pp66 Privacy Policy

1 Data Controller

The data controller responsible for your personal data collected through pp66.onl is the operator of the pp66 platform — a PAGCOR-supervised entity providing online gaming and sports betting services in the Republic of the Philippines. References to "pp66," "we," "us," or "our" in this Privacy Policy refer to this entity in its capacity as data controller.

pp66 has designated a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012 and National Privacy Commission (NPC) regulations. Contact details for the DPO are provided in Section 15 of this Policy.

2 Scope & Application

This Privacy Policy applies to all personal data processed by pp66 in connection with:

• Your registration for and use of a pp66 Account.
• Your access to and use of any game, feature, or content on pp66.onl.
• Financial transactions, including deposits and withdrawals, made through the pp66 platform.
• Your communications with pp66's customer support team through any channel.
• Your participation in pp66 promotions, loyalty programs, or surveys.
• Visits to pp66.onl, including browsing the website without registering an Account.

This Policy does not apply to third-party websites, services, or platforms that may be referenced or linked from pp66.onl. pp66 is not responsible for the privacy practices of any third party.

3 Personal Data We Collect

pp66 collects the following categories of personal data depending on how you interact with the platform:

pp66 does not intentionally collect sensitive personal information beyond what is necessary for KYC and regulatory compliance. Any sensitive data collected — such as government ID information — is processed only for the purposes described in Section 5 of this Policy.

4 How We Collect Your Data

pp66 collects personal data through the following methods:

• Direct collection: Data you provide actively when completing registration, KYC verification, making deposits or withdrawals, participating in promotions, or communicating with support.
• Automated collection: Technical and usage data collected automatically when you access pp66.onl via cookies, server logs, and similar technologies. See Section 9 for details.
• Third-party sources: Identity and fraud screening data received from regulated KYC verification service providers, payment processors, and fraud prevention systems in connection with account verification and transaction monitoring.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with compliance obligations, including player protection programs and exclusion lists.

5 Purposes & Legal Basis for Processing

pp66 processes your personal data only for specific, legitimate purposes and only where a valid legal basis exists under the Philippine Data Privacy Act. The following table sets out the primary purposes for which pp66 processes your data and the applicable legal basis for each:

Where pp66 relies on your consent as the legal basis for processing — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

pp66 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, and Cebuana Lhuillier — to facilitate deposit and withdrawal transactions. Each processor operates under its own privacy framework and applicable Philippine financial regulations.
• KYC and identity verification providers: Regulated third-party services that assist pp66 in verifying player identity, age, and document authenticity as required by PAGCOR.
• Gaming software providers: Certified game studios and live casino operators whose games are accessible through the pp66 platform may receive session data necessary for game operation and audit purposes.
• Fraud prevention and security services: Specialized providers that assist pp66 in detecting unauthorized access, account fraud, and financial crime.
• PAGCOR and regulatory authorities: pp66 is required by law to report certain player and transaction data to PAGCOR. This includes data relevant to responsible gaming, AML monitoring, and audit obligations.
• Law enforcement and courts: Where required by a valid legal process — such as a court order, warrant, or regulatory demand — pp66 will disclose player data to the appropriate Philippine authorities.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pp66's business, player data may be transferred to the acquiring entity subject to equivalent data protection obligations.

7 Data Retention

pp66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The following retention principles apply:

• Active Accounts: Personal data, transaction records, and gaming activity data are retained for the full duration of your active pp66 Account.
• Closed Accounts: Following Account closure, pp66 retains transaction records, KYC documentation, and Account activity logs for a minimum of five (5) years as required under PAGCOR regulations and the Anti-Money Laundering Act of 2001.
• Support Communications: Live chat transcripts and support correspondence are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Marketing Data: Marketing consent records are retained for the period of consent and for three (3) years following withdrawal of consent to demonstrate compliance.
• Technical and Log Data: Server logs and technical data are retained for twelve (12) months and then anonymized or deleted unless required for ongoing security or legal investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

8 Security Measures

pp66 implements and maintains appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/HTTPS): All data transmitted between your device and pp66.onl is encrypted in transit using current TLS standards.
• Password hashing: Account passwords are stored using industry-standard one-way hashing algorithms. pp66 cannot read or recover your plain-text password.
• Access controls: Access to systems containing personal data is restricted to authorized pp66 personnel on a need-to-know basis, enforced through role-based access control and multi-factor authentication for internal systems.
• OTP verification: Sensitive Account actions — including withdrawals and password resets — require one-time password (OTP) verification to your registered Philippine mobile number.
• Fraud monitoring: Automated systems monitor Account activity in real time for unusual patterns indicative of unauthorized access or financial fraud.
• Data breach response: pp66 maintains an incident response procedure that includes timely notification to affected players and the National Privacy Commission in the event of a personal data breach, as required under NPC Circular No. 16-03.

While pp66 takes reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying pp66 immediately if you suspect unauthorized access to your Account.

9 Cookies & Tracking Technologies

pp66 uses cookies and similar tracking technologies on pp66.onl to provide, maintain, and improve the platform. The following types of cookies are used:

• Essential cookies: Required for core platform functionality including session management, Account authentication, and security features. These cannot be disabled without impacting core platform operation.
• Functional cookies: Store your preferences such as language settings, game view modes, and interface customizations to personalize your pp66 experience.
• Analytics cookies: Collect anonymized data about how players navigate and use pp66.onl, allowing pp66 to identify usability improvements and feature usage patterns. This data is aggregated and does not identify individual players.
• Security cookies: Used for fraud detection and to identify suspicious access patterns or automated bot activity targeting the pp66 platform.

pp66 does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect platform functionality.

10 Minors & Age Restriction

pp66 is strictly intended for use by individuals who are 21 years of age or older in accordance with the minimum gambling age required under PAGCOR regulations in the Philippines. pp66 does not knowingly collect personal data from any person under the age of 21.

Age verification is a mandatory component of the pp66 KYC process. Registration data is screened for indicators of underage access. Where pp66 identifies or reasonably suspects that an Account belongs to a person under 21 years of age, the Account will be immediately suspended, access to real-money games will be terminated, and the matter will be handled in accordance with PAGCOR's underage gaming protocols.

If a parent or guardian believes that a minor has registered for a pp66 Account or submitted personal data to pp66 without authorization, they should contact pp66 support immediately via live chat or at [email protected] so that the Account can be investigated and any data belonging to the minor can be removed.

11 Your Data Rights Under Philippine Law

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by pp66. These rights may be exercised by contacting pp66's Data Protection Officer as described in Section 15:

pp66 will respond to verified data rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further thirty (30) days with notice to the requestor. pp66 will not charge a fee for reasonable data rights requests.

Note that certain rights — particularly the right to erasure — may be subject to overriding legal obligations that require pp66 to retain specific data under PAGCOR regulations, the Anti-Money Laundering Act, or other applicable Philippine law. In such cases, pp66 will explain the applicable legal basis for retention.

12 Cross-Border Data Transfers

Some of pp66's third-party service providers — including gaming software studios, KYC platforms, and cloud infrastructure providers — may process personal data outside the Republic of the Philippines. When such cross-border transfers occur, pp66 ensures that:

• The recipient country's data protection standards are assessed to be adequate, or
• Appropriate contractual safeguards are in place through data processing agreements that include standard contractual clauses consistent with NPC requirements, or
• The transfer is otherwise authorized under the Philippine Data Privacy Act and NPC implementing regulations.

By using pp66, you acknowledge that your personal data may be processed in countries outside the Philippines as described in this section, subject to the safeguards described above.

13 Third-Party Services & Linked Content

pp66.onl may reference or display content from third-party providers such as game studios. These third parties may have their own privacy practices and data collection mechanisms that are independent of pp66. This Privacy Policy applies solely to data collected by pp66 in connection with the pp66 platform. pp66 is not responsible for the privacy practices of any third-party service, platform, or content provider.

When you make a payment through GCash, PayMaya, or any other Philippine payment provider, that provider's own privacy policy governs the data you submit to their platform. pp66 only receives the confirmation data necessary to credit your Account or process your withdrawal.

14 Policy Amendments

pp66 may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable law, regulatory requirements, or platform features. Where material changes are made, pp66 will notify registered players through in-account notifications or email to the registered address at least 7 days before the updated Policy takes effect, except where immediate implementation is required to comply with a legal obligation.

The "Effective Date" at the top of this Policy indicates when the current version came into force. Continued use of the pp66 platform after the effective date of any updated Policy constitutes your acceptance of the updated Privacy Policy.

The most current version of this Privacy Policy is always available at pp66.onl/privacy-policy.

15 Contact & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise a data right, or have a concern about how pp66 has handled your personal data, please contact pp66 through the following channels:

• Data Protection Officer (DPO):
  Email: [email protected]
  Subject line: "Data Privacy Request" — for all formal data rights requests and privacy complaints. The DPO will acknowledge your request within five (5) business days.
• Live Chat Support:
  Available 24/7 through the pp66 platform for general account-related privacy questions. Access via the chat icon after logging into your Account.

If you are not satisfied with pp66's response to a privacy concern, you have the right to escalate your complaint to the Philippine National Privacy Commission (NPC) at privacy.gov.ph. The NPC is the Philippine government body responsible for administering and enforcing the Data Privacy Act of 2012.