Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights regarding your personal data held by 88lucky.
Request a copy of the personal data we hold about you, including how it is being used and who it has been shared with.
Ask us to correct any inaccurate or incomplete personal data we hold about you, including your name, address, or contact details.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
Receive your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service provider.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
This Privacy Policy is issued by 88lucky ("88lucky," "we," "us," or "our"), the operator of the online gaming and sports betting platform accessible at https://88lucky.org (the "Platform"). 88lucky is committed to protecting the personal data of all players, visitors, and users who interact with the Platform, in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
This Privacy Policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and marketing communications. It applies to all users of the Platform regardless of their location, though it is primarily designed for players based in the Philippines.
88lucky collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include the following:
Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine passport number, driver's licence number, SSS number, UMID number, or PhilSys National ID number). This data is collected as part of our mandatory Know Your Customer (KYC) and age verification process.
Email address, mobile phone number, and residential address (including barangay, city or municipality, province, and postal code). We use this data to communicate with you about your account, transactions, and promotions.
Payment method details including GCash account name and registered mobile number, PayMaya account details, bank account names and numbers (BPI, BDO, Metrobank), and partial card numbers for Visa or Mastercard transactions. Full card numbers and CVV codes are never stored by 88lucky — these are processed directly by our payment service providers using PCI-DSS compliant systems.
Records of all deposits, withdrawals, bonus credits, and wagering activity on the Platform, including timestamps, amounts in Philippine Peso (₱), game types, and transaction reference numbers.
IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and session duration. This data is collected automatically when you access the Platform and is used for security monitoring, fraud prevention, and service optimisation.
Information about how you use the Platform, including pages visited, games played, features accessed, search queries, click patterns, and session activity. This data helps us improve the Platform and personalise your experience.
Records of your communications with 88lucky customer support, including live chat transcripts, email correspondence, and any documents or screenshots you submit in connection with a support request or dispute.
Records of any responsible gaming tools you have activated, including deposit limits, session time reminders, cooling-off periods, and self-exclusion requests. This data is retained to ensure compliance with your stated preferences and to prevent circumvention of self-exclusion measures.
88lucky collects personal data through the following channels:
88lucky uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, Contact |
| Age and identity verification (KYC) | Identity, Contact, Financial |
| Processing deposits and withdrawals | Financial, Transaction |
| Fraud detection and prevention | Identity, Technical, Transaction |
| Anti-money laundering (AML) compliance | Identity, Financial, Transaction |
| Customer support and dispute resolution | Identity, Contact, Communications |
| Personalising your gaming experience | Usage, Transaction |
| Sending promotional communications (with consent) | Contact, Usage |
| Responsible gaming monitoring | Transaction, Usage, Responsible Gaming |
| Platform security and technical maintenance | Technical, Usage |
| Legal and regulatory compliance | All categories as required |
88lucky processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
88lucky does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
Third-party companies that provide services on our behalf, including payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard), identity verification providers, cloud hosting providers, customer support platform providers, and email delivery services. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.
Where required by law or by order of a competent Philippine authority, 88lucky may disclose personal data to regulatory bodies, law enforcement agencies, or the Anti-Money Laundering Council (AMLC). Such disclosures are made in good faith compliance with legal obligations and do not require your prior consent.
We may share data with fraud prevention and identity verification agencies to detect and prevent fraudulent activity, money laundering, and other financial crimes. Information shared with these agencies may be retained by them and used by other organisations for the same purposes.
In the event of a merger, acquisition, or sale of all or part of 88lucky's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Privacy Policy that may result.
88lucky uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data. The following types of cookies are used:
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed information on the specific cookies we use, please refer to our Cookie Notice, which is available on the Platform.
88lucky implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 88lucky will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.
88lucky retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | 5 years after account closure | AML legal obligation |
| Transaction records | 5 years from transaction date | AML / tax legal obligation |
| KYC documents | 5 years after account closure | Regulatory requirement |
| Customer support records | 3 years from last interaction | Legitimate interest / legal claims |
| Marketing consent records | Until consent withdrawn + 1 year | Consent / legal obligation |
| Technical / log data | 12 months | Security / fraud prevention |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming obligation |
After the applicable retention period has expired, personal data is securely deleted or anonymised in accordance with our data destruction procedures.
Some of 88lucky's service providers — including cloud hosting and payment processing partners — may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, 88lucky will ensure that appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules, to protect your data in transit and at rest.
By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines. 88lucky will always ensure that such transfers are conducted in compliance with the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations.
The 88lucky Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine laws governing online gambling. We do not knowingly collect personal data from individuals under the age of 21.
If we become aware that personal data has been collected from a person under 21 years of age, we will immediately delete that data, terminate the associated account, and take appropriate steps to prevent future access. If you believe that a minor has registered an account on the Platform, please contact our support team immediately.
To exercise any of your data rights as described in this Privacy Policy — including the right to access, correct, erase, object to, or port your personal data — please contact our Data Protection Officer (DPO) using the contact details provided in Section 15.
We will respond to all valid data rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day period.
To protect your privacy and security, we may need to verify your identity before processing your request. We will ask you to provide sufficient information to confirm that you are the account holder to whom the data relates. We will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.
If you are not satisfied with our response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Details of how to contact the NPC are available on the NPC's official website.
With your consent, 88lucky may send you promotional communications about new games, bonuses, special offers, and platform updates via email or SMS. You can opt in to marketing communications during account registration or at any time through your account settings.
You can withdraw your consent to receive marketing communications at any time by:
Please note that withdrawing your consent to marketing communications does not affect your receipt of transactional communications, such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent as part of our contractual obligations to you.
88lucky reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice to registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect. For non-material changes, the updated Privacy Policy will be posted on the Platform and will take effect immediately upon posting.
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Privacy Policy, you must cease using the Platform and may request account closure in accordance with our Terms and Conditions.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way 88lucky handles your personal data, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and for handling all data-related enquiries from players.
When contacting us regarding a data rights request or privacy concern, please include your registered account username and a clear description of your request or concern to help us respond promptly and accurately.
For complaints that cannot be resolved directly with 88lucky, you may contact the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.