Privacy Policy

66win4 is committed to protecting the privacy and personal data of every member who uses our platform. We understand that Filipino players entrust us with sensitive information — from their names and contact details to their financial transaction records — and we take that responsibility seriously.

This Privacy Policy describes how 66win4 collects, uses, stores, shares, and protects your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects our obligations under PAGCOR's data governance requirements for licensed online gaming operators.

This policy applies to all personal data processed in connection with your use of the 66win4 website, mobile-optimised platform, live chat support, and any other 66win4 service. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

For the purposes of the Data Privacy Act of 2012, 66win4 acts as the Personal Information Controller (PIC) in respect of the personal data it collects from members and visitors to the platform. This means 66win4 determines the purposes and means of processing your personal data.

Where 66win4 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or cloud infrastructure providers — those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with 66win4's instructions and applicable Philippine law.

66win4 collects the following categories of personal data from members and, in some cases, from visitors to the platform:

66win4 does not collect sensitive personal information beyond what is strictly necessary for identity verification, regulatory compliance, and the provision of gaming services. We do not collect information about your religious beliefs, political opinions, or health status unless directly relevant to a responsible gaming assessment you have voluntarily initiated.

66win4 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automatically — through cookies, web beacons, and server logs when you access the 66win4 platform. This includes your IP address, device identifiers, and browsing behaviour on the platform.
• From third parties — from identity verification providers, payment processors (such as GCash, Pay Maya, and Philippine banks), and fraud prevention services, where necessary to verify your identity or process transactions.
• From PAGCOR or other regulatory bodies — where we are required by law to receive or share information in connection with our gaming licence obligations.

66win4 processes your personal data only where we have a lawful basis to do so under the Data Privacy Act of 2012. The table below sets out the primary purposes for which we process your data and the corresponding legal basis:

Where we rely on your consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time by updating your notification preferences in your account settings or by contacting our support team.

66win4 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors — GCash, PayMaya/Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and debit card processors, for the purpose of processing your financial transactions.
• Identity verification providers — third-party KYC and anti-money laundering service providers who assist us in verifying your identity and complying with Philippine AML laws.
• Game content providers — licensed game studios and live casino operators whose games are available on the 66win4 platform. These providers may receive anonymised or pseudonymised gaming data for technical and fairness audit purposes.
• Cloud and IT infrastructure providers — hosting, database, and security service providers who process data on our behalf under strict data processing agreements.
• PAGCOR and regulatory authorities — where we are legally required to report gaming activity, suspicious transactions, or respond to regulatory enquiries.
• Law enforcement agencies — where required by a valid court order, subpoena, or applicable Philippine law.

All third-party processors engaged by 66win4 are contractually required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.

66win4 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (AMLA) and its amendments.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution.
• Technical and log data: Retained for up to twelve (12) months, unless required for longer periods for security investigations.

When personal data is no longer required, 66win4 will securely delete or anonymise it in accordance with our internal data disposal procedures.

66win4 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 66win4 platform.
• Encryption at rest for sensitive data stored in our databases, including financial records and identity documents.
• Two-factor authentication (2FA) available for all member accounts and mandatory for administrative access.
• Role-based access controls ensuring that 66win4 staff can only access personal data necessary for their specific job functions.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Intrusion detection and monitoring systems operating 24/7 to detect and respond to potential security incidents.
• Staff training on data privacy obligations and secure data handling practices, conducted at least annually.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 66win4 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected members without undue delay, in accordance with the Data Privacy Act of 2012.

66win4 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. The types of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and last-visited game categories to improve your experience on 66win4.
• Analytics cookies: Help us understand how members use the platform — which pages are visited most, where users drop off, and how features are used — so we can improve the 66win4 experience over time. Data collected is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 66win4 platform. 66win4 does not use third-party advertising cookies or share cookie data with advertising networks.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 66win4:

• Right to be informed — You have the right to know what personal data 66win4 holds about you, how it is used, and with whom it is shared. This Privacy Policy fulfils that obligation.
• Right of access — You may request a copy of the personal data 66win4 holds about you at any time.
• Right to rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most account details directly through your 66win4 account settings.
• Right to erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AML regulations.
• Right to object — You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability — You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint — If you believe 66win4 has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer via live chat or by email at [email protected]. We will respond to all verified data subject requests within fifteen (15) business days, as required by NPC guidelines.

The 66win4 platform is strictly intended for persons aged 21 years and above, in accordance with Philippine law and PAGCOR regulations. 66win4 does not knowingly collect personal data from individuals under the age of 21.

If 66win4 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data in question, and take appropriate action in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered on the 66win4 platform, please contact our support team immediately via live chat so that we can investigate and take prompt action.

66win4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The most current version of this policy will always be available on this page, with the "Last Updated" date revised accordingly.

Where changes are material — for example, where we introduce a new purpose for processing your personal data — 66win4 will notify registered members via email or in-platform notification at least seven (7) days before the changes take effect. Your continued use of the 66win4 platform after the effective date of any amendment constitutes your acknowledgement of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 66win4 handles your personal data, please contact our Data Protection Officer (DPO) through any of the following channels:

• Live Chat: Available 24/7 via the 66win4 platform — the fastest way to reach us.
• Privacy Email: [email protected]
• General Support: [email protected]

We are committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.