Privacy Policy

Scope & Data Controller

This Privacy Policy covers the collection, use, storage, disclosure, and protection of personal data by luxybet ("we," "us," or "the Platform") in connection with the operation of the online gaming platform at luxybet.net, including all games, promotions, customer support interactions, and payment processing activities conducted through the Platform.

luxybet acts as the data controller with respect to the personal data of registered players and visitors to the luxybet website. As data controller, luxybet determines the purposes and means of processing personal data and is responsible for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This policy applies to:

• Registered luxybet account holders, whether active, inactive, or self-excluded.
• Visitors who browse luxybet.net without registering an account.
• Individuals who contact luxybet through live chat, email, or any other communication channel.
• Any individual whose personal data is submitted to luxybet in connection with a KYC verification or responsible gaming request.

This policy does not apply to third-party websites, payment processors, or game providers that may be linked to or integrated within the luxybet platform. Those entities operate under their own privacy policies, and luxybet encourages you to review them independently.

Personal Data We Collect

luxybet collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration & Identity Data

2.2 Transactional & Gaming Data

When you use the luxybet platform, we automatically collect data about your gaming activity, including:

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references.
• Game session records including game title, wager amounts, outcomes, and session duration.
• Bonus activations, wagering progress, and promotion participation history.
• Account balance history and transaction logs.

2.3 Technical & Device Data

luxybet's systems automatically collect certain technical data when you access the platform, including:

• IP address and approximate geographic location derived from IP data.
• Device type, operating system, and browser type and version.
• Session timestamps, page navigation paths, and feature interaction logs.
• Cookie and local storage identifiers (see Section 6).

2.4 Communications Data

When you contact luxybet's support team through live chat or email, we retain records of those communications, including the content of messages, attachments submitted, and the outcome of support interactions. These records are kept to maintain service quality, resolve disputes, and fulfil regulatory obligations.

How We Collect Your Data

luxybet collects personal data through the following means:

3.1 Directly from You

The majority of personal data luxybet holds is provided directly by you during the registration process, when completing KYC verification, when making deposits or requesting withdrawals, and when you contact our support team. You are always informed of what data is being collected and why at the point of collection.

3.2 Automatically Through Platform Use

Technical and gaming data is collected automatically as you use the luxybet platform. This includes server-side logging of all transactions and game outcomes, as well as client-side data collected through cookies and browser storage as described in Section 6.

3.3 From Third-Party Verification Services

For the purposes of KYC and AML compliance, luxybet may use third-party identity verification and fraud detection services. These services may return additional data points associated with your submitted identity documents, which are incorporated into your verification record on luxybet.

3.4 From Payment Providers

When you make a deposit or withdrawal via GCash, Maya, BPI, BDO, Metrobank, or other accepted payment methods, luxybet receives transaction confirmation data from those providers, including transaction reference numbers and payment account identifiers necessary to reconcile your account balance.

Purposes & Legal Basis for Processing

luxybet processes your personal data only where there is a lawful basis to do so under the Philippine Data Privacy Act. The table below sets out our primary processing activities and their corresponding legal bases:

Where luxybet relies on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your fundamental rights and freedoms as a data subject. If you wish to object to processing based on legitimate interests, you may do so by contacting our support team as described in Section 13.

Data Sharing & Third-Party Disclosure

luxybet does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described:

5.1 Payment Processors

luxybet shares the minimum necessary payment-related data with our payment processing partners — including GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other accepted providers — in order to process deposits and withdrawals. These providers are subject to their own privacy policies and are regulated financial entities under Philippine law.

5.2 Identity Verification Providers

To fulfil our KYC obligations, luxybet may share submitted identity documents and personal details with accredited identity verification service providers. These providers process data solely for verification purposes and are contractually prohibited from using your data for any other purpose.

5.3 Game Software Providers

Third-party game studios and live casino operators whose games are available on luxybet may receive session-level gaming data necessary to operate their games correctly. The scope of data shared is limited to what is technically required for game functionality.

5.4 Regulatory Authorities

luxybet is legally required to disclose player data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities when required by law, court order, or regulatory direction. luxybet will not notify you of such disclosures where prohibited from doing so by applicable law.

5.5 IT Infrastructure & Security Providers

luxybet uses third-party cloud infrastructure, cybersecurity, and fraud detection services to operate and protect the platform. These providers act as data processors on luxybet's behalf and are bound by data processing agreements that impose obligations consistent with this Privacy Policy.

Cookies & Tracking Technologies

luxybet uses cookies and similar technologies to operate and improve the platform, maintain your session, and understand how players use our services. The following types of cookies are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your luxybet account. Disabling analytics or functional cookies will not affect your ability to play but may degrade certain platform features.

Data Retention

luxybet retains personal data for as long as is necessary for the purposes set out in this policy, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following permanent account closure, as required for AML and regulatory compliance.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in line with PAGCOR and AMLC requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the interaction, unless related to an ongoing dispute or legal matter.
• Marketing consent records: Retained for the duration of your consent plus three (3) years following withdrawal of consent.
• Technical logs: Retained for twelve (12) months under standard operating conditions, extended where needed for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with luxybet's internal data disposal procedures.

Security Measures

luxybet implements a range of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and luxybet's servers.
• Encryption at rest for sensitive data fields including payment identifiers and identity document references.
• Role-based access controls ensuring that luxybet staff can only access player data relevant to their specific function.
• Multi-factor authentication requirements for all administrative access to player data systems.
• Regular security assessments and penetration testing of platform infrastructure.
• Incident response procedures aligned with the NPC's data breach notification requirements under the Philippine DPA.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, luxybet will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay as required by law.

While luxybet takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your luxybet login credentials and for notifying us promptly if you suspect unauthorized access to your account.

Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by luxybet. You may exercise any of these rights by contacting our support team as described in Section 13.

luxybet will respond to data subject rights requests within fifteen (15) calendar days of receipt. Complex or high-volume requests may require an extension of up to an additional fifteen (15) days, of which you will be informed. If you are unsatisfied with luxybet's response to a rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Minors & Age Policy

luxybet's services are strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming law and PAGCOR regulations. luxybet does not knowingly collect personal data from individuals under 21 years of age.

As part of the registration process, all players are required to confirm that they meet the 21+ age requirement. Where luxybet has reasonable grounds to believe that a registered account holder may be under 21, we will suspend the account and initiate age verification procedures. If verification confirms that the account holder is under 21, the account will be permanently closed, all deposits will be returned to the originating payment method, and any accrued winnings will be voided.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on luxybet, please contact our support team immediately. We take underage gaming very seriously and will act swiftly to address any confirmed cases.

Cross-Border Data Transfers

In the course of operating the luxybet platform, some of your personal data may be processed or stored on servers located outside the Philippines — for example, by cloud infrastructure providers or international game software vendors. Where such transfers occur, luxybet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act.

Safeguards used by luxybet for cross-border transfers include contractual data processing agreements with all overseas processors that incorporate data protection obligations, and a preference for processors operating in jurisdictions with recognized data protection frameworks.

By using luxybet's services, you acknowledge that your data may be transferred and processed outside the Philippines in the manner described above. If you have concerns about specific cross-border transfers, you may contact our Data Protection Officer as described in Section 13.

Changes to This Privacy Policy

luxybet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where a change is material — meaning it substantially affects how your personal data is collected, used, or shared — luxybet will provide prior notice through an on-site notification or an email to your registered address at least seven (7) days before the change takes effect. Non-material changes (such as clarifications or corrections) may take effect immediately upon posting.

Your continued use of luxybet following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should cease using the Platform and contact support to request account closure.

Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way luxybet processes your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 via the on-site live chat widget. For data rights requests, please identify your query as a "Data Privacy Request" at the start of the chat.
• Email: [email protected] — for formal data subject rights requests, please include your registered username, the nature of your request, and any supporting documentation.

luxybet has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act. Formal data subject rights requests and privacy complaints addressed to the DPO should be submitted via the email address above, with "Attention: Data Protection Officer" noted in the subject line.

If you are unsatisfied with luxybet's response to a privacy concern or data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available on the NPC's official website.