Privacy Policy —
66wins Platform

This Privacy Policy is issued by 66wins ("we," "us," "our") and applies to all personal data processed in connection with your use of the 66wins online gaming platform accessible at https://66wins.cam (the "Platform"). This Policy has been prepared in accordance with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations promulgated by the National Privacy Commission of the Philippines.

66wins is committed to handling your personal information with transparency, integrity, and respect. This Policy explains the types of personal data we collect, the purposes for which we process it, the legal bases that justify that processing, how long we retain it, and the rights available to you as a data subject. We encourage all players to read this Policy carefully and in full.

This Policy should be read alongside the Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your relationship with 66wins.

For the purposes of the Philippine Data Privacy Act and this Privacy Policy, 66wins acts as the Personal Information Controller in respect of personal data collected through the Platform. As Personal Information Controller, 66wins determines the purposes and means by which your personal data is processed and bears primary responsibility for ensuring that processing is conducted lawfully and in a manner that respects your rights as a data subject.

66wins has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance and serving as the primary point of contact for data subject enquiries, complaints, and rights requests. Contact details for the DPO are provided in Section 14 of this Policy.

66wins collects and processes the following categories of personal data in connection with the operation of the Platform and the provision of gaming services to players in the Philippines:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth and age verification information;
• Gender (where provided voluntarily);
• Government-issued identification numbers (e.g., PhilSys number, passport number, UMID number, SSS number, driver's licence number);
• Photographic copies of identity documents submitted for KYC purposes.

3.2 Contact Information

• Email address (primary account contact and communication channel);
• Philippine mobile number (used for account verification, two-factor authentication, and support);
• Residential address in the Philippines (required for advanced KYC verification).

3.3 Financial & Transaction Data

• GCash account number or mobile number linked to GCash;
• Maya (PayMaya) account details;
• Bank account details for BPI, BDO, Metrobank, or other Philippine bank accounts used for transactions;
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references;
• Source of funds documentation (where required for enhanced KYC).

3.4 Gameplay & Betting Data

• Game session logs, including games played, wager amounts, bet outcomes, and session duration;
• Sports betting selections, odds accepted, and settlement records;
• Bonus and promotional offer usage records;
• Account balance history and win/loss records.

3.5 Technical & Device Data

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser type and version;
• Login timestamps and session activity logs;
• Cookies and similar tracking technologies (see Section 7).

3.6 Communications Data

• Records of communications with 66wins customer support, including live chat transcripts, email correspondence, and support ticket records;
• Records of your marketing preferences and communication consent choices.

66wins collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, update your profile, or respond to promotional communications;
• Automatically through the Platform — when you use the 66wins Platform, technical data (including IP address, device information, and browsing behaviour) is collected automatically via server logs, cookies, and similar technologies;
• From third-party verification services — identity verification and anti-money laundering screening services may provide supplementary identity confirmation data as part of the KYC process;
• From payment service providers — GCash, Maya, and Philippine banking partners may provide transaction confirmation and account linking information necessary to process your deposits and withdrawals.

66wins processes your personal data only for defined, legitimate purposes and on the basis of one or more lawful grounds recognised under R.A. 10173. The following table summarises the primary purposes for which we process personal data and the corresponding legal basis for each:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing communications can be done at any time through your account notification settings or by contacting support.

66wins does not sell your personal data. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary for the stated purpose:

6.1 Payment Service Providers

To process deposits and withdrawals, 66wins shares necessary transaction and identity data with Philippine payment service providers including GCash (operated by G-Xchange Inc.), Maya (operated by Voyager Innovations), BPI, BDO, Metrobank, and other approved payment partners. These providers receive only the data necessary to process your specific transaction and are contractually required to maintain appropriate data security standards.

6.2 Identity Verification Services

66wins uses third-party KYC and identity verification service providers to assist in fulfilling our regulatory obligations. These providers process identity documents and associated data strictly for verification purposes under agreements that require compliance with R.A. 10173 equivalent data protection standards.

6.3 Regulatory and Law Enforcement Authorities

66wins may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC) of the Philippines, the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction where required by Philippine law, regulation, or lawful court order. Such disclosures are made only to the extent required and with appropriate safeguards where the law permits.

6.4 Professional Advisors

Legal counsel, auditors, and other professional advisors engaged by 66wins may access personal data in the course of their professional services, subject to strict confidentiality obligations.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of 66wins, personal data may be transferred to the successor entity as part of that transaction, subject to equivalent data protection commitments being maintained. Players will be notified of any such transfer where required under R.A. 10173.

66wins uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly, remember your preferences, and provide analytical insights that help us improve the service.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, security functions, and enabling core gameplay features. These cannot be disabled without materially impairing Platform functionality;
• Functional Cookies: Remember your preferences and settings (such as language selection and display preferences) to personalise your experience across sessions;
• Analytics Cookies: Used to collect anonymised data about how players use the Platform, which pages are visited most frequently, and where technical issues arise — helping 66wins improve the overall experience;
• Session Security Cookies: Support fraud detection and account security by identifying anomalous access patterns that may indicate unauthorised account activity.

7.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies will impair your ability to use the 66wins Platform and may prevent you from accessing your account. Detailed cookie management options are available through the browser settings of Chrome, Safari, Firefox, and all major mobile browsers used by players in the Philippines.

66wins retains personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable Philippine law and regulation. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Where anonymisation is not technically feasible, secure deletion protocols are applied.

66wins implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the 66wins Platform;
• Encryption of sensitive data at rest within 66wins's database and storage infrastructure;
• Role-based access controls ensuring that internal staff access only the personal data necessary for their specific job functions;
• Multi-factor authentication requirements for all internal administrative access to systems holding personal data;
• Regular security vulnerability assessments and penetration testing conducted by qualified security professionals;
• Incident detection and response procedures, including a documented data breach response protocol aligned with NPC notification requirements.

Under the Philippine Data Privacy Act (R.A. 10173), you have the following rights in relation to your personal data held by 66wins. These rights may be exercised by contacting the 66wins Data Protection Officer as described in Section 14:

66wins will respond to verified data subject rights requests within 30 calendar days of receipt, consistent with the timelines prescribed under R.A. 10173. In exceptional circumstances where a longer period is required, 66wins will notify you of the extension and its reasons within the initial 30-day window.

The 66wins Platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. 66wins does not knowingly collect personal data from individuals under the age of 21.

If 66wins becomes aware that personal data of a person under 21 has been collected — whether through registration, KYC review, or any other means — that account will be immediately suspended, all associated data will be reviewed, and the matter will be handled in accordance with applicable Philippine law. If you are a parent or guardian and believe your child has provided personal data to 66wins, please contact us immediately through the details provided in Section 14 so that appropriate action can be taken promptly.

The personal data of 66wins players is primarily processed and stored within the Republic of the Philippines. Where processing is carried out by third-party service providers (such as identity verification or cloud infrastructure partners) who may operate servers or processing facilities outside the Philippines, 66wins ensures that appropriate contractual safeguards are in place to ensure your personal data receives a level of protection that is equivalent to that provided under R.A. 10173.

Such safeguards include data processing agreements incorporating standard data protection clauses, contractual requirements for equivalent security standards, and restrictions on the further transfer of personal data by receiving parties without 66wins's prior written consent. Where any international transfer is required, it is conducted only to the extent strictly necessary for the stated processing purpose.

66wins reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — 66wins will provide advance notice by posting the updated Policy on this page with a revised effective date and, where reasonably practicable, by notifying registered players through their account notification settings or registered email address.

We encourage you to review this Privacy Policy periodically to stay informed of how 66wins handles your personal data. Your continued use of the Platform following the posting of any amendments constitutes your acknowledgment of the updated Policy. If you disagree with the changes, you should cease using the Platform and contact 66wins to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 66wins, please contact our Data Protection Officer using the details below:

If you believe your data protection rights have not been adequately addressed by 66wins, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the supervisory authority for data protection matters in the Philippines and can be reached through its official government channels.