Privacy Policy – 66ph

1 Introduction

66ph is committed to protecting the privacy and personal data of all players who use our online gaming platform. This Policy has been prepared in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as well as other applicable data protection laws and regulations.

This Policy applies to all personal data collected through the 66ph website, mobile platform, customer support channels, and any other services operated by 66ph. It covers data collected from registered players, visitors to the 66ph website, and any other individuals who interact with the 66ph platform in any capacity.

We encourage you to read this Policy carefully and in full. If you have any questions about how 66ph handles your personal data, please contact our Data Privacy Officer using the details provided in Section 16 of this Policy.

2 Data Controller

For the purposes of applicable data protection law, 66ph is the data controller responsible for your personal information collected through the 66ph platform. As data controller, 66ph determines the purposes and means by which your personal data is processed.

66ph has appointed a Data Privacy Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 16 of this Policy.

3 Personal Data We Collect

3.1 Registration Data

When you create a 66ph account, we collect the following information:

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Residential address (including city, province, and postal code);
• Email address;
• Philippine mobile number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with our legal obligations and to process withdrawals, we may collect:

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys ID, driver's license);
• Proof of residential address (e.g., utility bill, bank statement);
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account);
• Selfie or live photo for identity confirmation.

3.3 Financial Data

When you make deposits or request withdrawals, we collect transaction records including amounts, dates, payment methods used (GCash, PayMaya, BPI, BDO, Metrobank, etc.), and transaction reference numbers. We do not store full payment card numbers on our servers.

3.4 Gaming Activity Data

We collect records of your gaming activity on the 66ph platform, including games played, bets placed, wins and losses, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, and regulatory compliance.

3.5 Technical and Device Data

We automatically collect certain technical data when you access the 66ph platform, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Pages visited, time spent on pages, and navigation paths;
• Referring URLs and search terms used to find the 66ph platform.

3.6 Communications Data

When you contact 66ph customer support, we retain records of your communications, including chat transcripts, emails, and support ticket histories, to assist with resolving queries and improving our service quality.

4 How We Collect Your Data

66ph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions;
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse the 66ph platform;
• From third-party payment processors — transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners;
• From identity verification providers — confirmation of identity document authenticity during KYC processes;
• From fraud prevention services — risk signals and device fingerprinting data used to detect and prevent fraudulent activity.

5 How We Use Your Personal Data

66ph uses your personal data for the following purposes:

6 Legal Basis for Processing

66ph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you, including account management, payment processing, and game delivery;
• Legal obligation — processing required to comply with applicable Philippine laws, including KYC, AML, and regulatory reporting obligations;
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

66ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners, to process your deposits and withdrawals;
• Identity verification providers — third-party KYC and document verification services used to confirm your identity;
• Fraud prevention services — providers of risk assessment and fraud detection tools;
• Game providers — third-party game studios whose games are available on the 66ph platform, to the extent required for game delivery and dispute resolution;
• IT and hosting providers — cloud infrastructure and data hosting providers who process data on our behalf under strict data processing agreements;
• Regulatory authorities — government agencies, law enforcement, and regulatory bodies where disclosure is required by law or court order;
• Professional advisers — lawyers, auditors, and accountants where necessary for legal or compliance purposes.

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 66ph platform. They help us recognize your device, remember your preferences, and understand how you use our platform.

8.2 Types of Cookies We Use

• Essential cookies — required for the platform to function, including session management and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game display options.
• Analytics cookies — help us understand how players use the 66ph platform so we can improve it. Data collected is aggregated and anonymized.
• Marketing cookies — used to deliver relevant promotional content. Only placed with your consent.

8.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 66ph platform. Detailed instructions for managing cookies are available in the help section of your browser.

9 Data Retention

66ph retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and our legitimate business interests. Specific retention periods include:

• Account and KYC data — retained for a minimum of 5 years following account closure, in accordance with Philippine AML regulations;
• Transaction records — retained for a minimum of 5 years from the date of each transaction;
• Gaming activity logs — retained for 3 years from the date of each gaming session;
• Customer support records — retained for 3 years from the date of each interaction;
• Marketing consent records — retained until consent is withdrawn and for 1 year thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data destruction procedures.

10 Data Security

66ph implements a range of technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 66ph platform;
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to systems holding personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

11 Your Data Protection Rights

Under the Data Privacy Act of 2012 and applicable regulations, you have the following rights regarding your personal data held by 66ph:

• Right to be informed — the right to know what personal data 66ph collects and how it is used, as set out in this Policy;
• Right of access — the right to request a copy of the personal data 66ph holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object — the right to object to processing of your personal data for direct marketing purposes;
• Right to data portability — the right to receive your personal data in a structured, commonly used format;
• Right to withdraw consent — where processing is based on consent, the right to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact our Data Privacy Officer using the details in Section 16. We will respond to all valid requests within 15 business days. We may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

12 Children's Privacy

The 66ph platform is strictly intended for individuals who are 21 years of age or older. 66ph does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered an account on the 66ph platform, please contact our support team immediately so that we can investigate and take appropriate action.

13 International Data Transfers

Some of the third-party service providers used by 66ph may process personal data outside the Philippines. Where personal data is transferred internationally, 66ph ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require recipients to apply data protection standards equivalent to those required under Philippine law.

By using the 66ph platform, you consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

14 Third-Party Links

The 66ph platform may contain links to third-party websites or services. This Privacy Policy applies only to the 66ph platform and does not cover the privacy practices of any third-party websites. 66ph is not responsible for the content or privacy practices of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

15 Updates to This Privacy Policy

66ph reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Updated versions of this Policy will be published on this page with a revised effective date.

Where changes are material, 66ph will make reasonable efforts to notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the 66ph platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

We recommend that you review this Policy periodically to stay informed of how 66ph protects your personal data.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 66ph handles your personal data, please contact our Data Privacy Officer:

For general support inquiries, you may also visit our FAQ page or review our Terms & Conditions.