Section 01
Overview
This Privacy Policy ("Policy") describes how 666taya ("we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you" or "your") who access or use the 666taya website, mobile platform, and associated gaming services (collectively, the "Platform").
666taya is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).
By registering an account or using the 666taya Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.
Scope: This Policy applies to all personal data collected through the 666taya Platform, including data collected via our website, mobile applications, customer support channels, and any other interaction you have with 666taya.
Section 02
Data We Collect
666taya collects the following categories of personal data from users of the Platform:
Identity and Contact Information:
- Full legal name, date of birth, and nationality
- Government-issued identification number (e.g., Philippine National ID, passport, driver's license)
- Email address, mobile number, and residential address
- Profile photograph or selfie (where required for identity verification)
Financial Information:
- GCash or Maya account details (mobile number linked to e-wallet)
- Bank account details (account name, account number, bank name) for withdrawal processing
- Debit card details (card number, expiry date) where applicable
- Transaction history, deposit and withdrawal records
Technical and Usage Data:
- IP address, device type, operating system, and browser type
- Login timestamps, session duration, and pages visited
- Game activity logs, betting history, and wagering patterns
- Geolocation data (city/region level, where permitted)
Communications Data:
- Records of your communications with 666taya customer support via live chat or email
- Feedback, complaints, and survey responses submitted to 666taya
Section 03
How We Collect Data
666taya collects your personal data through the following means:
- Direct Collection: Information you provide when registering an account, completing identity verification (KYC), making deposits or withdrawals, contacting customer support, or participating in promotions.
- Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
- Third-Party Sources: Identity verification data from licensed KYC service providers; fraud prevention data from anti-money laundering (AML) screening services; payment data from GCash, Maya, and banking partners in connection with your transactions.
- Regulatory Sources: Information received from PAGCOR or other competent Philippine authorities in connection with regulatory compliance obligations.
Section 04
Purpose of Processing
666taya processes your personal data for the following purposes:
- Account Management: To register, verify, maintain, and administer your 666taya account.
- Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
- Payment Processing: To process deposits, withdrawals, and refunds through GCash, Maya, bank transfer, and debit card channels.
- Gaming Services: To provide, personalize, and improve the games, features, and services available on the Platform.
- Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws and regulations.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized access, and other security threats.
- Responsible Gaming: To support responsible gaming tools including deposit limits, self-exclusion, and session controls.
- Customer Support: To respond to your enquiries, complaints, and feedback.
- Marketing Communications: To send you promotional offers, bonuses, and updates about 666taya โ only where you have provided consent or where permitted by applicable law. You may opt out at any time.
- Analytics and Improvement: To analyse usage patterns and improve the performance, security, and user experience of the Platform.
No Unnecessary Processing: 666taya applies the principle of data minimisation โ we only collect and process personal data that is adequate, relevant, and limited to what is necessary for the purposes described above.
Section 05
Legal Basis for Processing
666taya processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
- Contractual Necessity: Processing is necessary to perform the contract between you and 666taya โ specifically, to provide you with access to the Platform and its gaming services.
- Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
- Legitimate Interests: Processing is necessary for 666taya's legitimate interests in fraud prevention, platform security, and business analytics, provided these interests are not overridden by your rights and freedoms.
- Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Section 06
Sharing Your Data
666taya does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
- Identity Verification Providers: Licensed KYC and AML service providers engaged to verify your identity and screen against sanctions and watchlists.
- Payment Partners: GCash, Maya, and banking partners involved in processing your deposits and withdrawals. These partners are bound by their own privacy policies and applicable financial regulations.
- Technology Service Providers: Cloud hosting, data storage, cybersecurity, and analytics providers who process data on our behalf under strict data processing agreements.
- Game Software Providers: Licensed game developers whose software is integrated into the 666taya Platform may receive anonymised or pseudonymised gameplay data for technical and audit purposes.
- Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or court order.
- Professional Advisers: Lawyers, auditors, and accountants engaged by 666taya, subject to professional confidentiality obligations.
All third-party service providers engaged by 666taya are contractually required to implement appropriate technical and organisational measures to protect your personal data and to process it only in accordance with our instructions.
Section 07
Data Retention
666taya retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:
- Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act.
- Customer Support Records: Retained for three (3) years from the date of the last interaction.
- Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation purposes.
- Technical and Log Data: Retained for up to twelve (12) months for security and analytics purposes, unless a longer period is required for an ongoing investigation.
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our data disposal procedures.
Section 08
Data Security
666taya implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- SSL/TLS Encryption: All data transmitted between your device and the 666taya Platform is encrypted using industry-standard SSL/TLS protocols.
- Encryption at Rest: Sensitive personal data stored in our systems is encrypted at rest using AES-256 or equivalent standards.
- Access Controls: Access to personal data is restricted to authorised 666taya personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
- Regular Security Audits: Our systems and processes are subject to regular internal and third-party security assessments and penetration testing.
- Incident Response: We maintain a data breach response plan and will notify affected users and the National Privacy Commission within the timeframes required by the Data Privacy Act in the event of a personal data breach.
Your Role in Security: While 666taya takes extensive measures to protect your data, you also play an important role. Keep your account credentials confidential, use a strong and unique password, and notify us immediately if you suspect any unauthorised access to your account.
Section 09
Cookies & Tracking Technologies
666taya uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support security functions. The types of cookies we use include:
- Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
- Functional Cookies: Remember your preferences such as language settings and login status to provide a more personalised experience.
- Analytics Cookies: Collect anonymised data about how users interact with the Platform to help us improve performance and usability.
- Marketing Cookies: Used to deliver relevant promotional content based on your interests, where you have provided consent.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For marketing cookies, you may withdraw consent at any time through your account settings.
Section 10
Your Rights Under the Data Privacy Act
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 666taya:
- Right to be Informed: The right to know what personal data we collect, how we use it, and with whom we share it โ as set out in this Policy.
- Right of Access: The right to request a copy of the personal data we hold about you and information about how it is processed.
- Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.
To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 13 of this Policy. We will respond to all verified requests within thirty (30) days, as required by the Data Privacy Act.
Section 11
Minors
The 666taya Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your child has provided personal data to 666taya without your consent, please contact us immediately at the details provided in Section 13 so that we can investigate and take appropriate action.
Section 12
Changes to This Policy
666taya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes, we will notify registered users via email or a prominent notice on the Platform prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how 666taya protects your personal data. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy.