lotobet Privacy Policy

lotobet ("we," "us," "our," or the "Platform") is committed to protecting the privacy and personal data of all users who access or register on lotobet.club. This Privacy Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected by lotobet through the lotobet website, mobile platform, customer support channels, and any other service operated under the lotobet brand. By creating a lotobet account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

lotobet processes personal data only for legitimate, specified, and explicit purposes. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Every data processing activity at lotobet is governed by the principles of transparency, legitimate purpose, and proportionality as mandated by RA 10173.

lotobet collects the minimum personal data necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

lotobet collects personal data through the following channels:

• Direct Collection: Information you provide when registering a lotobet account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and behavioral data collected automatically when you access the lotobet Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-Party Sources: Identity verification data from government databases or accredited KYC service providers; fraud and AML screening data from licensed compliance service providers; payment verification data from GCash, Maya, and partner banks.
• Regulatory Sources: Data received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

lotobet does not purchase personal data lists from data brokers or any third-party marketing databases. All data collected by lotobet is obtained through the channels described above, with your knowledge and, where required by law, your explicit consent.

lotobet uses your personal data strictly for the purposes for which it was collected. The primary purposes for which lotobet processes your data are:

lotobet may also use aggregated, anonymized data for internal analytics and platform improvement purposes. Anonymized data cannot be used to identify any individual user and is not subject to the same restrictions as personal data under RA 10173.

Under the Philippine Data Privacy Act of 2012, lotobet processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and lotobet — including account creation, game access, and payment processing — is necessary for the execution of the lotobet Terms and Conditions.
• Legal Obligation: Processing required to comply with lotobet's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate Interest: Processing for fraud prevention, security monitoring, and platform improvement, where lotobet's legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional personalization features, where you have provided explicit, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

lotobet does not sell, rent, or trade your personal data. We share your data only with trusted third parties where necessary to operate the Platform, comply with legal obligations, or protect the safety of our users. All third-party data processors engaged by lotobet are bound by data processing agreements that require them to handle your data in accordance with RA 10173.

lotobet uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session security, and analyze how users interact with the site. The types of cookies used by lotobet are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your lotobet account and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations. Disabling these cookies may affect your user experience but will not prevent access to the Platform.
• Analytics Cookies: Collect anonymized data about how users navigate the lotobet Platform, which pages are visited most frequently, and where users encounter errors. This data is used solely to improve the Platform and is not linked to your personal identity.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the lotobet Platform.

lotobet does not use cookies to serve third-party advertising or to track your activity on websites outside of the lotobet Platform.

lotobet implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and the lotobet Platform is encrypted using TLS 1.3. Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All lotobet staff with access to personal data are subject to confidentiality obligations and undergo regular data privacy training.
• Two-Factor Authentication: lotobet supports and encourages the use of two-factor authentication (2FA) on all user accounts to prevent unauthorized access.
• Penetration Testing: lotobet's systems undergo regular third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: lotobet maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, lotobet will notify the NPC within 72 hours and affected users without undue delay, as required by RA 10173.

lotobet retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, lotobet will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by lotobet. To exercise any of these rights, contact lotobet's Data Protection Officer using the details in Section 13.

• Right to Be Informed: You have the right to be informed about how lotobet collects, uses, and processes your personal data — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data lotobet holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data lotobet holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to lotobet's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on lotobet's legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: If you believe lotobet has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

If lotobet discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete all personal data collected from that individual, and return any deposits to the original payment method after deducting amounts wagered, in accordance with our Terms and Conditions.

Parents and guardians who believe their child may have accessed or registered on the lotobet Platform should contact our Data Protection Officer immediately using the contact details in Section 13. lotobet takes underage access extremely seriously and will act promptly on all such reports.

lotobet may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, lotobet will notify registered users via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how lotobet protects your personal data. Your continued use of the lotobet Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

Document version: PP-2026-01 · Effective: January 1, 2026 · Jurisdiction: Republic of the Philippines · Standard: RA 10173

If you have any questions, concerns, or requests regarding this Privacy Policy or lotobet's data processing practices, please contact our designated Data Protection Officer. All communications should be in English or Filipino.

For complaints that cannot be resolved directly with lotobet, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines. For gaming-related regulatory complaints, you may also contact the Philippine Amusement and Gaming Corporation (PAGCOR).