win66 Privacy Policy

Last Updated: 5 June 2026  |  This Privacy Policy applies to all win66 accounts and services accessed via win66.lat.

1. Who We Are and How to Contact Us

This Privacy Policy is issued by win66 ("win66", "we", "us", "our"), the operator of the online gaming platform accessible at win66.lat. win66 operates under PAGCOR regulatory oversight and is subject to Philippine data protection law as administered by the National Privacy Commission (NPC).

For all data privacy matters, including data subject access requests and complaints, you may contact our Data Protection Officer (DPO) via the win66 live support chat or in writing to: [email protected]

2. Personal Data We Collect

win66 collects the following categories of personal data from players and prospective players:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., SSS, PhilHealth, Passport, Driver's License, UMID).
• Contact Data: Philippine mobile number, email address, and residential address.
• Financial Data: GCash account reference, Maya/PayMaya account reference, bank account details (BPI, BDO, Metrobank, UnionBank, etc.), transaction history, deposit and withdrawal records, and account balance information.
• Technical Data: IP address, device identifier, browser type and version, operating system, time zone, and geolocation data (country and region level).
• Usage Data: Games played, bet amounts, session duration, login timestamps, platform navigation patterns, and promotional participation history.
• Communications Data: Records of customer support interactions via live chat, and any correspondence submitted to win66 in connection with your account.
• KYC Documentation: Photographs or scans of government-issued identification documents submitted for identity verification purposes.

3. How We Collect Your Data

win66 collects personal data through the following channels:

• Direct submission: Data you provide when registering a win66 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the win66 platform, including through cookies, web beacons, and server log files.
• Third-party sources: Identity verification and AML screening data from PAGCOR-approved KYC and fraud prevention service providers; payment data from GCash, Maya, and banking partners in connection with transaction processing.

4. Lawful Bases for Processing

win66 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The lawful bases we rely on are:

• Consent: Where you have given explicit consent, including consent to receive marketing communications (which you may withdraw at any time).
• Contractual necessity: Processing required to create and manage your win66 account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, tax reporting requirements, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and improvement of win66 services, provided such processing does not override your fundamental rights and freedoms.

5. How We Use Your Personal Data

win66 uses the personal data collected for the following purposes:

• Account registration, identity verification (KYC), and ongoing account management.
• Processing deposits and withdrawals in Philippine Peso via GCash, Maya, and other supported payment methods.
• Compliance with PAGCOR regulatory requirements, including age verification (21+), AML screening, and responsible gaming obligations.
• Detection and prevention of fraud, money laundering, account takeover, and other prohibited activities.
• Provision of customer support services via live chat and written correspondence.
• Sending transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.
• Sending promotional and marketing communications where you have consented to receive them.
• Responsible gaming monitoring and intervention, including identification of potential problem gambling behaviours and application of PAGCOR-mandated protective measures.
• Platform analytics, game performance monitoring, and improvement of the win66 user experience.

6. Disclosure of Personal Data to Third Parties

win66 does not sell or trade your personal data. We may disclose personal data to the following categories of third parties, strictly to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash (Globe Telecom), Maya (PayMaya Philippines), BPI, BDO, Metrobank, UnionBank, and other licensed Philippine payment institutions, solely for the purpose of processing your transactions.
• KYC and AML service providers: PAGCOR-approved identity verification and anti-money laundering screening providers engaged to assist win66 in meeting its regulatory obligations.
• Game content providers: Licensed game studios (such as PG Soft, Pragmatic Play, Jili, JDB) may receive anonymised or pseudonymised technical data to support game delivery and RNG certification. No personally identifiable player data is shared with game studios without your explicit consent.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and the National Privacy Commission, where disclosure is required by law or regulatory mandate.
• Professional advisers: Legal, audit, and compliance advisers engaged by win66, subject to binding confidentiality obligations.

7. International Data Transfers

Where personal data is transferred outside the Philippines — for example, to game content providers or cloud infrastructure providers whose servers are located in other countries — win66 ensures that such transfers comply with the Data Privacy Act of 2012 and NPC regulations on cross-border data flows. Specifically, win66 requires that recipient entities provide an adequate level of data protection, either through NPC-recognised adequacy standards, contractual data processing agreements, or binding corporate rules where applicable.

8. Data Retention

win66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, as required under the AMLA implementing rules and BIR regulations.
• Customer support records: Retained for two (2) years following the resolution of the relevant support interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year, as evidence of lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Cookies and Tracking Technologies

win66 uses cookies and similar tracking technologies on the platform to support core functionality (session management, authentication), analytics (understanding how players use the platform), and security (fraud detection and bot prevention). Strictly necessary cookies are set automatically and cannot be disabled, as they are required for the platform to function. Analytics and security cookies are set in win66's legitimate interest.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the win66 platform, including the ability to log in or process transactions.

10. Your Rights Under the Data Privacy Act

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by win66:

• Right to be informed: The right to know that your personal data is being collected and processed, and the purposes and scope of such processing.
• Right of access: The right to obtain confirmation that win66 holds personal data about you and to receive a copy of that data.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to win66's legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller.
• Right to object: The right to object to processing of your personal data on grounds of legitimate interests, including for direct marketing purposes.
• Right to damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of personal data.

To exercise any of these rights, contact win66's Data Protection Officer via live chat support or at [email protected]. win66 will respond to data subject requests within fifteen (15) working days of receipt, or within such extended period as permitted under NPC guidelines for complex requests.

11. Security Measures

win66 implements technical and organisational security measures appropriate to the risk presented by the processing activities. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage of sensitive personal data at rest, access controls and role-based permissions limiting staff access to personal data on a need-to-know basis, regular security audits and penetration testing, and mandatory security training for all staff with access to personal data. Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their win66 accounts.

12. Children and Minors

win66 does not knowingly collect personal data from individuals under the age of twenty-one (21) years. The Platform is strictly for adults aged 21 and above in compliance with PAGCOR regulations and Philippine law. Where win66 discovers that personal data has been collected from a minor, that data will be deleted immediately and the associated account permanently closed. Age verification is conducted as part of the KYC process for all win66 accounts. If you believe that a minor has registered for a win66 account, please contact win66 support immediately.

13. Changes to This Privacy Policy

win66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via their registered email address or through a platform notification at least seven (7) days before taking effect. The "Last Updated" date at the top of this Policy indicates when the most recent revision was published. Continued use of the win66 Platform following notification of changes constitutes acceptance of the revised Privacy Policy.

14. Data Protection Officer and NPC Complaints

win66's designated Data Protection Officer (DPO) is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO can be contacted at: [email protected]

If you believe that win66 has not handled your personal data in accordance with this Policy or applicable Philippine data protection law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website. win66 encourages players to contact our DPO first to allow us to address concerns directly before escalating to the NPC.