Account Security
Keeping Your luckypot Account Safe
Account security is something luckypot takes seriously — and it's something every Filipino player should take seriously too. Online casino accounts hold real PHP balances and personal information, which makes them targets for phishing attempts and unauthorized access. luckypot provides multiple layers of protection, but the player is the first line of defense.
Use a Strong, Unique Password
Your luckypot password should be at least 10 characters and include uppercase letters, numbers, and a special character. Avoid using your birthdate, "password123," or anything connected to your GCash PIN. Never use the same password you use for other accounts — if another site gets breached, you don't want that to cascade to your luckypot account.
Enable Two-Factor Authentication
luckypot supports OTP-based two-factor authentication via your Philippine mobile number. With 2FA enabled, even if someone knows your password, they cannot log in without the OTP sent to your SIM card. Enable it in your account security settings — it takes 30 seconds and significantly hardens your account against unauthorized access.
Watch Out for Phishing Sites
Always verify you're on luckypot.win before entering your credentials. Phishing sites mimic the luckypot login page appearance to steal usernames and passwords. Check the browser address bar — the URL must be exactly luckypot.win with HTTPS and the padlock icon. luckypot will never ask for your password via email, SMS, or live chat.
Log Out on Shared Devices
If you ever access luckypot on a shared computer in a café in Quiapo or a friend's phone in Davao, always log out after your session. Use the "Log Out" option in the account menu — don't just close the browser tab. luckypot's session tokens are protected, but logging out properly prevents any residual access on shared devices.
