Your Data, Your Rights
How lucy777 Protects Your Privacy
Six core commitments that define how we handle your personal information on the lucy777 platform.
Data Privacy Act Compliance
lucy777 operates in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Your personal data is handled lawfully, fairly, and transparently at every step.
End-to-End Encryption
All data transmitted between your device and the lucy777 platform is protected by industry-standard TLS 1.3 encryption. Sensitive fields such as your GCash details, BPI credentials, and account passwords are never stored in plain text.
Minimal Data Collection
We collect only the personal data strictly necessary to provide you with a safe, compliant gaming experience. We do not collect data speculatively or for purposes beyond what is stated in this Privacy Policy without your explicit consent.
No Third-Party Data Sales
lucy777 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data belongs to you — we will never monetise it without your explicit, informed consent.
Identity Verification Security
KYC documents you submit — including Philippine government IDs such as PhilSys, UMID, and passports — are processed through encrypted, access-controlled systems and are used solely for identity verification and regulatory compliance purposes.
Breach Notification
In the unlikely event of a personal data breach that poses a real risk to Filipino players, lucy777 will notify affected individuals and the National Privacy Commission (NPC) within the timeframe required under the Data Privacy Act of 2012.
Data Subject Rights
Your Rights Under Philippine Law
The Data Privacy Act of 2012 gives every Filipino player specific rights over their personal data. Here's a plain-English summary.
Right to Be Informed
You have the right to know what personal data lucy777 collects, why we collect it, and how it is processed before or at the time of collection.
Right to Access
You may request a copy of the personal data we hold about you, along with information on how it has been used, at any time by contacting our support team.
Right to Rectification
If your personal data on file is inaccurate or incomplete, you have the right to request that we correct or update it promptly.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes. We will act on such requests within 10 business days.
Right to Data Portability
You may request a structured, machine-readable copy of personal data you have provided to lucy777, so you can transfer it to another service if you choose.
Table of Contents
- 1. Overview
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis
- 7. Data Sharing
- 8. Data Retention
- 9. Security Measures
- 10. Cookies & Tracking
- 11. Minors
- 12. Exercising Your Rights
- 13. Cross-Border Transfers
- 14. Marketing
- 15. Complaints
- 16. Policy Changes
01 Overview
This Privacy Policy ("Policy") describes how lucy777 ("lucy777", "we", "us", "our") collects, processes, stores, shares, and protects personal data in connection with your use of the lucy777 online casino and sports betting platform at https://lucy777.net, including all associated games, services, promotions, and communications.
This Policy applies to all registered players, prospective players, and visitors to the lucy777 website, regardless of their location within the Philippines. By registering an account or continuing to use the lucy777 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Policy is intended to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.
02 Data Controller Identity
For the purposes of the Data Privacy Act of 2012, lucy777 acts as the Personal Information Controller (PIC) in respect of personal data collected through the lucy777 platform.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to contact our Data Protection Officer (DPO), you may reach us through the following:
- Platform: https://lucy777.net
- Email: [email protected]
- Support Channel: 24/7 Live Chat available on the lucy777 website
03 Personal Data We Collect
lucy777 collects the following categories of personal data, depending on how you interact with our platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality | Registration & KYC |
| Contact Data | Email address, Philippine mobile number, residential address | Registration |
| Verification Data | Government-issued ID (PhilSys, UMID, passport, driver's licence), utility bills | KYC verification |
| Financial Data | GCash number, BPI/BDO/Metrobank account reference, transaction history | Deposits & withdrawals |
| Gaming Data | Game history, bet amounts, win/loss records, bonus usage, session duration | Platform activity |
| Technical Data | IP address, device type, browser, operating system, cookies | Automatic collection |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion records, session reminders | Responsible gaming tools |
We do not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless it is directly relevant to our responsible gaming obligations (e.g., a player-disclosed gambling problem that triggers self-exclusion support).
04 How We Collect Your Data
lucy777 collects personal data through the following channels:
- Direct collection: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or submit a responsible gaming request.
- Automated collection: When you browse or use the lucy777 website, we automatically collect Technical Data via cookies, web beacons, server logs, and similar tracking technologies.
- Third-party sources: We may receive identity verification data from KYC service providers, fraud prevention partners, and payment processors (such as GCash or DragonPay) to supplement your account information and verify your identity.
- Publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, we may cross-reference data against publicly available Philippine government databases.
05 How We Use Your Personal Data
lucy777 processes your personal data for the following specific purposes:
- Account management: Creating, maintaining, and securing your player account, including login authentication and account recovery.
- Identity verification: Confirming your age (21+ requirement), identity, and eligibility to play on the lucy777 platform in compliance with Philippine gaming regulations.
- Transaction processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and DragonPay.
- Gaming services: Delivering games, live dealer tables, sportsbook markets, and all other platform features to you.
- Bonus and promotion management: Applying eligible bonuses, tracking wagering requirements, and administering promotional campaigns.
- Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, underage gambling, and account takeover attempts.
- Responsible gaming: Monitoring gameplay patterns to identify potentially problematic behavior and administering self-exclusion, deposit limits, and other responsible gaming tools.
- Regulatory compliance: Meeting our obligations under Philippine gaming regulations, anti-money laundering laws (Republic Act No. 9160), and the Data Privacy Act of 2012.
- Customer support: Responding to your queries, complaints, and requests through live chat and email.
- Service improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
- Marketing communications: Sending you promotional offers, game updates, and relevant communications — only where you have provided consent or where permitted under applicable law.
06 Legal Basis for Processing
Under the Data Privacy Act of 2012, lucy777 relies on the following legal bases for processing your personal data:
- Contractual necessity: Processing required to perform the contract between you and lucy777 — i.e., providing you with online gaming services, processing transactions, and managing your account.
- Legal obligation: Processing required to comply with applicable Philippine law, including KYC obligations, anti-money laundering reporting, and age verification requirements.
- Legitimate interests: Processing necessary for the legitimate interests of lucy777, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms.
- Consent: For marketing communications and any non-essential cookie usage, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time.
07 Data Sharing & Third Parties
lucy777 does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:
- KYC and identity verification providers: To verify your identity and age in compliance with Philippine regulations.
- Payment processors: Including GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and DragonPay, to facilitate your financial transactions.
- Game software providers: Licensed game studios and RNG providers whose games are made available on the lucy777 platform. These providers may receive session and gameplay data as necessary to deliver their games.
- Fraud prevention and security services: Third-party services that help us detect and prevent fraudulent activity, cheating, and money laundering.
- Legal and regulatory authorities: Philippine government agencies, including PAGCOR and the Anti-Money Laundering Council (AMLC), where required by law or regulation.
- Professional advisors: Lawyers, auditors, and accountants acting in a professional capacity, bound by obligations of confidentiality.
08 Data Retention
lucy777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years | Regulatory & legal compliance |
| KYC documents | Duration of account + 5 years | AML law (RA 9160) |
| Transaction records | 5 years from transaction date | AML & tax compliance |
| Gaming history | 3 years from session date | Dispute resolution |
| Support communications | 2 years from last interaction | Quality assurance & disputes |
| Marketing consent records | Until consent withdrawn + 1 year | Consent documentation |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming compliance |
After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
09 Security Measures
lucy777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:
- TLS 1.3 encryption on all data in transit between your device and lucy777 servers.
- AES-256 encryption for sensitive data at rest, including financial credentials and identity documents.
- Two-factor authentication (2FA) available to all registered players via SMS to a registered Philippine mobile number.
- Role-based access controls (RBAC) ensuring that internal staff access to personal data is restricted to those with a legitimate need.
- Regular penetration testing and vulnerability assessments conducted by independent security specialists.
- Audit logging of all access to sensitive personal data by internal systems and staff.
- Secure data centres with physical access controls, 24/7 monitoring, and redundant infrastructure.
10 Cookies & Tracking Technologies
lucy 777 uses cookies and similar tracking technologies to enhance your experience on the platform. The following categories of cookies are used:
- Strictly necessary cookies: Essential for the operation of the lucy777 platform — including session management, login authentication, and security functions. These cannot be disabled without impairing core platform functionality.
- Functional cookies: Remember your preferences, such as language settings and responsible gaming limit configurations, to provide a more personalised experience.
- Analytics cookies: Help us understand how players use the lucy777 platform by collecting aggregated, anonymised data on page visits, session duration, and feature usage. This data is used solely to improve the platform.
- Marketing cookies: Used only with your explicit consent to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns.
You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies may affect your ability to use certain features of the lucy777 platform. For marketing cookies, you may withdraw consent at any time by adjusting your account communication preferences.
11 Minors & Age Restriction
The lucy777 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under 21 years of age.
As part of our Know Your Customer (KYC) process, all players are required to verify their age before depositing funds or accessing real-money games. Philippine government-issued identification documents are required for this purpose.
If lucy777 discovers or has reason to believe that an account has been registered by a person under 21 years of age, we will:
- Immediately suspend the account pending investigation.
- Void any gameplay and refund any remaining balance to the payment method used.
- Permanently close the account and delete all associated personal data as soon as legally permissible.
- Report the incident to the appropriate Philippine regulatory authorities where required.
12 Exercising Your Data Rights
As a data subject under the Data Privacy Act of 2012, you may exercise any of the rights described in this Policy by contacting lucy777 through the following channels:
- Live Chat: Available 24/7 directly on the lucy777 website — the fastest way to submit a data rights request.
- Email: [email protected] — mark your subject line "Data Privacy Request: [Right You Are Exercising]".
To protect your privacy and prevent unauthorised requests, we will require you to verify your identity before processing any data subject request. Verification is typically completed by confirming account details and, where necessary, providing a copy of a government-issued Philippine ID.
lucy777 will respond to all valid data subject requests within 30 calendar days of receipt and identity verification, in accordance with the Data Privacy Act of 2012. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
There is no fee for exercising your data subject rights. However, if requests are manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or decline the request, in line with applicable law.
13 Cross-Border Data Transfers
In the course of providing its services, lucy777 may transfer certain personal data to third-party service providers located outside the Philippines — for example, game software providers or cloud infrastructure partners operating in other jurisdictions.
Where such cross-border transfers occur, lucy777 ensures that:
- The recipient country or organisation provides an adequate level of data protection, as determined by the National Privacy Commission of the Philippines.
- Appropriate contractual safeguards are in place, such as standard contractual clauses approved by the NPC, or binding corporate rules where applicable.
- The transfer is necessary for the performance of a contract with you (e.g., to deliver a game from a foreign game studio) or is otherwise permitted under the Data Privacy Act of 2012.
By using the lucy777 platform, you acknowledge that your personal data may be transferred internationally under the safeguards described above.
14 Marketing Communications
With your consent, lucy777 may send you promotional communications about new games, bonus offers, PBA betting markets, seasonal promotions, and other updates relevant to your use of the platform. These communications may be delivered via:
- Email to your registered address
- SMS to your registered Philippine mobile number
- In-platform notifications within your lucy777 account dashboard
You may opt out of marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email from lucy777.
- Adjusting your communication preferences within your lucy777 account settings.
- Contacting our support team via live chat or at [email protected].
15 Complaints & Regulatory Authority
If you believe that lucy777 has not handled your personal data in accordance with this Privacy Policy or the Data Privacy Act of 2012, we encourage you to contact us first so that we can investigate and resolve the matter promptly.
To raise a complaint:
- Contact our Data Protection Officer via [email protected], marking your email "Attention: Data Protection Officer — Privacy Complaint."
- Clearly describe the nature of your concern, the data involved, and the outcome you are seeking.
- We will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days.
If you are not satisfied with our response, or if you wish to escalate the matter, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.
16 Changes to This Privacy Policy
lucy777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will:
- Update the "Last Updated" date at the top of this Policy.
- Display a prominent notice on the lucy777 website informing players of the changes.
- Where required by law, notify registered players directly via email or in-platform notification.
Your continued use of the lucy777 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.
If any change to this Privacy Policy requires your consent under the Data Privacy Act of 2012, we will seek that consent before the change takes effect. If you do not agree to the updated Privacy Policy, you should discontinue use of the lucy777 platform and may request account closure by contacting our support team.
Your Privacy, Our Priority
Play with Confidence at lucy777 —
Your Data is Safe With Us
Over 1,200 games, live PBA betting, and fast GCash cashouts — all backed by a platform that takes your privacy as seriously as your winnings. Filipino players from Manila to Davao trust lucy777 for secure, responsible, and entertaining online gaming.