666win Privacy Policy

1. Introduction

666win is committed to protecting the privacy and personal data of every player who uses our platform. We understand that trust is the foundation of any good relationship — and that trust starts with being transparent about how we handle your information.

This Privacy Policy applies to all personal data collected through the 666win website at https://666win.today, any associated mobile applications, and any other digital touchpoints operated by 666win. It covers data collected from registered players, prospective players who browse the platform without registering, and individuals who contact our support team.

By registering an account on 666win or by continuing to use the platform after this policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 666win acts as the personal information controller in respect of the personal data collected through the platform. As the personal information controller, 666win determines the purposes and means of processing your personal data.

Where 666win engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and cloud infrastructure providers — those parties act as personal information processors and are bound by data processing agreements that require them to handle your data in accordance with this policy and applicable law.

3. Personal Data We Collect

666win collects the following categories of personal data from players and users of the platform:

3.1 Identity Data

• Full legal name
• Date of birth
• Gender
• Government-issued identification number (e.g., Philippine passport number, driver's license number, SSS/UMID number)
• Copies of identity documents submitted for KYC verification

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)

3.3 Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank, UnionBank, or other Philippine banks)
• Transaction history, including deposits, withdrawals, and wager records

3.4 Technical Data

• IP address
• Device type, operating system, and browser type
• Session duration and login timestamps
• Geolocation data (country and region level)
• Cookies and similar tracking technologies (see Section 8)

3.5 Gaming Data

• Game history and betting records
• Bonus and promotion usage
• Responsible gaming settings and self-exclusion records
• Customer support interaction records

4. How We Collect Your Data

666win collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Data collected automatically when you access the platform, including technical data gathered through cookies, log files, and analytics tools.
• Third-party sources: Data received from identity verification providers, payment processors, and fraud prevention services in connection with your use of the platform.

5. How We Use Your Personal Data

666win uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Identity data , contact data
Identity verification (KYC)	Identity data, contact data, financial data
Processing deposits and withdrawals	Financial data, identity data
Delivering gaming services	Gaming data, technical data
Fraud prevention and security	Technical data, identity data, financial data
Anti-money laundering compliance	Identity data, financial data, gaming data
Responsible gaming monitoring	Gaming data, identity data
Customer support	Identity data, contact data, gaming data
Marketing communications (with consent)	Contact data, gaming data
Platform analytics and improvement	Technical data, gaming data
Legal and regulatory compliance	All categories as required

6. Legal Basis for Processing

666win processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing is necessary to perform our contract with you — that is, to provide you with access to the 666win platform and its services, including account management, game access, and payment processing.
• Legal obligation: Processing is necessary for compliance with applicable Philippine laws and regulations, including anti-money laundering obligations, KYC requirements, and gaming regulatory requirements.
• Legitimate interests: Processing is necessary for the legitimate interests of 666win, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided those interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing and Disclosure

666win does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and in accordance with this Privacy Policy:

7.1 Service Providers

We engage trusted third-party service providers to assist in operating the 666win platform. These include payment processors (such as GCash, PayMaya, and banking partners), identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and analytics platforms. All service providers are bound by contractual obligations to process your data only on our instructions and in accordance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

666win may disclose personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by law, court order, or regulatory directive. This includes disclosures required under the Anti-Money Laundering Act (AMLA) and its amendments, and disclosures to PAGCOR or other relevant gaming regulators.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 666win business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7.4 With Your Consent

666win may share your personal data with other third parties where you have given your explicit consent to such sharing.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 666win platform. They help us recognize your device, remember your preferences, keep your session active, and understand how you interact with the platform.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that help protect your account. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on the platform.
• Analytics cookies: Help us understand how players use the platform — which pages are visited most, where players encounter issues, and how we can improve the overall experience. Data collected is aggregated and anonymized.
• Marketing cookies: Used to deliver relevant promotional content to you based on your interests and activity on the platform. These are only placed with your consent.

8.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the 666win platform. Strictly necessary cookies cannot be disabled as they are essential for the platform to operate.

9. Data Retention

666win retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance purposes.
• Technical and analytics data: Retained for up to twenty-four (24) months in identifiable form, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with you as an individual.

10. Data Security

666win implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 666win platform
• Encryption of sensitive data at rest, including payment details and identity documents
• Role-based access controls limiting access to personal data to authorized personnel only
• Regular security assessments and vulnerability testing of the platform
• Multi-factor authentication options for player accounts
• Incident response procedures for detecting, reporting, and managing personal data breaches

While 666win takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights in relation to your personal data held by 666win:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data that 666win holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most of your account information directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your data privacy rights have been violated.

To exercise any of these rights, please contact the 666win support team. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

12. Children's Privacy

The 666win platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the 666win platform, please contact our support team immediately so that we can investigate and take appropriate action.

13. Changes to This Privacy Policy

666win reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered players by email or through a prominent notice on the platform prior to the changes taking effect. The effective date at the top of this policy will be updated to reflect the date of the most recent revision.

Your continued use of the 666win platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the platform and may request closure of your account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 666win handles your personal data, please contact our Data Privacy Officer or support team using the details below.

For more information about your rights under the Data Privacy Act of 2012, you may also contact the National Privacy Commission of the Philippines. For responsible gaming support, please visit our Responsible Gaming page. For the full terms governing your use of the platform, please review our Terms & Conditions.