🔒 66win Privacy Policy

1. Introduction

66win ("66win", "we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the 66win online gaming platform at 66win.one and any associated mobile applications or services (collectively, the "Platform"). This Privacy Policy ("Policy") describes how 66win collects, uses, stores, shares, and protects your personal information when you access or use the Platform.

This Policy applies to all registered players, visitors, and any individual whose personal data is processed by 66win in connection with the Platform. By registering an account on 66win or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. If you do not agree with any part of this Policy, please discontinue your use of the 66win Platform immediately.

2. Data Controller

For the purposes of applicable data protection legislation, including the Philippine Data Privacy Act of 2012, 66win acts as the data controller in respect of the personal data it collects and processes in connection with the Platform. As data controller, 66win determines the purposes and means of processing your personal data.

If you have any questions, concerns, or requests relating to the processing of your personal data by 66win, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

66win collects the following categories of personal data from players and users of the Platform:

3.1 Identity & Registration Data

• Full legal name;
• Date of birth (for age verification purposes);
• Gender;
• Nationality and country of residence;
• Government-issued identification documents (e.g., Philippine passport, driver's license, SSS/UMID card, PhilSys ID) submitted for KYC verification;
• Username and account credentials (passwords are stored in encrypted form and are never accessible to 66win staff).

3.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (including barangay, city/municipality, province, and postal code for Philippine residents).

3.3 Financial & Transaction Data

• GCash account number or registered mobile number;
• PayMaya account details;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where provided for withdrawal purposes;
• Credit or debit card details (card number is tokenized and not stored in full by 66win);
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used;
• Wallet balance and bonus balance information.

3.4 Gaming & Activity Data

• Game history, including games played, wagers placed, outcomes, and winnings;
• Session duration and login/logout timestamps;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

3.5 Technical & Device Data

• IP address;
• Device type, model, and operating system;
• Browser type and version;
• Mobile device identifiers (where applicable);
• Geolocation data (country/region level, derived from IP address);
• Platform access logs and error logs.

3.6 Communications Data

• Records of communications between you and 66win's customer support team, including live chat transcripts and email correspondence;
• Survey responses and feedback submitted through the Platform;
• Marketing preferences and communication opt-in/opt-out records.

4. How We Collect Your Data

66win collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys, or interact with any feature of the Platform;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access and use the Platform (see Section 10 for details on cookies);
• From third parties — including identity verification service providers, payment processors (such as GCash, PayMaya, and Philippine banks), fraud detection services, and analytics providers, where such data is shared with 66win in connection with the operation of the Platform and in compliance with applicable law.

5. How We Use Your Personal Data

66win uses the personal data we collect for the following purposes:

• Account registration and management — to create and maintain your 66win player account, verify your identity, and manage your account settings;
• Age and identity verification — to confirm that you meet the 21+ age requirement and to comply with our Know Your Customer (KYC) obligations under applicable Philippine regulations;
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment methods in Philippine Peso (₱);
• Platform operation and improvement — to deliver, maintain, and improve the games, features, and services available on the 66win Platform;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, money laundering, unauthorized account access, and other illegal or prohibited activities;
• Regulatory compliance — to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and gaming regulatory requirements;
• Customer support — to respond to your inquiries, resolve disputes, and provide assistance through our 24/7 support channels;
• Responsible gaming — to monitor gaming activity for signs of problem gambling, enforce responsible gaming limits and self-exclusion requests, and provide appropriate support resources;
• Marketing and promotions — to send you information about 66win bonuses, promotions, and new games where you have consented to receive such communications. You may opt out at any time;
• Analytics and research — to analyze Platform usage patterns, player behavior, and game performance in order to improve the overall 66win experience;
• Legal proceedings — to establish, exercise, or defend legal claims in connection with the Platform or your account.

6. Legal Basis for Processing

66win processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 and applicable data protection principles:

• Contractual necessity — processing is necessary for the performance of the contract between you and 66win (i.e., the Terms & Conditions), including account registration, payment processing, and game delivery;
• Legal obligation — processing is necessary for 66win to comply with applicable legal and regulatory obligations, including KYC, AML, and gaming regulatory requirements under Philippine law;
• Legitimate interests — processing is necessary for 66win's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics, provided that such interests are not overridden by your rights and interests;
• Consent — where 66win relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Sharing Your Personal Data

66win does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, InstaPay, PESONet, and other approved payment service providers, for the purpose of processing your deposits and withdrawals;
• Identity verification providers — third-party KYC and AML compliance service providers who assist 66win in verifying player identities and screening for sanctions and politically exposed persons (PEPs);
• Fraud prevention and security services — providers of fraud detection, cybersecurity, and risk management services who help 66win protect the Platform and its players;
• Game software providers — licensed game developers and content providers whose games are available on the 66win Platform, where sharing of session or game data is technically necessary for game delivery;
• Analytics providers — providers of web and platform analytics services used by 66win to understand Platform usage and improve the player experience;
• Regulatory and law enforcement authorities — Philippine government agencies, regulatory bodies, and law enforcement authorities where disclosure is required by law, court order, or regulatory requirement, including mandatory AML reporting obligations;
• Professional advisors — lawyers, accountants, auditors, and other professional advisors engaged by 66win in connection with the operation of the Platform, subject to professional confidentiality obligations;
• Business successors — in the event of a merger, acquisition, restructuring, or sale of all or part of 66win's business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

8. Data Retention

66win retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements under Philippine law;
• Transaction and financial data — retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping requirements;
• Gaming activity data — retained for a minimum of three (3) years from the date of the relevant gaming session or activity;
• Customer support communications — retained for a minimum of two (2) years from the date of the communication;
• Marketing consent records — retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance;
• Technical and device data — retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.

When personal data is no longer required for the purposes for which it was collected and no legal obligation requires its continued retention, 66win will securely delete or anonymize the data in accordance with our internal data disposal procedures.

9. Data Security

66win implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 66win Platform;
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial account details;
• Role-based access controls limiting access to personal data to authorized 66win personnel on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform;
• Multi-factor authentication options for player accounts;
• Continuous monitoring of the Platform for suspicious activity and potential security incidents;
• Staff training on data protection and information security best practices.

While 66win takes all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying 66win immediately if you suspect any unauthorized access to your account.

10. Cookies & Tracking Technologies

66win uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the Platform to enhance your experience, analyze Platform usage, and support security and fraud prevention functions. The following types of cookies are used:

• Strictly necessary cookies — essential for the operation of the Platform, including session management, authentication, and security functions. These cookies cannot be disabled;
• Functional cookies — used to remember your preferences and settings, such as your preferred language and responsible gaming limit settings;
• Analytics cookies — used to collect anonymized information about how players use the Platform, including pages visited, time spent, and features used, to help 66win improve the Platform;
• Security cookies — used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You can control the use of non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 66win Platform. For more information on managing cookies, refer to your browser's help documentation.

11. Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data processed by 66win:

• Right to be informed — the right to be informed about how your personal data is collected, used, and processed, as described in this Policy;
• Right of access — the right to request a copy of the personal data that 66win holds about you;
• Right to rectification — the right to request correction of any inaccurate or incomplete personal data that 66win holds about you;
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 66win's legal retention obligations;
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or where processing is based on 66win's legitimate interests;
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to withdraw consent — where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 66win has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact 66win's Data Protection Officer using the contact details in Section 15. 66win will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the requirements of the Data Privacy Act of 2012.

12. Minors & Age Restriction

The 66win Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. 66win does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account or use the 66win Platform.

If 66win becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 66win Platform, please contact our support team immediately.

13. International Data Transfers

In some cases, 66win may transfer your personal data to service providers or partners located outside the Philippines. Where such transfers occur, 66win ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that require the recipient to process your data in accordance with standards equivalent to those required under the Philippine Data Privacy Act of 2012.

By using the 66win Platform, you consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

14. Changes to This Privacy Policy

66win reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services available on the Platform. When material changes are made to this Policy, 66win will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision of this Policy is indicated at the top of this page. Your continued use of the 66win Platform following the posting of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how 66win protects your personal data.

15. Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 66win, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on the 66win Platform
• Response Time: We aim to respond to all privacy-related inquiries within 30 days

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your data privacy rights have been violated. Information about the NPC and how to file a complaint is available through official Philippine government channels.