Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how luxplay ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal information of users ("you", "Player", "User") who access or use the luxplay online gaming platform at luxplay.app — including all associated games, features, promotions, and customer support services.

luxplay is committed to protecting the privacy and personal data of all our players, including those from Metro Manila, Cebu, Davao, Quezon City, Makati, and across the Philippine archipelago. We take our obligations under the Republic Act No. 10173 — the Data Privacy Act of 2012 — seriously, and this Policy reflects our commitment to transparent, lawful, and responsible data handling.

By registering an account, logging in, or otherwise using the luxplay platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not access or use our platform.

Data Controller

luxplay acts as the Data Controller with respect to the personal information collected through this platform. As Data Controller, luxplay determines the purposes and means by which your personal data is processed and is responsible for ensuring that processing activities comply with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

luxplay operates under the oversight of PAGCOR — the Philippine Amusement and Gaming Corporation — and all data processing activities related to gaming operations are conducted within the framework of applicable Philippine gaming and data protection regulations.

For all data privacy concerns, requests, or inquiries, you may contact our Data Protection Officer through the contact details provided in Section 13 of this Policy.

What Personal Data We Collect

luxplay collects personal data that is necessary to provide our gaming services, comply with our regulatory obligations, and ensure the safety and security of our platform. The categories of personal data we collect include the following:

How We Use Your Personal Data

luxplay uses the personal data we collect for the following clearly defined purposes. We do not process your data beyond what is described here without first obtaining your consent or satisfying a separate lawful basis.

• Account Registration and Management: To create, maintain, and authenticate your luxplay player account, including verifying your identity and enforcing the single-account rule.
• Identity Verification (KYC): To comply with our PAGCOR licensing obligations and the Anti-Money Laundering Act by verifying that all registered players are who they claim to be and are at least 21 years of age.
• Financial Transaction Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and UnionBank, and to maintain accurate financial records for each player account.
• Gaming Services Delivery: To operate and personalize the gaming experience, track bet history and balances, administer bonuses and promotions, and provide fair play monitoring.
• Customer Support: To respond to inquiries, resolve disputes, handle complaints, and provide ongoing assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling, enforce deposit limits and self-exclusion orders, and deliver responsible gaming interventions where appropriate.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the platform.
• Regulatory Compliance: To fulfill our obligations to PAGCOR and other Philippine regulatory and law enforcement authorities, including mandatory reporting under the AMLA and data requests from competent government bodies.
• Platform Improvement: To analyze aggregated usage data to improve platform performance, game offerings, and the overall player experience. This analysis uses anonymized or pseudonymized data where possible.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

Legal Basis for Processing

Under the Data Privacy Act of 2012, every processing activity must be grounded in a recognized lawful basis. luxplay processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the gaming services contract you entered into when you registered your luxplay account — including account management, game operation, financial transactions, and customer support.
• Legal Obligation: Processing required to comply with our obligations under Philippine law — including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012. We cannot opt out of this processing, and neither can you.
• Legitimate Interests: Processing carried out to further our legitimate business interests — including fraud prevention, platform security monitoring, and improving our services — provided these interests are not overridden by your rights and freedoms. We assess proportionality carefully before relying on this basis.
• Consent: For processing activities not covered by the above bases — most notably, the sending of marketing and promotional communications — we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third Parties

luxplay does not sell, rent, or trade your personal data to any third party. We share your data only in the limited, specific circumstances described below, and only with parties who are bound by appropriate confidentiality and data protection obligations:

• Payment Processors: We share financial data with e-wallet providers (GCash, Maya) and Philippine banking partners (BPI, BDO, Metrobank, UnionBank) solely to process deposits and withdrawals on your behalf. These parties act as independent data controllers for their own services and are subject to their own privacy policies and Bangko Sentral ng Pilipinas (BSP) oversight.
• Identity Verification Providers: We may use third-party KYC and identity verification services to assist in verifying documents submitted by players during onboarding. These providers process identity data under strict contractual restrictions and may not use it for any other purpose.
• Game Software Providers: Certain technical data — such as session tokens and bet data — is shared with our game software suppliers (including providers such as Pragmatic Play, PG Soft, Jili, and Habanero) to deliver game functionality. These providers act as data processors under our instruction.
• Regulatory and Law Enforcement Authorities: We are legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, and courts where we receive a lawful order or where disclosure is required by our regulatory obligations under AMLA or other applicable laws.
• Fraud Prevention Partners: Aggregated or pseudonymized data may be shared with fraud detection platforms to identify and block fraudulent patterns across the industry. No individually identifiable data is shared for this purpose without a specific legal basis.
• Professional Advisors: We may share data with our legal counsel, auditors, and compliance consultants where necessary in connection with our legal and regulatory obligations. All such parties are bound by professional confidentiality obligations.

Data Retention

luxplay retains personal data for as long as is necessary to fulfill the purposes for which it was collected, and for as long as required by our regulatory and legal obligations. The following retention periods apply:

When personal data is no longer required and no legal retention obligation applies, luxplay securely deletes or anonymizes that data so it can no longer be associated with any individual.

Data Security

luxplay implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes the following:

• Encryption in Transit: All data transmitted between your browser or device and the luxplay platform is encrypted using TLS 1.2 or higher. We enforce HTTPS across the entire platform with no unencrypted fallback.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial account details — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to luxplay personnel who require it for their specific role. Role-based access controls, multi-factor authentication, and audit logging are enforced across all internal systems.
• Infrastructure Security: Our platform infrastructure is hosted in secure, access-controlled data centers with physical and network-level security controls. We conduct regular vulnerability assessments and penetration testing.
• Incident Response: In the event of a personal data breach that poses a real risk of serious harm to affected players, luxplay will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the Data Privacy Act of 2012.

Cookies & Tracking Technologies

luxplay uses cookies and similar tracking technologies to provide a functional, secure, and personalized platform experience. Cookies are small text files stored on your device when you visit our platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential to the operation of the luxplay platform. They enable core functions such as user authentication, session management, and security enforcement. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings, deposit limit configurations, and responsible gaming tool selections — so you do not need to re-enter them on each visit.
• Analytics Cookies: We use anonymized analytics to understand how players interact with the platform — which pages are visited most, where sessions typically end, and how the platform performs on different devices. This data is aggregated and does not identify individual players.
• Security Cookies: These cookies assist in detecting unusual activity such as login attempts from unrecognized devices, rapid account switching, or patterns consistent with automated bot access.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the luxplay platform. For most Filipino mobile users browsing on Chrome or Safari, cookie controls are available under browser privacy settings.

Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to the personal data luxplay holds about you:

• Right to Be Informed: You have the right to know what personal data we hold about you, for what purpose, and how long we retain it. This Policy is the primary mechanism through which we fulfill this obligation.
• Right of Access: You may request a copy of the personal data luxplay holds about your account. We will provide this within 15 business days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You may update most account details directly through your account settings. For KYC-related data corrections, please contact our support team.
• Right to Erasure: You may request that we delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to our regulatory retention obligations — we cannot delete data we are legally required to retain.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis. You may also object at any time to the processing of your data for direct marketing purposes.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Lodge a Complaint: If you believe your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

Minors & Age Verification

The luxplay platform is strictly intended for adults aged 21 years and above. This is a non-negotiable requirement under Philippine law applicable to casino-style online gaming. luxplay does not knowingly collect personal data from individuals below the age of 21.

All registered players are required to complete KYC verification — which includes submitting valid government-issued photo identification confirming their age — before real-money gaming is permitted on their account. Accounts where we cannot confirm the player is at least 21 years of age will be suspended pending additional verification or closed entirely.

Changes to This Privacy Policy

luxplay reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our services. When material changes are made to this Policy, we will notify registered players via the email address on file and/or by displaying a prominent notice on the platform upon login.

The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. Your continued use of the luxplay platform after the effective date of any updated Privacy Policy constitutes your acceptance of those changes as they relate to processing based on legitimate interests or legal obligation. Where changes affect processing based on consent, we will seek fresh consent from you before the updated terms apply.

We recommend bookmarking this page and reviewing it periodically — particularly before making significant deposits or submitting additional personal documentation for KYC purposes.

Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please do not hesitate to reach out. Our Data Protection Officer and support team are available to assist you through the following channels:

• Live Chat: Available 24/7 directly on the luxplay platform. This is the fastest channel for privacy-related inquiries and data subject requests.
• Email: [email protected]  (displayed as plain text — not a clickable link)

For formal data subject requests — including access, rectification, erasure, or portability requests — please contact us via email and include your registered account email address and a brief description of your request. We may need to verify your identity before processing your request.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.