666x Privacy Policy

01 About This Policy

This Privacy Policy ("Policy") describes how 666x collects, uses, stores, shares, and protects personal data in connection with your use of the 666x online casino and sportsbook platform, accessible at 666x.cam (the "Platform"). It has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations, and applicable PAGCOR data handling requirements.

The terms "666x", "we", "us", and "our" refer to the operator of the 666x Platform. The terms "you", "your", and "player" refer to any individual who accesses or registers on the Platform. "Personal data" means any information that identifies or can identify you as a natural person, directly or in combination with other data.

This Policy is effective as of 1 January 2026. We may update it periodically. Where changes are material, we will notify registered players by email and through an on-platform notification. Continued use of 666x following a policy update constitutes your acknowledgment of the revised terms.

02 Data Controller

666x is the data controller responsible for your personal data collected through the Platform. As data controller, 666x determines the purposes and means of processing your personal data and is accountable to you and to the National Privacy Commission (NPC) of the Philippines for compliance with the Data Privacy Act.

666x has appointed a Data Protection Officer (DPO) responsible for overseeing our data protection practices, handling player data requests, and maintaining our registration with the NPC. You may contact the DPO directly using the details provided in Section 15 of this Policy.

03 Personal Data We Collect

The categories of personal data 666x collects depend on the nature of your interaction with the Platform. The table below provides a structured overview of the data we collect, why we collect it, and the source from which it originates.

We do not collect sensitive personal information beyond what is strictly required for identity verification, such as biometric data or health records, unless you voluntarily provide it in the context of a responsible gaming self-assessment.

04 How We Collect Your Data

666x collects personal data through the following means:

Direct Collection

• When you register a 666x account and complete the onboarding form
• When you submit KYC documents for identity and age verification
• When you make a deposit or request a withdrawal via GCash, PayMaya, BDO, BPI, or Metrobank
• When you contact 666x customer support via live chat, email, Messenger, or Viber
• When you respond to a 666x survey, promotion, or responsible gaming questionnaire

Automated Collection

• Through cookies, session tokens, and similar tracking technologies when you browse or play on the Platform (see Section 8)
• Through server logs that record your IP address, browser details, and interaction timestamps each time you access 666x
• Through our gaming systems, which record all bets, game rounds, session times, and account activities for regulatory audit purposes

Third-Party Sources

• From payment processors (e.g., GCash, PayMaya) to confirm transaction status and account name matching
• From identity verification and AML screening services used to comply with PAGCOR and Anti-Money Laundering Council (AMLC) requirements
• From fraud prevention and device fingerprinting providers used to detect duplicate accounts and protect platform integrity

05 How We Use Your Personal Data

666x uses your personal data only for the purposes listed below. We do not use your data in ways that are incompatible with the reason it was originally collected without first obtaining your consent.

• Account management: To create, maintain, and operate your 666x account, including processing login and account settings changes.
• Identity & age verification: To confirm that you are who you say you are and that you meet the 21+ age requirement under PAGCOR regulations before any withdrawal is processed.
• Payment processing: To facilitate deposits and withdrawals through your nominated GCash, PayMaya, or bank account, and to match payment methods to your verified identity.
• Regulatory compliance: To fulfil our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Philippine Data Privacy Act, including filing Suspicious Transaction Reports (STRs) with the AMLC where required.
• Fraud & security: To detect and prevent unauthorised account access, bonus abuse, money laundering, and other prohibited activities on the 666x platform.
• Responsible gaming: To monitor gaming patterns and proactively identify players who may be showing signs of problem gambling, in accordance with PAGCOR's responsible gaming directives.
• Customer support: To handle your enquiries, complaints, and dispute resolution requests efficiently and accurately.
• Platform improvement: To analyse aggregate usage patterns and technical performance data in order to improve the 666x gaming experience.
• Marketing communications: To send you relevant promotions, bonus offers, and platform updates — only if you have opted in to receive marketing communications and subject to your right to unsubscribe at any time.

06 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 666x processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is required to perform the contract between you and 666x — i.e., to operate your account, process bets, and facilitate payouts.
• Legal obligation: Processing is necessary to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), AMLC regulations, and the Data Privacy Act itself.
• Legitimate interests: Processing is necessary for 666x's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and any non-essential data processing, 666x relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Sharing Your Personal Data

666x does not sell your personal data. We share your information only in the following circumstances and only to the minimum extent necessary:

• Payment providers: GCash, PayMaya, BDO, BPI, and Metrobank receive only the transactional data necessary to process your deposits and withdrawals.
• KYC & AML service providers: Third-party identity verification and sanctions-screening services receive your identity data to assist 666x in meeting its PAGCOR and AMLC compliance obligations. These providers are contractually bound to handle your data securely and confidentially.
• Licensed game providers: Providers of casino games available on the 666x platform may receive anonymised or pseudonymised game session data for the purposes of RNG auditing and game integrity verification.
• Regulatory authorities: PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government bodies may receive your data where we are legally required to disclose it — for example, in response to a lawful investigation or audit.
• Professional advisers: Our legal counsel, auditors, and compliance consultants may access your data on a strictly need-to-know basis and are subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 666x's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer.

08 Cookies & Tracking Technologies

The 666x platform uses cookies and similar technologies to deliver a secure, personalised, and functional gaming experience. Cookies are small text files stored on your device when you visit 666x.cam. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These enable your login session, maintain your game state, and protect against cross-site request forgery (CSRF). These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players navigate and use the Platform by collecting anonymised usage statistics. This data is used solely for platform improvement.
• Security cookies: Used for fraud detection, device fingerprinting, and identifying suspicious login patterns. These are essential for protecting the integrity of your 666x account.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing core Platform features including the game lobby and cashier. 666x does not use third-party advertising or behavioural tracking cookies.

09 Data Retention

666x retains your personal data for as long as necessary to fulfil the purposes described in this Policy, and in accordance with applicable Philippine legal and regulatory retention obligations:

• Active accounts: Personal and gaming data is retained for the duration of your active 666x account relationship.
• Closed accounts: Following account closure, 666x retains account records, transaction history, and KYC documents for a minimum of five (5) years to satisfy PAGCOR audit requirements and AMLC record-keeping obligations under the Anti-Money Laundering Act.
• Support communications: Chat logs and email threads are retained for up to three (3) years for dispute resolution and service quality purposes.
• Marketing data: If you opted in to marketing communications and subsequently opt out, your opt-out preference is retained indefinitely to ensure we honour your request and do not inadvertently contact you again.
• Security logs: Technical access logs and fraud-related records are retained for up to two (2) years or as required by law enforcement requests.

When personal data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

10 Data Security

666x implements a multi-layered security programme to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit TLS/SSL encryption for all data in transit between your device and the 666x Platform
• AES-256 encryption at rest for sensitive stored data including KYC documents and financial records
• Access controls and role-based permissions ensuring that only authorised 666x personnel can access personal data, on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Secure data centres with physical access controls, environmental protections, and redundant backup systems
• Employee data privacy training for all 666x staff who handle personal data, conducted at induction and refreshed annually

While 666x takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own 666x login credentials and for logging out of shared devices. If you suspect your account has been compromised, contact our 24/7 support team immediately.

11 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 666x. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.

• Right to Access: You may request a copy of the personal data 666x holds about you, along with information about how it is being used.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected without undue delay.
• Right to Erasure / "Right to be Forgotten": You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations under PAGCOR and AMLC rules.
• Right to Block Processing: You may request that we restrict the processing of your data in certain circumstances, such as while a correction request is pending.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Upon receipt of a valid objection to marketing, 666x will stop sending you promotional communications immediately.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: If you believe 666x has handled your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

666x will respond to all verified data rights requests within thirty (30) calendar days of receipt. We may request proof of identity before processing a request to protect against fraudulent access to another player's data.

12 Children & Minors

The 666x Platform is strictly for adults aged 21 years and above, in compliance with PAGCOR regulations governing online gambling in the Philippines. 666x does not knowingly collect, process, or store personal data belonging to individuals under 21 years of age.

If 666x discovers or is notified that personal data belonging to a person under 21 has been submitted — whether through a false declaration during registration or any other means — we will immediately suspend the associated account, delete all related personal data, and report the matter to PAGCOR as required.

13 International Data Transfers

666x is operated for and primarily serves Filipino players. In some cases, your personal data may be processed by service providers located outside the Philippines — for example, licensed game providers, cloud infrastructure partners, or KYC technology vendors operating in other jurisdictions.

Where such transfers occur, 666x ensures that adequate protections are in place in compliance with the Philippine Data Privacy Act, including:

• Standard contractual clauses binding the recipient to data protection obligations equivalent to those under Philippine law
• Transfers only to jurisdictions or recipients that the NPC has determined provide an adequate level of protection
• Contractual restrictions prohibiting the recipient from using your data for any purpose other than providing services to 666x

By using the 666x Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside the Philippines, subject always to the safeguards described above.

14 Updates to This Policy

666x reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or the Platform's features. The date at the top of this page indicates when the Policy was last revised.

Where changes are material — for example, a new category of data being collected, a new type of third-party sharing, or a change in retention periods — 666x will notify registered players via the email address on their account and through an in-Platform notification at least seven (7) days before the change takes effect.

For minor or administrative updates that do not affect your rights, we will update the "Last updated" date without a separate notification. The current version of this Policy is always accessible at 666x.cam/privacy-policy. We encourage you to review it periodically.

15 Contact Us & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how 666x handles your personal data, please contact our Data Protection Officer:

• DPO Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly on the 666x Platform
• Messenger & Viber: Via our official 666x pages

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.