lodi29 processes all member personal data in accordance with the Philippines Data Privacy Act of 2012. Our data practices are designed to meet NPC standards and uphold your rights as a data subject.
All personal data stored by lodi29 is protected with AES-256 encryption at rest and 256-bit SSL/TLS in transit. Access to member data is restricted to authorized personnel only, with strict access logging.
You have the right to access, correct, object to, erase, and port your personal data held by lodi29. Requests are handled within 15 business days, free of charge for standard requests.
lodi29 does not sell, rent, or trade your personal data to third-party marketers or advertising networks. Data sharing is limited to operational necessity and regulatory compliance only.
Personal data is retained only as long as necessary for the purpose it was collected, subject to legal and regulatory minimum retention requirements. Upon account closure, data is purged per lodi29's retention schedule.
In the event of a personal data breach that poses a real risk to members, lodi29 will notify affected individuals and the National Privacy Commission (NPC) within 72 hours of confirmed breach discovery, as required by law.
lodi29 ("lodi29," "we," "us," or "our") operates the online gaming platform accessible at lodi29.org. This Privacy Policy describes how lodi29 collects, uses, discloses, retains, and protects the personal data of individuals who register as members, visit lodi29.org, or otherwise interact with lodi29 services ("you," "Member," or "Data Subject").
This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). lodi29 is committed to the principles of transparency, legitimate purpose, and proportionality in the processing of personal data.
By registering for a lodi29 account or using any lodi29 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside lodi29's Terms & Conditions and Responsible Gaming Policy, which together govern your use of the lodi29 platform.
We collect your data to operate your account, verify your identity, process payments, and keep you safe. We don't sell it. We protect it. And you can ask us to show you, correct, or delete it at any time.
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, lodi29 is the personal information controller ("PIC") in respect of the personal data processed in connection with lodi29.org and all associated services. As a PIC, lodi29 determines the purposes and means of processing your personal data and is responsible for its lawful handling.
lodi29 has designated a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and implementation, ensuring compliance with the DPA and NPC issuances, and serving as the primary point of contact for all data privacy matters. Contact details for the lodi29 DPO are provided in Section 15 of this Policy.
lodi29 collects the following categories of personal data from members and platform visitors. The specific data collected depends on the nature of your interaction with lodi29.
lodi29 may collect government-issued ID numbers (e.g., PhilSys number, TIN, passport number) during mandatory KYC verification processes. These are classified as sensitive personal information under the DPA and are subject to enhanced protection measures including restricted access, separate encrypted storage, and specific data minimization protocols.
lodi29 collects personal data through the following channels and methods:
| Collection Method | Examples |
|---|---|
| Direct Submission | Registration form, KYC document upload, support chat messages, withdrawal requests |
| Automated Collection | Cookies, session logs, IP address capture, device fingerprinting on login |
| Payment Processors | Transaction confirmations from GCash, Maya, BPI, BDO, InstaPay, and other payment partners |
| Identity Verification Providers | Third-party eKYC services used to verify government ID authenticity during Member verification |
| Game Providers | Session and wagering records transmitted from game provider servers for dispute resolution and RTP compliance |
| Regulatory Authorities | Data received from PAGCOR or other Philippine authorities in the context of regulatory compliance |
lodi29 processes your personal data for the following purposes, each of which is described with the corresponding legal basis in Section 6:
To create and maintain your lodi29 account; to authenticate your identity on login; to process deposits, withdrawals, and bonus transactions; and to provide access to games, sports betting markets, and other lodi29 services.
To verify that you meet the eligibility requirements for lodi29 membership, including the mandatory 21+ age requirement; to comply with Know Your Customer (KYC) obligations; and to conduct enhanced due diligence where required by anti-money laundering regulations applicable to online gaming in the Philippines.
To process deposit instructions transmitted through GCash, Maya, BPI, BDO, and other approved Philippine payment channels; to authenticate and authorize withdrawal requests to verified accounts; and to maintain accurate transaction records for accounting and regulatory purposes.
To comply with PAGCOR reporting requirements; to respond to lawful requests from Philippine law enforcement or regulatory authorities; to fulfill obligations under the Anti-Money Laundering Act (AMLA), as amended; and to maintain records required by applicable Philippine law for the periods specified therein.
To administer and enforce deposit limits, session timers, self-exclusion requests, and other responsible gaming tools activated by Members; to monitor gaming activity for indicators of problem gambling and to take appropriate protective action; and to comply with PAGCOR responsible gaming guidelines applicable to lodi29.
To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, and other prohibited activities; to authenticate devices and detect suspicious login patterns; and to protect the integrity of lodi29 games and betting markets.
To respond to Member inquiries, complaints, and disputes; to maintain records of support interactions for quality assurance and training purposes; and to facilitate account recovery processes.
To analyze aggregated and anonymized usage data to improve lodi29's platform performance, game library, and user experience. This processing uses anonymized data that does not identify individual Members wherever practicable.
Where you have provided explicit consent, to send you promotional communications about lodi29 bonuses, new game releases, and platform features via SMS or other channels. You may withdraw this consent at any time through your account notification settings or by contacting lodi29 support.
Under the Data Privacy Act of 2012, lodi29 relies on the following legal bases for the processing of your personal data:
lodi29 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following limited circumstances:
Transaction data is shared with GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BPI, BDO, Metrobank, UnionBank, and other Philippine payment processors solely as necessary to process authorized deposits and withdrawals. These providers are bound by data processing agreements and Philippine financial sector data protection requirements.
During KYC verification, identity document images and biometric data may be processed by lodi29's authorized eKYC service providers. These providers operate under strict data processing agreements limiting use solely to identity verification for lodi29.
Game session data may be shared with game providers (e.g., PG Soft, Jili Games, Pragmatic Play, Evolution Gaming) for game result verification, dispute resolution, and RTP audit purposes. Shared data is limited to session identifiers and gameplay records — no identity or financial data beyond what is technically necessary is shared with game providers.
lodi29 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, Philippine law enforcement agencies, or courts of competent jurisdiction where required by law, regulatory obligation, court order, or lawful legal process. lodi29 will, where permitted, notify affected Members of such disclosures.
Personal data may be disclosed to lodi29's legal counsel, auditors, or other professional advisers where necessary for the provision of professional services, subject to professional confidentiality obligations.
lodi29 categorically does not sell or monetize Member personal data to advertisers, data brokers, or any commercial third parties. All data sharing is operational and purpose-limited.
lodi29 uses cookies and similar browser-based technologies to operate and improve the lodi29 platform. The following categories of cookies are used:
lodi29 does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use lodi29's login and gameplay features.
lodi29 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of membership + 5 years after closure | AMLA / PAGCOR regulatory requirements |
| Transaction Records | 5 years from transaction date | AMLA Section 9; BIR recordkeeping requirements |
| KYC / ID Documents | 5 years after account closure | AMLC Regulatory Issuance No. 1, Series of 2021 |
| Gaming Activity Logs | 3 years from session date | PAGCOR technical standards; dispute resolution |
| Support Communications | 2 years from last interaction | Legitimate interests — quality assurance |
| Technical / Device Logs | 12 months from session date | Security and fraud prevention |
| Marketing Consents | Until withdrawn + 1 year | Evidence of consent compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Backup systems are purged on a rolling schedule consistent with the above periods.
lodi29 implements appropriate organizational and technical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, and destruction. These measures include:
No security system is impenetrable. If lodi29 becomes aware of a data breach that poses a real risk to Members' rights and freedoms, we will notify the affected individuals and the NPC within 72 hours of confirmed discovery, in accordance with NPC Circular 16-03.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by lodi29:
To exercise any of the rights listed above, contact lodi29's Data Protection Officer using the contact information in Section 15. Please include your full name, registered mobile number, a description of the right you wish to exercise, and any relevant details. lodi29 will respond to valid requests within fifteen (15) business days. Where requests are complex or numerous, lodi29 may extend this period by an additional thirty (30) days with prior notice.
Requests to exercise data subject rights are generally free of charge. lodi29 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
Where you believe that lodi29 has not adequately addressed your data privacy concerns, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
lodi29 services are strictly restricted to individuals who are at least twenty-one (21) years of age. lodi29 does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted at registration and may be supplemented by documentary KYC verification.
If lodi29 discovers that personal data has been collected from an individual under 21 years of age, the account will be immediately and permanently suspended, all balances forfeited, and the collected data deleted in accordance with lodi29's data deletion procedures. If you believe that lodi29 may have inadvertently collected data from an underage individual, please contact the DPO immediately using the contact details in Section 15.
lodi29's primary data processing infrastructure is located in the Philippines and within the Asia-Pacific region. In certain operational circumstances — for example, where lodi29 uses cloud infrastructure providers or game technology partners with servers in other jurisdictions — your personal data may be transferred to, stored, or processed in countries outside the Philippines.
Where such cross-border transfers occur, lodi29 ensures that appropriate safeguards are in place, including standard contractual clauses, binding corporate rules where applicable, or reliance on the recipient country's recognition by the NPC as providing an adequate level of protection. Cross-border transfers are subject to data processing agreements that bind recipient processors to data protection standards consistent with the DPA.
lodi29 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, lodi29's data practices, or operational requirements. When material changes are made, lodi29 will notify registered Members via their registered mobile number or through a prominent notice on the lodi29 platform at least seven (7) calendar days before the amended Policy takes effect.
The effective date at the top of this Policy will be updated with each revision. Your continued use of lodi29 services after the effective date of an amended Privacy Policy constitutes your acceptance of the updated terms. The most current version of this Policy is always available at lodi29.org/privacy-policy.
For all privacy-related inquiries, data subject rights requests, or concerns about how lodi29 handles your personal data, please contact lodi29's Data Protection Officer:
Role: Data Protection Officer, lodi29
Email: [email protected]
Live Chat: Available 24/7 via lodi29.org
Response Time: Within 15 business days for formal data subject rights requests
For general support inquiries not related to data privacy, please use the live chat feature within your lodi29 account or visit the FAQ page. For responsible gaming matters, visit the Responsible Gaming page.
If you are not satisfied with lodi29's response to your privacy concern, you may escalate to the National Privacy Commission of the Philippines.
lodi29 promotes responsible gaming across the Philippines. Set limits, use session tools, and reach out to our support team whenever you need help. 21+ only. PAGCOR guidelines apply to all lodi29 services.