666p Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data 666p collects, why we collect it, how it is used and protected, and what rights you have under the Data Privacy Act of 2012 as a Filipino player on our PAGCOR-regulated platform.
Our Privacy Commitments
How 666p Protects Your Data
These cards summarise the core principles that shape how 666p handles your personal information. The full legal text below governs in all cases.
Minimal Data Collection
666p only collects the personal data that is strictly necessary for account registration, identity verification, gaming operations, and regulatory compliance. We do not gather data beyond what is required to run a safe, PAGCOR-compliant gaming platform for Filipino players.
Industry-Standard Security
All personal and financial data processed by 666p is protected using TLS encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel on a strict need-to-know basis, and all access events are logged and audited regularly.
Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act of 2012, you have the right to be informed, to access your data, to object to processing, to erasure, to rectification, and to data portability. 666p will respond to all valid data rights requests within 15 business days of receipt.
No Sale of Personal Data
666p does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Any data shared with third-party service providers is governed by strict data processing agreements and used solely to support the delivery of 666p services to you.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by PAGCOR regulations and Philippine law. Account data is typically retained for five years after account closure in line with anti-money laundering obligations.
Transparent Communication
If we ever update this Privacy Policy in a material way, registered 666p players will be notified by email to the address on file and by a prominent notice on the platform. We will never make significant changes to how we use your data without giving you advance notice and an opportunity to review the updated terms.
Summary: This Privacy Policy describes how 666p collects, uses, stores, and protects the personal data of players registered on the 666p platform. It is written in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and the implementing rules and regulations of the National Privacy Commission (NPC). Please read it in full before creating an account.
1Introduction
666p ("we", "us", "our") operates the online gaming platform accessible at 666p.im, which is regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). As the personal information controller responsible for data collected through the 666p platform, we are committed to protecting the privacy and personal data of all registered players and site visitors in the Philippines.
This Privacy Policy applies to all personal data collected by 666p through the 666p.im website, any 666p mobile application, customer support channels, and all other interactions between you and the 666p platform. It applies regardless of whether you are a registered account holder or a visitor who has not yet created an account.
By registering for a 666p account or by continuing to use the 666p platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy should be read together with the 666p Terms & Conditions.
2Data We Collect
666p collects the following categories of personal data from players and site visitors:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, gender | Account registration & KYC verification |
| Contact Data | Email address, mobile number, residential address in the Philippines | Account registration |
| Financial Data | GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details (last 4 digits only), deposit and withdrawal history | When you deposit or withdraw |
| Gaming Data | Game session history, bet amounts, game outcomes, RTP data, bonus usage | During active gaming sessions |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatically on site/app access |
| Communication Data | Live chat transcripts, email correspondence with support, feedback submissions | When you contact 666p support |
| KYC Documents | Scanned copies of Philippine National ID, Passport, Driver's License, proof of address | During identity verification |
We do not collect sensitive personal information as defined under RA 10173 (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless expressly required for responsible gaming assessments under PAGCOR guidelines, in which case separate explicit consent will be sought.
3How We Collect Data
666p collects personal data through the following means:
- Direct submission — information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
- Automated technical collection — data collected automatically when you access the 666p platform, including IP address, device identifiers, browser fingerprint, and session data, via server logs, cookies, and similar tracking technologies (see Section 7).
- Gaming activity recording — game session data generated as a natural consequence of your use of the gaming platform, including bet history and game outcomes, which is recorded for regulatory compliance and dispute resolution purposes.
- Third-party verification providers — identity and age verification data may be cross-referenced with PAGCOR-approved third-party identity verification services operating within the Philippines.
- Payment processors — transaction confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank when you make a deposit or withdrawal.
4Purpose of Processing
666p processes your personal data only for the specific purposes listed below. We do not process personal data for any purpose that is incompatible with the original purpose of collection without obtaining fresh consent.
- Account creation and management — to register your account, verify your identity and age (21+ requirement), and maintain your account in good standing.
- Regulatory compliance — to fulfil obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine law.
- Payment processing — to process deposits, withdrawals, and any applicable bonus settlements in Philippine Peso via your chosen local payment method.
- Platform security and fraud prevention — to detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and violations of the 666p Terms & Conditions.
- Customer support — to respond to your enquiries, resolve disputes, and manage your account-related requests submitted via live chat or email.
- Responsible gaming monitoring — to identify behavioural patterns consistent with problem gambling and to apply or recommend responsible gaming tools in accordance with PAGCOR guidelines.
- Platform improvement — to analyse aggregated, anonymised usage data to improve the 666p platform, game selection, and user experience for Filipino players.
- Marketing communications — to send you promotional offers, bonus notifications, and platform updates where you have provided explicit consent (see Section 13).
5Legal Basis for Processing
Under the Data Privacy Act of 2012, 666p relies on the following legal bases for processing your personal data:
- Contractual necessity — processing required to perform the contract between you and 666p, including account registration, gaming, and payment processing.
- Legal obligation — processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, and other applicable Philippine statutory requirements.
- Legitimate interests — processing carried out for fraud prevention, platform security, and aggregated analytics, where such interests are not overridden by your data protection rights.
- Consent — processing for optional purposes such as marketing communications, where you have given clear and freely withdrawable consent at the point of collection.
Your right to withdraw consent: Where 666p relies on your consent as the legal basis for processing (e.g., marketing emails), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
6Sharing Your Data
666p does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:
- PAGCOR and Philippine regulatory authorities — we are legally required to share certain player and transaction data with PAGCOR as a condition of our gaming licence, and with other competent Philippine authorities (e.g., the AMLC) where mandated by law.
- Payment processors — GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum transaction data necessary to process your deposits and withdrawals. Each processor is subject to their own privacy policy and Philippine data protection obligations.
- KYC and identity verification providers — PAGCOR-accredited identity verification services may receive your identity documents and biometric reference data solely for the purpose of age and identity verification.
- Game and technology providers — licensed game studios and technology partners that power specific games on the 666p platform may receive anonymised session identifiers for game delivery and RNG certification purposes. These providers do not receive your full personal profile.
- Customer support platforms — our live chat and ticketing software providers process support communication data under data processing agreements that bind them to confidentiality and data protection standards consistent with RA 10173.
- Legal and law enforcement — we may disclose personal data to Philippine law enforcement agencies or courts where legally compelled to do so by a valid court order, subpoena, or statutory obligation.
All third-party processors engaged by 666p are bound by written data processing agreements requiring them to process personal data only on 666p's documented instructions, to implement appropriate security measures, and to support 666p in fulfilling its obligations under RA 10173.
7Cookies & Tracking Technologies
666p uses cookies and similar tracking technologies on the 666p.im website and platform. Cookies are small data files stored on your device that help us deliver a functional and personalised experience.
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing — without these the platform cannot function | Yes — cannot be disabled |
| Functional | Remembering your language preference, game lobby view settings, and responsible gaming tool configurations | Optional |
| Analytics | Aggregated, anonymised data on page visit frequency, navigation paths, and feature usage — used to improve the platform | Optional |
| Security / Fraud Detection | Device fingerprinting and behavioural signals used to detect suspicious account activity and prevent fraud | Yes — regulatory requirement |
You can manage optional cookie preferences through your browser settings or through the 666p cookie preference centre accessible in your account settings. Disabling strictly necessary or security cookies may impair platform functionality or prevent you from accessing your account.
8Data Security
666p implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- TLS 1.2 or higher encryption for all data transmitted between your device and the 666p platform
- AES-256 encryption for personal and financial data stored in 666p databases
- Multi-factor authentication enforced for all internal 666p staff accounts that have access to player personal data
- Role-based access controls ensuring that only staff with a documented operational need can access personal data
- Comprehensive audit logging of all access to and operations on personal data systems
- Regular penetration testing and vulnerability assessments conducted by independent security specialists
- Incident response procedures with notification timelines consistent with NPC breach notification requirements
While 666p takes all reasonable steps to protect your data, no internet transmission or electronic storage method is 100% secure. You are responsible for maintaining the confidentiality of your account credentials. If you suspect unauthorised access to your 666p account, contact us immediately at [email protected].
9Data Retention
666p retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law and PAGCOR licensing conditions. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | 5 years after account closure | AMLA and PAGCOR regulatory obligation |
| Financial Transaction Records | 5 years after the transaction date | AMLA and BIR record-keeping requirements |
| KYC Documents | 5 years after account closure | PAGCOR KYC retention rules |
| Gaming Session Data | 2 years after session date | Dispute resolution and PAGCOR audit requirements |
| Support Communications | 2 years after ticket closure | Legitimate interest — dispute management |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year | Consent — evidence of lawful marketing |
| Technical / Log Data | 90 days | Security and fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 666p's data destruction procedures. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.
10Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 666p:
- Right to be Informed — you have the right to be told what personal data 666p holds about you, the purpose of its collection, and how it is used. This Privacy Policy fulfils that obligation.
- Right of Access — you may request a copy of the personal data 666p holds about your account at any time by contacting us at [email protected]. We will respond within 15 business days.
- Right to Rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update some information directly through your account settings.
- Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to 666p's legal retention obligations under PAGCOR and AMLA requirements.
- Right to Object — you may object to the processing of your personal data where 666p relies on legitimate interests as the legal basis, unless 666p can demonstrate compelling legitimate grounds that override your rights.
- Right to Data Portability — you may request that 666p provide a structured, machine-readable copy of personal data you have provided to us where processing is based on consent or contract.
- Right to Lodge a Complaint — if you believe 666p has not handled your personal data in accordance with RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of the above rights, please contact the 666p Data Protection Officer using the details in Section 15 of this Privacy Policy. We may need to verify your identity before processing your request.
11Children & Minors
The 666p platform is strictly for persons aged 21 years and above, in accordance with the PAGCOR-mandated minimum age for online gaming in the Philippines. 666p does not knowingly collect personal data from persons under the age of 21.
All account registrations are subject to mandatory age verification as part of the KYC process. If 666p discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all data collected from that individual will be deleted within 30 days (subject to any mandatory regulatory reporting obligations), and any real-money balance will be returned to the verified payment method after deduction of any wagered amounts.
If you are a parent or guardian and believe that a minor under your care has registered a 666p account, please contact us immediately at [email protected]. We will investigate and take immediate action.
12Cross-Border Data Transfers
666p's primary data processing infrastructure is located within or operates in compliance with Philippine data protection standards. Where personal data is processed by third-party technology or game providers whose systems are located outside the Philippines, 666p ensures that such transfers are conducted only where:
- The receiving country or organisation provides an adequate level of data protection as recognised by the NPC, or
- Appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules that are consistent with RA 10173 requirements, or
- The transfer is necessary for the performance of the contract between you and 666p (e.g., delivery of a game provided by an international studio licensed to operate with PAGCOR-regulated platforms).
You may request details of the specific safeguards in place for any cross-border data transfer involving your personal data by contacting the 666p Data Protection Officer at the address in Section 15.
13Marketing Communications
With your explicit consent, 666p may send you promotional communications about bonus offers, new game releases, tournaments, and platform updates. Marketing communications are sent by email to the address registered on your account.
You may opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link in any marketing email sent by 666p
- Updating your communication preferences in the notifications section of your account settings
- Contacting our support team via live chat or at [email protected] with a request to opt out
Opting out of marketing communications will not affect transactional messages related to your account, such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts. These communications are sent on the basis of contractual necessity and cannot be disabled while your account remains active.
14Changes to This Privacy Policy
666p reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. The effective date at the top of this page will be updated whenever a new version is published.
For material changes — those that significantly affect how we collect, use, or share your personal data — 666p will notify registered players by email to the address on file and by a prominent on-platform notice at least seven (7) days before the changes take effect, except where immediate changes are required by law or PAGCOR direction.
Your continued use of the 666p platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you should close your account in accordance with the process described in the 666p Terms & Conditions.
15Contact & Data Protection Officer
666p has appointed a Data Protection Officer (DPO) in accordance with the requirements of the National Privacy Commission. If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact us through the following channels:
- Live Chat: Available 24/7 from your account dashboard — fastest response, typically under 2 minutes
- Email (General Support): [email protected]
- Email (Data Privacy Requests): privacy @666p.im
- Response Time: Data rights requests acknowledged within 3 business days; fully resolved within 15 business days
National Privacy Commission (NPC): If you are not satisfied with 666p's response to your data privacy concern, you have the right to file a complaint directly with the National Privacy Commission of the Philippines. The NPC is the government body responsible for administering and implementing RA 10173 and for ensuring the protection of personal data in the Philippines.
This Privacy Policy was last reviewed and approved on 1 January 2026 and is effective for all 666p players and site visitors from that date.
Ready to Play?
Experience Secure Gaming at 666p
Your privacy and security are built into every layer of the 666p platform. Join thousands of Filipino players enjoying slots, live table games, bingo, keno, and more — all in Philippine Peso, all PAGCOR-regulated. Must be 21+.