Last Updated: January 1, 2026
WinLuck ("WinLuck," "we," "us," or "our") operates the online gaming platform accessible at winluck.app and its associated mobile application (collectively, the "Platform"). As part of operating the Platform, WinLuck collects and processes personal information about registered players and visitors ("you" or "your").
This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal information collected by WinLuck through the Platform, our customer support channels, and any other interaction you have with us.
By registering an account on WinLuck or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use the Platform.
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, WinLuck is the personal information controller responsible for the personal data collected through the Platform. WinLuck determines the purposes and means of processing your personal information.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.
WinLuck collects the following categories of personal information from players and Platform users:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, nationality |
| Contact Data | Philippine mobile number, email address, city/province of residence |
| Account Data | Username, encrypted password, account registration date, account status |
| Financial Data | GCash number, PayMaya account, BPI/BDO/Metrobank account details (masked), transaction history, deposit and withdrawal records |
| Gaming Data | Game history, wager amounts, win/loss records, session duration, game preferences |
| Technical Data | IP address, device type, browser type and version, operating system, mobile network, session logs |
| Communications Data | Customer support chat transcripts, emails, feedback submissions |
| Verification Data | Copies of government-issued ID, selfie photographs submitted for identity verification |
WinLuck collects personal information through the following means:
WinLuck processes your personal information only for legitimate, specified, and explicit purposes. The table below sets out the purposes for which we process your data and the legal basis under the Data Privacy Act of 2012 that applies to each purpose:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract; consent |
| Identity and age verification (21+ compliance) | Legal obligation; legitimate interest |
| Processing deposits and withdrawals | Performance of contract |
| Anti-money laundering (AML) and fraud prevention | Legal obligation; legitimate interest |
| Providing customer support | Performance of contract; legitimate interest |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interest |
| Sending promotional communications (with opt-in) | Consent |
| Platform security and fraud detection | Legitimate interest; legal obligation |
| Compliance with regulatory reporting obligations | Legal obligation |
| Improving Platform features and user experience | Legitimate interest |
WinLuck will not process your personal information for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for such processing.
WinLuck does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
WinLuck retains your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with WinLuck's data disposal procedures. Where data is anonymized, it may be retained indefinitely for analytical and statistical purposes.
WinLuck implements appropriate technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal information held by WinLuck:
These rights are described in further detail below:
To exercise any of these rights, please contact WinLuck's Data Protection Officer using the contact details in Section 14. WinLuck will respond to all verified requests within a reasonable time and in accordance with the timelines prescribed by the NPC.
WinLuck uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session security, and collect analytical data about Platform usage. The following types of cookies may be used:
You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Platform. WinLuck does not use cookies to serve third-party advertising or to track your activity across unrelated websites.
The WinLuck Platform is strictly intended for persons who are 21 years of age or older. WinLuck does not knowingly collect personal information from individuals under the age of 21. If you are under 21 years of age, you must not register an account or use the Platform.
If WinLuck becomes aware that personal information has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that information and close the associated account. Any winnings accrued on such an account will be forfeited.
If you are a parent or guardian and believe that your child under the age of 21 has registered an account on WinLuck, please contact us immediately using the details in Section 14 so that we can take appropriate action.
In the course of operating the Platform, WinLuck may transfer your personal information to service providers or technology partners located outside the Philippines. Any such cross-border transfer of personal data will be conducted in compliance with the requirements of the Data Privacy Act of 2012 and the rules of the National Privacy Commission governing cross-border data flows.
Specifically, WinLuck will ensure that any recipient of personal data outside the Philippines provides an adequate level of data protection, either through contractual data processing agreements incorporating the NPC's standard contractual clauses, or through other legally recognized transfer mechanisms.
Where personal data is transferred to cloud hosting or data storage providers located outside the Philippines, WinLuck will ensure that such providers are bound by contractual obligations to process the data only in accordance with WinLuck's instructions and to implement appropriate security measures.
WinLuck reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Privacy Policy, WinLuck will notify registered players by posting a prominent notice on the Platform or by sending a notification to the mobile number or email address associated with your account.
The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. Your continued use of the Platform following the posting of any amendments constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how WinLuck protects your personal information.
If you do not agree with any amendment to this Privacy Policy, you must cease using the Platform and may request account closure by contacting WinLuck support.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by WinLuck, please contact our Data Protection Officer:
Data Protection Officer — WinLuck
Email: [email protected]
For general support inquiries, you may also reach our customer support team at:
[email protected] | Available 24/7 via in-app live chat
If you believe that WinLuck has not adequately addressed your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 and for ensuring compliance with its provisions.
All data transmitted between your device and WinLuck's servers is protected by industry-standard TLS encryption. Your financial details and personal information travel securely at all times.
WinLuck operates in full compliance with Republic Act No. 10173 — the Data Privacy Act of 2012. Your rights as a Filipino data subject are recognized and upheld on every interaction.
WinLuck never sells, rents, or trades your personal information to third-party marketers. Your data is used only to operate your account and improve your gaming experience.
Access, correct, or request deletion of your personal data at any time. WinLuck's Data Protection Officer is available to handle all data subject requests promptly and professionally.
WinLuck uses cookies only for session security, functionality, and anonymized analytics. No third-party advertising cookies. No cross-site tracking. Just a better, safer gaming experience.
WinLuck has a designated Data Protection Officer overseeing all privacy matters. Regular security audits and staff training ensure your data is handled with the highest standards of care.
WinLuck is built on trust. From Color Game to Ocean Lord, every session on our platform is backed by strong data privacy protections and fair play standards. Register today, deposit via GCash or PayMaya, and enjoy the action — knowing your personal information is in safe hands. Must be 21 or older.
21+ only. Please play responsibly. See our Responsible Gaming page for tools and support.