win66 Privacy Policy

win66 ("we," "us," or "our") operates the online gaming platform accessible at https://win66.app (the "Platform"). This Privacy Policy describes how win66 collects, uses, discloses, stores, and protects the personal information of players and visitors ("you" or "your") who access or use the Platform.

This Privacy Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and the implementing rules and regulations issued by the National Privacy Commission (NPC). By registering an account or using the win66 Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

If you do not agree with any part of this Privacy Policy, you should discontinue use of the Platform immediately. For questions or concerns about how win66 handles your personal data, please refer to Section 13 (Contact & Data Protection Officer) of this Policy.

win66 collects personal data through several channels: directly from you when you register or use the Platform, automatically through your use of the Platform, and in limited cases from third-party sources such as payment processors and identity verification providers.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and residential address provided when creating your win66 account.
• Identity verification (KYC) data: Government-issued identification documents such as a Philippine passport, driver's license, UMID card, or SSS/GSIS ID, including the document number, expiry date, and a photograph or scan of the document.
• Financial data: Payment method details including GCash account numbers, PayMaya account references, and bank account details for BPI, BDO, or Metrobank. win66 does not store full card numbers or CVV codes.
• Communications data: Messages, queries, and complaints submitted to win66 support via live chat or email.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, and session time preferences you configure in your account.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: Pages visited, games played, session duration, click patterns, and navigation paths within the Platform.
• Transaction data: Records of all deposits, withdrawals, wagers, wins, and losses associated with your win66 account.
• Cookie data: Information collected via cookies and similar tracking technologies as described in Section 6 of this Policy.

2.3 Data from Third Parties

win66 may receive personal data about you from third-party identity verification providers, fraud detection services, and payment processors where this is necessary to verify your identity, process transactions, or comply with anti-money laundering (AML) obligations.

win66 uses your personal data only for the purposes described in this Privacy Policy. We do not use your data in ways that are incompatible with the purposes for which it was originally collected.

• Account management: To create, maintain, and administer your win66 account, including verifying your identity and eligibility to use the Platform.
• Service delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver the core features of the win66 Platform.
• Legal and regulatory compliance: To fulfill our obligations under Philippine law, including Know Your Customer (KYC) requirements, anti-money laundering (AML) checks, and reporting obligations to relevant regulatory authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the Platform and its players.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and apply deposit limits and other responsible gaming tools you have activated.
• Customer support: To respond to your queries, complaints, and support requests in a timely and effective manner.
• Platform improvement: To analyze usage patterns and player behavior in aggregate to improve the design, performance, and content of the win66 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time via your account settings.

Under the Data Privacy Act of 2012, win66 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and win66 — specifically, to provide you with access to the Platform and its services.
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including AML, KYC, and gaming regulatory requirements.
• Legitimate interests: Processing is necessary for win66's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending marketing communications or placing non-essential cookies — win66 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

win66 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Service providers: win66 engages third-party service providers to assist in delivering the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, and customer support platforms. These providers are contractually bound to process your data only on win66's instructions and in accordance with applicable data protection law.
• Game providers: Where you play games supplied by third-party game studios, limited technical data (such as a player session token) may be shared with the relevant game provider to facilitate gameplay. Game providers do not receive your full personal profile.
• Regulatory and law enforcement authorities: win66 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine authorities where required by law or in response to a lawful request.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of win66's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

win66 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

win66 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your win66 account. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game lobby filters, and display options to provide a more personalized experience.
• Analytics cookies: Help win66 understand how players navigate the Platform — which pages are most visited, where players encounter issues, and how overall usage patterns evolve over time. This data is processed in aggregate and is not used to identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats to the Platform.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the win66 Platform, including your ability to stay logged in or access certain features.

win66 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• KYC and identity documents: Retained for the period required by applicable gaming and AML regulations, typically five (5) years from account closure.
• Support communications: Retained for three (3) years from the date of the communication, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained for as long as you remain a registered win66 player or until you withdraw consent, whichever is earlier.

When personal data is no longer required, win66 will securely delete or anonymize it in accordance with industry best practices and applicable legal requirements.

win66 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and the win66 Platform is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data stored in win66's systems is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to win66 personnel and service providers who have a legitimate need to access it. All access is logged and subject to regular review.
• Vulnerability management: win66 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the Platform.
• Incident response: win66 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, win66 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by win66:

• Right to be informed: You have the right to be informed about how win66 collects and processes your personal data — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data win66 holds about you, together with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data win66 holds about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to win66's legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to win66's overriding legal or contractual obligations.
• Right to data portability: You may request that win66 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe win66 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact win66's Data Protection Officer using the details provided in Section 13 of this Policy. win66 will respond to all verified data subject requests within fifteen (15) business days of receipt, as required by applicable law.

The win66 Platform is strictly intended for adults aged 21 years and above. win66 does not knowingly collect personal data from any person under the age of 21.

win66 employs age verification measures during the registration process and during KYC verification to prevent underage access to the Platform. These measures include verification of government-issued identification documents confirming date of birth.

win66 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game studios operating in other jurisdictions.

Where personal data is transferred outside the Philippines, win66 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law.

win66 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

win66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the features of the Platform. The date of the most recent revision is displayed at the top of this page.

Where changes to this Privacy Policy are material, win66 will notify registered players via the email address associated with their account or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the win66 Platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure by contacting win66 support.

win66 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact the win66 DPO directly.

You may reach the win66 Data Protection Officer by email at: [email protected]

For general support queries unrelated to data privacy, please contact the win66 support team at: [email protected]

win66 aims to acknowledge all privacy-related requests within five (5) business days and to provide a full response within fifteen (15) business days, as required by the Data Privacy Act of 2012. Complex requests may take longer, and our team will keep you informed of the progress of your request.