This Privacy Policy explains how Winlot collects, uses, stores, and protects the personal information of players registered on the Winlot platform. We are committed to handling your data with transparency, care, and full respect for your rights under Philippine law.
Winlot does not sell your personal data to third parties. Your information is used solely to operate the platform, process payments, comply with legal obligations, and improve your gaming experience. You have the right to access, correct, and request deletion of your data at any time.
Six core commitments that define how Winlot handles your personal information every single day.
All personal and financial data stored by Winlot is protected using industry-standard encryption. Your account credentials, payment details, and identity documents are secured at rest and in transit using TLS and AES-256 encryption protocols.
Winlot does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data belongs to you. We only share it where strictly necessary to operate the platform or comply with legal requirements.
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the right to access, correct, and request deletion of your personal data. Winlot provides clear processes for exercising all of these rights through your account or by contacting support.
Winlot collects only the personal data that is necessary to operate the platform, verify your identity, process payments, and comply with applicable regulations. We do not collect data beyond what is required for these specific purposes.
Winlot retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law. Once data is no longer needed, it is securely deleted or anonymized in accordance with our data retention schedule.
In the unlikely event of a data breach that affects your personal information, Winlot will notify affected players and the National Privacy Commission (NPC) within the timeframes required by Philippine law. We take data security incidents seriously and respond promptly.
This Privacy Policy is issued by Winlot, the operator of the online gaming platform accessible at winlot.onl (referred to in this document as "Winlot," "we," "us," or "our"). Winlot operates in the Philippines and is subject to applicable Philippine data protection and gaming regulations.
Winlot acts as the data controller in respect of the personal information collected from players registered on the platform. As data controller, Winlot determines the purposes and means by which your personal data is processed.
This Privacy Policy applies to all personal data collected through the Winlot website, mobile platform, and any related services. It should be read together with Winlot's Terms & Conditions and Responsible Gaming Policy.
Winlot collects the following categories of personal data from players:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number | Account registration, age verification, KYC compliance |
| Contact Data | Email address, mobile number, residential address in the Philippines | Account communication, support, transaction notifications |
| Financial Data | GCash number, PayMaya account, BPI/BDO/Metrobank account details, transaction history | Deposit and withdrawal processing, fraud prevention |
| Technical Data | IP address, device type, browser type, operating system, session logs | Platform security, fraud detection, service improvement |
| Gaming Data | Game history, wager amounts, win/loss records, session duration | Responsible gaming monitoring, regulatory compliance, dispute resolution |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer support, quality assurance, dispute resolution |
| Verification Documents | Scanned copies of government-issued ID, proof of address, selfie verification | KYC/AML compliance, identity verification, withdrawal processing |
Winlot does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where specifically required by applicable law or responsible gaming obligations.
The majority of personal data Winlot holds about you is provided directly by you during the registration process, when completing identity verification, when making deposits or withdrawals, when contacting our support team, or when participating in promotions.
When you access and use the Winlot platform, certain technical data is collected automatically. This includes your IP address, device identifiers, browser type, operating system, pages visited, session duration, and in-game activity. This data is collected through server logs, cookies, and similar tracking technologies.
Winlot may receive personal data about you from third-party service providers engaged to support platform operations. These include payment processors such as GCash and PayMaya, identity verification service providers, fraud detection services, and analytics providers. Data received from these sources is handled in accordance with this Privacy Policy.
In limited circumstances, Winlot may collect data from publicly available sources for the purpose of verifying information you have provided, conducting due diligence, or complying with anti-money laundering obligations. This may include publicly available government databases or sanctions screening lists.
Winlot uses your personal data for the following specific purposes:
Winlot processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules and regulations:
Winlot shares personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processors, identity verification providers, cloud hosting services, fraud detection systems, and customer support tools. All service providers are contractually bound to process your data only on Winlot's instructions and in accordance with applicable data protection law.
Winlot may disclose your personal data to Philippine regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by law, court order, or regulatory direction. This includes disclosures required under AML regulations and gaming compliance obligations.
In the event of a merger, acquisition, restructuring, or sale of all or part of Winlot's business, your personal data may be transferred to the relevant successor entity. Winlot will notify affected players of any such transfer and ensure that the receiving entity is bound by data protection obligations no less protective than those in this Privacy Policy.
Winlot does not sell, rent, or otherwise commercially exploit your personal data to any third party. Your data is not shared with advertisers, data brokers, or any other commercial entity for their own marketing or commercial purposes.
Any third party that receives your personal data from Winlot is required to maintain appropriate technical and organizational security measures and to use your data only for the specific purpose for which it was shared.
Cookies are small text files placed on your device when you visit the Winlot platform. They allow the platform to recognize your device, remember your preferences, maintain your session, and collect analytical data about how the platform is used.
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling essential cookies may affect the functionality of the Winlot platform and your ability to access certain features. Non-essential cookies can be managed through the cookie preference center accessible on the platform.
Winlot retains your personal data for as long as is necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Legal and regulatory obligation |
| Financial transaction records | 10 years from transaction date | AML and tax compliance requirements |
| Gaming activity records | 5 years from last activity | Regulatory compliance and dispute resolution |
| Support communications | 3 years from last interaction | Legitimate interest and dispute resolution |
| Technical and session logs | 12 months from collection | Security and fraud prevention |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent management compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual player.
Winlot implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
While Winlot takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying Winlot immediately if you suspect unauthorized access to your account.
Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights in relation to your personal data held by Winlot:
Request a copy of the personal data Winlot holds about you, along with information about how it is being used.
Request correction of any inaccurate or incomplete personal data Winlot holds about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Withdraw consent for any processing activity based on consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact Winlot's Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy. Winlot will respond to all verified data rights requests within thirty (30) days of receipt.
The Winlot platform is strictly intended for adults aged 21 years and above. Winlot does not knowingly collect personal data from any person under the age of 21. If Winlot becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.
If you are a parent or guardian and believe that a minor has registered on the Winlot platform or provided personal data to Winlot, please contact our support team immediately so that appropriate action can be taken.
Winlot primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud detection services.
Where such transfers occur, Winlot ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law. These safeguards may include contractual data protection clauses, adequacy decisions, or other legally recognized transfer mechanisms.
By using the Winlot platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Privacy Policy, subject to the safeguards described above.
Winlot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. The date of the most recent revision is displayed at the top of this page.
Where changes to this Privacy Policy are material, Winlot will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the Winlot platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.
Winlot recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being handled.
If you have any questions, concerns, or requests relating to this Privacy Policy or Winlot's handling of your personal data, you may contact Winlot's Data Protection Officer (DPO) using the details below. All contact information is provided as plain text — email addresses are not clickable links.
Data Protection Officer: Winlot DPO
DPO Email: [email protected]
General Support: [email protected]
Response Time: Within 30 days of receiving your request
You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that Winlot has not handled your personal data in accordance with applicable law. Information about the NPC and how to file a complaint is available through official Philippine government channels.
Winlot is built on trust. Your data is protected, your rights are respected, and your gaming experience is always secure. Join thousands of Filipino players who choose Winlot every day. Must be 21 years or older to register.
21+ only · Data encrypted · No data selling · Philippine Data Privacy Act compliant