lulubet Privacy Policy

1. Introduction

1.1 lulubet operates the online gaming platform accessible at lulubet.vip (the "Platform"). As a data controller, lulubet is responsible for the personal data you provide to us and the data we collect about you when you use the Platform.

1.2 This Privacy Policy applies to all personal data collected through the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your general use of the lulubet website and mobile application.

1.3 By registering an account or using the lulubet Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, please do not use the Platform.

1.4 This policy should be read alongside the lulubet Terms & Conditions, which govern your use of the Platform.

2. Personal Data We Collect

2.1 lulubet collects the following categories of personal data:

2.2 lulubet does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected (such as government ID numbers), it is handled with additional safeguards.

3. How We Collect Your Data

3.1 Directly from You. We collect data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys, or participate in promotions.

3.2 Automatically. When you use the lulubet Platform, we automatically collect technical and usage data through cookies, web beacons, log files, and similar tracking technologies. This includes your IP address, device identifiers, browser type, pages visited, and gameplay activity.

3.3 From Third Parties. We may receive data about you from third-party identity verification providers, payment processors (such as GCash and Maya), fraud prevention services, and analytics providers. All third-party data sharing is governed by appropriate data processing agreements.

4. How We Use Your Personal Data

4.1 lulubet uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your lulubet account, including verifying your identity and age.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver customer support.
• Legal & Regulatory Compliance: To comply with PAGCOR regulations, Philippine anti-money laundering laws (AMLA), the Data Privacy Act, and other applicable legal obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gameplay patterns and identify players who may be at risk of problem gambling, and to enforce self-exclusion and limit settings.
• Marketing & Promotions: To send you relevant offers, bonuses, and news about lulubet — but only where you have given your consent to receive such communications.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the lulubet Platform's features, performance, and user experience.

5. Legal Basis for Processing

5.1 Under the Philippine Data Privacy Act, lulubet processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the lulubet Terms & Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with Philippine law, including KYC/AML requirements, PAGCOR regulations, and tax obligations.
• Legitimate Interests: Processing for fraud prevention, security, and platform improvement, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6. Sharing Your Personal Data

6.1 lulubet does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, Maya, and partner banks require certain data to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC providers who assist with age and identity verification.
• Fraud Prevention Services: Providers who help us detect and prevent fraudulent activity on the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government bodies where required by law.
• IT & Cloud Service Providers: Providers who host and maintain the lulubet Platform infrastructure, subject to strict data processing agreements.
• Professional Advisors: Lawyers, auditors, and accountants where necessary for legal or financial compliance.

6.2 Any third party that receives your personal data is required to handle it in accordance with the Philippine Data Privacy Act and lulubet's data protection standards.

7. Cookies & Tracking Technologies

7.1 lulubet uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage, and support security functions. Cookies are small text files stored on your device when you visit the lulubet website.

7.2 We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled and do not require your consent. They include session management, security tokens, and login state cookies.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits you have set.
• Analytics Cookies: Help us understand how players use the Platform so we can improve it. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content. You may opt out at any time through your account settings.

7.3 You can control non-essential cookies through your browser settings or your lulubet account preferences. Please note that disabling certain cookies may affect the functionality of the Platform.

8. Data Security

8.1 lulubet implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including financial information and government ID details;
• Role-based access controls ensuring that only authorized lulubet personnel can access personal data, and only to the extent necessary for their role;
• Regular security audits, vulnerability assessments, and penetration testing of the Platform;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Continuous monitoring for suspicious activity and automated fraud detection systems.

8.2 While lulubet takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are also responsible for keeping your lulubet login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

8.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lulubet will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

9. Data Retention

9.1 lulubet retains your personal data for as long as your account is active and for a period thereafter as required by Philippine law and regulatory obligations. Specific retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR and AMLC regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act (AMLA) and its implementing rules.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer if related to an ongoing dispute or legal matter.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and Usage Data: Retained for up to twenty-four (24) months for analytics and security purposes, after which it is anonymized or deleted.

9.2 When personal data is no longer required, lulubet will securely delete or anonymize it in accordance with our data disposal procedures.

10. Your Rights Under the Data Privacy Act

10.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by lulubet:

• Right to Be Informed: You have the right to know what personal data lulubet collects about you, how it is used, and with whom it is shared.
• Right to Access: You may request a copy of the personal data lulubet holds about you at any time by contacting our Data Protection Officer.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to lulubet's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request that lulubet provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: If you believe lulubet has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

10.2 To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. lulubet will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines.

10.3 Please note that certain rights may be limited where lulubet is required to retain or process your data to comply with legal obligations, such as AML and KYC requirements.

11. Children's Privacy

11.1 The lulubet Platform is strictly intended for persons aged twenty-one (21) years and above. lulubet does not knowingly collect personal data from individuals under the age of 21.

11.2 If lulubet becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete the data, and return any deposits in accordance with our Terms & Conditions.

11.3 If you believe that a minor has registered an account on the lulubet Platform, please contact our support team immediately so that we can take appropriate action.

12. Third-Party Links

12.1 The lulubet Platform may contain links to third-party websites or services for informational purposes. lulubet is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

12.2 The inclusion of any third-party link on the lulubet Platform does not constitute an endorsement of that third party's privacy practices or data handling procedures.

13. Changes to This Privacy Policy

13.1 lulubet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. The most current version of this policy will always be available at lulubet.vip/privacy-policy.

13.2 Where changes are material, lulubet will notify registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

13.3 If you do not agree with any changes to this Privacy Policy, you may close your account in accordance with the lulubet Terms & Conditions.

14. Contact Us & Data Protection Officer

14.1 lulubet has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our DPO.

14.2 You may reach the lulubet Data Protection Officer by email at: [email protected]

14.3 For general customer support inquiries, you may contact us at: [email protected]

14.4 lulubet's customer support team is available 24 hours a day, 7 days a week via live chat on the Platform. We aim to respond to all data privacy requests within fifteen (15) business days.

14.5 If you are not satisfied with lulubet's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.