lakiwib Privacy Policy
At lakiwib, your personal data is treated with the same care and precision we apply to everything else on our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we protect it, and the rights you hold as a data subject under Philippine law.
Our Privacy Commitments
What You Can Expect From lakiwib
These six pillars summarize how lakiwib approaches data privacy. They are not a substitute for the full policy below, but they capture the spirit of our commitment to every Filipino player on the platform.
DPA 2012 Compliant
lakiwib fully complies with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) as required by Philippine law.
256-Bit SSL Encryption
All data transmitted between your device and lakiwib is protected with 256-bit SSL/TLS encryption — the same standard used by Philippine banks and international financial institutions. Your information is never sent in plain text.
No Data Selling
lakiwib does not sell, rent, or trade your personal information to third-party marketers. Your data is used solely for the purposes described in this policy — account management, KYC compliance, fraud prevention, and platform improvement.
You Control Your Data
As a data subject under the DPA 2012, you have the right to access, correct, object to, and request erasure of your personal data. You can exercise these rights at any time by contacting our Data Protection Officer.
Minimal Data Collection
We apply the principle of data minimization — we collect only the personal information that is strictly necessary for delivering our services, meeting PAGCOR regulatory requirements, and fulfilling our legal obligations under Philippine law.
Breach Notification
In the unlikely event of a personal data breach affecting your information, lakiwib will notify affected players and the National Privacy Commission within 72 hours of discovery, in accordance with NPC Circular No. 16-03 and its amendments.
Table of Contents
- Scope & Application
- Data Controller Details
- Information We Collect
- How We Use Your Data
- Legal Bases for Processing
- Data Sharing & Disclosure
- Cookies & Tracking
- Data Retention
- Data Security
- Your Rights as a Data Subject
- Children & Minors
- Cross-Border Data Transfers
- Changes to This Policy
- Contact & DPO Details
1 Scope & Application
This Privacy Policy applies to all personal data collected, used, stored, disclosed, and otherwise processed by lakiwib in connection with the operation of the online gaming and sports betting platform accessible at https://lakiwib.net (the "Platform"). It applies to all registered players, prospective players who browse the Platform without registering, and any individual who contacts lakiwib through any communication channel.
This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines. It is also issued in compliance with the data governance requirements of the Philippine Amusement and Gaming Corporation (PAGCOR), under whose regulatory license lakiwib operates.
By accessing the Platform, creating an account, or otherwise providing your personal information to lakiwib, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any provision of this Policy, you must discontinue use of the Platform immediately.
2 Data Controller Details
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, the personal information controller in respect of data collected through the Platform is:
Personal Information Controller
- Brand Name: lakiwib
- Platform URL: https://lakiwib.net
- Regulatory License: PAGCOR (Philippine Amusement and Gaming Corporation)
- Data Protection Officer (DPO) Email: [email protected]
- Jurisdiction: Republic of the Philippines
Our designated Data Protection Officer (DPO) oversees compliance with the DPA 2012 and this Privacy Policy. You may contact the DPO directly at [email protected] to exercise your data subject rights, raise privacy concerns, or request clarification on any aspect of this Policy. All privacy-related inquiries will be acknowledged within 2 business days.
3 Information We Collect
lakiwib collects personal information through several channels: directly from you when you register or use the Platform, automatically through your use of the Platform, and from third parties where permitted by law. The categories of personal data we collect include the following:
3.1 Identity & Registration Data. When you create a lakiwib account, we collect your full legal name, date of birth, nationality, and a scanned copy or photograph of a valid Philippine government-issued ID (such as a PhilSys ID, passport, driver's license, SSS/GSIS card, PRC ID, or Voter's ID). This information is required for age verification (21+ requirement), KYC compliance, and PAGCOR regulatory reporting.
3.2 Contact Information. We collect your registered Philippine mobile number, email address, and residential address. Your mobile number is used for account security (two-factor authentication via OTP), account notifications, and where you have opted in, promotional communications.
3.3 Financial Data. To process deposits and withdrawals in Philippine Peso (₱), we collect payment method identifiers such as your GCash or Maya registered mobile number, bank account details (BPI, BDO, Metrobank), and transaction reference numbers. We do not store full debit/credit card numbers on our servers. All financial data is processed and stored using PCI DSS-compliant practices.
3.4 Gaming & Transaction Records. We maintain records of all gaming activity on your account, including game history, bet amounts, wager outcomes, bonus credits claimed and used, deposit and withdrawal transactions, and session durations. These records are required for regulatory reporting to PAGCOR and for responsible gaming monitoring.
3.5 Technical & Device Data. When you access the Platform, our systems automatically collect your IP address, device type and model, browser type and version, operating system, and approximate geographic location derived from your IP. This data is used for security monitoring, fraud detection, and to ensure the Platform functions correctly on your device.
3.6 Communications Data. If you contact our customer support team through live chat, email, or any other channel, we retain records of those communications including the content of your messages, timestamps, and the support agent who assisted you. This data is used for quality assurance, dispute resolution, and service improvement.
4 How We Use Your Data
lakiwib uses the personal data we collect for the following specific, legitimate, and declared purposes. We do not use your data for purposes that are incompatible with those listed below without first obtaining your separate consent:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity, contact, registration data | Contractual necessity |
| Age verification (21+ enforcement) | Date of birth, government ID | Legal obligation (PAGCOR) |
| KYC / Anti-Money Laundering checks | Identity, financial, source of funds | Legal obligation (RA 9160) |
| Processing deposits and withdrawals | Financial data, transaction records | Contractual necessity |
| Fraud detection and account security | Technical, device, transaction data | Legitimate interest |
| Responsible gaming monitoring | Gaming history, session data | Legal obligation (PAGCOR) |
| Customer support and dispute resolution | Communications, account data | Contractual necessity |
| Regulatory reporting to PAGCOR / NPC | Identity, transaction, gaming records | Legal obligation |
| Marketing and promotional offers (opt-in) | Contact data, gaming preferences | Consent |
| Platform performance and analytics | Technical, device, usage data | Legitimate interest |
Where we rely on your consent as the legal basis for processing — particularly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To opt out of marketing communications, contact us at [email protected] or use the unsubscribe mechanism in any marketing email we send.
5 Legal Bases for Processing
Under the Data Privacy Act of 2012, lakiwib processes your personal data on the following legal bases:
- Consent (Section 12(a), DPA). For marketing communications, optional analytics participation, and any processing not strictly required by contract or law, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time.
- Contractual Necessity (Section 12(b), DPA). Processing your identity, contact, and financial data is necessary for lakiwib to perform its obligations under the account registration agreement and the Terms & Conditions — including account creation, payment processing, and gaming services delivery.
- Legal Obligation (Section 12(c), DPA). Certain processing activities are required by Philippine law, including KYC verification under Republic Act No. 9160 (Anti-Money Laundering Act), age verification under PAGCOR regulations, and regulatory reporting obligations.
- Legitimate Interest (Section 12(f), DPA). We process technical and device data for fraud prevention, security monitoring, and platform improvement, where our legitimate interests in protecting our platform and users do not override your fundamental privacy rights.
6 Data Sharing & Disclosure
6.1 General Principle. lakiwib does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Sharing of personal data is strictly limited to the categories of recipients described in this section, and only to the extent necessary for the stated purpose.
6.2 PAGCOR and Regulatory Authorities. As a PAGCOR-licensed operator, lakiwib is required to submit certain player data — including identity records, transaction histories, and gaming activity reports — to PAGCOR upon request or as part of routine regulatory reporting. Similarly, we will disclose personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or any other competent Philippine government authority where required by law or valid legal process.
6.3 Payment Processors. To process your deposits and withdrawals in Philippine Peso, we share necessary financial data with our licensed payment processing partners, including GCash (Mynt), Maya (Voyager Innovations), and local banking partners (BPI, BDO, Metrobank). These partners are contractually bound to process your data solely for payment purposes and to maintain confidentiality and security standards equivalent to those required under the DPA 2012.
6.4 Game Content Providers. lakiwib partners with licensed game software providers to deliver casino games, slots, fishing games, and other gaming content. Game providers may receive anonymized session data necessary for game performance and fairness auditing. No personally identifiable information beyond a player session token is shared with game providers in the normal course of gameplay.
6.5 IT and Cloud Service Providers. Our Platform is hosted on secure cloud infrastructure. Our hosting and technology service providers process personal data on our behalf as data processors under written data processing agreements that impose obligations equivalent to those required by the DPA 2012. These providers do not have independent rights to use your personal data.
6.6 Law Enforcement. We will disclose personal data to Philippine law enforcement authorities (e.g., PNP, NBI) where required by a valid court order, subpoena, or where we have a good-faith belief that disclosure is necessary to prevent or investigate a crime, including fraud, money laundering, or illegal access offenses under Republic Act No. 10175 (Cybercrime Prevention Act).
7 Cookies & Tracking Technologies
7.1 What We Use. The lakiwib Platform uses cookies, web beacons, and similar tracking technologies to ensure the Platform functions correctly, to maintain your login session, to detect fraud, and — where you have consented — to analyze how you interact with the Platform so we can improve your experience.
7.2 Types of Cookies.
- Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that help prevent fraudulent access. These cannot be disabled without preventing core Platform functionality.
- Performance & Analytics Cookies: Collect anonymized information about how players use the Platform — which pages are visited most, how long sessions last, and where errors occur. We use this data to improve Platform performance. These cookies are enabled only with your consent.
- Functional Cookies: Remember your preferences — such as language settings, game view preferences, and responsible gaming limit configurations — so you don't have to re-enter them on each visit.
- Marketing Cookies: Used to deliver promotional content relevant to your interests. These are only set with your explicit consent and can be withdrawn at any time through your account settings or browser controls.
7.3 Managing Cookies. You can manage or disable non-essential cookies at any time through your browser settings. Disabling strictly necessary cookies may impair your ability to use the Platform. Detailed cookie preferences can also be managed through the cookie consent tool accessible in your account settings.
8 Data Retention
lakiwib retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
- Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with PAGCOR licensing requirements and the Anti-Money Laundering Act's record-keeping obligations.
- Financial Transaction Records: Retained for a minimum of 10 years following the transaction date, in compliance with Republic Act No. 9160 (AMLA) and Bureau of Internal Revenue (BIR) record-keeping requirements.
- Gaming History: Retained for 5 years from the date of the gaming session, for responsible gaming monitoring, dispute resolution, and PAGCOR regulatory reporting purposes.
- Customer Support Communications: Retained for 2 years from the date of the interaction, for quality assurance and dispute resolution purposes.
- Technical and Device Data: Retained for 12 months from collection, or longer where required for an active fraud investigation.
- Marketing Consent Records: Retained for the period of your consent plus 3 years thereafter, to demonstrate compliance with consent requirements under the DPA 2012.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures.
9 Data Security
lakiwib implements a layered security architecture designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:
- Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all Platform pages, API communications, and payment gateway connections.
- Encryption at Rest: Sensitive personal data — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption on our secure cloud infrastructure.
- Access Controls: Access to personal data within lakiwib is strictly limited to authorized personnel on a need-to-know basis, enforced through role-based access control (RBAC) systems. All internal access to player data is logged and audited.
- Two-Factor Authentication: Your lakiwib account supports and encourages two-factor authentication (2FA) via OTP delivered to your registered Philippine mobile number, providing an additional layer of protection against unauthorized account access.
- Penetration Testing: We conduct regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses before they can be exploited.
- Employee Training: All lakiwib personnel who handle personal data undergo mandatory data privacy training covering their obligations under the DPA 2012, our internal data governance policies, and secure data handling procedures.
Data Breach Protocol
In the event of a personal data breach that is likely to result in a real risk of serious harm to you, lakiwib will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected data subjects without undue delay, as required by NPC Circular No. 16-03. Notification will include the nature of the breach, the data affected, the likely consequences, and the measures we have taken or propose to take.
10 Your Rights as a Data Subject
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by lakiwib. You may exercise any of these rights by submitting a written request to our Data Protection Officer at [email protected]. We will respond within 15 calendar days of receiving a verifiable request.
Right to Be Informed
You have the right to be informed of how lakiwib collects, uses, stores, and discloses your personal data, including the identity of any third parties to whom it may be shared. This Privacy Policy constitutes our primary fulfillment of this right.
Right to Access
You have the right to request a copy of the personal data lakiwib holds about you, the purposes for which it is being processed, and details of any third parties to whom it has been disclosed. We may charge a reasonable fee for excessive or repetitive requests.
Right to Correction
You have the right to request correction of any inaccurate, incomplete, outdated, false, or unlawfully obtained personal data we hold about you. You can update basic account information (such as your email or mobile number) directly within your account settings, or contact our DPO for corrections to identity documents.
Right to Erasure or Blocking
You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that certain data must be retained to comply with PAGCOR and AMLA legal obligations even after account closure.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest. Upon receipt of a valid objection to marketing, we will cease processing your data for that purpose immediately.
Right to Data Portability
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another personal information controller, where technically feasible.
Right to Lodge a Complaint
If you believe lakiwib has violated your rights under the DPA 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. We encourage you to contact our DPO first so we can attempt to resolve your concern directly before escalation.
11 Children & Minors
The lakiwib Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations and PAGCOR licensing requirements. lakiwib does not knowingly collect personal data from individuals under the age of 21.
If we become aware that personal data has been collected from a person under 21 years of age, we will immediately take steps to delete that data from our records, terminate the associated account, and return any deposited funds to the source of payment. Parents or guardians who have reason to believe that a minor has provided personal information to lakiwib are encouraged to contact us immediately at [email protected].
lakiwib employs age verification controls at registration, requiring submission of a valid Philippine government-issued ID that displays the holder's date of birth. Accounts that cannot complete satisfactory age verification will not be permitted to deposit funds or access real-money gaming features.
12 Cross-Border Data Transfers
In the course of operating the Platform, certain personal data may be transferred to, stored, or processed in servers or by service providers located outside the Republic of the Philippines — for example, in connection with cloud hosting infrastructure or internationally deployed game software platforms.
Where such cross-border transfers occur, lakiwib ensures that an equivalent level of data protection is maintained by requiring all international data processors to enter into data processing agreements that incorporate the standard contractual clauses approved by the National Privacy Commission, or by transferring data only to jurisdictions that the NPC has determined provide adequate protection for personal data.
By using the lakiwib Platform and accepting this Privacy Policy, you consent to the transfer of your personal data to these jurisdictions for the purposes described in this Policy, subject to the safeguards described above.
13 Changes to This Privacy Policy
lakiwib reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you at least 15 calendar days in advance by posting a prominent notice on the Platform and/or by sending a notification to your registered email address or mobile number. For non-material changes (such as formatting updates, clarifications, or minor wording adjustments), the revised Policy will take effect upon posting.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.
14 Contact & DPO Details
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data lakiwib holds about you, please contact our Data Protection Officer using the details below. We are committed to addressing all privacy-related inquiries promptly and in good faith.
Data Protection Officer — lakiwib
- Email: [email protected]
- Subject Line: Please use "Privacy Request – [Your Account Email]" for faster routing
- Response Time: Acknowledgment within 2 business days; full response within 15 calendar days
- Platform: https://lakiwib.net
If you are unsatisfied with our response to your privacy concern, you may escalate the matter to the National Privacy Commission of the Philippines:
National Privacy Commission (NPC)
- Address: 3rd Floor, Core G, GSIS Headquarters, Financial Center, Roxas Boulevard, Pasay City, Metro Manila 1308
- Website: privacy.gov.ph
Play with Confidence
Your Privacy is Protected at lakiwib
Now that you understand how lakiwib safeguards your personal data, explore the full platform — live casino, slots, PBA sports betting, bingo, sabong, and more. All in Philippine Peso, PAGCOR regulated, and built with Filipino players in mind. Must be 21 years or older to participate.