How luxwin collects, uses, stores, and protects your personal data — in full compliance with the Philippine Data Privacy Act of 2012 and PAGCOR regulatory requirements.
Six core data rights every Filipino player holds under the Philippine Data Privacy Act and luxwin's own standards.
Request a copy of all personal data luxwin holds about you at any time.
Update or correct inaccurate personal data in your luxwin account record.
Request deletion of your data subject to legal retention requirements.
Opt out of direct marketing communications from luxwin at any time.
Receive your data in a structured, machine-readable format upon request.
Claim compensation for proven harm arising from unlawful processing of your data.
1.1 luxwin is committed to protecting the privacy and personal data of every Filipino player on its platform. We understand that the information you share with us — your name, contact details, financial data, and gaming activity — is sensitive, and we treat it with the seriousness it deserves.
1.2 This Policy applies to all personal data collected through the Platform, including data collected during account registration, gameplay, payment processing, customer support interactions, and marketing communications. It covers both online and offline data collection activities associated with the luxwin service.
1.3 This Policy should be read together with the luxwin Terms & Conditions, available at /terms-conditions, and the luxwin Responsible Gaming Policy, available at /responsible-gaming.
1.4 luxwin operates under a valid PAGCOR license. As a PAGCOR-regulated entity, luxwin is subject to data handling requirements imposed by PAGCOR in addition to those under the DPA. Where PAGCOR requirements impose stricter standards than the DPA baseline, luxwin applies the stricter standard.
2.1 For purposes of the DPA, luxwin is the Personal Information Controller ("PIC") with respect to personal data collected through the Platform. As PIC, luxwin determines the purposes and means of processing your personal data.
2.2 luxwin has designated a Data Privacy Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection law. The DPO's contact details are set out in Section 15 of this Policy.
2.3 Where luxwin engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or cloud infrastructure providers), those third parties act as Personal Information Processors ("PIPs") under the DPA and are bound by data processing agreements that require them to process personal data only on luxwin's documented instructions and in accordance with applicable law.
3.1 luxwin collects the following categories of personal data in connection with your use of the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID number, nationality | Registration; KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Registration; account updates |
| Financial Data | GCash number, PayMaya account reference, BPI/BDO/Metrobank account details (last 4 digits), transaction history | Deposit; withdrawal; KYC |
| Gaming Activity Data | Game history, bets placed, win/loss records, session duration, balance snapshots | During gameplay |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session tokens | All Platform visits |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opted-in communication channels, promotion claim history, bonus preferences | Registration; ongoing use |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, cooling-off periods, responsible gaming tool usage | Account settings; support requests |
3.2 luxwin does not intentionally collect special categories of personal data (e.g., health data, political opinions, religious beliefs) except where specifically required for responsible gaming assessments or as mandated by applicable law.
3.3 Where you provide personal data about a third party (for example, a beneficiary of a bank transfer), you warrant that you have the authority to share that data and that the third party has been informed of this Policy.
4.1 luxwin processes your personal data for the following purposes:
5.1 luxwin processes your personal data on the following legal bases under the DPA:
5.2 Where processing is based on consent, you have the right to withdraw that consent at any time by contacting the luxwin DPO or using account preference settings. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
6.1 luxwin does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances.
6.2 luxwin may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in Section 4:
6.3 All third-party recipients of personal data are subject to contractual data protection obligations. luxwin conducts due diligence on PIPs before engagement and monitors compliance on an ongoing basis.
7.1 luxwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation.
7.2 The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account + 5 years post-closure | PAGCOR; AML (RA 9160) |
| Financial Transaction Records | 5 years from transaction date | AML; PAGCOR; BIR requirements |
| Gaming Activity Logs | 3 years from generation | PAGCOR; dispute resolution |
| KYC Documents | 5 years post-Account closure | PAGCOR; AML |
| Customer Support Records | 3 years from interaction | Legitimate interests; legal claims |
| Marketing Preferences | Until consent withdrawn + 1 year | Consent; accountability |
7.3 After the applicable retention period expires, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures. Anonymized data may be retained for statistical and analytical purposes indefinitely, as it no longer constitutes personal data under the DPA.
8.1 luxwin implements organizational, physical, and technical security measures appropriate to the risks associated with processing personal data in an online gaming context. These measures include, without limitation:
8.2 In the event of a personal data breach that poses a risk to your rights and freedoms, luxwin will notify the NPC within seventy-two (72) hours of becoming aware of the breach. Affected individuals will be notified without undue delay where the breach is likely to result in a high risk to their rights.
8.3 Notwithstanding the above measures, no data transmission over the internet or storage system can be guaranteed as completely secure. You acknowledge that you transmit data to the Platform at your own risk. You are responsible for maintaining the security of your Account credentials.
9.1 luxwin uses cookies and similar tracking technologies on the Platform for the following purposes:
9.2 You may control cookie settings through your browser preferences. Disabling non-essential cookies will not prevent you from accessing the Platform but may limit certain features. Strictly necessary cookies cannot be disabled via browser settings as they are essential to Platform operation.
9.3 luxwin does not use third-party advertising networks that track users across unrelated websites for targeted advertising purposes.
10.1 The luxwin Platform is strictly prohibited for use by individuals under the age of twenty-one (21) years, as required by PAGCOR. luxwin does not knowingly collect personal data from persons under the age of 21.
10.2 luxwin employs automated age-screening during the registration process and requires government-issued ID verification during KYC to confirm the age of all Players. Where luxwin discovers that personal data has been collected from a person under 21 years of age, such data will be immediately deleted, the Account closed, and deposits returned to their source.
10.3 Parents and guardians who believe that a minor has registered on the Platform should contact luxwin immediately via Live Chat. luxwin will investigate and take immediate action upon receipt of such a report.
11.1 Certain of luxwin's third-party service providers (including cloud infrastructure providers and game content partners) operate internationally and may process your personal data outside the Philippines.
11.2 Where personal data is transferred to a country outside the Philippines, luxwin ensures that such transfers are carried out in compliance with the DPA and applicable NPC cross-border data transfer rules. Specifically, luxwin requires that:
11.3 luxwin does not transfer financial transaction data or KYC documents to jurisdictions without adequate data protection frameworks except where compelled by a lawful order from a Philippine court or competent authority.
12.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by luxwin:
12.2 To exercise any of the above rights, please contact the luxwin Data Privacy Officer as described in Section 15. luxwin will respond to all verified requests within thirty (30) calendar days as required by the DPA. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee or may be declined, with written reasons provided.
13.1 If you have a complaint regarding the processing of your personal data by luxwin, you should first contact the luxwin Data Privacy Officer as described in Section 15. luxwin will acknowledge your complaint within five (5) business days and aim to resolve it within thirty (30) calendar days.
13.2 If you are not satisfied with luxwin's response to your complaint, you have the right to file a formal complaint with the National Privacy Commission ("NPC") of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the DPA.
13.3 NPC complaint procedures and contact information are publicly available through official NPC channels. luxwin will cooperate fully with any NPC investigation or enforcement action.
14.1 luxwin reserves the right to update or modify this Privacy Policy at any time. The effective date of the current version appears at the top of this document and will be updated whenever material changes are made.
14.2 Where changes are material — meaning they significantly affect how your personal data is processed or your rights under this Policy — luxwin will notify you by email to your registered address no less than fourteen (14) calendar days before the changes take effect.
14.3 Continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgement of and agreement to the changes. If you do not agree to the revised Policy, you should cease using the Platform and request Account closure per the Terms & Conditions.
14.4 Previous versions of this Policy are available upon request from the luxwin Data Privacy Officer.
15.1 All data privacy-related requests, complaints, and inquiries should be directed to the luxwin Data Privacy Officer through the following channels:
15.2 When submitting a data rights request, please provide: your full registered name; your registered email address or username; the specific right you wish to exercise; and sufficient detail to allow luxwin to identify and locate the relevant personal data. luxwin may require identity verification before processing your request.
Play on a platform that takes your data as seriously as your winnings. PAGCOR-licensed, DPA-compliant, and built for Filipino players across the Philippines.