s66 Privacy Policy

Welcome to the s66 Privacy Policy. s66 ("we," "us," "our," or "the Company") operates the online gaming platform available at s66.today (the "Platform"). We are committed to protecting the privacy and personal data of every Filipino player who registers and plays on s66.

This Privacy Policy describes how s66 collects, uses, stores, shares, and protects your personal information when you access or use our Platform, including our website, mobile experience, live casino, slot games, crash games, bingo, and all related services. It also explains the rights you have under Philippine law with respect to your personal data.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. By creating an s66 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

s66 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

2.1 Data You Provide Directly

• Registration Data: Full name, date of birth, email address, mobile number, and residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, or Makati).
• Identity Verification (KYC) Data: Government-issued ID documents such as Philippine passport, driver's license, SSS ID, UMID, or PhilSys National ID; selfie photographs for liveness verification.
• Financial Data: Payment method details including GCash account numbers, PayMaya details, BPI, BDO, or Metrobank account information used for deposits and withdrawals. Note: s66 does not store full card numbers or full bank account numbers on our servers.
• Communications Data: Messages, emails, and chat transcripts exchanged with our customer support team.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, and cooling-off period preferences.

2.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, session duration, bet history, wagering patterns, login timestamps, and navigation paths within the Platform.
• Cookie Data: Session cookies, preference cookies, and analytics cookies as described in Section 6 of this Policy.
• Geolocation Data: Approximate location derived from your IP address, used to verify eligibility and comply with jurisdictional restrictions.

s66 uses your personal data only for legitimate, specified purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are:

• Account Management: To create, maintain, and manage your s66 player account, including verifying your identity and eligibility to use the Platform.
• Service Delivery: To provide you with access to all games, promotions, bonuses, and features available on the s66 Platform.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• KYC & Fraud Prevention: To verify your identity, detect and prevent fraud, money laundering, and other illegal activities in compliance with Philippine AML laws.
• Regulatory Compliance: To fulfill our obligations under applicable Philippine laws and regulations, including reporting requirements to PAGCOR and other relevant authorities.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behavior, enforce self-exclusion requests, apply deposit limits, and provide responsible gaming interventions where appropriate.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and security of the s66 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.
• Legal Claims: To establish, exercise, or defend legal claims in connection with your use of the Platform.

Under the Data Privacy Act of 2012, s66 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your s66 account, process your bets, and pay out your winnings.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for s66's legitimate business interests, including fraud prevention, platform security, and improving our services — provided these interests are not overridden by your privacy rights.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

s66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity and screen against sanctions lists and politically exposed persons (PEP) databases.
• Game Software Providers: Licensed game developers and live casino operators whose games are available on the s66 Platform. These providers may receive limited technical data necessary to deliver their games.
• IT & Cloud Service Providers: Hosting, database, and infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where we are legally required to disclose information.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors who are bound by confidentiality obligations.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by law or court order.

All third parties with whom s66 shares personal data are required to handle that data in accordance with applicable Philippine privacy laws and our data protection standards. We do not permit our service providers to use your personal data for their own purposes beyond the specific services they provide to s66.

s66 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and understand how players use our services. A cookie is a small text file placed on your device when you visit a website.

Types of cookies used by s66:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting Platform functionality.
• Preference Cookies: Remember your settings and preferences, such as your preferred language, display settings, and responsible gaming configurations.
• Analytics Cookies: Help us understand how players navigate the Platform, which games are most popular, and where technical issues occur. This data is aggregated and anonymized where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and bot traffic on the Platform.

s66 does not use third-party advertising or retargeting cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the s66 Platform.

s66 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and s66 servers is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal data stored on our servers, including identity documents and financial information, is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized s66 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): s66 offers 2FA for player accounts to provide an additional layer of security against unauthorized access.
• Regular Security Audits: s66 conducts regular security assessments, penetration testing, and vulnerability scans to identify and address potential security weaknesses.
• Incident Response: s66 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players in accordance with the timeframes required by Philippine law.

While s66 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You are also responsible for keeping your s66 account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

s66 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, s66 will securely delete or anonymize your personal data in a manner that prevents reconstruction or identification. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by s66. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 13.

s66 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with the timelines prescribed by the NPC. In complex cases, we may extend this period by a further fifteen (15) business days, in which case we will notify you of the extension and the reasons for it.

The s66 Platform is strictly intended for adults aged 21 years and older. s66 does not knowingly collect, process, or store personal data from individuals under the age of 21. The minimum age for casino-style gambling in the Philippines is 21 years, as prescribed under applicable PAGCOR regulations.

If s66 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data in question, and take appropriate action in accordance with our Terms & Conditions and applicable Philippine law.

If you are a parent or guardian and believe that your child has provided personal data to s66, please contact our Data Protection Officer immediately using the contact details in Section 13 of this Policy.

In the course of providing our services, s66 may transfer your personal data to service providers or partners located outside the Philippines, including game software providers and cloud infrastructure providers. Where such transfers occur, s66 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC regulations.

Safeguards for international transfers may include:

• Data processing agreements incorporating standard contractual clauses approved by the NPC or equivalent data protection authorities
• Transfers to countries or organizations that have been assessed as providing an adequate level of data protection
• Binding corporate rules where applicable within our group of companies

You may request further information about the specific safeguards in place for any international transfer of your personal data by contacting our Data Protection Officer.

s66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how s66 protects your personal data. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

If any update materially reduces your privacy rights, we will seek your renewed consent where required by the Data Privacy Act of 2012 before applying the change to your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by s66, please contact our dedicated Data Protection Officer (DPO). Our DPO is responsible for overseeing s66's compliance with the Data Privacy Act of 2012 and all related NPC regulations.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that s66 has not handled your personal data in accordance with the Data Privacy Act of 2012. The NPC is the independent regulatory body responsible for administering and implementing data privacy laws in the Philippines.

For responsible gaming concerns or to exercise your self-exclusion rights, please visit our Responsible Gaming page or contact our support team via live chat.