666super Privacy Policy

The data controller responsible for the personal information collected through the 666super platform is 666super, the operator of the online gaming and sports betting platform accessible at 666super.org. 666super operates within the PAGCOR regulatory framework governing online gaming in the Philippines.

When this Privacy Policy refers to "666super," "we," "us," or "our," it refers to the 666super platform operator. When it refers to "you," "your," or "Member," it refers to any individual who has registered an account, made a deposit, placed a wager, or otherwise accessed the 666super platform.

666super collects personal data through several channels: directly from you during registration and account use, automatically through your device and browser as you interact with the platform, and from third-party service providers such as payment processors and identity verification services.

2.1 Registration & Account Data

• Philippine mobile number (primary account identifier)
• Full legal name (required for KYC verification)
• Date of birth (required to verify 21+ age eligibility)
• Username and encrypted account password
• Email address (where provided)

2.2 Identity Verification (KYC) Data

• Government-issued Philippine identification document (e.g., PhilSys National ID, UMID, passport, or driver's license) — image and details
• Proof of payment method (e.g., GCash account holder name confirmation, bank account name)
• Facial verification data where required by the verification process

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• GCash, Maya, BPI, BDO, USDT TRC20, Coins.ph, or 7-Eleven transaction reference numbers
• Account balance history
• Bonus and promotional transaction records

2.4 Gaming Activity Data

• Game sessions played, including game title, bet amounts, outcomes, and session duration
• Sports bets placed, including market, selection, stake, and outcome
• Responsible gaming tool usage (deposit limits, session settings, self-exclusion records)

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session login timestamps and duration
• Cookie and session identifiers

666super uses your personal data for the following specific purposes:

Under the Philippines Data Privacy Act of 2012, 666super processes your personal data on the following legal bases:

• Contractual Necessity: Processing your registration data, KYC information, transaction data, and gaming activity data is necessary to fulfil our contractual obligations to you as a 666super Member — specifically to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Processing your identity and transaction data for age verification (21+), KYC, AML compliance, and PAGCOR regulatory reporting is required by Philippine law and our regulatory obligations. We cannot operate a licensed gaming platform without this processing.
• Legitimate Interest: Processing technical data, device data, and behavioral patterns for fraud prevention, platform security, and responsible gaming monitoring serves the legitimate interests of 666super and our Members — protecting accounts and the integrity of the platform.
• Consent: Where you have specifically opted in to receive promotional communications from 666super (e.g., bonus offers, promotional messages), we process your contact information on the basis of your consent, which you may withdraw at any time by contacting our support team.

666super does not share your personal data with third parties except in the following circumstances:

5.1 Game Providers

To deliver gaming services, 666super shares limited session and account identifiers with game providers including JILI Gaming, Pragmatic Play, PG Soft, Spribe, Evolution Gaming, and Asia Gaming. These providers process this data solely to deliver game sessions and are contractually prohibited from using it for other purposes.

5.2 Payment Processors

Transaction data is shared with payment service providers (GCash, Maya, BPI, BDO, USDT TRC20 processors, Coins.ph, and 7-Eleven payment partners) to the extent necessary to process deposits and withdrawals. These parties are independent data controllers subject to their own privacy policies for data processed through their own systems.

5.3 Identity Verification Services

KYC document images and identity details may be shared with third-party identity verification service providers engaged by 666super to conduct document authentication and facial verification. These providers act as data processors under contractual data processing agreements.

5.4 Regulatory & Law Enforcement Authorities

666super may be required to disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory or law enforcement bodies in response to lawful regulatory inquiries, court orders, or legal obligations. 666super will provide only the minimum data required by the applicable legal obligation.

5.5 Fraud Prevention Networks

In cases of suspected fraud, account abuse, or prohibited conduct, 666super may share relevant account and behavioral data with industry fraud prevention networks or other regulated gaming operators to protect the industry and players from harm.

666super uses cookies and similar tracking technologies on the platform to operate core functionality, analyze platform performance, and support security mechanisms. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that maintain your logged-in state, security tokens, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and previously selected game categories. These improve your experience but are not required for core functionality.
• Analytical Cookies: Used in anonymized or aggregated form to understand how Members navigate the 666super platform — which games are most visited, where users encounter difficulty, and how platform flows can be improved. Individual users are not identified through analytical data.
• Security Cookies: Used to detect suspicious activity, prevent unauthorized access, and support fraud detection systems. These are part of 666super's security infrastructure and cannot be disabled.

You can control non-essential cookies through your browser settings. Note that disabling strictly necessary and security cookies will affect your ability to use the 666super platform. By continuing to use the 666super platform, you consent to the use of cookies as described above.

666super retains your personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

Following the expiry of applicable retention periods, 666super securely deletes or anonymizes personal data so that it can no longer be associated with an identified individual.

666super implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 666super's servers
• Encryption at rest for all sensitive personal and financial data stored on 666super systems
• Password hashing using industry-standard cryptographic algorithms — your account password is never stored in recoverable plain text
• Access controls limiting access to personal data to authorized 666super personnel with a legitimate business need
• Multi-factor authentication for internal systems access by 666super staff
• Regular security reviews of platform systems, infrastructure, and data handling procedures
• OTP verification for sensitive account actions including device changes, password resets, and large withdrawals
• Session management including automatic timeout for inactive sessions

As a data subject under the Philippines Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 666super:

To exercise any of these rights, contact 666super's Data Protection Officer at [email protected] or via live chat with the subject line "Data Rights Request." 666super will respond to all requests within fifteen (15) business days, as required by RA 10173. We may request identity verification before processing your request to protect the security of your data.

If you are not satisfied with 666super's response to a data rights request, you have the right to lodge a complaint with the Philippines National Privacy Commission (NPC).

The 666super platform is strictly intended for adults who are 21 years of age or older. 666super does not knowingly collect personal data from individuals under 21 years of age. Age verification measures — including date of birth collection at registration and KYC identity document verification prior to withdrawal — are specifically designed to prevent access by minors.

If 666super determines that personal data has been collected from an individual under 21 years of age, we will immediately close the relevant account, delete the data, and return any funds held in the account as required by law. Where the collection resulted from the individual deliberately providing false age information, the matter may be reported to the relevant regulatory authority.

Some of the third-party service providers engaged by 666super — including game providers such as JILI Gaming, Pragmatic Play, PG Soft, Evolution Gaming, and identity verification service providers — may process data in jurisdictions outside the Philippines. Where such cross-border data transfers occur, 666super ensures that appropriate safeguards are in place in accordance with RA 10173.

These safeguards include contractual data processing agreements that require third-party processors to apply data protection standards substantially equivalent to those required by Philippine law, and to process the data solely for the contracted purpose of delivering services to 666super and its Members.

666super reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new features or services, regulatory requirements, or changes in applicable law. When we make material changes to this policy, we will:

• Update the "Effective Date" and "Last Updated" date at the top of this page
• Notify registered 666super Members via SMS to their registered Philippine mobile number or via in-platform notification
• Where changes significantly affect how we process your data or your rights, we may request fresh consent

Your continued use of the 666super platform following notification of material changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated Policy, you may request account closure as described in the 666super Terms & Conditions.

We recommend reviewing this Privacy Policy periodically. The current version is always available at 666super.org/privacy-policy.

For all data privacy inquiries, rights requests, complaints, or questions about how 666super handles your personal information, please contact our Data Protection Officer or the 666super support team through the following channels:

• Data Protection Officer: [email protected] — subject line "Privacy / DPO Request"
• General Support: [email protected] or via live chat 24/7 inside the platform
• Response Time: Data rights requests — within 15 business days · General inquiries — within 4 hours

If you have a complaint about 666super's data processing that has not been resolved to your satisfaction, you have the right to escalate to the National Privacy Commission of the Philippines (NPC). The NPC is the Philippine government body responsible for enforcing the Data Privacy Act of 2012.