lucy8 Privacy Policy

1 Who This Policy Covers

This Privacy Policy applies to all individuals who access or use the lucy8 platform — including the website at lucy8.vu and the official lucy8 mobile application — regardless of whether you are a registered account holder or a visitor browsing without an account.

By accessing lucy8, you acknowledge that you have read and understood this Privacy Policy. Registered account holders additionally confirm their acceptance through the account registration process. If you do not agree with how we collect or use personal data, you should not create an account or continue using the platform.

This policy is written in English and is intended for users in the Philippines. References to "we," "us," or "lucy8" refer to the operator of the lucy8 platform.

2 What Personal Data We Collect

lucy8 collects personal data through several channels — directly from you during registration and account use, automatically through your device and browser, and through third-party identity and payment verification processes.

3 How We Use Your Personal Data

We use the data we collect for the following purposes:

• Account management: To create, maintain, and administer your lucy8 account, including login authentication via OTP and password.
• KYC and identity verification: To verify that you meet the 21+ age requirement and that your identity matches your registered details, as required for financial account security.
• Transaction processing: To process PHP deposits and withdrawals through your verified local bank or e-wallet channel, and to maintain accurate records of all transactions.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other illegal or prohibited conduct.
• Customer support: To respond to your queries, resolve account issues, and maintain records of communications for quality and training purposes.
• Platform improvement: To analyse aggregate usage data and understand how the platform performs for users across different devices and network conditions in the Philippines.
• Responsible gaming: To monitor account activity for patterns that may indicate problem gambling, and to process self-exclusion or limit requests made through your account settings.
• Legal and compliance obligations: To comply with applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.

We do not use your personal data for automated decision-making that produces significant legal effects on your account without human review. We do not use your data to build profiles for sale to external advertisers.

4 Transaction Data and Your PHP Wallet

All financial activity on lucy8 is conducted in Philippine Peso. When you make a deposit or withdrawal, we record the transaction amount, the channel used (bank transfer, InstaPay, PESONet, or a local e-wallet), timestamps, and the account name associated with the sending or receiving payment account.

This transaction data is retained as part of your account record and is used for the following specific purposes:

• Matching incoming deposits to your PHP wallet and crediting your balance correctly.
• Processing your withdrawal requests and verifying that funds are returned to an account in your name.
• Maintaining an auditable record of all transactions for financial compliance and dispute resolution.
• Investigating any reported discrepancies between your transaction history and displayed wallet balance.

We verify that withdrawal destination accounts are registered in your own name. We do not process withdrawals to third-party accounts, and we may request additional verification for withdrawal requests that flag security checks.

5 Cookies and Device Data

lucy8 uses cookies and similar local storage technologies on the website and within the mobile app. These are small data files placed on your device that help the platform function correctly and improve your experience.

We use the following types of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during an active session and security tokens used for OTP authentication. You cannot opt out of these without also opting out of using the platform.
• Functional cookies: Remember preferences such as your preferred language setting, recently viewed games, and display settings to improve consistency between sessions.
• Analytics cookies: Collect anonymised data about how users navigate the platform — which pages are visited, where sessions end, and how the app performs on different device types. This data is used in aggregate to improve platform design and performance for Philippine users.

We do not use advertising cookies or share cookie data with external advertising networks. If you prefer to limit cookies, you can adjust your browser settings, but doing so may affect the functionality of the platform — particularly features that require you to stay logged in.

The lucy8 App uses equivalent local storage mechanisms on your device. Device data including your device model, operating system version, and mobile network information may be collected to diagnose performance issues and optimise streaming quality for live casino on Philippine LTE and Wi-Fi connections.

6 Sharing Data with Third Parties

lucy8 does not sell your personal data to third parties. We share personal data only in the following specific circumstances:

• Identity and KYC verification providers: We work with trusted third-party verification services to confirm your identity and age. These providers receive only the data needed for verification and are bound by confidentiality obligations.
• Payment processing partners: Data relevant to your PHP deposit or withdrawal transaction is shared with the payment channel operator (for example, the bank or e-wallet infrastructure provider) as part of processing the transaction. This is limited to what is technically required.
• Fraud and security screening services: We may use third-party fraud detection tools that process certain technical and transactional data to flag suspicious patterns. These services operate under strict data processing agreements.
• Legal and regulatory authorities: We will share personal data with law enforcement or government authorities when required to do so by applicable law, court order, or lawful request — including anti-money-laundering reporting obligations.
• Business successors: In the event of a merger, acquisition, or sale of the business, your data may be transferred to the new operator, who will be bound by the same privacy obligations described in this policy.

All third-party partners who handle personal data on our behalf are required to implement appropriate security measures and may only use your data for the specific purpose for which it was shared. We do not authorise them to use your data for their own independent purposes.

7 How We Protect Your Data

We implement a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption on all data transmitted between your device and our servers.
• OTP two-factor authentication required at every login to prevent unauthorised account access.
• Access controls limiting internal access to personal and financial data to authorised staff on a need-to-know basis.
• Encrypted storage for sensitive account and identity data at rest.
• Session monitoring to detect unusual login patterns or access from unexpected locations or devices.
• Regular security reviews of systems handling personal data and financial transactions.

Despite these measures, no online platform can guarantee absolute security. You play an important role in protecting your own account by keeping your password private and never sharing OTP codes with anyone — including people who claim to represent lucy8. Our support team will never ask for your password or OTP.

8 Your Rights Regarding Personal Data

As a user of the lucy8 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected] with your registered account details.

• Right of access: You may request a copy of the personal data we hold about you and information about how it is being used.
• Right to correction: If any of your personal data is inaccurate or incomplete, you may request that we update or correct it.
• Right to erasure: In certain circumstances — such as where we no longer have a lawful basis to retain your data — you may request deletion of your personal data. Note that some data must be retained for legal or regulatory compliance purposes even after account closure.
• Right to restriction: You may ask us to restrict processing of your data in certain situations, for example while a correction request is being reviewed.
• Right to data portability: For data you have provided to us directly, you may request it in a structured, commonly used format where technically feasible.
• Right to object: You may object to processing of your data for purposes beyond what is strictly necessary to provide the service, including any marketing communications (if applicable at the time).

We will respond to data rights requests within a reasonable timeframe. In some cases, we may need to verify your identity before acting on a request to ensure we are responding to the correct account holder.

9 How Long We Retain Your Data

We retain different categories of personal data for different periods depending on the purpose for which it was collected and the legal requirements that apply to it.

• Account and identity data: Retained for the duration of your account and for a period after account closure as required by financial compliance obligations.
• Transaction records: Financial transaction records in PHP are retained for the period required by applicable financial recordkeeping regulations. This is typically several years from the date of the transaction.
• Gaming activity data: Retained for as long as your account is active and for a defined period after closure, used for responsible gaming monitoring, fraud analysis, and dispute resolution.
• KYC documents: Identity verification materials are retained for the compliance period required under anti-money-laundering regulations.
• Support communications: Chat logs and email exchanges are retained for a period sufficient for quality review and dispute resolution purposes.

After the applicable retention period, personal data is securely deleted or anonymised. Anonymised aggregate data — from which you cannot be identified — may be retained indefinitely for platform analytics.

10 Minors

lucy8 is strictly for persons aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. KYC identity verification is required before financial transactions are processed, specifically to enforce this age restriction.

If we become aware that personal data has been collected from a person who does not meet the 21+ age requirement, we will promptly close the associated account and delete the data collected, subject to any legal obligations to retain records of the breach.

If you believe that a minor has registered on lucy8, please contact our support team immediately so we can investigate and take appropriate action.

11 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. The "Last Updated" date at the top of this page will be revised whenever changes are made.

For material changes — those that significantly affect how we collect, use, or share your personal data, or that reduce your rights in a meaningful way — we will make reasonable efforts to notify active account holders via their registered email address or through a notice displayed within the platform before the changes take effect.

For minor or clarifying changes that do not substantively affect your rights, we may update the page without active notification. Your continued use of lucy8 after updated Terms or Privacy Policy pages are published constitutes your acceptance of the changes.

We recommend reviewing this page periodically, particularly if you make regular use of the platform and want to stay informed about how your personal data is handled.

12 Contacting Us About Privacy

If you have any questions about this Privacy Policy, want to understand more about how your data is used, or wish to exercise any of your data rights, you can reach us through the following channels:

• Live Chat: Available 24/7 directly from your account dashboard. This is the fastest way to reach the team for account-related data questions.
• Email: [email protected]. Include your registered account email and a clear description of your request so we can assist you efficiently.

For questions about the platform rules and how your account is governed, see the Terms & Conditions. For responsible gaming resources and self-exclusion tools, visit the Responsible Gaming page.