luxwin Privacy Policy

1. Introduction

luxwin ("we," "us," or "our") operates the online casino platform accessible at luxwin.one (the "Platform"). We are committed to protecting the personal data of every player and visitor who interacts with the luxwin Platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, sharing, and protection of your personal information.

This Policy applies to all users of the luxwin Platform, including registered account holders, visitors browsing without an account, and individuals who contact our support team. By accessing the luxwin Platform or registering an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

luxwin is committed to complying with applicable data protection laws, including the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations. The National Privacy Commission ("NPC") of the Philippines is the supervisory authority responsible for overseeing compliance with the DPA.

2. Personal Data We Collect

luxwin collects the following categories of personal data from players and platform visitors:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Philippine mobile number and email address
• Residential address (province, city/municipality)
• Government-issued ID details (ID type, ID number) submitted during KYC verification

2.2 Financial Data

• GCash or Maya account number (for deposit and withdrawal processing)
• Bank account details (bank name, account number) where bank transfer is used
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
• Account balance and bonus credit history

2.3 Gaming Activity Data

• Games played, wager amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.4 Technical and Usage Data

• IP address and approximate geographic location at the time of login
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the Platform
• Login timestamps and session activity logs

2.5 Communications Data

• Records of live chat conversations with our support team
• Email correspondence sent to or received from luxwin
• Feedback, complaints, and survey responses submitted through the Platform

3. How We Collect Your Data

luxwin collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 7 for details on our cookie practices.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; and, where applicable, information from regulatory authorities in connection with compliance obligations.

4. How We Use Your Personal Data

luxwin uses your personal data for the following purposes:

luxwin does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by applicable law or regulation.

5. Legal Basis for Processing

luxwin processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to when registering your luxwin account — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and regulatory reporting duties.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving the luxwin service — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as promotional communications, where we have obtained your explicit consent. You may withdraw consent at any time by contacting our support team or updating your account preferences.

6. Data Sharing and Disclosure

luxwin does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

6.1 Service Providers

We share data with trusted third-party service providers who assist in operating the luxwin Platform, including: payment processors (GCash, Maya, and banking partners); KYC and identity verification providers; fraud detection and cybersecurity services; cloud hosting and infrastructure providers; and customer support platform providers. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6.2 Regulatory and Legal Disclosure

luxwin may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive. This includes disclosures required under Philippine anti-money laundering regulations and gaming regulatory requirements.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of luxwin's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

7. Cookies and Tracking Technologies

The luxwin Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. The following types of cookies are used:

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the Platform — such as which games are most popular and how navigation flows are used. This helps us improve the luxwin experience.
• Preference cookies: Store your Platform preferences, such as language settings and display options, so you don't have to reset them on each visit.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features of the luxwin Platform, including logging in to your account.

8. Data Retention

luxwin retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account and for a period of at least five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form; thereafter retained in aggregated, anonymized form for analytics purposes.

When personal data is no longer required for any lawful purpose, luxwin will securely delete or anonymize it in accordance with our data disposal procedures.

9. Data Security

luxwin implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the luxwin Platform
• Encryption of sensitive data at rest, including financial data and identity documents
• Multi-factor authentication options for account access
• Regular security audits and penetration testing of Platform infrastructure
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Continuous monitoring for suspicious activity and unauthorized access attempts

While luxwin takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, luxwin will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

10. Your Data Protection Rights

Under the Data Privacy Act of 2012 and applicable regulations, you have the following rights with respect to your personal data held by luxwin:

• Right to be informed: You have the right to know what personal data luxwin collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data luxwin holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account details directly within your luxwin account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to other processing based on legitimate interests, subject to our overriding legal obligations.
• Right to data portability: You may request a copy of personal data you have provided to luxwin in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe luxwin has not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact our Data Protection Officer via the contact details in Section 13. luxwin will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

11. Children's Privacy and Age Restriction

The luxwin Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations applicable to casino-style gambling. luxwin does not knowingly collect personal data from individuals under the age of 21.

During registration, all users are required to confirm that they are at least 21 years of age. luxwin enforces this requirement through KYC identity verification procedures. Any account found to belong to a person under 21 years of age will be immediately suspended, all associated personal data will be deleted (subject to any legal retention obligations), and any funds in the account will be handled in accordance with applicable regulations.

If you believe that a minor has registered an account on the luxwin Platform, please contact our support team immediately so that we can investigate and take appropriate action.

12. Changes to This Privacy Policy

luxwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered players via the mobile number or email address associated with their account, or by posting a prominent notice on the Platform, at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how luxwin protects your personal data. Your continued use of the luxwin Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

13. Contact Us and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by luxwin, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 within the luxwin Platform — the fastest way to reach our support team for general privacy inquiries.
• Email: privacy@luxwin.one — for formal data subject requests, complaints, and written privacy inquiries.

When submitting a data subject request, please include your registered username, a clear description of your request, and a copy of a valid government-issued ID for identity verification purposes. luxwin will acknowledge your request within five (5) business days and provide a full response within thirty (30) days.

If you are not satisfied with luxwin's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.