This Privacy Policy explains how luxwin collects, uses, stores, and protects the personal data of registered users and visitors to the Platform. luxwin is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Please read this document carefully before using any luxwin service.
Data requests? Contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request."
Scope of this Policy: This Privacy Policy applies to all personal data processed by luxwin in connection with the operation of https://luxwin.lat, including data collected during account registration, identity verification, deposits, withdrawals, gameplay, and customer support interactions. It applies to all users who are residents of or located within the Republic of the Philippines, as well as any other users of the Platform to the extent permitted by applicable law.
1.1 luxwin operates the online gaming platform accessible at https://luxwin.lat (the "Platform"). In the course of providing its services to Filipino players and other users, luxwin collects and processes certain categories of personal data. This Privacy Policy (the "Policy") sets out how luxwin collects, uses, stores, discloses, and protects that data.
1.2 This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered and enforced by the National Privacy Commission ("NPC") of the Philippines. This Policy is also informed by the applicable data protection requirements of the Philippine Amusement and Gaming Corporation ("PAGCOR"), under whose regulatory framework luxwin operates.
1.3 By registering an account on luxwin, using any service on the Platform, or otherwise providing personal data to luxwin, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with the Terms & Conditions, which govern your use of the Platform.
1.4 Where there is any conflict between this Policy and the DPA or its IRR, the provisions of the DPA and its IRR shall prevail to the extent of such inconsistency.
2.1 For the purposes of the Data Privacy Act of 2012, luxwin acts as the personal information controller ("PIC") in respect of the personal data it collects and processes in connection with the Platform. As PIC, luxwin determines the purposes for which, and the means by which, personal data is processed.
2.2 luxwin has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy, the DPA, and all applicable data protection legislation. The DPO may be contacted using the details provided in Section 14 of this Policy.
2.3 Third-party service providers engaged by luxwin to assist in the operation of the Platform may act as personal information processors ("PIP") in respect of personal data they handle on luxwin's behalf. Such processors are bound by data processing agreements that prohibit them from processing your data for any purpose other than those specified by luxwin and that require them to implement appropriate technical and organizational security measures.
3.1 luxwin collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table summarizes the categories of data collected and representative examples of each:
| Category | Examples | Required / Optional |
|---|---|---|
| Identity | Full legal name, date of birth, gender, nationality, government ID type and number, photograph, selfie image | Required (KYC) |
| Contact | Philippine mobile number, email address | Required |
| Financial | GCash account reference, PayMaya account reference, bank account name and number, deposit and withdrawal transaction records, account balance | Required (transactions) |
| Gaming Activity | Game sessions, bet amounts, game outcomes, session duration, bonus usage | Automatic |
| Technical | IP address, device type, operating system, browser type and version, session identifiers, cookie data | Automatic |
| Communications | Live chat transcripts, email correspondence, support ticket content | When contacted |
| Preferences | Language settings, game preferences, responsible gaming limits set by the user, marketing consent status | User-controlled |
3.2 luxwin does not collect special categories of sensitive personal data as defined under Section 3(l) of the DPA (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data used for identity tracking) except where facial matching is used solely for identity verification purposes during KYC, in which case the biometric data is processed with your explicit consent and is not retained beyond the completion of the verification process.
4.1 Directly from You. Most personal data held by luxwin is collected directly from you in the course of your use of the Platform, including during account registration, KYC identity verification, deposit and withdrawal requests, communications with our support team, and the configuration of account settings and responsible gaming tools.
4.2 Automatically. When you access the Platform, luxwin and its service providers automatically collect certain technical data through the use of cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser configuration, and session activity. See Section 9 for more detail on cookies and tracking.
4.3 From Third Parties. luxwin may receive personal data from third-party identity verification providers engaged to assist with KYC compliance, from payment processors in connection with the processing of deposits and withdrawals, and from fraud prevention and AML screening services. Data received from third parties is processed in accordance with this Policy and the applicable legal basis for such processing.
5.1 luxwin processes personal data for the following purposes, each supported by a corresponding legal basis under the DPA:
6.1 luxwin does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your personal data may be shared only in the following circumstances and only to the extent necessary for the specified purpose:
luxwin engages trusted third-party service providers to assist in the operation of the Platform. These include KYC and identity verification providers, payment processors handling GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay transactions, game content suppliers and live casino operators, cloud hosting and infrastructure providers, and customer support platform vendors. All such providers are bound by contractual data processing obligations consistent with the DPA and are prohibited from using your data for any purpose beyond the scope of their engagement with luxwin.
luxwin will disclose personal data to PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue, Philippine law enforcement agencies, or other competent government authorities where required to do so by applicable law, court order, or regulatory directive.
In the event of a merger, acquisition, reorganization, or sale of all or a substantial part of luxwin's assets, your personal data may be transferred to the relevant successor entity, subject to that entity assuming equivalent data protection obligations. You will be notified in the event of such a transfer.
In circumstances not covered above, luxwin will share your personal data with third parties only with your prior explicit consent.
7.1 luxwin retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
7.2 On expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with luxwin's internal data disposal procedures. Anonymized data from which no individual can be identified may be retained indefinitely for statistical and analytical purposes.
8.1 luxwin implements technical, administrative, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key measures include:
8.2 Notwithstanding the foregoing, no data transmission over the internet or electronic storage system is completely immune to security risk. luxwin cannot guarantee the absolute security of your personal data and encourages you to take responsibility for your own account security by using a strong, unique password and enabling two-factor authentication.
8.3 Data Breach Response. In the event of a personal data breach that is likely to result in serious harm to affected data subjects, luxwin will notify the National Privacy Commission within seventy-two (72) hours of discovery of the breach in accordance with NPC Circular 16-03, and will notify affected users without undue delay.
9.1 luxwin uses cookies and similar tracking technologies on the Platform to ensure proper functionality, analyze Platform performance, and enhance the user experience. Cookies are small text files stored on your device by your browser. The following categories of cookies are used:
9.2 You may configure your browser to refuse or delete cookies. Note that disabling cookies may impair certain Platform functions, including your ability to remain logged in between sessions. luxwin does not currently respond to browser "Do Not Track" signals, as no universal technical standard for such signals has been established.
10.1 As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by luxwin:
You have the right to request confirmation of whether luxwin holds personal data about you, and to receive a copy of that data together with information about how it is processed. Requests can be submitted to the DPO using the contact details in Section 14.
You have the right to request correction of any inaccurate or incomplete personal data held by luxwin. Some data, such as your verified legal name and date of birth, may require supporting documentation to amend following KYC verification.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw the consent on which processing was based. This right is subject to legal obligations that require luxwin to retain certain data (e.g., AML record-keeping requirements) which will prevail over an erasure request.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your fundamental rights override those interests, though such objections are subject to assessment by luxwin on a case-by-case basis.
You have the right to receive a copy of personal data you have provided to luxwin in a structured, commonly used, machine-readable format, and to have that data transmitted directly to another personal information controller where technically feasible.
If you believe that luxwin has processed your personal data in a manner inconsistent with the DPA or this Policy, you have the right to file a complaint with the National Privacy Commission of the Philippines. You are encouraged to first raise your concern with the luxwin DPO so that we have the opportunity to address it directly.
10.2 To exercise any of the rights described above, please submit a written request to the luxwin Data Protection Officer using the contact details in Section 14. luxwin will respond to all data subject requests within thirty (30) days of receipt, unless the complexity or volume of the request requires an extension, in which case you will be informed accordingly.
11.1 The luxwin Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR's minimum age requirement for casino-style gambling activities in the Philippines. luxwin does not knowingly collect personal data from individuals under the age of 21.
11.2 All users are required to complete mandatory age verification as part of the KYC process before any real-money gaming features are activated. Where luxwin discovers or reasonably suspects that an account is held by an individual under 21 years of age, the account will be immediately suspended, any real-money balance will be refunded to the source payment method, and all personal data associated with the underage account will be securely deleted following the completion of any required compliance review.
11.3 If you have reason to believe that an underage individual has registered on luxwin, please notify us immediately at [email protected].
12.1 In the course of providing its services, luxwin may transfer personal data to third-party service providers whose servers or operations are located outside the Philippines. Such transfers may include data processed by cloud infrastructure providers, game content suppliers, and KYC verification platforms operating in other jurisdictions.
12.2 Where personal data is transferred outside the Philippines, luxwin ensures that such transfers occur only to countries or organizations that provide an adequate level of data protection, or where appropriate safeguards are in place — including standard contractual clauses, binding corporate rules, or equivalent mechanisms — in accordance with the DPA and applicable NPC guidance.
12.3 By using the luxwin Platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions as described in this Section, subject to the safeguards described above.
13.1 luxwin reserves the right to update or revise this Privacy Policy at any time. The most current version of the Policy will always be published at https://luxwin.lat/privacy-policy, with the date of the most recent update displayed at the top of the document.
13.2 Where changes to this Policy are material — affecting your rights, the categories of data collected, or the purposes for which your data is used — luxwin will notify registered users via the contact details associated with their account in advance of the changes taking effect.
13.3 Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure and data deletion in accordance with Section 10.
14.1 For all data privacy-related inquiries, requests to exercise your data subject rights, reports of suspected data breaches, or complaints regarding the handling of your personal data, please contact the luxwin Data Protection Officer:
14.2 If you remain unsatisfied with luxwin's response to a data privacy request or complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (www.privacy.gov.ph).
These are the specific technical and operational commitments that back up the privacy promises in this Policy — not just words on a page.
Every data transmission between your browser or mobile device and the luxwin Platform is protected by 256-bit SSL/TLS encryption. This prevents interception of your personal data — including login credentials, financial information, and KYC documents — in transit.
Your luxwin password is never stored in readable form. It is processed through a cryptographically secure hashing function before any storage takes place. Even in the event of a data breach, your password could not be recovered from the stored hash.
luxwin's data handling practices are designed to comply with Republic Act No. 10173 — the Data Privacy Act of 2012 — and are reviewed against guidelines issued by the National Privacy Commission. A designated Data Protection Officer oversees compliance at all times.
luxwin enforces the PAGCOR-mandated 21-year minimum age requirement through mandatory identity verification before any real-money account features are activated. Personal data collected during KYC is processed solely for compliance and fraud prevention purposes.
luxwin does not sell, rent, or trade your personal data to third parties for their commercial benefit. Data shared with service providers is subject to strict contractual obligations limiting its use exclusively to the purpose of supporting luxwin's platform operations.
In the event of a personal data breach that poses a risk of serious harm, luxwin will notify the National Privacy Commission within 72 hours of discovery and will inform affected users without undue delay — consistent with NPC Circular 16-03 requirements.
Play on a PAGCOR-regulated platform that takes data privacy seriously — built for Filipino players, compliant with Philippine law. Must be 21 or older to play.
21+ only. For entertainment purposes only. Please play responsibly. PAGCOR regulated.