66winn is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the Philippine Data Privacy Act of 2012.
1.1 This Privacy Policy ("Policy") applies to all personal data processed by 66winn in connection with the operation of the online gaming platform located at 66winn.vip ("Platform"). It applies to all Players, registered users, and visitors to the Platform, wherever located, who access the Platform from the Republic of the Philippines.
1.2 This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission of the Philippines ("NPC").
1.3 This Policy should be read alongside the 66winn Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.
1.4 By registering an account on the 66winn Platform or by otherwise providing personal data to 66winn, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
2.1 The data controller responsible for your personal information collected via the 66winn Platform is the legal entity operating 66winn.vip ("66winn," "we," "us," or "our"), which holds or operates under applicable gaming and data processing authorisations in the Philippines.
2.2 66winn has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the DPO are set out in Section 15 of this Policy.
2.3 Where 66winn engages third-party processors (such as payment gateway providers, KYC verification services, or cloud infrastructure providers) to process personal data on its behalf, 66winn ensures that appropriate data processing agreements are in place that require those processors to handle your data only as instructed by 66winn and in compliance with the DPA.
3.1 66winn collects the following categories of personal data:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document images | Mandatory (KYC) |
| Contact Data | Philippine mobile number, email address, home address | Mandatory |
| Financial Data | GCash account number, Maya account, bank account details, transaction history, deposit/withdrawal records | Mandatory |
| Gaming Activity Data | Game sessions, bet history, wagering amounts, game outcomes, bonus usage, responsible gaming tool activations | Automatic |
| Technical Data | IP address, device type, browser type, operating system, session tokens, login timestamps | Automatic |
| Communication Data | Live chat transcripts, support tickets, email correspondence with 66winn | When applicable |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred language, notification settings | Optional |
3.2 66winn does not collect sensitive personal information (as defined under Section 3(l) of the DPA) unless specifically required for regulatory compliance, in which case the relevant legal basis will be disclosed to you at the point of collection.
4.1 66winn collects personal data through the following means:
5.1 66winn processes your personal data for the following purposes:
6.1 Under the Data Privacy Act of 2012, 66winn relies on the following legal bases for processing your personal data:
6.2 Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent may affect your ability to receive certain services.
7.1 66winn does not sell your personal data to third parties. We may share your data only in the following circumstances:
7.2 All third-party processors engaged by 66winn are bound by written data processing agreements that prohibit them from using your personal data for any purpose other than the specific service they provide to 66winn.
8.1 66winn retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
8.2 After the applicable retention period, 66winn will securely delete or anonymise your personal data. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for statistical and analytics purposes.
9.1 The 66winn Platform uses cookies and similar tracking technologies to provide and improve the user experience, maintain session security, and analyse Platform performance. The following types of cookies are used:
9.2 You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair Platform functionality, including the ability to maintain a logged-in session.
9.3 66winn does not use third-party advertising cookies or cross-site tracking technologies that share your behaviour with external advertisers.
10.1 Security measures implemented by 66winn include, but are not limited to:
10.2 In the event of a personal data breach that is likely to result in risk to your rights and freedoms, 66winn will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected Players without undue delay, as required by the DPA and NPC regulations.
10.3 Notwithstanding the security measures above, no online system is completely impervious to attack. You are responsible for maintaining the security of your account credentials and for logging out of your account after each session, particularly on shared devices.
11.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 66winn:
You have the right to obtain confirmation of whether 66winn holds personal data about you, and to request a copy of that data, including information on how it is processed.
You have the right to have inaccurate or incomplete personal data corrected. You may update contact information directly from your account settings; other corrections require a written request.
You may request deletion of your personal data. Note that data subject to PAGCOR or AML retention obligations cannot be deleted before the applicable retention period expires.
You have the right to object to processing based on legitimate interests, including direct marketing. You can unsubscribe from marketing communications at any time via your account settings.
You have the right to receive a copy of personal data you have provided to 66winn in a structured, machine-readable format, where technically feasible.
If you believe 66winn has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Request." 66winn will respond within fifteen (15) business days of receiving a valid request.
12.1 The 66winn Platform is strictly for individuals who are 21 years of age or older. 66winn does not knowingly collect or process personal data from individuals under the age of 21.
12.2 Age verification is conducted as part of the KYC process for all registered accounts. Any account discovered to belong to an individual under 21 will be closed immediately, the associated data will be securely deleted (subject to any legal retention requirements), and the matter may be reported to PAGCOR as required.
12.3 If you have reason to believe that a person under 21 has registered an account on the 66winn Platform, please notify us immediately at [email protected].
13.1 66winn primarily processes and stores personal data within the Republic of the Philippines. Where technical infrastructure or third-party service providers require the transfer of personal data outside the Philippines — for example, to cloud infrastructure providers or international KYC verification services — 66winn ensures that such transfers comply with Section 21 of the DPA.
13.2 Cross-border transfers of personal data are conducted only where the recipient country or organisation offers an adequate level of protection comparable to the DPA, or where appropriate contractual safeguards (such as standard contractual clauses approved by the NPC) are in place.
13.3 Details of cross-border transfers, including the countries involved and safeguards applied, are available upon request to the 66winn DPO.
14.1 66winn reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR requirements. The "Last Updated" date at the top of this Policy will be revised accordingly.
14.2 For material changes — those that significantly affect your privacy rights or how we use your personal data — 66winn will notify registered Players via email to the address on file or via a prominent notice on the Platform, with at least fourteen (14) days' notice before the changes take effect.
14.3 Your continued use of the 66winn Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may request account closure.
15.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 66winn, please contact our Data Protection Officer:
15.2 If you are not satisfied with 66winn's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through official NPC channels.
15.3 This Privacy Policy was last reviewed and approved in June 2026 and applies to all personal data processed by 66winn in connection with the Platform.
All data exchanged between your device and the 66winn platform is encrypted using 128-bit SSL — the same standard used by Philippine banks. Your login credentials, KYC documents, and GCash transaction data never travel in plaintext.
66winn's data practices are designed around the Philippine Data Privacy Act of 2012. We have a registered Data Protection Officer, maintain a privacy impact assessment process, and report to the NPC as required.
66winn does not sell, rent, or trade your personal information to data brokers, advertisers, or any third party for commercial purposes. Your data stays within the 66winn ecosystem and is shared only as legally required or to operate your account.
You have the right to access, correct, object to, or request deletion of your personal data held by 66winn at any time. Submit a Data Subject Request to [email protected] and we'll respond within 15 business days.
66winn does not hold your data indefinitely. KYC and financial records are kept for a minimum of 5 years as required by PAGCOR and AML law. Other data is deleted or anonymised after defined periods — no unnecessary accumulation.
In the unlikely event of a data breach, 66winn is committed to notifying the NPC within 72 hours and informing affected Players without delay — as required by DPA breach notification rules. Our incident response plan is tested regularly.
Join 500,000+ Filipino players on a PAGCOR-licensed platform that takes your data — and your gaming experience — seriously. Register in under 5 minutes. GCash accepted. 21+ only.
Create Your Account⚠ Gambling involves financial risk. Play responsibly. Must be 21 or older.