Privacy Policy — loki99

This Privacy Policy explains how loki99 ("loki99", "we", "us", "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "User", "Player") who access or use the loki99 online casino platform accessible at loki99.lat and all associated services (collectively, the "Platform").

By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein, subject to your rights under applicable Philippine data protection law.

This Privacy Policy should be read in conjunction with our Terms & Conditions and forms an integral part of the agreement between you and loki99. If you do not agree with any provision of this Privacy Policy, you must cease using the Platform immediately.

For the purposes of the Data Privacy Act of 2012, loki99 is the Personal Information Controller (PIC) responsible for the collection, use, and processing of your personal data. loki99 has appointed a Data Protection Officer (DPO) to oversee compliance with data protection obligations and to serve as the point of contact for data subject inquiries and complaints.

Contact Details

If you have any questions or concerns about this Privacy Policy, wish to exercise your data subject rights, or wish to lodge a complaint regarding loki99's data processing practices, you may contact our Data Protection Officer as follows:

For general customer support inquiries unrelated to privacy matters, please use our standard support channels (live chat or [email protected]).

loki99 collects personal data directly from you during account registration, during the KYC (Know Your Customer) verification process, and automatically through your use of the Platform. The categories of personal data collected include:

Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth
• Nationality and country of residence
• Residential address (street, barangay, city/municipality, province, postal code)
• Mobile phone number (Philippine +63 number)
• Email address
• Username and password (password is stored in hashed form)

KYC Verification Documents

• Copy of valid government-issued photo identification (e.g., UMID, PhilSys ID, Philippine Passport, LTO Driver's Licence)
• Proof of address documents (utility bills, bank statements, government correspondence) where required
• Selfie photographs for identity verification purposes

Financial & Transaction Data

• Payment method details (e.g., GCash mobile number, Maya account number, bank account numbers for deposits and withdrawals)
• Transaction history (deposits, withdrawals, bets placed, wins and losses)
• Cryptocurrency wallet addresses (for USDT TRC20 transactions)

Usage & Technical Data

• IP address, device type, operating system, browser type and version
• Session logs, timestamps, gameplay history, and betting patterns
• Cookies and similar tracking technologies (see Section 8 for details)
• Location data (derived from IP address to verify geographic compliance)

Communications Data

• Chat transcripts from customer support interactions (live chat, email, Viber, Messenger)
• Survey responses, feedback, and complaints submitted to loki99

loki99 processes your personal data for the following purposes, all of which are necessary for the provision of our services or required by applicable law:

Account Management & Service Provision

• To create and administer your loki99 player account
• To verify your identity and age (21+ requirement) through KYC procedures
• To process deposits, withdrawals, and other financial transactions
• To enable you to place bets and participate in gaming activities
• To manage bonuses, promotions, and loyalty programs
• To provide customer support and respond to inquiries

Regulatory Compliance & Legal Obligations

• To comply with anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations under Republic Act No. 9160 (AMLA), as amended, and related AMLC regulations
• To comply with gaming authority licensing conditions and reporting requirements
• To respond to court orders, subpoenas, or lawful requests from Philippine government authorities
• To detect, prevent, and investigate fraud, money laundering, and other illegal activity
• To enforce our Terms & Conditions and protect the integrity of the Platform

Platform Improvement & Analytics

• To analyse usage patterns and improve the user experience of the loki99 Platform
• To conduct data analytics for business intelligence purposes (aggregated and anonymised where possible)
• To test new features and optimise platform performance

Marketing & Communications (With Consent)

• To send promotional offers, newsletters, and updates about loki99 services via email, SMS, or push notifications
• To display personalised content and advertising based on your preferences

Note: You may opt out of marketing communications at any time by following the unsubscribe instructions in each communication or by contacting customer support. Opting out will not affect service-related communications (e.g., transaction confirmations, security alerts).

Under the Data Privacy Act of 2012, personal data may only be processed if there exists a lawful basis for such processing. loki99 processes your personal data on the following legal grounds:

• Consent: You have provided explicit consent to the processing of your personal data for specified purposes (e.g., receiving marketing communications). You may withdraw consent at any time, though this will not affect the lawfulness of processing prior to withdrawal.
• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., the Terms & Conditions), including account creation, transaction processing, and service provision.
• Legal Obligation: Processing is required to comply with Philippine law, including AML/CFT obligations under RA 9160, tax reporting under the National Internal Revenue Code, and gaming authority regulations.
• Legitimate Interests: Processing is necessary for loki99's legitimate business interests, such as fraud prevention, platform security, and business analytics, provided that such interests do not override your fundamental rights and freedoms.

loki99 does not sell, rent, or trade your personal data to third parties. However, we may disclose your personal data to the following categories of recipients in the circumstances described below:

Service Providers & Processors

• Payment Processors: GCash, Maya, Coins.ph, and banking partners for processing deposits and withdrawals
• KYC & Identity Verification Providers: Third-party vendors that verify your identity documents and conduct AML screening
• Game Providers: Evolution Gaming, Pragmatic Play, and other licensed game providers to enable live dealer and slot gaming
• Customer Support Tools: Zendesk, Intercom, or similar platforms used to manage customer inquiries
• Cloud Hosting & IT Infrastructure: Amazon Web Services (AWS), Microsoft Azure, or similar cloud service providers for data storage and processing

All service providers are contractually bound to process your personal data only in accordance with loki99's instructions and to maintain appropriate security measures. Service providers are prohibited from using your data for their own purposes.

Regulatory Authorities & Law Enforcement

loki99 may disclose your personal data to Philippine government authorities, including but not limited to:

• The Anti-Money Laundering Council (AMLC) in connection with AML/CFT investigations
• The Bureau of Internal Revenue (BIR) for tax reporting purposes
• Gaming regulatory authorities as required by licensing conditions
• Law enforcement agencies pursuant to valid court orders, subpoenas, or lawful government requests

Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or a portion of loki99's assets, your personal data may be transferred to the acquiring entity. You will be notified via email and/or a prominent notice on the Platform prior to any such transfer, and the acquiring entity will be bound by the terms of this Privacy Policy.

loki99 has implemented administrative, technical, and physical security measures designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:

Technical Safeguards

• Encryption: All data transmitted between your device and loki99 servers is encrypted using TLS 1.3 (Transport Layer Security). Sensitive data at rest (e.g., identity documents, financial records) is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to loki99 employees, contractors, and service providers who require such access to perform their job functions. All access is logged and monitored.
• Firewalls & Intrusion Detection: loki99 employs enterprise-grade firewalls and intrusion detection systems to protect against unauthorised access and cyberattacks.
• Regular Security Audits: loki99 conducts periodic security assessments and vulnerability testing to identify and remediate potential security weaknesses.

Organisational Safeguards

• Employee Training: All loki99 employees receive data privacy and security training and are bound by confidentiality obligations.
• Incident Response Plan: loki99 maintains a documented data breach response plan to ensure prompt detection, investigation, and notification in the event of a security incident.
• Data Minimisation: loki99 collects only the minimum personal data necessary for the purposes described in this Privacy Policy.

While loki99 takes all reasonable measures to protect your data, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying loki99 if you suspect unauthorised access to your account.

loki99 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and deliver personalised content. A "cookie" is a small text file stored on your device that allows the Platform to recognise your browser and capture certain information.

Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including session management and security features. These cookies cannot be disabled.
• Performance Cookies: Collect information about how visitors use the Platform (e.g., pages visited, time spent) to improve site performance. These cookies are anonymised.
• Functional Cookies: Remember your preferences (e.g., language selection, display settings) to provide a personalised experience.
• Advertising Cookies: Track your browsing activity to deliver relevant advertisements on third-party sites. You may opt out of advertising cookies via your browser settings or through industry opt-out tools.

Third-Party Cookies

loki99 may allow third-party service providers (e.g., Google Analytics, Facebook Pixel) to place cookies on the Platform for analytics and advertising purposes. These third parties have their own privacy policies governing the use of cookies and tracking data.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may impair the functionality of the Platform. For more information on managing cookies, visit your browser's help documentation.

loki99 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law. The specific retention periods are as follows:

• Active Accounts: Personal data associated with active player accounts is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, loki99 retains personal data for a minimum of 5 years to comply with AML/CFT record-keeping requirements under RA 9160, tax obligations under the NIRC, and gaming authority regulations.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets) is retained for 5 years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for 5 years following account closure or the last transaction, whichever is later.
• Marketing Communications: If you opt out of marketing communications, your contact details will be retained on a suppression list to ensure you do not receive further marketing, but will not be used for any other purpose.

Upon expiry of the applicable retention period, loki99 will securely delete or anonymise your personal data in accordance with our data retention and disposal procedures, unless further retention is required by law or to defend legal claims.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data. loki99 is committed to facilitating the exercise of these rights in a timely and transparent manner.

Right to Be Informed

You have the right to be informed of how your personal data is being collected, used, and shared. This Privacy Policy serves as the primary notice of loki99's data processing practices.

Right to Access

You have the right to request access to the personal data that loki99 holds about you, including details of the purposes of processing, the categories of data held, and the recipients of the data. To exercise this right, submit a request to [email protected].

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You may update your account information directly via your loki99 account settings or by contacting customer support.

Right to Erasure ("Right to Be Forgotten")

You have the right to request deletion of your personal data where: (1) the data is no longer necessary for the purposes for which it was collected; (2) you withdraw consent and there is no other legal ground for processing; (3) you object to processing and there are no overriding legitimate grounds; or (4) the data was unlawfully processed.

This right is not absolute. loki99 may refuse erasure requests where retention is required by Philippine law (e.g., AML/CFT, tax, or litigation hold requirements).

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests. To exercise this right, contact [email protected].

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) and to transmit that data to another service provider where technically feasible.

Right to Damages

If you suffer damages as a result of loki99's violation of your rights under the Data Privacy Act, you may be entitled to indemnification in accordance with Section 32 of RA 10173.

How to Exercise Your Rights

To exercise any of the above rights, please contact loki99's Data Protection Officer at [email protected]. loki99 will respond to your request within 15 calendar days of receipt. In certain cases, we may request additional information to verify your identity before processing your request.

The loki99 Platform is not intended for use by individuals under the age of 21. loki99 does not knowingly collect personal data from minors. If you are under 21 years of age, you must not access the Platform or provide any personal information to loki99.

If loki99 becomes aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that information and close the associated account. Parents or legal guardians who believe that loki99 may have collected personal data from a minor should contact [email protected] immediately.

loki99 is headquartered in the Philippines and processes personal data primarily within Philippine territory. However, certain service providers engaged by loki99 (e.g., cloud hosting providers, payment processors, KYC vendors) may be located in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, loki99 ensures that appropriate safeguards are in place to protect your data in accordance with Section 13 of the Data Privacy Act and NPC Circular No. 16-01 on Security of Personal Data in Government. These safeguards may include:

• Standard Contractual Clauses (SCCs) or similar data transfer agreements
• Ensuring that the recipient country has been determined by the National Privacy Commission to provide an adequate level of protection
• Binding Corporate Rules (BCRs) where applicable
• Your explicit consent to the transfer

If you have questions or concerns regarding international data transfers, please contact [email protected].

loki99 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. When material changes are made, loki99 will notify you via:

• Email notification to the registered account email address
• A prominent notice displayed on the loki99 Platform upon next login
• An update to the "Last Updated" date at the top of this Privacy Policy

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the Platform and may close your account in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically. The current version is always accessible at loki99.lat/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or loki99's data processing practices, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer:

For general customer support inquiries (non-privacy related), please use our live chat feature or email [email protected].