pp66 Privacy Policy
Your Data, Your Rights

This Privacy Policy is issued by pp66 ("pp66," "we," "us," or "our"), the operator of the online gaming platform accessible at pp66.one. pp66 operates under PAGCOR's regulatory framework and is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

For the purposes of the Data Privacy Act, pp66 acts as the Personal Information Controller in respect of the personal data of its registered players and website visitors. This means pp66 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected through the pp66 website, mobile platform, customer support channels, and any other touchpoint through which you interact with pp66. By registering an account or using the pp66 platform, you acknowledge that you have read and understood this Privacy Policy.

pp66 collects personal data in the following categories, depending on how you interact with the platform:

pp66 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. pp66 does not collect biometric data, religious beliefs, political opinions, or health information unless specifically required by applicable law.

pp66 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your pp66 account, including verifying your identity and age (21+ requirement) through KYC procedures.
• Service delivery: To provide access to games, the sportsbook, live dealer tables, bingo, and all other pp66 platform features.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, and to verify that payment methods are registered in your name.
• Regulatory compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and all other applicable Philippine laws and regulations, including reporting obligations to the Anti-Money Laundering Council (AMLC).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct.
• Responsible gaming: To monitor gaming patterns, administer responsible gaming tools (deposit limits, self-exclusion), and identify players who may be at risk of problem gambling.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time through your account settings.
• Platform improvement: To analyze usage patterns, conduct research, and improve the pp66 platform's features, performance, and user experience.

Under the Data Privacy Act of 2012, pp66 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and pp66 — including account registration, game access, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, NPC requirements, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pp66 does not sell your personal data to third parties. pp66 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and satisfy regulatory requirements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory obligation.
• IT and platform service providers: Cloud hosting, cybersecurity, and technical infrastructure providers who process data on pp66's behalf under strict data processing agreements.
• Game content providers: Licensed game studios and software providers whose games are offered on the pp66 platform, to the extent necessary for game operation and audit purposes.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

Any third party that receives personal data from pp66 is required to handle that data in accordance with the Data Privacy Act of 2012 and is prohibited from using it for any purpose other than the specific purpose for which it was shared.

The pp66 platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, analyze usage patterns, and deliver relevant content. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the pp66 platform, helping us identify areas for improvement. These are only set with your consent.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are only set with your explicit consent.

You can manage your cookie preferences through the cookie settings panel available on the pp66 platform. Withdrawing consent for non-essential cookies will not affect your ability to use the core platform features.

pp66 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction, as required by AMLA and tax regulations.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the communication relates to an ongoing dispute or regulatory matter.
• Technical and log data: Retained for up to twelve (12) months, unless required for longer periods for security investigation or regulatory purposes.
• Marketing consent records: Retained for the duration of your account and for three (3) years following account closure, as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with pp66's data disposal procedures.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by pp66:

• Right to be informed: The right to know what personal data pp66 holds about you, the purposes for which it is processed, and the recipients to whom it has been disclosed.
• Right of access: The right to request a copy of the personal data pp66 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pp66's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe pp66 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact pp66's Data Protection Officer via live chat or by email at support@pp66.one. pp66 will respond to all verified requests within thirty (30) days. Note that certain rights may be limited where pp66 is required to retain or process data to comply with legal obligations.

pp66 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the pp66 platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that pp66 staff can only access personal data necessary for their specific job functions.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent cybersecurity specialists.
• Multi-factor authentication requirements for all pp66 staff accessing systems that contain personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While pp66 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your pp66 account credentials and for notifying pp66 immediately if you suspect unauthorized access to your account.

The pp66 platform is strictly for persons aged 21 years and older, in accordance with PAGCOR's regulatory requirements for online gaming in the Philippines. pp66 does not knowingly collect personal data from any person under the age of 21.

If pp66 discovers that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all associated data will be deleted (subject to any legal retention obligations), and any deposited funds will be returned to the payment source. If you believe a minor has registered on the pp66 platform, please contact us immediately at support@pp66.one.

pp66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, pp66 will notify registered players by email or via an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. We encourage you to review this page periodically to stay informed about how pp66 protects your personal data. Your continued use of the pp66 platform following any update constitutes your acknowledgment of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or pp66's handling of your personal data, please contact our Data Protection Officer through any of the following channels:

• Live Chat: Available 24/7 directly on the pp66 platform — average response time under 3 minutes.
• Email: support@pp66.one — responses within 2 business days for privacy-related inquiries.

If you are not satisfied with pp66's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.