Privacy Policy – 666pub Online Casino

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012), the data controller responsible for the personal information processed through the 666pub platform at 666pub.org is 666pub, a PAGCOR-regulated online gaming operator registered and operating in the Philippines.

666pub has designated a Data Protection Officer (DPO) in accordance with the NPC's registration requirements. The DPO can be contacted at [email protected] for any data privacy-related concerns, access requests, or complaints. Response to DPO inquiries will be provided within fifteen (15) business days as required under the Data Privacy Act.

666pub collects the following categories of personal data, depending on how you interact with the platform:

2.1 Registration Data. When you create a 666pub account, we collect your full legal name, date of birth, Philippine mobile number, email address, and a password (stored in hashed form). This data is required to establish and maintain your account.

2.2 Identity Verification (KYC) Data. To comply with PAGCOR requirements and the Anti-Money Laundering Act (AMLA), 666pub may collect copies of government-issued identification (Philippine National ID, passport, or driver's license), proof of address (utility bill or bank statement), and selfie images for liveness verification.

2.3 Financial Data. When you make deposits or withdrawal requests, we collect transaction records including GCash account numbers, Maya wallet references, or Philippine bank account details (BDO, BPI, Metrobank) as applicable. We do not store full card numbers; payment instrument data is tokenised by the relevant payment provider.

2.4 Gaming Activity Data. We collect records of your gameplay sessions on 666pub, including games played, bets placed, amounts wagered, winnings, and session timestamps. This data is used for account management, PAGCOR compliance reporting, and responsible gaming monitoring.

2.5 Technical and Device Data. We automatically collect your IP address, browser type and version, operating system, device identifier, and session logs when you access 666pub. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data. If you contact 666pub's customer support, we retain records of those communications — including emails, live chat transcripts, and support ticket content — for service quality and dispute resolution purposes.

666pub processes your personal data for the following purposes:

• Account management: To create, maintain, and secure your 666pub account, process your login credentials, and manage your account settings and preferences.
• Payment processing: To process deposits and withdrawals via GCash, Maya, and Philippine bank transfers, and to verify the ownership of payment instruments in accordance with same-source payment rules.
• PAGCOR regulatory compliance: To fulfil 666pub's obligations as a PAGCOR-licensed online gaming operator, including player identification, transaction reporting, and responsible gaming implementation.
• Anti-money laundering (AML) compliance: To comply with the Anti-Money Laundering Act of 2001 (RA 9160) as amended, including suspicious transaction reporting obligations to the Anti-Money Laundering Council (AMLC).
• Responsible gaming: To monitor gaming patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide appropriate intervention or support referrals where indicated.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct on the 666pub platform.
• Customer support: To respond to your inquiries, resolve account disputes, and maintain records of support interactions.
• Service improvement: To analyse aggregated, anonymised platform usage data for the purpose of improving 666pub's products, features, and user experience for Filipino players.
• Marketing communications: To send you promotional offers, bonus announcements, and platform updates where you have provided consent. You may withdraw consent at any time by emailing [email protected].

666pub processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to create and maintain your 666pub account and to execute deposits, withdrawals, and game transactions pursuant to the Terms & Conditions.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the National Internal Revenue Code, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform integrity — where such interests do not override your data subject rights.
• Consent: Processing for marketing communications and non-essential cookies, where your express prior consent has been obtained and may be withdrawn at any time.

5.1 Payment Processors. 666pub shares necessary financial data with GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BDO Unibank, BPI, and Metrobank solely to process your deposits and withdrawals. These entities are independent data controllers subject to their own privacy policies and BSP regulations.

5.2 PAGCOR and Regulatory Authorities. 666pub is required by law to share player data and transaction records with PAGCOR, the AMLC, the BIR, and other Philippine government authorities upon lawful request. 666pub will not notify players in advance of such disclosures where prohibited by law.

5.3 KYC and Identity Verification Providers. 666pub may use accredited third-party identity verification service providers to assist with KYC processes. These providers are contractually bound to process personal data only for the purpose of identity verification on behalf of 666pub.

5.4 Game Software Providers. Game data (game type, session duration, bet amounts) is shared with 666pub's licensed game software providers solely for technical game delivery and RNG audit purposes. These providers do not receive personally identifiable information beyond what is necessary for game session management.

5.5 No Sale of Data. 666pub does not sell, rent, trade, or otherwise transfer your personal information to any third party for commercial or marketing purposes.

666pub uses cookies and similar tracking technologies on 666pub.org for the following purposes:

• Essential cookies: Required for the Platform to function — session authentication, login state persistence, and security tokens. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to understand how Filipino players navigate and use 666pub, in order to improve the platform experience. Data collected is aggregated and anonymised.
• Preference cookies: Store your language, currency, and display preferences to personalise your 666pub experience across sessions.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in to or using core features of 666pub.

666pub implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmissions between your device and 666pub servers;
• Passwords stored using cryptographic hashing with salting — plain-text passwords are never stored or transmitted;
• Two-factor authentication (2FA) via SMS OTP available and recommended for all 666pub accounts;
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis;
• Regular penetration testing and security audits of the 666pub platform infrastructure;
• Automated fraud detection and anomalous login monitoring with real-time alerts;
• Incident response plan in place for personal data breaches, including NPC notification procedures.

666pub retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account data and KYC records: Retained for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction records: Retained for ten (10) years in accordance with BIR record-keeping requirements under the National Internal Revenue Code.
• Customer support communications: Retained for three (3) years after the resolution of the relevant support interaction.
• Marketing consent records: Retained for the duration of your 666pub account or until consent is withdrawn, whichever comes first.
• Technical and device logs: Retained for twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with NPC guidelines.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 666pub:

• Right to be informed: The right to know what personal data 666pub holds about you and how it is being processed.
• Right of access: The right to request a copy of the personal data 666pub holds about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected without undue delay.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention requirements.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds of legitimate interests.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the 666pub Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond within fifteen (15) business days.

666pub does not knowingly collect personal data from individuals under 21 years of age. Access to the 666pub platform is strictly restricted to adults aged 21 and above per PAGCOR's online gaming regulations. If we become aware that an account has been registered by a person under 21, the account will be immediately suspended, all personal data will be deleted without undue delay, and any deposits will be returned per PAGCOR protocol.

Parents and guardians who believe their child has registered a 666pub account should contact us immediately at [email protected].

666pub's primary servers are located within or serve the Philippine market. Where personal data is processed by third-party service providers located outside the Philippines (e.g., international game software providers or cloud infrastructure providers), 666pub ensures that such transfers are subject to adequate data protection safeguards, including contractual data processing agreements incorporating the NPC's standard contractual clauses, or transfers to jurisdictions deemed to provide adequate levels of data protection.

666pub may update this Privacy Policy from time to time to reflect changes in Philippine data protection law, PAGCOR regulations, or our data processing practices. Material changes will be communicated to registered players via email to the address on file or through a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is indicated at the top of this Policy. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

For all privacy-related inquiries, data subject requests, or complaints regarding 666pub's data processing practices, please contact:

• Data Protection Officer, 666pub
• Email: [email protected]
• Subject line: "Data Privacy Request" or "DPO Inquiry"
• Response time: Within 15 business days as required under the Data Privacy Act

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at [email protected] or by filing a complaint through the NPC's official website.