66ph Privacy Policy

This Privacy Policy ("Policy") describes how 66ph ("66ph," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Player") who access or use the 66ph online gaming platform available at 66ph.org and any associated mobile applications or services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines ("NPC"). It applies to all personal data processed by 66ph in connection with the Platform, regardless of whether such processing occurs in the Philippines or elsewhere.

By registering an account on 66ph or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms and Conditions, which are incorporated herein by reference.

For the purposes of the Data Privacy Act of 2012, 66ph acts as the personal information controller ("PIC") in respect of the personal data it collects and processes through the Platform. As PIC, 66ph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

66ph has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact the DPO using the contact details provided in Section 14 of this Policy.

When you create a 66ph account, we collect:

• Full legal name;
• Date of birth (to verify the 21-year age requirement);
• Email address;
• Mobile phone number;
• Residential address (city, province, and postal code);
• Username and encrypted password.

To comply with PAGCOR requirements and anti-money laundering regulations, we may collect:

• Government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID, or Voter's ID);
• Proof of address documents;
• Selfie or live photo for identity verification purposes;
• Source of funds declaration where required by regulation.

In connection with deposits, withdrawals, and gameplay, we collect:

• GCash or PayMaya / Maya account details (mobile number and registered name);
• Philippine bank account details (bank name, account name, account number) for bank transfer transactions;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used;
• Gameplay history, including game titles, wager amounts, wins, and losses.

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser type and version;
• Session duration, pages visited, and features used;
• Referring URL and exit pages;
• Cookie identifiers and similar tracking technologies (see Section 8).

When you contact 66ph customer support, submit a complaint, or communicate with us through any channel, we retain records of those communications, including the content of messages, timestamps, and any attachments provided.

66ph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — through cookies, web beacons, server logs, and similar technologies when you access and use the Platform;
• From third parties — including identity verification service providers, payment processors (GCash, Maya, Philippine banks), fraud prevention services, and analytics providers, where permitted by law.

66ph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

66ph uses the personal data we collect for the following purposes:

• To create, verify, and manage your 66ph account;
• To process deposits, withdrawals, and other financial transactions in Philippine Peso (PHP);
• To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine anti-money laundering laws;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities;
• To monitor gameplay for responsible gaming purposes and to enforce self-exclusion and deposit limit settings;
• To provide customer support and respond to your inquiries and complaints;
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts);
• To send you promotional and marketing communications about 66ph offers and new games, where you have provided consent;
• To improve the Platform's functionality, user experience, and game offerings through analytics;
• To comply with applicable Philippine laws, regulations, and PAGCOR licensing requirements;
• To enforce our Terms and Conditions and other applicable policies.

66ph may share your personal data with carefully selected third-party service providers who assist us in operating the Platform and delivering our services. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law. Categories of such providers include:

• Payment processors and e-wallet providers (GCash, PayMaya / Maya, Philippine banks);
• Identity verification and KYC service providers;
• Fraud detection and cybersecurity service providers;
• Cloud hosting and infrastructure providers;
• Customer support platform providers;
• Analytics and platform performance monitoring services.

66ph may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine law enforcement agencies, or other competent authorities where required by law, court order, or regulatory directive. Such disclosures will be made only to the extent required and in accordance with applicable legal procedures.

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of 66ph's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

66ph does not sell, rent, or trade your personal information to any third party for their own independent marketing or commercial purposes. Any data sharing is limited to what is strictly necessary for the purposes described in this Policy.

Cookies are small text files placed on your device when you visit the 66ph Platform. They help us recognize your device, remember your preferences, maintain your session, and analyze how the Platform is used. We also use similar technologies such as web beacons, pixel tags, and local storage objects.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate.

66ph retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and PAGCOR regulations. Specifically:

• Account and KYC data — retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act (AMLA) and PAGCOR compliance rules;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications — retained for three (3) years from the date of the last communication;
• Technical and usage data — retained for up to twenty-four (24) months from collection;
• Marketing consent records — retained until consent is withdrawn and for one (1) year thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data must be retained for legal proceedings or regulatory investigations, it will be retained until those proceedings are concluded.

66ph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including passwords and payment details;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While 66ph takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your 66ph login credentials and for notifying us immediately if you suspect unauthorized access to your account.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 66ph:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within fifteen (15) business days. We may require proof of identity before processing your request. Some rights are subject to limitations under applicable law, particularly where data must be retained for regulatory compliance or legal proceedings.

The 66ph Platform is strictly intended for individuals who are at least twenty-one (21) years of age. We do not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered an account on 66ph or that we have inadvertently collected personal data from a minor, please contact us immediately at the details provided in Section 14 so that we can take appropriate action.

66ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how 66ph protects your personal information. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 66ph, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe that your data privacy rights have been violated. Information about the NPC and how to file a complaint is available through official Philippine government channels.