gb66 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by gb66 ("gb66," "we," "us," or "our") and applies to all personal data collected through the gb66 website at gb66.club and any related services, features, or communications (collectively, the "Platform").

gb66 is committed to protecting the privacy and personal data of all users of the Platform, including registered players, visitors, and prospective members. We understand that trust is the foundation of any relationship between a player and their gaming platform, and we take our data protection obligations seriously.

This Policy is designed to comply with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). It explains in plain language what data we collect, why we collect it, how we use and protect it, and what rights you have over your own information.

By accessing or using the gb66 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2. Personal Data We Collect

gb66 collects the following categories of personal data from users of the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify that you are at least 21 years of age)
• Residential address, including barangay, city, province, and postal code
• Email address
• Philippine mobile number
• Nationality and country of residence

2.2 Verification & KYC Data

• Copies of government-issued identification documents (e.g., Philippine passport, driver's license, SSS card, PhilHealth ID, UMID)
• Proof of address documents (e.g., utility bills, bank statements)
• Proof of payment method ownership (e.g., screenshots of GCash or PayMaya account details)
• Selfie or liveness verification images where required for enhanced KYC

2.3 Financial Data

• Payment method details (GCash number, PayMaya number, bank account name and number for BPI, BDO, Metrobank; card type and last four digits for Visa/Mastercard)
• Transaction history, including deposits, withdrawals, and bonus credits
• Account balance information

2.4 Gaming & Behavioral Data

• Game history, including games played, wagers placed, and outcomes
• Session duration and frequency of play
• Bonus and promotion usage history
• Responsible gaming settings and self-exclusion records

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Log data, including access times, pages viewed, and errors encountered

2.6 Communications Data

• Records of communications between you and gb66 customer support, including live chat transcripts and email correspondence
• Survey responses and feedback submitted through the Platform

3. How We Collect Your Data

gb66 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical and behavioral data collected automatically when you access and use the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification and fraud prevention data from third-party KYC and anti-money laundering (AML) service providers; payment data from payment processors such as GCash, PayMaya, and banking partners.

4. Purpose of Processing

gb66 processes your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and verification data
Age and identity verification (KYC)	Identity, KYC, and verification data
Processing deposits and withdrawals	Financial and identity data
Providing gaming services and game history	Gaming and behavioral data
Fraud prevention and AML compliance	Identity, financial, and technical data
Customer support and dispute resolution	Identity, communications, and gaming data
Responsible gaming monitoring and intervention	Gaming, behavioral, and communications data
Platform security and technical maintenance	Technical and device data
Marketing and promotional communications (with consent)	Identity, contact, and behavioral data
Legal and regulatory compliance	All categories as required

5. Legal Basis for Processing

gb66 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

gb66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with regulatory requirements.
• Fraud prevention and AML providers: Services used to detect and prevent fraudulent activity and money laundering on the Platform.
• IT and hosting providers: Cloud infrastructure and hosting providers who store and process Platform data on our behalf under strict data processing agreements.
• Customer support tools: Live chat and ticketing system providers used to manage customer support interactions.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory directive, including disclosures to PAGCOR or the National Privacy Commission.

7. Data Retention

gb66 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Technical and device data collected through cookies and logs is retained for periods ranging from session-only to twenty-four (24) months, depending on the type of data and the purpose for which it was collected.

When personal data is no longer required, gb66 will securely delete or anonymize it in accordance with our data retention and disposal procedures.

8. Security Measures

gb66 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the gb66 Platform
• Encryption of sensitive data at rest using industry-standard algorithms
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication for internal systems that process personal data
• Regular security audits, vulnerability assessments, and penetration testing
• Incident response procedures for detecting, reporting, and responding to personal data breaches
• Staff training on data protection and information security best practices

While gb66 takes all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying gb66 immediately if you suspect any unauthorized access to your account.

9. Cookies & Tracking Technologies

gb66 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience.
• Analytics cookies: Collect anonymized data about how players use the Platform, helping us identify areas for improvement. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotions and measure the effectiveness of our campaigns. Used only with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Withdrawing consent for non-essential cookies will not affect your ability to use core Platform features.

10. Your Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by gb66:

• Right to be informed: You have the right to know what personal data gb66 collects about you and how it is used.
• Right of access: You may request a copy of the personal data gb66 holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days.

11. Minors

The gb66 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gambling regulations. gb66 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected].

12. Changes to This Policy

gb66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the Platform and may request account closure.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the gb66 Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the Platform
• Support Hours: 8:00 AM – 12:00 AM PST

We are committed to addressing all privacy-related inquiries promptly and transparently. Formal complaints will be acknowledged within two (2) business days and resolved within thirty (30) days where possible.