win66 Privacy Policy

win66 is the data controller responsible for the personal data collected through the win66 platform at win66.bid. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, win66 is the personal information controller with respect to all data processed in connection with your account registration, gameplay activity, financial transactions, and interactions with the win66 platform.

win66 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). Our data processing practices are conducted in compliance with both PAGCOR's licensing requirements and the applicable provisions of Philippine data protection law.

This Privacy Policy applies to all personal data processed by win66 in connection with:

• ◆The win66 website accessible at win66.bid and all associated pages, sub-domains, and interfaces;
• ◆The win66 gaming lobby, sportsbook, live casino, bingo rooms, and all games and interactive features hosted on the platform;
• ◆The win66 cashier and all financial transactions conducted through the platform, including GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods;
• ◆All communications between you and win66's customer support team, whether via live chat, email, or any other channel;
• ◆Marketing and promotional communications from win66 where you have opted in to receive such communications.

This Policy does not apply to third-party websites or services that may be referenced on the win66 platform. win66 is not responsible for the data practices of such third parties.

win66 collects and processes the following categories of personal data:

win66 does not intentionally collect sensitive personal information as defined under RA 10173 (such as health or medical data, racial or ethnic origin, religious beliefs, or sexual life) unless specifically required by PAGCOR regulations or applicable law.

win66 collects personal data through the following means:

• ◆Directly from you: when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• ◆Automatically: through cookies, session tracking technologies, server logs, and the technical infrastructure supporting the win66 platform as you use it.
• ◆From payment processors: win66 receives transaction confirmation data from GCash, Maya, and other payment partners in the course of processing your deposits and withdrawals. Full financial account credentials are never stored by win66.
• ◆From identity verification services: during KYC review, win66 may use third-party identity verification providers to validate government-issued Philippine IDs. These providers process your data under their own privacy policies and are contractually bound to data protection standards consistent with RA 10173.
• ◆From PAGCOR and regulatory sources: win66 may receive data from PAGCOR in connection with regulatory investigations, player protection programs, or self-exclusion registers maintained by the regulator.

win66 processes personal data on the following legal grounds under the Philippine Data Privacy Act and applicable PAGCOR regulations:

• ◆Contractual necessity: processing required to create and maintain your Account, operate the platform, process payments, and provide customer support.
• ◆Legal obligation: processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), RA 10173, and other applicable Philippine laws.
• ◆Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where these interests are not overridden by your data protection rights.
• ◆Consent: processing for direct marketing and promotional communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time.

win66 uses the personal data it collects for the following purposes:

• ◆Account management and authentication: verifying your identity at login, maintaining your Account profile, and processing OTP verification for sensitive actions.
• ◆Age and identity verification: confirming that you meet the minimum age requirement of 21 years as mandated by PAGCOR, and verifying your identity in compliance with KYC requirements.
• ◆Payment processing: facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment methods.
• ◆Platform operation: delivering game services, maintaining session data, resolving game disputes, and providing live dealer and sportsbook functionality.
• ◆Responsible gaming: monitoring gaming activity to detect patterns that may indicate problem gambling; enforcing deposit limits, loss limits, session timers, and self-exclusions set by the player; complying with PAGCOR's responsible gaming requirements.
• ◆Fraud and security: detecting and preventing fraudulent transactions, unauthorized Account access, bonus abuse, collusion, and money laundering.
• ◆Customer support: responding to inquiries, resolving disputes, and maintaining support records for quality assurance.
• ◆Regulatory compliance and reporting: submitting reports to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory authorities as required by law.
• ◆Marketing communications: sending promotional offers, bonus notifications, and win66 news to players who have opted in. You can opt out at any time by contacting support.

win66 does not sell, rent, or trade your personal data to any third party for commercial purposes. win66 may share your personal data in the following limited circumstances:

• ◆Service providers and processors: win66 engages third-party companies to assist with platform operations, including payment processing (GCash, Maya), identity verification, cloud hosting, customer support software, and game content delivery. These providers act as personal information processors under contracts that require compliance with RA 10173 and restrict data use to win66-authorized purposes.
• ◆PAGCOR: win66 is required to share player data and gaming records with PAGCOR in connection with its licensing obligations, regulatory audits, and responsible gaming programs, including the PAGCOR self-exclusion register.
• ◆Anti-Money Laundering Council (AMLC): win66 is obligated under Philippine law to report covered and suspicious transactions to the AMLC in accordance with the Anti-Money Laundering Act and its implementing rules.
• ◆Legal authorities: win66 will disclose personal data to Philippine courts, law enforcement agencies, or other government authorities when required to do so by a valid court order, subpoena, or other legally binding mandate.
• ◆Business transfers: in the event of a merger, acquisition, or transfer of win66's operations, personal data may be transferred to the acquiring entity, subject to the same data protection obligations under this Policy and RA 10173.

win66 uses cookies and similar tracking technologies to support the operation and security of the platform. Cookies are small data files stored on your device by your web browser.

win66 uses the following categories of cookies:

• ◆Strictly necessary cookies: essential to the operation of the win66 platform. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cannot be disabled without causing core platform functions to cease working.
• ◆Functional cookies: used to remember your preferences, language settings, and selected game categories between sessions. These improve your experience but are not essential to platform operation.
• ◆Performance and analytics cookies: used to collect anonymised data about platform usage, page load times, and feature interaction rates. This data helps win66 improve the platform. These cookies do not identify you personally.
• ◆Security cookies: used to detect fraudulent behavior, bot activity, and unauthorized access attempts. These are strictly necessary for platform protection.

You may configure your browser to refuse cookies; however, doing so may impair the functionality of the win66 platform. win66 does not currently operate a cookie consent management interface, as the majority of cookies used are strictly necessary for platform operation and security under applicable law.

win66 retains personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

Following the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

win66 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• ◆256-bit SSL/TLS encryption on all data transmissions between your device and win66's servers — the same standard used by Philippine banks including BPI, BDO, and Metrobank.
• ◆Encrypted password storage using industry-standard hashing algorithms. win66 does not store plaintext passwords and cannot retrieve your password — only reset it via verified OTP.
• ◆Two-factor authentication via OTP for sensitive Account actions including password changes, withdrawal requests above threshold amounts, and device changes.
• ◆Segregated data environments with access controls restricting win66 staff access to personal data on a need-to-know basis, with full audit logging of internal data access.
• ◆Regular security assessments including penetration testing and vulnerability scanning of the win66 platform infrastructure.
• ◆Session timeout and anomaly detection to identify and block suspicious login activity in real time.

win66 primarily processes player data within the Philippines. However, certain service providers engaged by win66 — including cloud infrastructure providers, game content delivery networks, and identity verification services — may process personal data in other countries.

Where personal data is transferred outside the Philippines, win66 ensures that adequate protections are in place, including:

• ◆Contractual data processing agreements that impose obligations equivalent to Philippine data protection standards on the recipient;
• ◆Transfers to countries that have been assessed as providing an adequate level of data protection by the National Privacy Commission of the Philippines; or
• ◆Other lawful transfer mechanisms approved under RA 10173 and its Implementing Rules.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by win66:

• ◆Right to be informed: you have the right to be informed of the data processing activities that win66 carries out with respect to your personal data. This Privacy Policy fulfils that obligation.
• ◆Right of access: you may request a copy of the personal data win66 holds about you, along with information about how it is being processed.
• ◆Right to rectification: you may request correction of inaccurate or incomplete personal data. For core identity data, corrections may require supporting documentation.
• ◆Right to erasure (right to be forgotten): you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to win66's legal retention obligations under PAGCOR licensing and the AMLA.
• ◆Right to data portability: you may request your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.
• ◆Right to object: you may object to the processing of your personal data where win66 relies on legitimate interests as the legal basis, or for direct marketing purposes.
• ◆Right to withdraw consent: where win66 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• ◆Right to lodge a complaint: if you believe win66 has violated your data rights, you may file a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact win66's Data Protection Officer via live chat or email as detailed in Section 16. win66 will respond to verified data subject requests within fifteen (15) working days as required under RA 10173.

win66 is a gambling platform and is strictly prohibited from being used by persons under 21 years of age, pursuant to PAGCOR regulations and applicable Philippine law. win66 does not knowingly collect or process personal data belonging to individuals under 21 years of age.

If win66 becomes aware that it has inadvertently collected personal data from an individual under 21 years of age, win66 will immediately close the relevant Account, forfeit all associated balances in accordance with its Terms and Conditions and PAGCOR guidelines, and delete the personal data to the extent permitted by applicable legal retention requirements.

If you believe that win66 may hold personal data about a person under 21 years of age, please contact win66's Data Protection Officer immediately.

The win66 platform may contain references or contextual links to third-party services including payment processors and game content providers. win66 does not operate or control any third-party website or service, and this Privacy Policy does not apply to third-party data processing activities.

win66 encourages you to review the privacy policies of any third-party services you access in connection with your use of the platform. win66 cannot be held responsible for the data practices of third parties over whom it has no operational control.

win66 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or change the way we share data with third parties — win66 will notify registered players via their registered mobile number or through a prominent platform announcement prior to the changes taking effect.

The current version of this Privacy Policy, including the effective date, is always published on this page. Continued use of the win66 platform following notification of policy changes constitutes acceptance of the revised Policy. If you do not agree with any changes, you must discontinue use of the platform and may request Account closure.

For any question, concern, or formal request relating to your personal data or this Privacy Policy, please contact win66's Data Protection Officer through the following channels:

If you are not satisfied with win66's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the independent government body responsible for enforcing RA 10173. The NPC accepts complaints from data subjects whose rights have been violated. Details of the NPC's complaint procedure are publicly available through official Philippine government channels.