blucky Casino Privacy Policy

1 Who We Are

This Privacy Policy is issued by blucky Casino ("blucky," "we," "us," or "our"), the operator of the online gaming platform accessible at blucky.ws and all associated mobile applications and sub-domains. blucky operates in accordance with applicable Philippine laws, including the Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines.

blucky acts as the Personal Information Controller (as defined under the DPA) with respect to all personal data collected through the blucky platform. Where blucky engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors and are contractually bound by data processing agreements consistent with the requirements of the DPA.

2 Data We Collect

blucky collects personal data from you through several channels — directly during registration and account use, automatically through platform interaction, and from trusted third-party sources where necessary for identity verification and fraud prevention. The categories of data we collect are set out below.

3 How We Use Your Data

blucky processes your personal data for the following specific purposes. We will not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by applicable law.

• Account Management: To create, maintain, and administer your blucky account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide access to all blucky gaming products — including slots, bingo, live casino, Slide, and Plinko — and to process all associated deposits, withdrawals, and bonus transactions in Philippine Pesos (PHP).
• KYC & Regulatory Compliance: To verify your age (21+ requirement under PAGCOR regulations), identity, and source of funds as required by Philippine anti-money laundering laws and PAGCOR licensing conditions.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, multi-accounting, and other security threats to the blucky platform and its players.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce player-set deposit limits and self-exclusion requests, and provide proactive responsible gaming interventions where appropriate.
• Customer Support: To respond to your queries, complaints, and support requests via live chat, email, and other communication channels available on the blucky platform.
• Legal Obligations: To comply with applicable Philippine laws, court orders, regulatory directives from PAGCOR and the NPC, and lawful requests from competent Philippine government authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit opt-in consent to receive such communications. You may withdraw consent at any time via your account settings.
• Platform Improvement: To analyze aggregated and anonymized usage data to improve the performance, security, and user experience of the blucky platform.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, blucky processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and blucky — specifically, to operate your account and deliver the gaming services you have subscribed to.
• Legal Obligation: Processing is required to comply with a legal obligation applicable to blucky, including PAGCOR licensing requirements, anti-money laundering obligations under Republic Act No. 9160 (as amended), and data breach notification obligations under the DPA.
• Legitimate Interests: Processing is necessary for blucky's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and interests.
• Consent: For marketing communications and non-essential cookies, blucky relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

blucky does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, and Cebuana — solely to process deposit and withdrawal transactions on your behalf.
• KYC & Identity Verification Providers: Third-party identity verification services that assist blucky in verifying your government-issued Philippine ID documents and confirming your age and residency.
• Game Software Providers: Licensed game studios and live dealer platform operators whose games are featured on blucky. These providers may receive aggregated session data required to operate their game titles.
• IT & Cloud Service Providers: Hosting, cloud storage, and platform infrastructure providers who maintain the blucky platform's technical environment under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government bodies, where disclosure is required by law or regulatory mandate.
• Legal & Professional Advisers: Lawyers, auditors, and compliance consultants engaged by blucky, who are bound by applicable professional confidentiality obligations.

6 Cookies & Tracking Technologies

blucky uses cookies and similar technologies (such as pixel tags and local storage) on the blucky platform. These technologies help us deliver a functional and personalized gaming experience. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the blucky platform to function. These include session authentication cookies and security tokens. These cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to understand how players interact with the blucky platform — such as which game categories are most visited and where technical errors occur — allowing us to make ongoing improvements.
• Functional Cookies: Enable enhanced features such as remembering your language preferences, game display settings, and responsible gaming configuration within your blucky account.
• Marketing Cookies: Used only where you have provided explicit consent to receive personalized promotional content related to blucky's games and offers.

You can manage your cookie preferences at any time through the cookie settings panel available on the blucky platform. Note that disabling performance or functional cookies may affect the quality of your gaming experience.

7 Data Retention

blucky retains your personal data for no longer than is necessary to fulfill the purposes for which it was collected, taking into account our legal, regulatory, and operational obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active blucky account, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and Philippine AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Republic Act No. 9160 (Anti-Money Laundering Act, as amended).
• Customer Support Communications: Retained for two (2) years from the date of the interaction, or longer if the matter is subject to an ongoing dispute or regulatory investigation.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which your preference will be recorded and marketing sends will cease promptly.
• Technical & Log Data: Typically retained for twelve (12) months on a rolling basis, unless specific logs are required to be preserved in connection with a security investigation or legal proceeding.

When personal data is no longer required, blucky will securely delete or anonymize it in accordance with our internal data disposal procedures.

8 Data Security

blucky takes the security of your personal data seriously and has implemented a range of technical and organizational measures designed to protect your data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your device and the blucky platform;
• AES-256 encryption for sensitive personal data stored in blucky's databases;
• Multi-factor authentication requirements for internal staff access to systems containing player personal data;
• Role-based access controls ensuring that only authorized personnel with a documented operational need may access player data;
• Regular vulnerability assessments and penetration testing of the blucky platform and its supporting infrastructure;
• A documented incident response plan for personal data breaches, including NPC notification procedures within the timeframes prescribed by the DPA.

9 Your Data Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by blucky:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected, used, and stored by blucky — which is the primary purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data blucky holds about you, including a summary of how it has been processed.
• Right to Correction: You may request that inaccurate, outdated, or incomplete personal data held by blucky be corrected or updated. You can update most information directly through your blucky account settings.
• Right to Erasure or Blocking: In certain circumstances, you may request that blucky delete or block your personal data — for example, where the data is no longer necessary for the purpose it was collected, or where you have successfully withdrawn the consent on which processing was based. Note that this right is subject to blucky's overriding legal obligations to retain certain data.
• Right to Data Portability: You may request a copy of the personal data you have provided to blucky in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on blucky's legitimate interests, subject to blucky demonstrating compelling grounds that override your interests.
• Right to Lodge a Complaint: If you believe blucky has processed your personal data in breach of the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) at the details provided in Section 13 of this Policy. blucky will respond to all data subject requests within the timeframes required by the DPA.

10 Children's Privacy

The blucky platform is strictly for adults aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. blucky does not knowingly collect, process, or store personal data from any person under the age of 21.

If blucky discovers or is notified that personal data belonging to a person under 21 years of age has been collected through the platform — whether through misrepresentation at registration or otherwise — that account will be immediately suspended, all data will be reviewed, and the affected data will be securely deleted to the extent permitted by our legal obligations. Any deposits associated with an underage account will be returned and any winnings will be voided.

Parents and guardians who suspect that a minor may have registered on the blucky platform are encouraged to contact our support team immediately at [email protected].

11 Third-Party Links

The blucky platform may contain references to third-party services such as payment processors (GCash, PayMaya, BPI, BDO) and game software providers. When you interact with these third-party services — for example, when completing a GCash deposit — you will be subject to the privacy policy of that third-party provider, not this blucky Privacy Policy.

blucky is not responsible for the privacy practices or content of any third-party service, and we encourage you to review the relevant privacy notices of any third-party service provider you interact with in connection with using the blucky platform.

12 Changes to This Privacy Policy

blucky reviews and updates this Privacy Policy periodically to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, and the features and operations of the blucky platform.

When material changes are made, blucky will:

• Update the "Last Updated" date at the top of this page;
• Notify all registered blucky players via their registered email address before the changes take effect;
• Where required by the DPA or NPC guidelines, seek fresh consent from players where a change affects data processing activities that were previously based on consent.

We encourage you to review this Privacy Policy periodically to stay informed of how blucky is protecting your personal data. The most current version will always be available at blucky.ws/privacy-policy.

13 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to blucky's handling of your personal data, please contact our Data Protection Officer (DPO):

• Email: [email protected] — please include "Privacy / DPO Request" in your subject line
• Live Chat: Available 24/7 directly from any page on the blucky platform
• Response Time: blucky aims to acknowledge all privacy-related requests within 72 hours and to resolve them within the timeframe prescribed by the DPA