pg66 Privacy Policy

01 Who We Are

pg66 is an online gaming platform accessible at pg66.ws, operated for the benefit of Filipino players across all regions of the Philippines — including Manila, Cebu, Davao, Quezon City, Makati, and beyond. pg66 offers live casino games, JILI slots, bingo, sports betting, and related entertainment services denominated in Philippine Pesos (PHP).

For the purposes of applicable Philippine data privacy law, pg66 acts as the Personal Information Controller (PIC) in respect of personal data collected from players. This means pg66 determines the purposes and means by which your personal data is processed.

pg66 operates in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC) of the Philippines. Where applicable, pg66 also adheres to PAGCOR data governance standards relevant to licensed online gaming operators.

References to "personal data" in this policy mean any information relating to an identified or identifiable natural person — that is, any detail that could directly or indirectly identify you as an individual player on the pg66 platform.

02 Data We Collect

pg66 collects personal data in three primary ways: data you provide directly, data generated automatically through your use of the platform, and data obtained from third parties as part of our legal verification obligations. The table below summarises the categories of data we collect:

pg66 does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health records, political opinions, or biometric data beyond identity verification requirements) unless strictly necessary for legal compliance purposes, in which case you will be separately notified.

03 How We Use Your Data

pg66 processes your personal data for the following specific and legitimate purposes:

• Account Registration and Management: To create your pg66 account, verify your identity, authenticate your login sessions, and manage your account profile and preferences throughout your relationship with pg66.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved channels. Your financial data is used solely for transaction processing and fraud prevention.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years as required under PAGCOR regulations, and to confirm your identity before releasing withdrawal funds. pg66 enforces strict age verification to protect minors from accessing gaming services.
• Legal and Regulatory Compliance: To fulfil pg66's obligations under Philippine law, including anti-money laundering (AML) reporting requirements, PAGCOR licensing conditions, and NPC data governance standards.
• Responsible Gaming Enforcement: To monitor gaming behaviour, enforce deposit limits and self-exclusion requests, and identify potential problem gambling patterns in accordance with our Responsible Gaming Policy.
• Platform Security and Fraud Prevention: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, collusion, money laundering, and other forms of fraudulent or prohibited activity on the pg66 platform.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver effective 24/7 support to Filipino players across all regions.
• Platform Improvement: To analyse aggregated and anonymised usage patterns in order to improve the pg66 platform, fix technical issues, develop new features, and enhance the overall player experience.
• Promotional Communications: To send you relevant offers, bonus notifications, and updates about new games or features at pg66, where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting [email protected].

pg66 will not use your personal data for any purpose that is incompatible with the purposes listed above without providing you with prior notice and, where required by law, obtaining your separate consent.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, pg66 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and pg66 — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing for KYC, AML compliance, age verification, and regulatory reporting is required by Philippine law and PAGCOR licensing conditions. pg66 is legally obligated to conduct this processing regardless of your consent.
• Legitimate Interest: Processing for fraud prevention, platform security, abuse detection, and anonymised analytics is based on pg66's legitimate interest in operating a secure and sustainable gaming platform, provided that such interest does not override your fundamental privacy rights.
• Consent: Processing for direct marketing and promotional communications is based on your freely given, specific, and informed consent obtained at registration or at any subsequent point. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting [email protected] or adjusting your notification preferences in your account settings panel. Withdrawal of consent does not affect the validity of processing conducted prior to withdrawal.

05 Sharing Your Data

pg66 does not sell, rent, or trade your personal information to any third party for commercial purposes. We may share your data with the following categories of recipients only to the extent strictly necessary:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment processors receive only the minimum financial data necessary to process your deposit or withdrawal transaction. These providers are contractually bound to process your data solely for that purpose.
• Identity Verification Providers: Third-party KYC service providers may process copies of your identity documents for the sole purpose of verifying your identity and age on behalf of pg66. These providers operate under strict data processing agreements.
• Game Content Providers: Providers of live casino streams, slot content, and other game software integrated into pg66 may receive pseudonymised player session identifiers necessary for game operation and RNG certification. No directly identifiable personal data is shared beyond what is technically necessary.
• Regulatory Authorities: pg66 is legally required to disclose player information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other competent Philippine authorities upon lawful demand. Such disclosures are made only to the extent required by law.
• Professional Advisors: pg66's legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential, need-to-know basis in the course of providing professional services to the Company.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of pg66's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer in advance.

All third-party recipients of pg66 player data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond that for which it was shared.

06 International Data Transfers

pg66 primarily processes and stores player data on servers located within or accessible from the Philippines. However, some of our technology infrastructure providers, game content providers, and KYC partners may operate servers in other jurisdictions.

Where your personal data is transferred outside the Philippines, pg66 ensures that such transfers are subject to appropriate safeguards in accordance with the Data Privacy Act of 2012 and NPC guidelines, including:

• Contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law;
• Transfer only to jurisdictions that the NPC has recognised as providing an adequate level of protection for personal data; or
• Your explicit consent to the transfer where neither of the above safeguards is available.

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting [email protected].

07 Cookies and Tracking Technologies

pg66 uses cookies and similar tracking technologies to operate the platform efficiently, maintain your session, and improve your experience. The following types of cookies are used on pg66.ws:

pg66 does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies. You will not be tracked across other websites as a result of using pg66.

You can manage cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary or security cookies may prevent you from accessing your pg66 account or using key platform features.

08 Data Security

pg66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and pg66.ws is encrypted using current Transport Layer Security (TLS) protocols, ensuring that your personal and financial information cannot be intercepted during transmission.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial account details, is stored in encrypted form on secured servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to player personal data within pg66 is strictly limited on a role-based, need-to-know basis. pg66 staff who can access player data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: pg66 supports and encourages two-factor authentication (2FA) on all player accounts to prevent unauthorised access even in the event of credential compromise.
• Intrusion Detection and Monitoring: pg66's infrastructure is monitored 24/7 for anomalous activity, potential intrusions, and data breach indicators. Automated alerts trigger immediate investigation protocols.
• Regular Security Audits: pg66 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in the platform's data security posture.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pg66 will notify affected players and the National Privacy Commission within the timeframes required by Philippine law.

You are responsible for keeping your pg66 login credentials confidential. pg66 will never ask for your password through any communication channel. If you suspect unauthorised access to your account, contact [email protected] immediately.

09 Data Retention Periods

pg66 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active pg66 account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and Philippine AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended) and AMLC regulations.
• KYC Verification Documents: Retained for five (5) years from account closure or the completion of the last transaction, whichever is later, in accordance with AMLC and PAGCOR requirements.
• Gaming Activity Logs: Retained for three (3) years from the date of each gaming session, for the purposes of dispute resolution, responsible gaming monitoring, and regulatory audit.
• Customer Support Communications: Retained for two (2) years from the date of each communication, for the purposes of quality assurance and dispute resolution.
• Technical and Log Data: Retained for twelve (12) months from collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for as long as you remain opted in to marketing communications, plus three (3) years following withdrawal of consent, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, pg66 will securely delete or anonymise your personal data in a manner that prevents its reconstruction, unless a legal obligation requires its continued retention.

10 Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in respect of your personal data held by pg66. All requests should be submitted in writing to [email protected] with the subject line "Data Rights Request":

To exercise any of the above rights, email [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and respond fully within 15 business days. We may require identity verification before processing certain requests to protect against unauthorised access to your data.

11 Minors and Age Restriction

pg66 is strictly an adult-only gaming platform. In compliance with PAGCOR regulations applicable in the Philippines, the minimum age to register and play at pg66 is 21 years old. pg66 does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory component of the pg66 registration and KYC process. If pg66 discovers or reasonably suspects that a registered player is under 21 years of age, the account will be immediately suspended, all gameplay will be voided, and any balance will be withheld pending investigation and, where appropriate, returned to the depositing payment source.

If you are a parent or guardian and believe that your child under the age of 21 has registered a pg66 account, please contact [email protected] immediately. pg66 will investigate and take appropriate action within 24 hours of receiving the notification.

pg66 encourages parents and guardians to use parental control software to restrict minors from accessing online gaming content. We recommend consulting resources provided by PAGCOR for guidance on protecting young people from gambling-related harm.

12 Third-Party Links

The pg66 platform at pg66.ws does not contain links to external third-party websites for commercial or advertising purposes. All navigation links on pg66.ws direct to pages within the pg66 platform itself.

In the event that any third-party content integrated into pg66 (such as embedded game interfaces from licensed game providers) contains links to external content, pg66 is not responsible for the privacy practices of those third parties. Each external website or service operates under its own privacy policy, and you should review those policies before providing any personal information to any third-party service.

13 Updates to This Privacy Policy

pg66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The "Last Updated" date displayed at the top of this page will be revised with each amendment.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way we use your personal data — pg66 will notify registered players via the email address associated with their account at least seven (7) days before the amended policy takes effect.

Non-material changes, such as typographical corrections or clarifications that do not affect the substance of the policy, may be made without prior notice and take effect immediately upon publication.

Your continued use of the pg66 platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not accept the updated policy, you must cease using pg66 and may request account closure by contacting [email protected].

14 Contact Us and Data Protection Officer

pg66 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO is the primary point of contact for all data privacy-related enquiries, requests, and complaints from pg66 players.

To contact pg66's Data Protection Officer or submit any data-related request described in this policy, please use the following contact details:

• Email (DPO): [email protected] — use subject line "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 through the pg66 platform — request escalation to the Data Protection team
• Response Time: All data rights requests acknowledged within 3 business days; substantive response within 15 business days
• Operating Coverage: Serving players across all regions of the Philippines — Manila, Cebu, Davao, Quezon City, Makati, and nationwide

If you remain dissatisfied with pg66's response to your data privacy concern after contacting us directly, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which has regulatory jurisdiction over data privacy matters under Republic Act No. 10173.