Privacy Policy — 66win20

1 Introduction

Welcome to the 66win20 Privacy Policy. This document describes how 66win20 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal data of every individual ("you", "Player", "User") who accesses or uses the 66win20 online gaming platform at https://66win20.net and any associated mobile or web applications.

66win20 is deeply committed to protecting your privacy. As a Philippines-focused online gaming platform serving players from Manila, Cebu, Davao, Quezon City, Makati, and communities all across the archipelago, we understand that trust is the foundation of everything we do. We collect only what we need, we use it only for the purposes we state here, and we protect it to the highest standard we can deliver.

This Privacy Policy should be read together with the 66win20 Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement between you and 66win20. This Policy applies to all personal data collected by 66win20 regardless of the channel through which it is collected — website, mobile browser, live chat, email, or any other means of interaction with the platform.

2 Who We Are

66win20 is an online gaming platform operating under applicable PAGCOR compliance standards, providing Filipino players with access to a wide range of entertainment gaming products including slot games, live casino (baccarat, roulette, blackjack, sic bo), sports betting, bingo, and e-sabong. The platform is designed specifically for Filipino adults aged 21 years and above.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), 66win20 acts as the Personal Information Controller in respect of personal data collected from players through the platform. This means that 66win20 determines the purposes and means by which your personal data is processed.

Where 66win20 engages third-party service providers to process personal data on its behalf (such as payment processors, fraud prevention services, or customer support platforms), those parties act as Personal Information Processors and are bound by contractual obligations to process your data only in accordance with 66win20's documented instructions and applicable Philippine law.

3 Personal Data We Collect

66win20 collects personal data in two broad categories: information you provide to us directly, and information we collect automatically through your use of the platform. Below is a detailed breakdown of the categories of personal data we may collect:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (to verify you are 21 years of age or older)
• Gender (optional, used for personalization)
• Username chosen at registration
• Nationality and country of residence

3.2 Contact Data

• Philippine mobile number (used for account verification via OTP and two-factor authentication)
• Email address (used for account communication, promotions, and notifications)
• Residential address (required at KYC verification stage)

3.3 Identity Verification (KYC) Documents

• Scanned or photographed copies of valid Philippine government-issued IDs (e.g., PhilSys National ID, UMID, passport, driver's license, SSS card, PRC ID, voter's ID)
• Proof of address documents (e.g., utility bills, bank statements issued within the last three months)
• Selfie or liveness verification images submitted for identity confirmation

3.4 Financial and Transaction Data

• GCash mobile number and verified account name
• Maya (PayMaya) account details
• BPI, BDO, or Metrobank account name and account number (last four digits only)
• Cryptocurrency wallet addresses (where USDT deposits are used)
• Deposit history, withdrawal history, and transaction amounts in Philippine Peso (PHP)
• Bonus claims, wagering activity, and net gaming revenue records

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, model, and operating system version
• Browser type and version
• Unique device identifiers
• Session timestamps, login and logout times
• Platform interaction logs (pages visited, games played, features used)

3.6 Communication Data

• Live chat transcripts and support ticket records
• Emails sent to and received from [email protected]
• Responsible gaming requests, self-exclusion requests, and limit-setting records
• Complaint records and dispute resolution correspondence

3.7 Marketing Preferences

• Your opt-in or opt-out status for promotional communications via email and SMS
• Bonus preference records and game category preferences derived from gameplay activity

4 How We Collect Your Personal Data

66win20 collects personal data through the following primary channels:

4.1 Directly From You

The majority of personal data we hold is information you provide to us voluntarily during the registration process, the KYC verification process, when you make deposits or withdrawals, when you contact our support team, or when you respond to promotional communications. This includes all identity, contact, and financial data described in Section 3.

4.2 Automatically Through Platform Use

When you access 66win20 through any device, our servers automatically collect certain technical data about your session. This includes your IP address, device details, browser information, and interaction logs. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 8 of this Policy.

4.3 From Third-Party Partners

In limited circumstances, 66win20 may receive personal data about you from third-party partners. This includes:

• Payment processors: Transaction confirmation data from GCash, Maya, and banking partners to verify the status of deposits and withdrawals.
• Identity verification services: Results and risk scores from third-party KYC and AML screening providers used to verify the authenticity of submitted documents.
• Fraud prevention services: Device fingerprint data and risk signals from fraud detection partners used to protect the platform and its players from fraudulent activity.

5 How We Use Your Personal Data

66win20 uses the personal data it collects strictly for the following documented purposes:

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), 66win20 relies on the following lawful grounds for processing your personal data:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and 66win20 — including account management, game access, and payment processing.
• Legal Obligation: Processing required for compliance with Philippine laws and regulations, including PAGCOR licensing obligations, Anti-Money Laundering Act (AMLA) compliance, and the Data Privacy Act's own requirements.
• Legitimate Interest: Processing for the legitimate interests of 66win20 and its players, including platform security, fraud prevention, platform analytics, and responsible gaming monitoring — provided these interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent — for example, for sending promotional emails and SMS messages — you may withdraw that consent at any time without affecting the lawfulness of processing already carried out. Withdrawal of consent does not affect the operation of your account for the purposes covered by the other lawful bases listed above.

7 Sharing and Disclosure of Your Personal Data

66win20 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. We share personal data only in the following circumstances:

7.1 Service Providers and Processors

We engage carefully selected third-party service providers who process personal data on our behalf under strict contractual instructions. These include payment processors (GCash, Maya, BPI, BDO), identity verification providers, cloud hosting infrastructure providers, fraud detection services, customer support platform providers, and email/SMS delivery services. Each processor is bound by a data processing agreement and is permitted only to use your data for the specific purpose for which they were engaged.

7.2 Regulatory and Legal Authorities

66win20 is legally obligated to disclose certain personal data to Philippine regulatory and law enforcement authorities upon receipt of a valid legal request. This includes disclosures to PAGCOR in connection with licensing compliance audits, the Anti-Money Laundering Council (AMLC) in connection with suspicious transaction reports under the AMLA, and Philippine courts or law enforcement agencies in connection with valid court orders or legal processes.

7.3 Business Transfers

In the event that 66win20 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may form part of the transferred assets. In any such event, you will be notified via email or in-platform notification prior to any transfer, and the acquiring entity will be required to uphold the terms of this Privacy Policy.

7.4 With Your Explicit Consent

Beyond the circumstances described above, 66win20 will not disclose your personal data to any third party without obtaining your prior explicit written consent.

8 Cookies and Tracking Technologies

66win20 uses cookies and similar tracking technologies on the platform to provide a functional, secure, and personalized gaming experience. Cookies are small text files placed on your device when you access the 66win20 website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in securely and security tokens that protect your account from unauthorized access. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred game categories, and responsible gaming limit configurations. These improve your experience but are not essential to core functionality.
• Analytics Cookies: Used to understand how players use the 66win20 platform — which games are most popular, how long sessions last, and where players encounter difficulties. This data is collected in aggregate and used to improve the platform.
• Security and Fraud Detection Cookies: Used in conjunction with our fraud prevention partners to identify suspicious patterns of behavior, detect automated bot access, and protect the platform's integrity.

8.2 Managing Cookies

You can manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your 66win20 account. For all other cookie categories, disabling them may reduce the quality of your experience but will not prevent you from using the platform's core features.

9 Data Retention

66win20 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable Philippine law, or as necessary to resolve disputes and enforce our agreements. The following retention guidelines apply:

• Active account data: Retained for the full duration of your active 66win20 account relationship plus a minimum post-closure retention period.
• KYC and identity documents: Retained for a minimum of five years from the date of account closure, in accordance with AMLA record-keeping requirements applicable to Philippine gaming operators.
• Transaction and financial records: Retained for a minimum of five years to comply with AMLA and BIR record-keeping obligations.
• Customer support communications: Retained for three years from the date of last interaction, or longer if the communication relates to an unresolved dispute or regulatory investigation.
• Marketing consent records: Retained for three years from the date of the last marketing communication sent, to demonstrate compliance with consent requirements.
• Technical and server logs: Retained for twelve months from the date of collection, unless required to be preserved in connection with a security investigation or legal proceeding.

At the end of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original information. Anonymized data may be retained indefinitely for statistical and analytical purposes.

10 Data Security

66win20 implements a comprehensive, layered approach to personal data security. We employ the following technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, destruction, or accidental loss:

• Encryption in Transit: All data transmitted between your device and the 66win20 platform is encrypted using TLS (Transport Layer Security) with modern cipher suites. We enforce HTTPS across the entire domain.
• Encryption at Rest: Sensitive personal data stored on 66win20 servers — including ID document copies, payment details, and KYC records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 66win20's internal systems is restricted on a strict need-to-know basis. All internal staff with access to personal data are subject to confidentiality obligations and role-based access controls.
• Multi-Factor Authentication: 66win20 enforces multi-factor authentication (MFA) for all internal system access involving personal player data. Players are also encouraged to enable two-factor authentication on their own accounts.
• Regular Security Audits: The 66win20 platform and its data processing infrastructure are subject to regular internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities.
• Incident Response: 66win20 maintains a documented data breach response procedure. In the event of a breach that poses a real risk of harm, affected players and the National Privacy Commission will be notified within the timeframes required by RA 10173.

11 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by 66win20. These rights can be exercised by contacting our Data Protection Officer through the contact details in Section 16.

12 Minors and Age Policy

66win20 is strictly an adult gaming platform intended for individuals aged 21 years and above, in compliance with Philippine laws governing online casino-style gambling. We do not knowingly collect personal data from any person under the age of 21.

All registered players undergo an age verification step during the K YC process that requires submission of a valid Philippine government-issued ID clearly showing date of birth. Accounts cannot be fully activated for real-money play until age verification is successfully completed.

13 Third-Party Services and Links

The 66win20 platform integrates with a number of third-party service providers to deliver core functionality. While we carefully vet all third-party partners and require them to meet our data protection standards, 66win20 is not responsible for the independent privacy practices of third-party providers operating outside the scope of their contractual obligations to 66win20.

Key third-party integrations on the 66win20 platform include:

• Game Content Providers: Licensed game studios and RNG (Random Number Generator) providers that supply the slot, live casino, and other game content available on the platform. These providers may collect limited technical data necessary to deliver game content and verify fair play.
• Payment Gateways: GCash, Maya, BPI, BDO, Metrobank, and other Philippine payment service providers process transaction data under their own privacy policies and financial regulations. 66win20 does not receive or store your full payment credentials from these providers.
• Customer Support Tools: Live chat and ticketing platform providers used to deliver 66win20's 24/7 customer support. Support conversations are stored both on 66win20's systems and on the provider's secure infrastructure.
• Analytics Providers: Platform usage analytics tools used to understand aggregate player behavior patterns and improve the 66win20 experience. These providers process only anonymized or pseudonymized data.

66win20 does not include links to external websites on this platform. All links on the 66win20 platform lead to pages within the 66win20.net domain.

14 Cross-Border Data Transfers

Some of 66win20's third-party service providers, including cloud hosting infrastructure and game content providers, may process or store data on servers located outside of the Philippines. Where such cross-border transfers of personal data occur, 66win20 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

These safeguards include:

• Contractual clauses in agreements with overseas processors that impose data protection obligations equivalent to those under RA 10173.
• Transfers only to jurisdictions or service providers that maintain adequate data protection standards as recognized by the National Privacy Commission of the Philippines.
• Regular assessment of cross-border transfer arrangements as part of 66win20's data protection compliance program.

15 Changes to This Privacy Policy

66win20 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law and regulation, changes to the services we offer, or for any other legitimate operational reason.

When we make material changes to this Policy — changes that meaningfully affect how we collect, use, or share your personal data — we will:

• Post the updated Privacy Policy on this page with a revised "Effective Date" at the top of the document.
• Send a notification to your registered 66win20 email address summarizing the key changes.
• Display a prominent in-platform notice for a period of at least 14 days following the publication of the updated Policy.

Your continued use of the 66win20 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the platform and contact support to request account closure.

For minor, non-material changes (such as typographical corrections, clarifications that do not alter meaning, or updates to contact details), 66win20 may update this Policy without individual notification. We recommend reviewing this page periodically to stay informed of the current version.

16 Contact Us and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 66win20, you may contact us through the following channels:

If you are not satisfied with the response you receive from 66win20's Data Protection Officer, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory authority responsible for administering and enforcing the Data Privacy Act of 2012.

This Privacy Policy was last reviewed and updated on January 1, 2026. It supersedes all previous versions of the 66win20 Privacy Policy.