ph66 Privacy Policy

01 Introduction

ph66 operates the online gaming platform available at ph66.one, offering Filipino players access to live casino games, slots, roulette, crash games, bingo, and sports betting. In the course of providing these services, ph66 necessarily collects and processes certain personal information about its players and website visitors.

This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). ph66 takes its obligations under Philippine data privacy law seriously and is committed to handling your personal data with transparency, integrity, and care.

This policy applies to all personal data collected through the ph66 website, mobile platform, customer support channels, and any other ph66 service. It should be read alongside ph66's Terms and Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with ph66.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, ph66 is the personal information controller responsible for the personal data collected through the ph66 platform. ph66 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

ph66 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data privacy laws and for handling data subject requests and complaints. You may contact the ph66 DPO through the contact details provided in Section 15 of this Privacy Policy.

03 Data We Collect

ph66 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include:

3.1 Identity and Registration Data

When you create a ph66 account, we collect your full legal name, date of birth, nationality, residential address (including city — whether you are based in Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines), and a copy of your government-issued identification document (such as a Philippine passport, SSS ID, UMID, or driver's license).

3.2 Contact Data

We collect your email address and mobile phone number for account communication, transaction notifications, and, where you have opted in, promotional messaging.

3.3 Financial Data

To process deposits and withdrawals, ph66 collects payment method information, including GCash account details, PayMaya account details, and bank account information for BPI, BDO, and Metrobank transactions. We do not store full card numbers or payment credentials on our servers — these are handled by our certified payment processors.

3.4 Transaction Data

We maintain records of all deposits, withdrawals, bonuses, and gaming transactions associated with your ph66 account, including amounts in Philippine Peso (PHP / ₱), timestamps, and transaction reference numbers.

3.5 Technical and Usage Data

We automatically collect certain technical data when you access the ph66 platform, including your IP address, device type, operating system, browser type and version, session duration, pages visited, and in-game activity logs.

3.6 Communications Data

When you contact ph66 customer support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

04 How We Collect Your Data

ph66 collects your personal data through the following means:

• Direct Collection: Information you provide when registering a ph66 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the ph66 platform.
• Third-Party Sources: Identity verification data from KYC service providers, fraud prevention data from anti-fraud partners, and payment verification data from payment processors such as GCash and PayMaya.
• Regulatory Sources: Information received from PAGCOR, the AMLC, or other Philippine regulatory authorities in connection with their regulatory functions.

05 How We Use Your Data

ph66 uses your personal data for the following purposes:

ph66 does not use your personal data for automated decision-making that produces significant legal effects without human review, except where required by applicable law or regulatory obligation.

06 Legal Basis for Processing

ph66 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our contract with you — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR regulatory requirements, and NPC guidelines.
• Legitimate Interests: Processing carried out for ph66's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing and Disclosure

ph66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

7.1 Service Providers

ph66 engages trusted third-party service providers to assist in operating the platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention partners, cloud hosting providers, and customer support technology providers. All service providers are contractually bound to process your data only on ph66's instructions and in accordance with applicable data privacy law.

7.2 Regulatory and Law Enforcement Authorities

ph66 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive. Such disclosures are made without prior notice to you where legally required or permitted.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ph66's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

08 Cookies & Tracking Technologies

ph66 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. The types of cookies used by ph66 include:

• Essential Cookies: Required for the ph66 platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to collect anonymized data about how players use the ph66 platform, including pages visited, session duration, and navigation patterns. This data helps ph66 improve the platform experience.
• Preference Cookies: Used to remember your platform preferences, such as language settings and display options, so you do not need to reconfigure them on each visit.
• Marketing Cookies: Used only where you have provided consent, to deliver relevant promotional content about ph66 offers and games. You may opt out of marketing cookies at any time through your browser settings or account preferences.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair your ability to use certain features of the ph66 platform.

09 Data Retention

ph66 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your ph66 account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Customer Support Communications: Retained for three (3) years from the date of the communication, or longer if relevant to an ongoing dispute or regulatory matter.
• Technical and Usage Data: Retained for up to twelve (12) months in identifiable form, after which it is anonymized or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of compliance.

When personal data is no longer required for any lawful purpose, ph66 will securely delete or anonymize it in accordance with industry best practices.

10 Data Security

ph66 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph66 servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that ph66 staff can only access personal data necessary for their specific job functions.
• Regular security audits, vulnerability assessments, and penetration testing of ph66 systems.
• Two-factor authentication (2FA) options for player accounts to prevent unauthorized access.
• Secure data centers with physical access controls, redundant systems, and disaster recovery capabilities.
• Staff training on data privacy obligations and security best practices.

While ph66 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. ph66 cannot guarantee absolute security but is committed to responding promptly and transparently to any security incident.

11 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph66:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph66 holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data ph66 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph66's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on ph66's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph66 has violated your data privacy rights.

To exercise any of these rights, please contact ph66's Data Protection Officer using the contact details in Section 15. ph66 will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

12 Children's Privacy

The ph66 platform is strictly intended for adults aged 21 years and above, in accordance with the minimum age requirement for casino-style gambling in the Philippines. ph66 does not knowingly collect personal data from individuals under the age of 21.

If ph66 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to ph66, please contact us immediately using the details in Section 15.

ph66 encourages parents and guardians to use parental control software and to monitor their children's online activity to prevent access to online gambling platforms.

13 Third-Party Links

The ph66 platform may contain links to third-party websites or services for informational or operational purposes. ph66 is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to data collected through the ph66 platform.

We encourage you to review the privacy policies of any third-party websites you visit. ph66 has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14 Updates to This Privacy Policy

ph66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, ph66 will notify registered players via email or through a prominent notice on the ph66 platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the ph66 platform following the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree to the updated policy, you should cease using the platform and may request account closure.

ph66 encourages you to review this Privacy Policy periodically to stay informed of how we are protecting your personal data. The current version is always available at ph66.one/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or ph66's data privacy practices, please contact our Data Protection Officer:

For general customer support inquiries, our live chat team is available 24 hours a day, 7 days a week through the ph66 platform. For formal data subject requests or privacy complaints, we recommend contacting the DPO directly via email to ensure your request is handled appropriately and within the required timeframes.

If you are not satisfied with ph66's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data privacy matters in the Philippines.