666ph Privacy Policy

1. Introduction

666ph is committed to safeguarding the privacy and personal data of every player on our platform. As an online casino and sports betting platform operating under the PAGCOR regulatory framework, we handle sensitive personal and financial information on a daily basis. We take that responsibility seriously and have built our data handling practices around the principles of transparency, proportionality, and player trust.

This Privacy Policy describes how 666ph collects, uses, stores, protects, and discloses personal data in connection with your use of our platform. It also explains the rights available to you as a data subject under the Republic Act No. 10173 (Philippine Data Privacy Act of 2012) and its implementing rules and regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

Please read this policy carefully alongside our Terms & Conditions. Both documents together form the complete legal framework governing your relationship with 666ph.

2. Data Controller Information

For the purposes of the Philippine Data Privacy Act and applicable data protection legislation, 666ph acts as the Personal Information Controller (PIC) in respect of the personal data of its registered players and website visitors. As PIC, 666ph determines the purposes and means by which your personal data is processed.

Where 666ph engages third-party service providers (such as payment processors, game content providers, or fraud prevention services) to process personal data on our behalf, those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only as instructed by 666ph and in compliance with applicable Philippine data privacy law.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register an account, complete identity verification, make deposits or withdrawals, or contact our support team, 666ph collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, gender, nationality	Account registration, KYC verification, age compliance
Contact Data	Email address, mobile number, home address	Account communications, transaction alerts, support
Identity Documents	Philippine passport, driver's license, UMID, Postal ID, selfie with ID	KYC compliance, fraud prevention, PAGCOR requirements
Financial Data	GCash account number, Maya number, bank account details (masked), transaction history	Deposit and withdrawal processing, AML compliance
Account Data	Username, password (hashed), account preferences, responsible gaming settings	Platform access, personalization, responsible gaming

3.2 Data Collected Automatically

When you visit or use the 666ph platform, our systems automatically collect certain technical and behavioral data, including:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers;
• Usage data: Pages visited, games played, time spent on each page, click paths, search queries within the platform, and login timestamps;
• Gaming data: Wagers placed, game outcomes, bonus claims, deposit and withdrawal amounts, and betting patterns;
• Location data: General geographic location derived from your IP address (country/region level only — we do not collect GPS or precise location data without explicit consent);
• Cookie and tracking data: See Section 7 for full details on our use of cookies and similar tracking technologies.

3.3 Data from Third Parties

In certain circumstances, 666ph may receive personal data about you from third-party sources, including:

• Identity verification partners and KYC service providers;
• Payment processors such as GCash, Maya, and Philippine banks, who may confirm payment method ownership;
• Fraud detection and anti-money laundering screening services;
• PAGCOR or other regulatory authorities where legally required to share or receive player information.

4. Legal Basis for Processing

666ph processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act:

• Contractual necessity: Processing is necessary to perform our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and game delivery;
• Legal obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and data privacy regulations;
• Legitimate interests: Processing is necessary for 666ph's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming enforcement, where those interests are not overridden by your privacy rights;
• Consent: For non-essential data processing activities such as marketing communications, analytics cookies, and promotional profiling, we rely on your freely given, specific, and informed consent, which you may withdraw at any time.

5. How We Use Your Personal Data

666ph uses your personal data for the following purposes:

• Account creation and management: To register your Player Account, verify your identity, maintain your account settings, and facilitate your access to the 666ph platform;
• Payment processing: To process deposits, execute withdrawals, and maintain accurate transaction records for your account;
• Regulatory compliance: To fulfill PAGCOR licensing obligations, comply with anti-money laundering requirements, perform due diligence checks, and respond to lawful requests from Philippine regulatory authorities;
• Responsible gaming: To enforce age verification (21+ requirement), monitor gaming behavior for signs of problem gambling, apply deposit limits and self-exclusion measures, and protect vulnerable players;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other illegal activities;
• Customer support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance;
• Platform improvement: To analyze aggregated, anonymized usage data to improve our games, features, user interface, and overall player experience;
• Marketing and promotions: With your consent, to send you personalized promotional offers, bonus notifications, and newsletters. You may opt out of marketing communications at any time by contacting our support team.

6. How We Share Your Data

6.1 Third-Party Service Providers

666ph engages trusted third-party service providers who process personal data on our behalf as Personal Information Processors. These include payment gateway operators (GCash, Maya, Instapay processors, and bank partners), identity verification providers, game content suppliers, cloud hosting providers, fraud detection platforms, and customer support tools. All third-party processors are bound by data processing agreements that require them to handle your data securely and only for the purposes specified by 666ph.

6.2 Regulatory and Legal Disclosures

666ph may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, or other competent authorities where we are legally required or compelled to do so by applicable Philippine law, court order, or valid legal process.

6.3 What We Never Do

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by the 666ph platform when you visit our website. They allow us to recognize your browser across sessions, remember your preferences, and analyze how players use our platform.

7.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These enable secure login sessions, remember your responsible gaming settings, and maintain your session during gameplay. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, currency display, and notification settings to provide a personalized experience.
• Analytics cookies: Help us understand how players navigate the platform so we can improve our services. Data collected is aggregated and anonymized. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotional content and measure campaign effectiveness. Only deployed with your explicit consent.

7.3 Managing Cookies

You can manage non-essential cookies through the cookie preference center accessible on the 666ph platform. You may also configure your browser settings to reject or delete cookies at any time. Please note that disabling strictly necessary cookies may impair the functionality of the 666ph platform, including login and payment processing features.

8. Data Retention

666ph retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, subject to the following minimum retention periods:

• Account data and KYC documents: Retained for a minimum of 5 years from the date of account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of 5 years from the date of each transaction in compliance with AMLC record-keeping requirements;
• Support and communication records: Retained for 3 years from the date of the interaction;
• Marketing consent records: Retained for the duration of your account plus 2 years after account closure;
• Analytics data: Aggregated, anonymized data may be retained indefinitely as it can no longer be linked to individual players.

After the applicable retention period, your personal data will be securely deleted or anonymized in a manner that prevents reconstruction. If your account is subject to a legal hold, fraud investigation, or regulatory inquiry, data will be retained until the matter is fully resolved.

9. Data Security

666ph implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption in transit: All data exchanged between your browser and the 666ph platform is encrypted using TLS 1.3 / SSL protocols;
• Encryption at rest: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 encryption;
• Password hashing: User passwords are never stored in plain text — they are hashed using industry-standard bcrypt algorithms with unique salts per account;
• Two-factor authentication (2FA): All Player Accounts have access to SMS OTP-based 2FA, and 666ph internal admin access requires mandatory 2FA;
• Access controls: Personal data is accessible only to 666ph personnel with a legitimate need-to-know, and all internal access is logged and audited;
• Regular security audits: Our platform infrastructure undergoes periodic penetration testing, vulnerability scanning, and security reviews by independent specialists.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 666ph will notify you and the National Privacy Commission (NPC) within the timeframes prescribed by Philippine law.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 666ph:

To exercise any of the above rights, please contact our Data Protection Officer (DPO) at the contact details provided in Section 14. We will respond to your request within 15 business days of receipt. In some cases, particularly for complex or multiple requests, this may be extended by a further 30 days, with notice provided to you.

Please note that certain rights are subject to limitations. For example, we are legally obligated to retain certain data for the minimum periods specified in Section 8, meaning erasure requests cannot override these legal retention obligations.

11. Minors and Age Policy

666ph does not knowingly collect personal data from individuals under the age of 21 years, consistent with the PAGCOR-mandated minimum age requirement for online gambling in the Philippines. Our platform is not directed at persons under 21.

If we discover or are notified that personal data has been collected from an individual under 21, we will immediately suspend the associated account, void all wagers, return deposited funds (less any bonuses), and permanently delete the minor's personal data from our systems. If you are a parent or guardian and believe your child has created an account on 666ph, please contact us immediately at [email protected].

We also encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. More information on safeguarding tools can be found on our Responsible Gaming page.

12. Cross-Border Data Transfers

Some of 666ph's third-party service providers — including cloud hosting providers, game content suppliers, and cybersecurity vendors — may store or process data on servers located outside the Philippines. Where such cross-border data transfers occur, 666ph ensures that:

• The recipient country provides an adequate level of data protection as determined by the NPC, or
• Appropriate contractual safeguards are in place (such as standard data processing clauses or binding corporate rules) that obligate the recipient to protect your data to a standard equivalent to Philippine law, or
• The transfer is otherwise authorized under the Philippine Data Privacy Act or its implementing rules.

Financial transaction data processed through GCash, Maya, BPI, BDO, Metrobank, and other Philippine payment providers is handled within the Philippines in accordance with Bangko Sentral ng Pilipinas (BSP) regulations.

13. Changes to This Privacy Policy

666ph reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or platform features. When material changes are made, we will:

• Update the "Last updated" date at the top of this document;
• Notify registered Players via email to the address on file;
• Display a prominent notice on the 666ph platform for a period of no less than 14 days before the changes take effect.

Your continued use of the 666ph platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed of how we protect your data.

14. Contact Information & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 666ph, you may contact our Data Protection Officer (DPO):

If you are not satisfied with our response to your data privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act.

Effective Date: This Privacy Policy is effective as of October 9, 2026 and supersedes all previous versions of the 666ph Privacy Policy.