Privacy Policy
of lakiwi

lakiwi ("we," "us," or "our") operates the online casino and sports betting platform accessible at lakiwi.net. We are committed to protecting the personal data of every player who registers on or interacts with our platform. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and the implementing rules and regulations issued by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected by lakiwi through any channel — including account registration, deposits and withdrawals, gameplay activity, customer support interactions, and browsing behaviour on the lakiwi website. It applies to all current and former registered players, as well as visitors who browse the platform without creating an account.

By accessing or using the lakiwi platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue your use of the platform immediately.

For the purposes of the Data Privacy Act of 2012 and its implementing rules and regulations, the data controller responsible for your personal information is lakiwi, the operator of the lakiwi.net platform. As data controller, lakiwi determines the purposes and means by which your personal data is processed.

lakiwi has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection laws and for handling inquiries, access requests, and complaints related to personal data. You may contact the DPO directly at [email protected] with the subject line "Data Privacy Inquiry."

All data processing activities conducted by lakiwi are carried out in accordance with the principles of transparency, legitimate purpose, and proportionality as mandated by Philippine data protection law.

lakiwi collects the following categories of personal data in the course of operating the platform and providing services to registered players:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless strictly required by law and with your explicit consent.

lakiwi collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a lakiwi account, you provide your name, date of birth, email address, and Philippine mobile number directly through the registration form.
• Identity Verification (KYC): When you submit documents for identity verification — such as a valid Philippine government-issued ID (PhilSys, passport, driver's license, or UMID) and a proof of address — we collect and process that data as part of our compliance obligations.
• Deposits and Withdrawals: When you conduct financial transactions through GCash, PayMaya, BPI, BDO, or Metrobank, we receive transaction reference data necessary to confirm and process your payment.
• Platform Usage: We automatically collect technical and gameplay data as you use the lakiwi platform — including the games you play, the bets you place, your session duration, and your device and browser information.
• Customer Support: When you contact our support team via live chat or email, we collect the content of your communications and any additional information you provide to resolve your inquiry.
• Cookies and Tracking Technologies: We use cookies and similar tracking tools on the lakiwi website to collect browsing behaviour data. Please refer to Section 8 for full details on our cookie practices.

lakiwi uses the personal data we collect for the following specific, legitimate purposes:

• Account Management: To create, maintain, verify, and manage your lakiwi player account, including processing your login credentials and account preferences.
• Payment Processing: To process your PHP deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and to maintain accurate transaction records.
• Identity & Age Verification: To confirm that you are who you say you are and that you meet the 21+ age requirement for casino-style gaming in the Philippines, in compliance with applicable regulations.
• Anti-Money Laundering (AML) Compliance: To monitor transactions and account activity for indicators of money laundering, terrorist financing, or other financial crimes, as required under Philippine law.
• Responsible Gaming: To monitor gameplay patterns and enforce responsible gaming limits you have set, and to identify players who may be showing signs of problematic gambling behaviour so we can offer timely support.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance related to your lakiwi account or gameplay.
• Platform Security: To detect, investigate, and prevent fraud, unauthorised account access, bonus abuse, and other prohibited activities on the lakiwi platform.
• Legal Compliance: To comply with applicable Philippine laws, regulatory directives, and court orders, including data retention obligations and mandatory reporting requirements.
• Service Improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the lakiwi platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given consent to receive such communications. You may opt out of marketing communications at any time via your account settings or by contacting support.

Under the Data Privacy Act of 2012, lakiwi relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between lakiwi and you as a registered player — including account creation, payment processing, gameplay delivery, and customer support.
• Legal Obligation: Processing is necessary for lakiwi to comply with its legal and regulatory obligations under Philippine law, including KYC/AML requirements, age verification mandates, and data retention rules.
• Legitimate Interests: Processing is necessary for lakiwi's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your own data protection rights.
• Consent: For specific processing activities such as marketing communications and non-essential cookies, we rely on your freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

lakiwi does not disclose your personal data to third parties except in the following specific circumstances:

• Payment Processors: We share necessary financial data with GCash, PayMaya, BPI, BDO, and Metrobank solely to facilitate your deposit and withdrawal transactions. Each payment partner operates under its own data protection framework and applicable Philippine financial regulations.
• Identity Verification Providers: We engage accredited KYC service providers to assist in verifying player identities and documents. These providers process your data strictly for verification purposes and are contractually bound to maintain confidentiality.
• Game Content Providers: Third-party game studios and live dealer operators (such as Ezugi) may receive anonymised or pseudonymised session data necessary to deliver their games on the lakiwi platform. They do not receive your full identity or financial data.
• Regulatory & Law Enforcement Authorities: lakiwi will disclose personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or law enforcement agencies where required by law, court order, or legitimate regulatory request.
• Professional Advisors: We may share data with lawyers, auditors, and accountants where strictly necessary to obtain professional advice or to defend legal claims.

In all cases of data sharing, lakiwi implements appropriate data processing agreements or contractual safeguards to ensure that your personal data is handled with the same level of protection that lakiwi applies internally.

The lakiwi website uses cookies and similar tracking technologies to enhance your browsing experience, maintain session continuity, and collect analytical data about how players interact with the platform. The following types of cookies are used:

You can manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies will not affect your ability to access or play on the lakiwi platform, but may affect some personalisation features. For full details on how to manage cookies in your browser, refer to the help documentation of your specific browser (Chrome, Safari, Firefox, etc.).

lakiwi retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with KYC and AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and related regulations.
• Gameplay Records: Retained for the duration of your active account and for three (3) years following account closure, for dispute resolution and responsible gaming compliance purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, unless the subject matter involves an ongoing dispute or regulatory inquiry.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal, as evidence of consent management compliance.

Following the applicable retention period, personal data will be securely and irreversibly deleted or anonymised so that it can no longer be attributed to any individual.

lakiwi takes the security of your personal data seriously. We implement a multi-layered security framework to protect your information from unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit TLS Encryption: All data transmitted between your device and the lakiwi platform is encrypted using the same TLS standard employed by major Philippine banks such as BPI and BDO.
• Data Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within the lakiwi organisation is strictly limited to personnel who require it to perform their specific job function. All staff access is logged and audited.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) as an additional layer of security against unauthorised login attempts.
• Regular Security Audits: Our platform undergoes regular penetration testing and independent security audits to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, lakiwi will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by lakiwi:

• Right to Be Informed: You have the right to be told how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that lakiwi holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data we hold about you be corrected or updated. You may update basic account information directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to lakiwi's legal retention obligations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though lakiwi may have compelling grounds to continue processing in some cases.
• Right to Lodge a Complaint: If you believe that lakiwi has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact the lakiwi Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days, as required by applicable law.

The lakiwi platform is strictly intended for adults aged 21 years and above in accordance with Philippine gaming regulations. lakiwi does not knowingly collect or process the personal data of any person under the age of 21.

If you are a parent or guardian and believe that your child has registered on the lakiwi platform without your knowledge or consent, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

The lakiwi platform integrates with third-party service providers to deliver certain features and functions. These include payment gateways (GCash, PayMaya, BPI, BDO, Metrobank), live dealer game studios, identity verification services, and customer support tools. When you interact with features powered by these third-party services, those providers may collect certain technical or transactional data as necessary to deliver their service.

lakiwi ensures that all third-party service providers engaged by the platform are contractually bound to process personal data only for the specified purpose, to maintain appropriate security standards, and to comply with the Data Privacy Act of 2012 to the extent applicable.

lakiwi is not responsible for the independent privacy practices of third-party service providers beyond the scope of their engagement with lakiwi. We encourage you to review the privacy policies of any third-party payment or financial service you use in connection with your lakiwi account.

lakiwi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the platform. When material changes are made to this Privacy Policy, we will notify registered players via the email address associated with their account and/or via a prominent notice on the lakiwi website.

The updated Privacy Policy will take effect from the date it is published on the lakiwi website. We encourage you to review this page periodically to stay informed about how we protect your personal data. Continued use of the platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way lakiwi handles your personal data, please reach out to our Data Protection Officer:

Email: [email protected] — subject line: "Data Privacy Inquiry"

Live Chat: Available 24/7 on the lakiwi website, with an average response time of under 5 minutes.

If you are not satisfied with our response, or if you believe your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012 and can be reached through their official government channels.