666ph Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how 666ph ("666ph," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "Player," or "User") who access or use the 666ph online casino platform available at 666ph.org and any associated interfaces (collectively, the "Platform").

666ph is committed to protecting the privacy and security of your personal data. We operate in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. Where applicable, we also observe the data handling standards required by PAGCOR under its online gaming regulatory framework.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with 666ph.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection regulations, 666ph acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the Platform.

As Personal Information Controller, 666ph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data privacy laws.

03 Data We Collect

666ph collects the following categories of personal data in connection with your use of the Platform. The specific data collected may vary depending on the services you use and the verification requirements applicable to your account.

04 How We Collect Your Data

666ph collects personal data through the following means:

• Direct collection: Information you provide when registering a 666ph account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, browser type, session data, and cookies or similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud signals from payment processors such as GCash and Maya; and regulatory data from PAGCOR or other authorized bodies where required by law.
• Publicly available sources: In limited circumstances, 666ph may supplement your profile with information from publicly available government databases for the purpose of AML screening or sanctions checking.

05 How We Use Your Data

666ph uses your personal data only for legitimate, specified purposes. The primary purposes for which we process your data include:

• Account creation and management: Setting up and maintaining your 666ph player account, including authentication and access control.
• Age and identity verification: Confirming that you meet the mandatory 21-year minimum age requirement and verifying your identity as required by PAGCOR and AML regulations.
• Transaction processing: Facilitating deposits and withdrawals via GCash, Maya, bank transfer, and debit card in Philippine Peso (PHP).
• Game delivery and integrity: Providing access to 666ph games, recording game outcomes, and ensuring the integrity of all gaming activity on the Platform.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other illegal conduct.
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Data Privacy Act of 2012, Republic Act No. 9160 (Anti-Money Laundering Act), and other applicable Philippine laws.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of our support services.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering player protection tools such as deposit limits and self-exclusion.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve Platform performance, game offerings, and user experience.
• Marketing communications: Sending you promotional offers and updates about 666ph, where you have provided consent to receive such communications. You may opt out at any time.

06 Legal Basis for Processing

Under the Data Privacy Act of 2012, 666ph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, game delivery, and payment processing — is necessary for the execution of the Terms & Conditions you agreed to upon registration.
• Legal obligation: Certain processing activities — including identity verification, AML screening, and regulatory reporting — are required by Philippine law and PAGCOR licensing conditions. 666ph cannot waive these obligations regardless of your preferences.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of 666ph's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is not covered by the above bases — such as sending you marketing communications or processing sensitive personal information beyond regulatory requirements — 666ph will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Disclosure

666ph does not sell, rent, or trade your personal data. We may share your information with the following categories of recipients only to the extent necessary and in accordance with applicable law:

• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bangko Sentral ng Pilipinas (BSP), and other Philippine government bodies where disclosure is required by law or court order.
• Payment service providers: GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing your financial transactions. These providers are bound by their own privacy and security obligations.
• Identity verification providers: Third-party KYC and AML screening services engaged by 666ph to verify player identities and conduct sanctions screening, operating under strict data processing agreements.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance vendors who process data on 666ph's behalf under binding data processing agreements that prohibit independent use of your data.
• Game software providers: Third-party game developers whose titles are available on the 666ph Platform may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your identity or financial data.

08 Cookies & Tracking Technologies

666ph uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform — such as pages visited and session duration — to help us improve performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. 666ph does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

09 Data Retention

666ph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 666ph's data disposal procedures. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, it will be held until the matter is resolved.

10 Data Security

666ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the 666ph Platform is encrypted using TLS 1.2 or higher. Sensitive data at rest — including financial records and identity documents — is encrypted using AES-256.
• Access controls: Access to personal data is restricted to authorized 666ph personnel on a strict need-to-know basis. All internal access is logged and audited.
• Password security: Player passwords are stored as salted cryptographic hashes. 666ph staff cannot view your password in plain text.
• Two-factor authentication: 666ph supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Penetration testing: The Platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident response: 666ph maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the NPC within the timeframes required by the Data Privacy Act.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 666ph. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

• Right to be informed: You have the right to be informed about how 666ph collects and processes your personal data — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data 666ph holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 666ph's overriding legal obligations.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: If you believe 666ph has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Children & Minors

The 666ph Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. 666ph does not knowingly collect personal data from individuals under the age of 21.

If 666ph becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and report the incident to PAGCOR as required. Any funds deposited by an underage player will be handled in accordance with PAGCOR's underage gambling procedures.

13 Updates to This Policy

666ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — 666ph will notify registered players via email or an in-platform notification prior to the changes taking effect, where reasonably practicable.

Your continued use of the 666ph Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how 666ph protects your information.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 666ph handles your personal data, please contact our Data Protection Officer through the following channel:

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.

For concerns related to financial data or payment transactions, you may also contact the Bangko Sentral ng Pilipinas (BSP) consumer assistance channels. For gaming-related regulatory concerns, complaints may be directed to PAGCOR through its official complaint resolution process.