Support: To respond to your inquiries, complaints, and support requests via live chat and email
• Marketing & Promotions: To send you information about luxyplay promotions, bonuses, and new games, where you have consented to receive such communications
• Platform Improvement: To analyze usage patterns, conduct research, and improve the luxyplay platform, games, and user experience
• Personalization: To personalize your luxyplay experience, including game recommendations and promotional offers tailored to your preferences

5. Legal Basis for Processing

5.1 Under the Philippine Data Privacy Act of 2012, luxyplay processes your personal information on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of the luxyplay Terms & Conditions contract with you, including account management, payment processing, and game provision
• Legal Obligation: Processing necessary for luxyplay to comply with applicable Philippine laws and regulations, including AML, KYC, and gaming regulatory requirements
• Legitimate Interests: Processing necessary for luxyplay's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and interests
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications. You may withdraw your consent at any time by contacting luxyplay support or updating your account communication preferences

6. Sharing Your Information

6.1 luxyplay does not sell your personal information to third parties. luxyplay may share your personal information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Service Providers: Third-party vendors who provide services to luxyplay, including KYC and identity verification providers, payment processors (GCash, PayMaya / Maya, banking partners), IT infrastructure and hosting providers, customer support platform providers, and fraud prevention services. These providers are contractually bound to process your data only on luxyplay's instructions and in accordance with applicable data protection law.
• Regulatory Authorities: Philippine government agencies and regulatory bodies, including the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and relevant gaming regulatory authorities, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies where disclosure is required by a valid court order, subpoena, or other legal process, or where luxyplay reasonably believes disclosure is necessary to prevent or investigate illegal activity.
• Responsible Gaming Bodies: Self-exclusion registries and responsible gaming organizations, to the extent necessary to enforce self-exclusion requests and protect vulnerable players.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of luxyplay's assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections described in this Privacy Policy.

7. Cookies & Tracking Technologies

7.1 luxyplay uses cookies and similar tracking technologies on luxyplay.one to enhance your experience, maintain your session, analyze platform usage, and deliver relevant content. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the luxyplay platform to function. These include session cookies that keep you logged in to your luxyplay account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and game display preferences, to provide a more personalized luxyplay experience.
• Analytics Cookies: Collect anonymized information about how visitors use luxyplay.one, including which pages are visited most frequently and how users navigate the platform. This data helps luxyplay improve the platform.
• Marketing Cookies: Used to deliver luxyplay promotional content that is relevant to your interests, based on your browsing and gameplay history on the luxyplay platform.

7.2 You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the luxyplay platform. Most browsers allow you to refuse cookies, delete existing cookies, and set preferences for specific websites.

8. Data Retention

8.1 luxyplay retains your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your luxyplay account and for a period thereafter as required by applicable Philippine law and regulation.

8.2 Specifically, luxyplay retains:

• Account and KYC records for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations
• Transaction records (deposits, withdrawals, betting history) for a minimum of five (5) years, in compliance with applicable financial record-keeping requirements
• Customer support records for three (3) years following the resolution of the relevant inquiry or complaint
• Marketing consent records for the duration of your luxyplay account and for three (3) years following account closure

8.3 When personal information is no longer required for the purposes for which it was collected and retention is no longer required by law, luxyplay will securely delete or anonymize the data.

9. Data Security

9.1 luxyplay implements appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the luxyplay platform
• Encryption of sensitive data at rest, including financial data and identity documents
• Passwords stored using industry-standard one-way hashing algorithms — luxyplay staff cannot view your password
• Role-based access controls limiting luxyplay staff access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing of the luxyplay platform
• Two-factor authentication (2FA) available for luxyplay account holders
• Secure data centers with physical access controls

9.2 While luxyplay takes all reasonable steps to protect your personal information, no method of electronic transmission or storage is 100% secure. luxyplay cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, luxyplay will notify you and the National Privacy Commission in accordance with the requirements of the Philippine Data Privacy Act.

10. Your Rights Under Philippine Law

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by luxyplay:

• Right to be Informed: The right to be informed of how your personal information is being collected and processed by luxyplay, as described in this Privacy Policy
• Right to Access: The right to request a copy of the personal information luxyplay holds about you and information about how it is being processed
• Right to Rectification: The right to request correction of inaccurate or incomplete personal information luxyplay holds about you
• Right to Erasure: The right to request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to luxyplay's legal retention obligations
• Right to Object: The right to object to the processing of your personal information for direct marketing purposes or where processing is based on luxyplay's legitimate interests
• Right to Data Portability: The right to receive a copy of your personal information in a structured, commonly used, machine-readable format
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe luxyplay has violated your data privacy rights

10.2 To exercise any of these rights, please contact the luxyplay Data Protection Officer using the contact details in Section 14. luxyplay will respond to all verified requests within thirty (30) days in accordance with NPC requirements.

10.3 luxyplay may need to verify your identity before processing a data rights request to ensure that personal information is not disclosed to unauthorized persons.

11. Children's Privacy

11.1 The luxyplay platform is strictly intended for individuals who are at least twenty-one (21) years of age. luxyplay does not knowingly collect personal information from persons under 21 years of age. If luxyplay becomes aware that personal information has been collected from a person under 21, luxyplay will take immediate steps to delete that information and close the associated account.

11.2 If you are a parent or guardian and believe that your child under 21 has registered a luxyplay account or provided personal information to luxyplay, please contact luxyplay support immediately so that appropriate action can be taken.

12. Third-Party Links

12.1 The luxyplay platform may contain links to third-party websites or services. This Privacy Policy applies only to the luxyplay platform and does not cover the privacy practices of any third-party websites. luxyplay is not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

13.1 luxyplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in luxyplay's data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, luxyplay will notify registered account holders via email or in-platform notification at least seven (7) days before the changes take effect.

13.2 The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. Your continued use of the luxyplay platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13.3 If you do not agree to the revised Privacy Policy, you must stop using the luxyplay platform and may close your account by contacting luxyplay support.

14. Contact & Data Protection Officer

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or luxyplay's data processing practices, please contact the luxyplay Data Protection Officer:

• Data Protection Officer: luxyplay Casino DPO
• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the luxyplay platform

14.2 You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines: