666super
Privacy Policy

This Privacy Policy ("Policy") is issued by 666super ("we," "us," "our," "the Platform") and applies to all personal data processed in connection with your use of the 666super website at https://666super.app and all associated services, features, games, promotions, and communications ("Services").

This Policy governs the personal data of all registered players, prospective players, and visitors to the 666super platform, including players located in the Philippines. It should be read together with the 666super Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

By registering a 666super account, depositing funds, or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the 666super platform.

666super is the data controller responsible for the personal data collected and processed in connection with your use of the platform. As data controller, 666super determines the purposes for which and the means by which personal data is processed. Questions, requests, or complaints relating to your personal data should be directed to the 666super Data Protection contact as described in Section 15 of this Policy.

666super has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and its implementing rules, and for acting as a point of contact for data subject rights requests and regulatory inquiries.

666super collects the following categories of personal data in connection with the operation of the platform:

666super collects personal data through the following channels:

• Directly from you: When you register a 666super account, complete KYC verification, make a deposit or withdrawal request, participate in a promotion, contact support, or submit any form on the platform;
• Automatically: Through cookies, web beacons, session tracking, and similar technologies as you navigate and interact with the 666super platform (see Section 8 for full details);
• From third parties: Identity verification data from KYC service providers; fraud signals from payment processors; and account status information from self-exclusion registers where applicable;
• From publicly available sources: Where necessary for fraud prevention or regulatory compliance, 666super may cross-reference data from publicly available government databases or regulatory lists.

666super processes your personal data for the following specific purposes:

• Account Registration and Management: Creating and maintaining your 666super account, authenticating your login sessions, and managing your account preferences;
• Identity Verification (KYC): Verifying your identity and age to confirm you are 21 years or older and to comply with anti-money laundering (AML) obligations;
• Payment Processing: Processing your deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in Philippine Peso;
• Platform Operation: Providing access to games, bonuses, live casino streams, and all other features of the 666super platform;
• Regulatory Compliance: Meeting obligations under Philippine law, including the Data Privacy Act of 2012, AML regulations, and PAGCOR responsible gaming guidelines;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and unauthorized account access;
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling indicators and administering player-requested responsible gaming tools such as deposit limits and self-exclusion;
• Customer Support: Responding to your queries, complaints, and support requests via live chat and email;
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications;
• Platform Improvement: Analysing usage patterns and player feedback to improve the platform's performance, game offering, and user experience;
• Dispute Resolution: Investigating and resolving disputes relating to game outcomes, transactions, or account activity.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, 666super processes your personal data on the following legal bases:

• Performance of a Contract: Processing necessary to provide the Services you have requested by registering a 666super account and depositing funds — including account management, payment processing, and game access;
• Legal Obligation: Processing required to comply with applicable Philippine law, including identity verification (KYC), AML obligations, age verification, and regulatory reporting;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement, where such interests are not overridden by your rights and freedoms;
• Consent: Processing for optional purposes such as marketing communications and optional platform features, where you have given clear, freely given, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

666super does not sell, rent, or trade your personal data. We share personal data with third parties only where necessary and only to the following categories of recipient:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors receive the financial and identity data required to process your deposits and withdrawals;
• Identity Verification (KYC) Providers: Specialist third-party services that verify the authenticity of your government-issued identification documents;
• Game Software Providers: Third-party studios that supply games on the 666super platform may receive technical and gaming data necessary for game delivery and dispute resolution;
• Fraud Prevention and Security Services: Providers of fraud detection, risk scoring, and account security services that help 666super protect the platform and its players;
• Cloud Infrastructure and IT Service Providers: Providers of hosting, data storage, cybersecurity, and platform infrastructure services that process data on 666super's behalf under data processing agreements;
• Regulatory and Law Enforcement Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where disclosure is required by law or regulatory obligation;
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to applicable confidentiality obligations.

All third-party data processors engaged by 666super are required to process personal data only for the specific purposes for which they were engaged, to implement appropriate technical and organisational security measures, and to comply with applicable data protection law.

The 666super platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session, analyse platform performance, and support security and fraud prevention.

The categories of cookies used on the 666super platform are as follows:

• Strictly Necessary Cookies: Essential for the operation of the platform — including maintaining your logged-in session and preserving your account preferences. These cannot be disabled without affecting platform functionality;
• Performance and Analytics Cookies: Collect aggregated, anonymised data about how players use the platform — which pages are visited most frequently, which game categories are most popular, and where errors occur — to help 666super improve the platform experience;
• Functional Cookies: Remember your preferences such as language settings, display options, and previously selected payment methods to personalise your experience on return visits;
• Security Cookies: Support fraud detection and account security by identifying unusual access patterns or suspicious device behaviour.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the 666super platform. 666super does not use third-party advertising cookies to serve targeted advertising on external websites.

666super retains personal data for as long as necessary to fulfil the purposes set out in this Policy and to comply with applicable legal, regulatory, and compliance obligations. The following general retention principles apply:

• Active Accounts: Personal data associated with active 666super accounts is retained for the duration of the account relationship and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following account closure as required by Philippine AML legislation;
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years for regulatory and audit purposes;
• Support Communications: Customer support records are retained for three (3) years following the closure of the relevant support interaction;
• Marketing Preferences: Records of consent to marketing communications are retained for as long as you hold an account and for a reasonable period thereafter to demonstrate compliance;
• Self-Exclusion Records: Where a player has self-excluded from the 666super platform, records relating to that exclusion are retained for the duration of the exclusion period and for a period thereafter to prevent re-registration.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with 666super's data disposal procedures.

666super implements a multi-layered information security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 666super platform;
• Encryption of sensitive data at rest within 666super's infrastructure, including KYC documents and financial data;
• Role-based access controls ensuring that 666super staff can only access personal data relevant to their specific operational function;
• Two-factor authentication (2FA) available to all registered players as an additional account protection mechanism;
• Continuous monitoring of network and system activity for anomalous patterns indicative of breach attempts or unauthorised access;
• Regular internal security reviews and periodic external security assessments of platform infrastructure;
• Staff data protection training covering confidentiality obligations, breach reporting procedures, and safe data handling practices.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), registered players and individuals whose personal data is processed by 666super have the following rights:

To exercise any of your data subject rights, please contact 666super as described in Section 15. 666super will respond to all legitimate data subject requests within thirty (30) days of receipt, unless additional time is required due to the complexity or volume of the request, in which case you will be notified.

The 666super platform is strictly restricted to individuals aged 21 years and above in accordance with PAGCOR regulations governing casino-style online gambling in the Philippines. 666super does not knowingly collect personal data from anyone under the age of 21.

If 666super becomes aware that personal data has been collected from an individual under the age of 21 without verifiable parental consent, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered a 666super account, please notify the support team immediately.

Some of the third-party service providers engaged by 666super — including game studios, cloud infrastructure providers, and fraud prevention services — may operate servers or data processing facilities located outside the Philippines. Where personal data is transferred to a country outside the Philippines, 666super takes steps to ensure that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that required under the Data Privacy Act of 2012.

These safeguards may include contractual data protection clauses incorporated into agreements with data processors, verification that recipient jurisdictions provide an adequate level of data protection, or other mechanisms approved by the National Privacy Commission.

666super reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform operations, or data processing practices. Where amendments are material, 666super will notify registered players via their registered email address and/or through a prominent notice on the platform, at least seven (7) days before the changes take effect — except where changes are required immediately by law or regulatory direction.

The most current version of this Privacy Policy is always available at https://666super.app/privacy-policy. The effective date at the top of this Policy reflects the date of the most recent update. Your continued use of the 666super platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 666super, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week from any page on the 666super platform while logged into your account. Agents are available in both Tagalog and English.
• Email: [email protected] — for data subject rights requests, please include "Data Privacy Request" in the subject line and provide your registered account email address and the nature of your request.

For formal complaints relating to the handling of your personal data, you have the right to contact the National Privacy Commission of the Philippines directly. The NPC's contact details and complaint procedures are publicly available on the NPC's official government website.