luxyplay Privacy Policy

luxyplay ("luxyplay," "we," "us," or "our") operates the online gaming platform accessible at luxyplay.cc and any associated mobile-optimized interfaces (collectively, the "Platform"). luxyplay is the data controller responsible for the personal data of Players and visitors collected through the Platform.

This Privacy Policy ("Policy") describes how luxyplay collects, uses, stores, shares, and protects personal data in connection with your use of the Platform. It applies to all registered Players, prospective Players who browse the Platform without registering, and any other individuals whose personal data luxyplay processes in connection with the operation of the Platform.

This Policy should be read together with luxyplay's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

luxyplay collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

A. Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement for real-money gaming)
• Email address and mobile number
• Username and encrypted password
• Residential address (city, province, region — e.g., Quezon City, Cebu, Davao, Makati)
• Nationality and country of residence

B. Identity Verification (KYC) Data

• Copies of government-issued identification documents (Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID, or equivalent)
• Selfie or liveness verification image for biometric matching
• Proof of address documents where required
• Source of funds documentation for high-value accounts

C. Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Philippine Peso (PHP)
• Payment method details (GCash account reference, PayMaya/Maya reference, BPI, BDO, or Metrobank account details — stored in tokenized or masked form only)
• Account balance history and bonus transaction records

D. Gaming Activity Data

• Game session logs, including games played, wager amounts, win/loss records, and session duration
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)
• Bonus and promotion participation history

E. Technical & Device Data

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access logs and timestamps

F. Communications Data

• Records of your communications with luxyplay customer support
• Feedback, survey responses, and complaint records
• Email and in-platform notification preferences

luxyplay collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through cookies, web beacons, and server logs when you browse or use the Platform. See Section 8 for full details on our cookie practices.
• From third-party service providers — including identity verification partners, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, and analytics providers, where necessary for the operation of the Platform.
• From regulatory authorities — luxyplay may receive information from PAGCOR or other competent authorities in connection with regulatory compliance obligations.

luxyplay does not purchase personal data from data brokers or any other third-party commercial data sources.

luxyplay uses your personal data for the following purposes:

Under the Data Privacy Act of 2012 and its Implementing Rules, luxyplay processes your personal data on the following legal bases:

• Contractual necessity — Processing is necessary to perform the contract between you and luxyplay (i.e., the Terms and Conditions), including account management, payment processing, and game provision.
• Legal obligation — Processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and the Data Privacy Act itself.
• Legitimate interests — Processing is necessary for luxyplay's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent — For marketing communications and certain non-essential cookies, luxyplay relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

luxyplay does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors — GCash, PayMaya/Maya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers — Third-party KYC and biometric verification services that assist luxyplay in verifying your identity and age in compliance with regulatory requirements.
• Game software providers — Game studios and platform providers whose games are available on luxyplay may receive anonymized or pseudonymized gaming activity data for technical and audit purposes.
• Fraud prevention and security services — Specialist providers that help luxyplay detect and prevent fraud, money laundering, and other illegal activity on the Platform.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or regulatory obligation.
• Professional advisors — Lawyers, auditors, and accountants, where necessary for the conduct of luxyplay's business and subject to professional confidentiality obligations.
• Business successors — In the event of a merger, acquisition, or sale of luxyplay's business or assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

luxyplay retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and KYC data — Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and AMLA obligations.
• Financial transaction records — Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming activity logs — Retained for a minimum of three (3) years from the date of the gaming session, for audit, dispute resolution, and responsible gaming purposes.
• Customer support communications — Retained for three (3) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing consent records — Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of compliance.
• Technical and device logs — Retained for a maximum of twelve (12) months, unless required for longer retention in connection with a security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with luxyplay's data disposal procedures. Anonymized data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

luxyplay uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

We use the following categories of cookies:

• Strictly necessary cookies — Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies — Remember your preferences, such as language settings, game display preferences, and responsible gaming tool configurations, to provide a more personalized experience.
• Analytics cookies — Help luxyplay understand how Players use the Platform, which pages are most visited, and where technical issues occur. Data collected is aggregated and anonymized where possible.
• Marketing cookies — Used only with your consent to deliver relevant promotional content within the Platform. luxyplay does not use third-party advertising networks that track you across external websites.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by luxyplay:

• Right to be informed — You have the right to be informed about how your personal data is collected, used, and shared, which is the purpose of this Policy.
• Right of access — You may request a copy of the personal data luxyplay holds about you, along with information about how it is processed.
• Right to rectification — You may request correction of any inaccurate or incomplete personal data held by luxyplay. You can update most account information directly through your account settings.
• Right to erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to luxyplay's legal retention obligations.
• Right to object — You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to luxyplay's overriding legitimate grounds.
• Right to data portability — You may request a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint — You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe luxyplay has violated your data privacy rights.

The luxyplay Platform is strictly intended for adults. In accordance with Philippine gambling regulations enforced by PAGCOR, real-money gaming is restricted to individuals who are at least 21 years of age. luxyplay does not knowingly collect personal data from individuals under the age of 21.

luxyplay employs mandatory age verification procedures during account registration and KYC review to prevent underage access. Any account found to belong to a person under the age of 21 will be immediately suspended, all associated data will be securely deleted (except where retention is required by law), and any deposits will be returned at luxyplay's discretion after deducting applicable processing fees.

luxyplay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit — All data transmitted between your device and the luxyplay Platform is encrypted using TLS 1.2 or higher.
• Encryption at rest — Sensitive personal data, including KYC documents and payment information, is encrypted at rest using AES-256 or equivalent standards.
• Access controls — Access to personal data is restricted to luxyplay personnel and authorized service providers who have a legitimate need to access it, on a strict need-to-know basis.
• Password security — Player passwords are stored using industry-standard one-way hashing algorithms. luxyplay staff cannot view your password in plain text.
• Two-factor authentication (2FA) — luxyplay offers optional 2FA for Player accounts and requires 2FA for all internal staff access to systems containing personal data.
• Regular security audits — luxyplay conducts periodic security assessments and penetration testing of the Platform's infrastructure.
• Incident response — luxyplay maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the NPC in accordance with RA 10173.

While luxyplay takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for ensuring the security of the device you use to access the Platform.

luxyplay's primary data processing infrastructure is located within the Philippines. However, some of our third-party service providers — including game software providers and certain technical infrastructure partners — may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, luxyplay ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173. These safeguards may include:

• Contractual clauses requiring the recipient to apply equivalent data protection standards.
• Transfers to jurisdictions recognized by the NPC as providing adequate data protection.
• Binding corporate rules where applicable within corporate group structures.

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting our Data Protection Officer.

The luxyplay Platform may contain references to third-party services such as payment gateways (GCash, PayMaya, BPI, BDO, Metrobank) that you access in the course of making deposits or withdrawals. When you interact with these third-party services, you are subject to their own privacy policies and terms of service.

luxyplay is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your luxyplay account. luxyplay does not control how these third parties collect, use, or share your personal data once you have been redirected to their platforms.

luxyplay may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify you by:

• Posting a prominent notice on the luxyplay Platform.
• Sending an email notification to your registered email address.
• Displaying an in-account notification upon your next login.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any update constitutes your acknowledgment of the revised Policy.

For significant changes that require your fresh consent (such as new uses of sensitive personal information), luxyplay will seek your explicit consent before the new processing begins.

luxyplay has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

If you are not satisfied with luxyplay's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.

For more information about your rights under Philippine data protection law, you may visit the NPC's official resources. luxyplay is committed to working cooperatively with the NPC to resolve any complaints regarding our data processing practices.

For responsible gaming concerns, please visit our Responsible Gaming page. For general platform questions, our FAQ page may have the answer you need.