luxwin Privacy Policy

1.1 This Privacy Policy ("Policy") is issued by luxwin ("we," "us," "our") and applies to all personal information collected from individuals ("you," "your," "Player") who access or use the luxwin online gaming platform available at luxwin.asia, including all associated account services, payment systems, live games, slot games, bingo, color game, and sports betting functionalities.

1.2 luxwin is committed to protecting the privacy and personal data of all Filipino players who use our platform. This Policy describes what personal information we collect, why we collect it, how it is used and stored, with whom it may be shared, and what rights you have under Philippine data protection law.

1.3 This Policy must be read together with the luxwin Terms and Conditions, available at luxwin.asia/terms-conditions, which govern the broader contractual relationship between you and luxwin. In the event of any conflict between this Policy and the Terms and Conditions regarding data privacy matters, this Policy shall prevail.

1.4 By registering an account on luxwin, completing the KYC verification process, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2.1 luxwin acts as the personal information controller in respect of all personal data collected from registered players and visitors to luxwin.asia. As the controller, luxwin determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 and applicable PAGCOR regulations.

2.2 luxwin has designated a Data Protection Officer (DPO) who is responsible for overseeing the platform's data protection practices, handling data subject rights requests, and liaising with the National Privacy Commission of the Philippines where required.

2.3 For all data privacy inquiries, rights requests, and complaints, you may contact the luxwin Data Protection Officer by writing to the customer support team via the live chat function at luxwin.asia. Contact email for data privacy matters: [email protected] (please include "Data Privacy" in the subject line).

3.1 luxwin collects the following categories of personal data from players and platform visitors:

3.2 luxwin does not intentionally collect sensitive personal information beyond what is strictly required for KYC compliance (e.g., government ID numbers) and responsible gaming monitoring. We do not collect financial account passwords, biometric data beyond selfie-with-ID verification, or health information.

4.1 luxwin collects personal data through the following means:

• Direct provision by you — information you enter during account registration, the KYC upload process, payment form completion, or when contacting luxwin support;
• Automated technical collection — data gathered automatically by our servers when you visit or interact with luxwin.asia, including server logs, session data, and cookie-based identifiers (see Section 7);
• Payment processors — transaction confirmations and payment identifiers received from GCash, Maya, InstaPay, PesoNet, and other payment service providers when you make deposits or withdrawals;
• KYC verification providers — identity verification results and document authentication outcomes from licensed KYC service providers used to fulfill PAGCOR compliance requirements;
• PAGCOR exclusion register — name and ID matching checks conducted against PAGCOR's self-exclusion registry before and during account operation.

5.1 luxwin processes your personal data only for specified, explicit, and legitimate purposes. The following table sets out the purposes for which we process personal data and the legal basis under the Data Privacy Act of 2012 for each purpose:

5.2 Where processing is based on your consent (e.g., promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

6.1 luxwin does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared only in the following limited circumstances:

• Payment service providers — GCash (Mynt), Maya (Voyager Innovations), InstaPay, PesoNet member banks (BPI, BDO, Metrobank), and other licensed payment processors receive only the data necessary to process your transaction (e.g., mobile number for GCash transfers, account details for bank transfers);
• KYC and identity verification services — licensed third-party identity verification providers receive copies of your ID documents and selfie solely for the purpose of completing mandatory PAGCOR KYC checks;
• PAGCOR and Philippine regulatory authorities — we are required by law to submit player data, transaction reports, suspicious activity reports, and gaming records to PAGCOR and to the Anti-Money Laundering Council (AMLC) where applicable thresholds are triggered under RA 9160;
• Law enforcement and courts — where required by a valid court order, subpoena, or lawful request by Philippine law enforcement authorities, luxwin will disclose the minimum data necessary to comply with the legal obligation;
• IT and platform service providers — cloud hosting, security, and technical infrastructure providers who process data on luxwin's behalf under data processing agreements that bind them to equivalent privacy and security standards.

7.1 luxwin uses cookies and similar tracking technologies on the luxwin.asia website to enable core platform functionality, maintain your login session, detect fraud and abuse, and analyze platform performance. The following categories of cookies are used:

• Strictly necessary cookies — required for the platform to function. These enable your login session, maintain your wallet balance display, and keep your game state. These cookies cannot be disabled without breaking platform functionality;
• Analytics cookies — used to collect aggregated, anonymized data about how players navigate the platform, which game categories are most popular, and where technical performance issues occur. luxwin uses this data only for internal platform improvement;
• Security cookies — used to identify suspicious patterns, detect multiple-account attempts, and enforce geographic access controls as required by PAGCOR;
• Preference cookies — used to remember your display preferences, notification settings, and responsible gaming tool configurations across sessions.

7.2 luxwin does not use advertising cookies or allow third-party advertising networks to set cookies on luxwin.asia. You will not see targeted advertising on other websites based on your luxwin browsing behavior.

7.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your luxwin account and using real-money game features.

8.1 luxwin retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to any minimum retention periods required by applicable law or PAGCOR regulation. The following retention periods apply:

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with luxwin's data disposal procedures.

9.1 luxwin implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and luxwin servers;
• Encryption at rest for sensitive stored data including KYC documents and financial account identifiers;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for administrative access to systems that process player data;
• Regular security vulnerability assessments and penetration testing;
• Automated monitoring systems for suspicious access patterns and potential data breaches;
• Secure deletion protocols applied to data that has exceeded its retention period.

9.2 In the event of a personal data breach that poses a real risk to your rights and freedoms, luxwin will notify affected players and the National Privacy Commission of the Philippines within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

9.3 While luxwin implements industry-standard security measures, no system is completely immune to security risks. Players are encouraged to use strong unique passwords, enable two-factor authentication on their luxwin account, and promptly report any suspected unauthorized access to luxwin support.

10.1 Under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by luxwin:

10.2 To exercise any of these rights, contact the luxwin Data Protection Officer via live chat or by emailing [email protected] with the subject line "Data Subject Rights Request." luxwin will respond within thirty (30) calendar days. In complex cases, this period may be extended by a further 30 days with written notice to you.

10.3 Requests to exercise data subject rights are subject to identity verification. You will be asked to confirm your registered mobile number and may be asked to provide a copy of your ID before luxwin processes your request. This is to prevent unauthorized access to another person's account data.

11.1 luxwin is a real-money gambling platform exclusively for adults aged 21 and above. The platform is not directed at, and luxwin does not knowingly collect personal data from, any person under the age of 21.

11.2 luxwin enforces the 21+ age requirement through mandatory KYC identity and age verification. Accounts that cannot be verified as belonging to a person aged 21 or older are immediately closed and any deposited funds are returned to the originating payment method.

11.3 If you believe a person under 21 has registered on luxwin or has accessed the platform, please contact luxwin support immediately via live chat. luxwin will investigate and act on all such reports with priority.

12.1 The luxwin platform may contain references to or integrations with third-party service providers, including payment gateways (GCash, Maya), game content providers (JILI Games, Pragmatic Play, CQ9, Spadegaming), and technical infrastructure providers. These third parties operate under their own privacy policies.

12.2 When you initiate a GCash or Maya payment from luxwin, you are interacting with Mynt or Voyager Innovations' respective payment processing systems. luxwin has no control over the data handling practices of these payment providers and is not responsible for their privacy policies. We encourage you to review the privacy policies of any third-party service provider you interact with.

12.3 Game content streamed from third-party providers (e.g., JILI live tables) may involve data transmission to those providers' servers as required to deliver the game content. This is limited to session data necessary for game operation and does not include your identity or financial data.

13.1 luxwin's primary data processing activities are conducted within the Philippines, in compliance with PAGCOR's data sovereignty requirements. In limited circumstances, personal data may be processed by our technical infrastructure or security service providers whose servers are located outside the Philippines.

13.2 Where personal data is transferred outside the Philippines, luxwin ensures that adequate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and NPC implementing rules, including data processing agreements that require the receiving party to maintain protections equivalent to Philippine standards.

13.3 luxwin does not transfer KYC documents or financial account details to servers located in jurisdictions without adequate data protection frameworks.

14.1 luxwin reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, platform features, or our data processing practices. The date at the top of this page indicates when the Policy was last updated.

14.2 Material changes to this Privacy Policy — such as changes to the categories of data we collect, the purposes for which we process data, or the parties with whom we share data — will be communicated to registered players via email or an in-platform notification displayed on next login at least seven (7) days before the change takes effect.

14.3 Continued use of the luxwin platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree to the amended Policy, you may request account closure by contacting luxwin support before the effective date.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the way luxwin handles your personal data, please contact the luxwin Data Protection Officer through any of the following channels:

• Live Chat: Available 24/7 directly on luxwin.asia — the fastest way to reach our support team;
• Email: [email protected] — include "Data Privacy" in the subject line for routing to the DPO;
• Response Time: luxwin aims to acknowledge all data privacy inquiries within 2 business days and resolve them within 30 calendar days.

15.2 If you are not satisfied with luxwin's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC oversees compliance with the Data Privacy Act of 2012 and provides a formal complaints and resolution process for Philippine data subjects.