win66 is committed to protecting the personal data of every Filipino player on our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable Philippine laws.
win66 collects personal data necessary for account registration, identity verification (KYC), payment processing, and responsible gaming compliance — including your name, mobile number, date of birth, government ID, and transaction history.
All personal data transmitted to and stored by win66 is protected by 256-bit SSL encryption, access-controlled databases, and security protocols aligned with Philippine data protection standards under the NPC framework.
As a data subject under the Philippine Data Privacy Act of 2012, you have the right to be informed, access your data, object to its processing, correct inaccuracies, erase it where applicable, and seek damages for unauthorized use.
win66 shares player data only where legally required — with PAGCOR, AMLC, NBI, or other Philippine regulatory and law enforcement authorities — or with certified third-party payment processors and game providers under strict data processing agreements.
win66 uses essential session cookies, functional preference cookies, and anonymized analytics data to operate the platform, maintain login sessions, and improve the player experience. No personally identifiable information is shared through analytics.
For any data privacy request — access, correction, deletion, or complaint — contact win66's designated Data Protection Officer via the support email. All data privacy requests are handled within the timeframes prescribed by the NPC.
1.1 This Privacy Policy sets out how win66 ("win66," "we," "us," or "our") collects, uses, stores, shares, and protects personal data in connection with the operation of the win66 online gaming platform available at win66.bio and all associated services (collectively, the "Platform").
1.2 win66 is committed to processing personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, the issuances of the National Privacy Commission (NPC), and all other applicable Philippine laws and regulations governing data protection.
1.3 By registering an account on the win66 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Privacy Policy, you must not register an account or continue to use the Platform.
1.4 This Privacy Policy should be read together with win66's Terms & Conditions, which are available at win66.bio/terms-conditions.
Plain Language Note: This policy explains what personal information win66 holds about you, why we have it, what we do with it, and what you can do if you want to see, correct, or delete it. Filipino players have strong data rights under RA 10173 — this policy is how win66 honors those rights.
2.1 For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, win66 is the personal information controller in respect of all personal data collected from players and visitors to the win66 Platform.
2.2 win66 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and all applicable data protection obligations. Contact details for the win66 DPO are provided in Section 15 of this Policy.
2.3 Certain personal data processing activities — specifically those carried out by win66's third-party game providers, payment processors (including GCash and Maya service providers), and KYC verification partners — are performed by those parties as personal information processors acting under win66's instructions and subject to data processing agreements that require compliance with RA 10173 standards.
3.1 win66 collects the following categories of personal data from players:
| Category | Examples of Personal Data |
|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number (passport, driver's license, SSS/UMID, PhilHealth, Voter's ID), photograph where provided during KYC. |
| Contact Data | Philippine mobile number (Globe, Smart, DITO, or other network), email address. |
| Financial Data | GCash account reference, Maya account reference, bank account details where provided for withdrawal, deposit and withdrawal transaction records, win66 account balance history. |
| Account Data | Username, encrypted password, account creation date, login history, session logs, device identifiers used to access the Platform. |
| Gaming Data | Game session records, wager amounts, game results, bonus usage history, responsible gaming limit settings and self-exclusion records. |
| Technical Data | IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited on the Platform, session duration. |
| Communications Data | Records of communications with win66 customer support, including live chat transcripts and email correspondence. |
| Sensitive Personal Data | Where voluntarily disclosed in responsible gaming contexts: information relating to gambling-related health concerns or self-exclusion requests. This data is processed exclusively for responsible gaming purposes. |
3.2 win66 does not collect national identification numbers (PhilSys Number) beyond what is incidentally displayed on a submitted government ID for KYC purposes, and does not collect financial account passwords or PIN codes at any time.
4.1 Directly from You. The majority of personal data win66 holds is provided directly by you during:
4.2 Automatically. win66 automatically collects certain technical and usage data when you access or use the Platform, including:
4.3 From Third Parties. win66 may receive data from third parties in limited circumstances, including:
5.1 win66 processes personal data for the following specific, legitimate purposes:
| Purpose | Data Used |
|---|---|
| Account Registration & Management | Identity data, contact data, account data. To create and maintain your win66 account, authenticate your identity at login, and manage account preferences. |
| KYC & Age Verification | Identity data (government ID). To confirm that you meet the 21-year minimum age requirement and to verify your identity in compliance with regulatory obligations. |
| Payment Processing | Financial data, identity data. To process deposits via GCash, Maya, BPI, BDO, and other channels; to process withdrawal requests to verified payment methods. |
| Game Provision & Fair Play | Account data, gaming data. To deliver game services, maintain game session records, calculate and credit winnings, and investigate disputes. |
| Regulatory Compliance & AML | Identity data, financial data, gaming data. To comply with PAGCOR licensing conditions, Anti-Money Laundering Council (AMLC) obligations, and reporting requirements under RA 9160. |
| Responsible Gaming | Account data, gaming data, sensitive personal data. To administer deposit limits, loss limits, self-exclusion requests, and other responsible gaming tools. |
| Fraud Prevention & Security | Technical data, account data, financial data. To detect and prevent fraudulent activity, unauthorized account access, and bonus abuse. |
| Customer Support | Identity data, communications data, account data. To respond to support inquiries, resolve disputes, and maintain records of support interactions. |
| Platform Analytics & Improvement | Anonymized technical data. To analyze Platform usage patterns, improve game lobby design, optimize payment flows, and enhance the player experience. |
Important: win66 does not use your personal data to send unsolicited third-party marketing or to build profiles for external advertising networks. Platform improvement analytics use anonymized or aggregated data only — your individual gaming activity is not shared for marketing profiling purposes.
6.1 win66 processes personal data on the following legal grounds under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:
7.1 win66 does not sell personal data to any third party. We do not share personal data with third parties for their own marketing purposes. Personal data is shared only in the following circumstances:
7.2 All third parties with whom win66 shares personal data are required to maintain the confidentiality and security of that data and to process it only for the specific purpose for which it was shared.
8.1 win66 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law.
8.2 The following retention periods apply:
8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that renders it permanently non-identifiable.
9.1 win66 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss, including:
9.2 In the event of a personal data breach that is likely to give rise to a real risk of serious harm to affected data subjects, win66 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and its amendments.
Your Role in Account Security: win66's security measures protect your data at the platform level. You also play a critical role — keeping your password confidential, activating 2FA, avoiding public Wi-Fi for login, and notifying win66 immediately if you suspect unauthorized access to your account are all actions that protect your data effectively.
10.1 win66 uses cookies — small text files stored on your device by your browser — and similar tracking technologies to operate the Platform, maintain your session, and collect anonymized usage data for Platform improvement.
10.2 The cookies win66 uses fall into the following categories:
10.3 Most browsers allow you to refuse or delete cookies through their settings. Please note that disabling essential cookies will prevent the win66 Platform from functioning correctly — your login session cannot be maintained without session cookies.
10.4 win66 does not use third-party advertising cookies or tracking pixels for the purpose of building advertising profiles or serving behavioral advertising to win66 players.
11.1 As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by win66:
You have the right to be informed of the fact that your personal data is being collected and processed, the purposes of processing, the identity of win66 as data controller, and the recipients of your data. This Privacy Policy fulfills that right.
You have the right to request a copy of the personal data win66 holds about you. Access requests should be submitted to win66's DPO. win66 will respond within fifteen (15) working days of receiving a valid request, and may charge a reasonable fee for manifestly unfounded or excessive requests.
You have the right to request correction of inaccurate or incomplete personal data held by win66. Many data fields — including mobile number and email address — can be updated directly in your win66 account settings. Changes to identity data require re-verification.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. This right is subject to win66's legal retention obligations under AMLC regulations — financial transaction records must be retained for a minimum of five years and cannot be deleted on request during that period.
You have the right to object to the processing of your personal data where win66 relies on legitimate interests as the legal basis for that processing. win66 will cease the objected processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Where processing is based on your consent or on contract performance, and the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. Portability requests should be submitted to win66's DPO.
You have the right to claim compensation from win66 for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, in accordance with RA 10173 Section 16(f).
11.2 To exercise any of the rights listed above, please contact the win66 Data Protection Officer as described in Section 15. win66 will respond to all valid data subject requests within fifteen (15) working days, or as otherwise prescribed by NPC issuances. win66 may need to verify your identity before processing any request.
11.3 If you believe that win66 has not adequately addressed your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
12.1 win66 is strictly prohibited from collecting personal data from, or providing gaming services to, persons under the age of twenty-one (21) years. The Platform is not directed at minors.
12.2 The win66 registration process requires confirmation of the applicant's date of birth and is subject to KYC age verification. Accounts found to have been registered by persons under 21 years of age will be permanently closed and any associated personal data will be deleted, subject only to any mandatory regulatory record-keeping requirements.
12.3 If you believe that a person under 21 years of age has registered an account on win66, please contact win66's DPO immediately at the contact details in Section 15. Win66 will investigate and take appropriate action promptly.
13.1 Certain of win66's third-party processors — including game software providers and cloud infrastructure providers — may process personal data in servers or jurisdictions outside the Philippines. Where such transfers occur, win66 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required by RA 10173.
13.2 Safeguards used for cross-border transfers include contractual clauses requiring the receiving party to protect personal data in accordance with Philippine data protection standards, and transfer only to jurisdictions with recognized adequacy or equivalent protections.
13.3 If you would like further information about the specific safeguards in place for any particular cross-border transfer, please contact win66's DPO using the contact details in Section 15.
14.1 win66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC issuances, or Platform features. The date of the most recent revision is displayed at the top of this document.
14.2 Material changes to this Privacy Policy will be communicated to registered account holders via SMS notification to the registered Philippine mobile number and/or via a notice displayed upon login to the win66 Platform. Continued use of the Platform following the effective date of a revised Privacy Policy constitutes acceptance of the revised terms.
14.3 Players are encouraged to review this Privacy Policy periodically. Archived versions of previous Privacy Policy editions are available from the win66 DPO upon request.
Current Version: This Privacy Policy was last updated on January 1, 2026. Players who registered before this date were notified of the update via SMS to their registered Philippine mobile number.
15.1 For any query, request, or complaint relating to this Privacy Policy or win66's processing of your personal data — including requests to exercise your data subject rights under RA 10173 — please contact the win66 Data Protection Officer using the following channels:
15.2 win66 will respond to all data subject rights requests within fifteen (15) working days of receiving a complete and valid request. Response times for complex or multi-faceted requests may be extended in accordance with NPC guidelines, with advance notice provided to the requester.
15.3 If you are not satisfied with win66's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.
15.4 For general customer support queries — account access, payments, game questions — please use the live chat function in your win66 account dashboard, which is staffed 24/7.
Join Filipino players across Manila, Cebu, Davao, and nationwide who trust win66 for secure, responsible online gaming — backed by RA 10173 compliance and 256-bit data protection. Must be 21 years or older to play.