Privacy Policy

lotobet ("we," "us," "our," or "the Company") operates the online gaming platform accessible at lotobet.app, including all associated web and mobile interfaces. lotobet is the data controller responsible for the personal information collected from players and visitors to the platform.

This Privacy Policy applies to all personal data collected by lotobet in connection with your use of the platform, including during registration, account management, gameplay, payment processing, customer support interactions, and marketing communications.

By registering on lotobet or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2.1 Registration & Identity Data

When you create a lotobet account, we collect your full legal name, date of birth, residential address in the Philippines (including city, province, and postal code), email address, and Philippine mobile number. This information is required to create and manage your account and to verify your identity in compliance with applicable regulations.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) requirements, lotobet may collect copies of government-issued identification documents (such as a Philippine passport, driver's licence, SSS ID, UMID, or PhilSys national ID), proof of address documents, and proof of payment method ownership. These documents are processed securely and retained only for as long as required by law.

2.3 Financial Data

lotobet collects information about your deposits, withdrawals, and transaction history on the platform. We also collect payment method details necessary to process transactions, such as GCash account numbers, PayMaya account details, or bank account information for BPI, BDO, and Metrobank transfers. Full payment card numbers are never stored by lotobet.

2.4 Gaming Activity Data

We collect data about your gaming activity on lotobet, including games played, bets placed, winnings, session duration, and game preferences. This data is used to operate the platform, detect fraud, and comply with regulatory reporting requirements.

2.5 Technical & Device Data

When you access lotobet, we automatically collect technical information including your IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers. We also collect information about your interactions with the platform, including pages visited, features used, and time spent on the platform.

2.6 Communications Data

If you contact lotobet customer support, we collect and retain records of your communications, including emails, live chat transcripts, and any information you provide during support interactions. This data is used to resolve your queries and improve our support services.

2.7 Marketing Preferences

Where you have opted in to receive marketing communications from lotobet, we collect and store your marketing preferences, including the types of promotions you are interested in and your preferred communication channels.

lotobet collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions;
• Automatically — through cookies, web beacons, and similar tracking technologies when you access and use the lotobet platform;
• From third-party payment providers — such as GCash, PayMaya, BPI, BDO, and Metrobank, in connection with processing your transactions;
• From identity verification services — third-party KYC and AML compliance providers used to verify your identity and screen against regulatory watchlists;
• From fraud prevention services — third-party providers that help lotobet detect and prevent fraudulent activity on the platform.

lotobet uses your personal data for the following purposes:

• To create and manage your lotobet account and verify your identity;
• To process deposits, withdrawals, and other financial transactions;
• To provide access to games and platform features;
• To comply with legal and regulatory obligations, including AML, KYC, and PAGCOR reporting requirements;
• To detect, investigate, and prevent fraud, cheating, and other prohibited activities;
• To enforce our Terms & Conditions and other platform policies;
• To provide customer support and respond to your queries and complaints;
• To send you transactional communications, including account notifications, deposit confirmations, and withdrawal updates;
• To send you marketing communications where you have opted in to receive them;
• To personalise your experience on lotobet, including recommending games and promotions relevant to your preferences;
• To analyse platform usage and improve our services, features, and user experience;
• To support responsible gaming initiatives, including monitoring for signs of problem gambling and applying player protection measures.

lotobet processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you, including account management, payment processing, and game provision;
• Legal obligation — processing required to comply with applicable laws and regulations, including AML, KYC, and gaming regulatory requirements;
• Legitimate interests — processing necessary for lotobet's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent — processing based on your explicit consent, including marketing communications and certain cookie-based tracking. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

lotobet does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only where necessary and in accordance with this Privacy Policy:

6.1 Payment Processors

We share financial data with payment service providers including GCash, PayMaya, BPI, BDO, and Metrobank, solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and applicable data protection regulations.

6.2 Identity Verification Providers

We share identity documents and personal data with licensed KYC and AML compliance service providers to verify your identity and screen against regulatory watchlists. These providers process data only on our instructions and are contractually bound to maintain confidentiality.

6.3 Regulatory Authorities

lotobet may be required to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive.

6.4 Fraud Prevention & Security

We may share data with third-party fraud prevention and cybersecurity providers to protect the platform and its players from fraudulent activity, account takeovers, and other security threats.

6.5 Game Providers

Where you play games provided by third-party game studios integrated into lotobet, limited technical data (such as player session tokens) may be shared with those providers solely to facilitate gameplay. Game providers do not receive your full personal profile.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of lotobet's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Privacy Policy that may result.

lotobet retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements;
• Transaction and financial records are retained for a minimum of five (5) years as required by the Anti-Money Laundering Act and PAGCOR regulations;
• Customer support communications are retained for two (2) years from the date of the interaction;
• Marketing preference data is retained until you withdraw consent or request deletion, whichever is earlier;
• Technical and device data collected via cookies and analytics is retained in accordance with our cookie policy, typically for no longer than thirteen (13) months.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, lotobet will securely delete or anonymise the data.

lotobet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and lotobet servers;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lotobet will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Philippine Data Privacy Act.

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit lotobet. They help us recognise your device, remember your preferences, keep you logged in, and understand how you use the platform so we can improve it.

9.2 Types of Cookies We Use

• Strictly necessary cookies — essential for the platform to function, including session management and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game display options to personalise your experience.
• Analytics cookies — collect anonymised data about how players use lotobet, helping us identify areas for improvement. We use privacy-respecting analytics tools for this purpose.
• Marketing cookies — used to deliver relevant promotional content based on your interests and gaming activity, where you have consented to receive marketing communications.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the lotobet platform. Instructions for managing cookies are available in the help documentation of your browser.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by lotobet:

• Right to be informed — the right to know what personal data lotobet collects about you and how it is used;
• Right of access — the right to request a copy of the personal data lotobet holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object — the right to object to certain types of processing, including direct marketing;
• Right to data portability — the right to receive your personal data in a structured, commonly used format;
• Right to withdraw consent — where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the lotobet Data Privacy Officer using the contact details in Section 13 of this Policy. lotobet will respond to your request within thirty (30) days in accordance with the requirements of the Data Privacy Act.

lotobet is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If lotobet becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on lotobet or provided personal data to us, please contact our support team immediately so that we can investigate and take appropriate action.

lotobet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via email or a prominent notice on the lotobet platform at least fourteen (14) days before the changes take effect.

The effective date at the top of this page will be updated whenever the Policy is revised. We encourage you to review this Privacy Policy periodically to stay informed about how lotobet protects your personal data. Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way lotobet handles your personal data, please contact our Data Privacy Officer:

If you are not satisfied with lotobet's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available on the NPC's official website.