Mobile / Casino
This policy explains exactly what information 26lucky collects when you open and use your account, how we store it, and what choices you have over it. Access to 26lucky and the scope of this policy depend on local law and are available only where local law permits.
When you register an account with 26lucky, we collect the details you submit during sign-up: your name, email address, date of birth and contact number. If you add a payment method such as GCash or Bank Transfer, we record the payment reference and transaction identifiers needed to match deposits to your wallet — we do not store full bank credentials on our servers. We also collect device and session data automatically: the type of device you use, your browser session token, IP address and the pages you visit within the platform. This technical data helps us detect irregular login attempts and keep your account secure. Any information tied to your account activity — game sessions, wallet movements, support conversations — is retained for the period required to handle disputes, comply with applicable legal obligations and respond to account queries. We do not sell or rent your personal data to third parties for marketing purposes. Where we share data with service providers, those providers are bound by confidentiality obligations consistent with this policy. The current state of your stored data is accessible through your account dashboard after login.
When you deposit via GCash, we store the transaction reference number linked to your wallet. We do not access or retain your GCash PIN or login credentials at any point in the process.
Bank Transfer deposits are matched to your account using the reference code shown at checkout. We retain this identifier for reconciliation and dispute resolution, not for ongoing financial profiling.
Device type, session tokens and IP addresses are logged automatically. These logs help us flag unusual login activity and are reviewed only when account security or a support query requires it.
This policy governs the information 26lucky processes directly through your account. It does not extend to third-party services you reach through external links, nor to the independent data practices of payment processors handling your GCash or Bank Transfer transactions. Understanding the boundary helps you know where to direct a data question.
All data you submit when opening or updating your account — name, contact details, date of birth — falls under this policy. You can review and request corrections through the account settings page or by contacting support.
Transaction records processed through your 26lucky wallet, including deposit and withdrawal history, are covered by this policy. The records visible in your account dashboard are the same records we hold.
Game session data — rounds played, session duration, wager records — is retained in your account history. This data is covered by this policy and can be referenced when you raise a support query.
GCash, Bank Transfer providers and any external site linked from our platform operate under their own privacy terms. Once a transaction leaves our wallet and enters a third-party processor, their policy governs that portion of the data flow.
You have concrete actions available to you regarding the personal data we hold. The simplest starting point is your account dashboard, where your registered details, payment method references and session history are displayed after login. If anything there is incorrect — a misspelled name, an outdated contact number, a payment reference that does not match your records — you can raise a correction request directly through our support channel. We aim to process correction requests within a reasonable period and will confirm the outcome to your registered email address. If you want to understand what specific data we hold about your account, you can submit a data access request through the support contact path listed on this page. For accounts that are no longer active, you may request that we review your data retention status; we will respond according to the obligations that apply in your eligible region. All requests are handled in the order they are received.
Log in and open your account dashboard. Your registered profile, wallet history and session records are shown there. If something looks wrong, note the specific field before contacting support — it speeds up the correction.
Submit a correction request through the support channel with your registered email address and the field that needs updating. We will verify your identity against the account before making any change.
To find out what personal data we hold under your account, send a written request to our support contact. Include your registered email and a clear description of what you are asking for so we can respond accurately.
If your account has been inactive and you want to understand how long we retain your data, contact support with your registered details. Our response will reflect the applicable rules for your eligible region.
If you have a question about this policy, want to submit a data request or need to correct something in your account, the paths below are the ones to use. Include your registered email address in any message so we can locate your account record without delay.
Send your privacy or data request to our support email address shown in the Contact section of your account dashboard. Include your registered email and a clear description of your request.
The live chat option is accessible from within your account after login. Use it for quicker clarifications about what data is stored or how a specific transaction reference was recorded.
Your account dashboard, accessible after login, shows your registered details and transaction history. Many data questions can be answered there without needing to contact support at all.
Keeping your account data accurate and protected is part of how 26lucky operates day to day. The practices below reflect what we actually do with the information stored under your account — not a general statement, but the specific handling steps relevant to Philippines-eligible account holders.
We use session cookies to keep you logged in and to remember your account preferences between visits. Analytics cookies help us understand which parts of the platform see the most activity. You can manage cookie preferences through your browser settings; disabling certain cookies may affect how your account session behaves.
Login attempts, session tokens and device identifiers are monitored to detect access that does not match your normal patterns. If unusual activity is flagged, the current state is shown in your account security section after login. We do not share these logs externally except where legally required.
We retain account and transaction data for the period necessary to handle disputes, respond to regulatory enquiries and resolve support queries. Once that period ends and no legal obligation requires further retention, the data is deleted or anonymised according to our internal schedule.
All privacy-related requests — corrections, access summaries, retention queries — go through our support channel using your registered email address. We confirm receipt and provide a response timeline based on the nature of your request and your eligible region's applicable rules.
These are the questions we see most often from account holders about how their data is handled. If your question is not answered here, the support channel listed on this page is the right place to ask.
We collect the information you submit during registration: your name, email address, date of birth and contact number. If you add a payment method, we record the transaction references needed to match deposits to your wallet — not your full credentials. Device and session data are also collected automatically for security purposes.
We do not sell or rent your personal data. We share data only with service providers directly involved in running your account — such as payment processors handling your GCash or Bank Transfer transaction. Those providers are bound by confidentiality obligations. We do not share data for external advertising purposes.
Log in and check your account dashboard first — your registered details are shown there. If something is wrong, contact support with your registered email address and identify the field that needs updating. We verify your identity before making any change and confirm the outcome to your email.
Yes. Send a data access request to our support channel using your registered email address. Describe clearly what you are asking for so we can retrieve the right records. We respond based on the applicable rules for your eligible region and the nature of the request.
We keep data for as long as necessary to handle disputes, respond to support queries and meet applicable legal obligations. Once those requirements are satisfied and no further retention is needed, the data is deleted or anonymised. You can ask about the retention status of your specific account through the support channel.
No. Once a transaction moves from your 26lucky wallet to a third-party processor like GCash or a bank, that provider's own privacy terms apply to that portion of the data. This policy covers only what 26lucky processes and stores directly within your account and wallet records.