Privacy Policy

1. Introduction

66ph ("we," "us," "our") is the operator of the online gaming platform accessible at 66ph.one, licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). We take the privacy of our Members and website visitors seriously, and we are committed to protecting your personal information in a manner consistent with the highest standards of data governance under Philippine law.

This Privacy Policy applies to all personal data collected, stored, processed, or shared in connection with your use of the 66ph Platform — including account registration, deposits, withdrawals, gameplay, customer support interactions, and marketing communications. It should be read together with the 66ph Terms & Conditions and Responsible Gaming Policy.

By registering a 66ph account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein. If you do not agree, you must refrain from using the 66ph Platform.

2. Data Controller Details

The data controller responsible for your personal information is the operator of 66ph, accessible at 66ph.one. For all data privacy matters, including requests to exercise your rights under the Data Privacy Act of 2012, please contact our designated Data Protection Officer (DPO) using the contact details provided in Section 16 of this Policy.

66ph maintains a registered Data Protection Officer (DPO) as required by the National Privacy Commission (NPC) of the Philippines. Our DPO is responsible for overseeing compliance with this Policy, managing data subject requests, and liaising with the NPC on privacy-related matters.

3. Data We Collect

66ph collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement under PAGCOR regulations);
• Gender (where provided during registration);
• Copies of government-issued photo identification (e.g., Philippine National ID, Driver's License, Passport, SSS ID, GSIS ID, PhilHealth ID, Voter's ID) submitted during KYC verification.

3.2 Contact Data

• Philippine mobile number (primary account identifier and OTP delivery);
• Email address (for account communications and promotional messages where consent is given);
• Residential address (required for KYC and regulatory reporting purposes).

3.3 Financial Data

• GCash or Maya wallet identifier (phone number associated with e-wallet);
• Bank account name and number for bank transfer withdrawals;
• Transaction history including deposit amounts, dates, methods, and withdrawal records;
• Cryptocurrency wallet address where USDT TRC20 transactions are conducted.

3.4 Gaming & Behavioural Data

• Game session history, wager amounts, game outcomes, and win/loss records;
• Sports betting selections, stakes, and settlement records;
• Bonus redemption activity and wagering requirement progression;
• Login timestamps, session durations, and responsible gaming tool usage.

3.5 Technical Data

• IP address and approximate geographic location at time of login;
• Device type, operating system, and browser information;
• Cookies and similar tracking identifiers (see Section 10);
• Platform usage patterns and navigation data collected via analytics.

4. How We Collect Data

66ph collects personal data through the following means:

• Direct collection: Information you provide when registering a 66ph account, completing KYC, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and behavioural data collected automatically when you use the 66ph Platform, including through cookies, server logs, and analytics tools;
• Third-party sources: Identity verification data from PAGCOR-approved KYC service providers; fraud and AML screening data from compliance service providers; payment verification data from payment processors such as GCash, Maya, and banking partners;
• Public sources: Publicly available information used for fraud prevention or to verify information you have provided to us.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 66ph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the 66ph Terms & Conditions, including account management, game operation, and financial transactions;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws and regulations;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring where your rights do not override our legitimate interests;
• Consent: Processing of your data for marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time.

6. How We Use Your Data

66ph uses your personal data for the following purposes:

• To create, verify, maintain, and close your 66ph account;
• To process deposits and withdrawals through GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, USDT TRC20, and Coins.ph;
• To verify your identity and age (21+ requirement) as required by PAGCOR and Philippine law;
• To operate, personalise, and improve the 66ph gaming experience;
• To detect, prevent, and investigate fraud, money laundering, and other prohibited activities;
• To monitor gaming activity for responsible gaming indicators and to apply player protection tools;
• To send transactional communications including deposit confirmations, withdrawal notifications, and security alerts;
• To send promotional communications and personalised offers where you have consented to receive them;
• To comply with PAGCOR reporting obligations, AML obligations, and NPC requirements;
• To handle customer support enquiries, complaints, and disputes.

7. Data Sharing & Disclosure

66ph does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, and other payment partners receive necessary financial data to process your transactions;
• KYC and AML providers: Identity verification and screening service providers engaged by 66ph to fulfil PAGCOR and AML compliance obligations;
• Game content providers: Game software providers (e.g., Pragmatic Play, PG Soft, JILI) receive anonymised or pseudonymised session data necessary to operate their games within the 66ph Platform;
• Regulatory authorities: PAGCOR, AMLC, NPC, and other competent Philippine government authorities, as required by law or regulatory request;
• Legal proceedings: Courts, arbitral tribunals, or law enforcement agencies where required by a valid legal process;
• IT and security service providers: Cloud infrastructure, cybersecurity, and fraud detection vendors who process data on our behalf under strict data processing agreements.

8. International Data Transfers

The 66ph Platform operates primarily within the Philippines, and we prefer to store and process Member data on servers located within the Philippines where commercially practicable. However, some of our third-party service providers — including cloud infrastructure providers and game content partners — may process data in servers located outside the Philippines.

Where such international transfers occur, 66ph ensures that an adequate level of data protection is maintained by:

• Engaging only with service providers in jurisdictions that provide adequate data protection or that have committed to NPC-approved safeguards;
• Incorporating data processing addenda that include contractual obligations equivalent to the protections required under the Data Privacy Act of 2012;
• Conducting due diligence on third-party security practices prior to engagement.

9. Data Retention

66ph retains personal data for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of active membership plus 5 years following account closure, in compliance with PAGCOR record-keeping requirements;
• Transaction and financial records: Retained for a minimum of 10 years from the date of the transaction, as required by the Anti-Money Laundering Act;
• KYC documents: Retained for 5 years from the date of submission or from the date the account is closed, whichever is later;
• Gaming session data: Retained for 3 years for dispute resolution, responsible gaming monitoring, and regulatory audit purposes;
• Customer support communications: Retained for 2 years from the date of the last interaction;
• Marketing preferences: Retained until consent is withdrawn, or for 2 years of inactivity, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders individual re-identification impossible.

10. Cookies & Tracking Technologies

The 66ph Platform uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and analyse Platform performance. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including your login session, account balance display, and security tokens. These cannot be disabled.
• Functional cookies: Remember your language preferences, game lobby layout, and responsible gaming settings. You may disable these without affecting core functionality.
• Analytics cookies: Collect anonymised information about how Members use the Platform to help us improve features and performance. Disabled by default pending your consent.
• Marketing cookies: Used to personalise promotional content based on your 66ph activity. Disabled by default pending your consent.

You can manage cookie preferences through the cookie settings banner displayed on your first visit to the Platform, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the 66ph Platform.

11. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 66ph:

• Right to be Informed: The right to know that your personal data is being collected, processed, and the purposes for which it is used — fulfilled by this Privacy Policy;
• Right of Access: The right to obtain a copy of the personal data 66ph holds about you, together with information on how it is processed;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or completed;
• Right to Erasure or Blocking: The right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Object: The right to object to the processing of your personal data for direct marketing or on grounds relating to your particular situation;
• Right to Damages: The right to claim compensation for any damage suffered as a result of inaccurate, incomplete, outdated, or unlawfully obtained personal data;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 16. We will respond to verified requests within 15 business days.

12. Security Measures

66ph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 66ph servers;
• Encryption at rest for sensitive personal and financial data stored in 66ph databases;
• Multi-factor authentication for internal staff accessing Member data systems;
• Regular vulnerability assessments and penetration testing of the Platform infrastructure;
• Strict role-based access controls limiting staff access to Member data on a need-to-know basis;
• Continuous monitoring systems for suspicious access patterns and potential data breaches;
• Regular security training for all 66ph staff who handle personal data.

In the event of a personal data breach that is likely to result in a risk to your rights, 66ph will notify the National Privacy Commission and affected data subjects within 72 hours of becoming aware of the breach, as required by the Data Privacy Act of 2012 and NPC Circular No. 16-03.

13. Minors & Age Restriction

The 66ph Platform is strictly for individuals aged 21 years and above in accordance with PAGCOR regulations. 66ph does not knowingly collect, process, or store personal data belonging to any individual under the age of 21.

If 66ph becomes aware that personal data of a minor has been collected — whether through an error in the registration process or any other means — we will immediately:

• Close the account and block all access to the Platform;
• Delete all personal data associated with the minor's account to the extent not required for legal reporting purposes;
• Report the incident to PAGCOR as required by our licensing conditions.

If a parent or guardian believes that a minor has registered an account with 66ph, please contact our Data Protection Officer immediately using the contact details in Section 16.

14. Third-Party Services

The 66ph Platform integrates third-party services including game content providers, payment processors, and analytics tools. These services operate under their own privacy policies, which we encourage you to review. 66ph is not responsible for the data practices of third-party providers outside of contractual obligations we impose on them as data processors.

Third-party game providers integrated into the 66ph Platform may collect limited technical data (such as session identifiers) necessary to deliver their games. This data is processed in accordance with the respective provider's privacy policy and our data processing agreements with them. No personally identifiable information is shared with game providers beyond what is strictly necessary for game delivery and regulatory compliance.

15. Changes to This Privacy Policy

66ph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will:

• Publish the updated Privacy Policy on this page with a revised "Last Updated" date;
• Send notification to registered Members via email where the changes materially affect how we process your personal data;
• Display a prominent notice on the 66ph Platform for at least 14 days following the publication of material amendments.

Your continued use of the 66ph Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how 66ph protects your information.

16. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 66ph, please contact our Data Protection Officer through the following channels:

• Email (DPO): [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Data Privacy Request – [your registered mobile number]" in the subject line to ensure prompt routing to the DPO team
• Live Chat: Available on the 66ph Platform, 8:00 AM – 12:00 MN PHT
• Response Time: We aim to acknowledge all data subject requests within 3 business days and to provide a substantive response within 15 business days

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through official Philippine government channels.