Privacy Policy – p66 Casino Philippines

1. Introduction

p66 ("we", "us", "our") operates the online casino and sports betting platform accessible at p66.bio. We are committed to protecting the privacy and personal data of all players, prospective members, and site visitors ("you", "your").

This Privacy Policy describes how p66 processes personal data in connection with the operation of the platform, fulfilment of our legal obligations, and the delivery of Services. It applies to all data collected through the p66.bio website, our mobile-optimised browser interface, and any direct communications channels (live chat, email, and support ticket systems).

By registering an account on p66 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. Please review it carefully and contact our Data Protection Officer if you have any questions.

2. Data Controller

p66 is the data controller in respect of personal data collected through the p66.bio platform. As data controller, p66 determines the purposes and means of processing personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

Our designated Data Protection Officer (DPO) may be contacted via the support email listed in Section 16 of this policy. The DPO is responsible for handling data subject access requests, complaints, and enquiries relating to this Privacy Policy.

3. Personal Data We Collect

p66 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine passport number, SSS number, PhilSys ID).
• Contact Data: Email address, mobile telephone number, and residential address (including city, province, and postal code).
• Financial Data: GCash or Maya mobile number, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records, and PHP balance information.
• Verification Data: Copies of identity documents, proof of address, and payment method verification materials submitted during KYC processes.
• Technical Data: IP address, device type, operating system, browser type and version, and session identifiers.
• Usage Data: Game history, bet records, session duration, pages visited, features accessed, and interaction logs within the p66 platform.
• Communications Data: Records of live chat conversations, support tickets, and email correspondence with the p66 support team.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session time preferences, and any responsible gaming assessments conducted at the player's request.

4. How We Collect Personal Data

p66 collects personal data through the following means:

• Directly from you: During account registration, KYC verification, deposit and withdrawal requests, support communications, and when you update your account profile.
• Automatically: Via cookies, web beacons, and similar tracking technologies as you navigate the p66 platform (see Section 10).
• From third parties: From identity verification service providers, payment processors (GCash, Maya, BPI, BDO), fraud prevention services, and, where applicable, from publicly available sources to verify information you have provided.

5. Purposes of Processing

p66 processes your personal data for the following purposes:

• To create, manage, and administer your p66 player account.
• To verify your identity and eligibility to use the Services, including age verification (21+ requirement) and KYC compliance.
• To process deposits, withdrawals, and other financial transactions in Philippine Peso.
• To deliver the gaming and sports betting services you have requested.
• To calculate and credit VIP loyalty points and administer promotional offers.
• To comply with anti-money laundering (AML) obligations, PAGCOR requirements, and other applicable Philippine legal and regulatory requirements.
• To detect, investigate, and prevent fraud, collusion, and other prohibited activities on the platform.
• To provide customer support and respond to your enquiries.
• To send service-related communications (account alerts, security notifications, policy updates).
• To send marketing communications where you have provided consent, including promotional offers, bonus alerts, and VIP programme updates.
• To improve and personalise the p66 platform based on usage analytics.
• To enforce our Terms & Conditions and exercise or defend legal claims.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act (RA 10173), p66 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to enter into and perform our contract with you (account operation, transaction processing, service delivery).
• Legal obligation: Processing required to comply with AML regulations, PAGCOR requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw consent at any time.

7. Sharing Your Personal Data

p66 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, and Metrobank, to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify player identity and comply with regulatory obligations.
• Game providers: Licensed game studios and live dealer operators who supply games accessible via the p66 platform. These providers may receive game session data necessary to operate their games.
• Regulatory authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law or regulatory instruction.
• Professional advisers: Legal, audit, and compliance advisers, subject to professional confidentiality obligations.
• Technology service providers: Cloud hosting, cybersecurity, and platform analytics providers who process data on behalf of p66 under data processing agreements.

p66 does not sell your personal data to third-party advertisers or data brokers.

8. International Data Transfers

Some of p66's service providers and technology partners may be located or process data outside the Philippines. Where such transfers occur, p66 ensures that appropriate safeguards are in place consistent with the requirements of the Philippine Data Privacy Act, including contractual data protection clauses and adequacy assessments of the recipient country's data protection framework.

9. Data Retention

p66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including the satisfaction of legal, accounting, and regulatory reporting requirements. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in accordance with Philippine AML obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Marketing preferences: Retained until consent is withdrawn or until the account is closed.
• Support communications: Retained for two (2) years from the date of the communication, unless the subject matter requires longer retention (e.g., ongoing dispute).
• Technical and usage logs: Retained for twelve (12) months on an anonymised basis after account closure.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

10. Cookies and Tracking Technologies

The p66 platform uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and collect aggregate analytics data. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Retain your preferences (e.g., language, game history, login state) to improve your experience on p66.
• Analytics cookies: Collect anonymised data about how players navigate and use the platform, used to improve platform performance and content relevance.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies may affect some features of the p66 platform but will not prevent access to core services.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights in respect of personal data held by p66:

• Right to be informed: The right to receive clear, accurate information about how your data is collected and used — as set out in this policy.
• Right of access: The right to request a copy of the personal data p66 holds about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data where there is no longer a lawful basis for its retention (subject to AML and regulatory retention requirements).
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to request its transmission to another data controller.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, contact the p66 Data Protection Officer as described in Section 16. We will respond to all verified requests within thirty (30) calendar days.

12. Security Measures

p66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and p66 servers.
• Encryption at rest for sensitive account and financial data stored on p66 infrastructure.
• Role-based access controls restricting staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication for internal administrative systems.
• Regular security audits and penetration testing of the p66 platform.
• Documented incident response procedures for data breaches, including NPC notification within 72 hours where required by the PDPA.

13. Children and Minors

The p66 platform is strictly intended for individuals aged 21 years or older. p66 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted at registration, and p66 reserves the right to request additional proof of age at any time.

If p66 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately closed, all associated data will be deleted, and any deposits will be returned to the original payment method where technically feasible.

14. Third-Party Links

The p66 platform may contain links to third-party services (for example, game providers' own information pages). p66 is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of p66.

15. Updates to This Privacy Policy

p66 may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, or regulatory guidance. Where updates are material, we will notify registered players via email or a site-wide notification at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the p66 platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

16. Contact & Data Protection Officer

For all privacy-related enquiries, data subject access requests, or complaints regarding p66's handling of your personal data, please contact our Data Protection Officer:

Email: [email protected] (subject line: "Privacy / DPO Request")

Response time: We will acknowledge your request within three (3) business days and provide a substantive response within thirty (30) calendar days of receipt of a verified request.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).