2006ph Privacy Policy

01 Scope & Who We Are

This Privacy Policy ("Policy") describes how 2006ph ("we", "us", "our", "the Company", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player", "Member", "User") who visit, register on, or use the 2006ph online casino and sports betting platform accessible at 2006ph.net.

2006ph is an online gaming platform licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR), serving players across the Philippines — including Manila, Cebu, Davao, Quezon City, Makati, and all other regions of the archipelago. Our platform offers slots, live dealer games, online bingo, sports betting (covering PBA, NBA, UFC, boxing, and more), and exclusive proprietary games including Super Wheel and Fortune Tree, all denominated in Philippine Peso (₱).

As a personal information controller under RA 10173, 2006ph is responsible for determining the purposes and means of processing your personal data. This Policy applies to all data processing activities conducted by 2006ph, whether carried out directly by us or on our behalf by authorized third-party processors.

02 Data We Collect

2006ph collects personal data that you provide directly, data generated automatically through your use of the platform, and data received from authorized third parties. The categories of data we collect are detailed in the table below:

03 How We Use Your Data

2006ph uses your personal data only for the purposes described in this Policy. We apply the principle of data minimization — we collect and use only what is necessary for each specific purpose. The primary purposes for which we process your data are:

• Creating and maintaining your 2006ph player account.
• Authenticating your identity during login and high-value transactions.
• Processing deposits and withdrawals in Philippine Peso (₱) via GCash, PayMaya, BPI, BDO, and Metrobank.
• Providing access to all platform features — slots, live dealer, bingo, Super Wheel, Fortune Tree, and sports betting.
• Delivering customer support and resolving disputes.

• Verifying your age (21+ as required by PAGCOR) and identity through KYC procedures.
• Meeting anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law and PAGCOR directives.
• Maintaining audit trails and transaction records as required by PAGCOR and the Anti-Money Laundering Council (AMLC).
• Responding to lawful requests from PAGCOR, the NPC, law enforcement, and other competent Philippine government authorities.

• Monitoring gaming activity patterns to identify players who may be exhibiting signs of problem gambling and reaching out with responsible gaming resources.
• Enforcing deposit limits, loss limits, session reminders, and self-exclusion requests.
• Maintaining records of self-excluded players to prevent re-registration during an active exclusion period.

• Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
• Detecting and preventing fraud, bonus abuse, account compromise, and other prohibited conduct.
• Conducting security monitoring and incident response.

• Sending promotions, bonus offers, new game announcements, and event notifications via email or SMS — only where you have given explicit marketing consent.
• Personalizing promotional content based on your game preferences and activity history on 2006ph.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012, every instance of personal data processing must be grounded in a lawful basis. The following table maps each processing purpose to its corresponding legal basis under RA 10173:

05 Data Sharing & Disclosure

2006ph does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data is shared only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

We engage carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements that prohibit any use of your data beyond the scope of their engagement with 2006ph:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to authenticate and settle your deposit and withdrawal transactions in Philippine Peso (₱).
• KYC Verification Providers: Accredited identity verification vendors process your government-issued ID and biometric liveness check for age and identity confirmation required by PAGCOR.
• Game Suppliers: Licensed game providers including JILI, Pragmatic Play, CQ9, and Habanero receive your account identifier (not your full identity data) to facilitate game sessions and maintain RNG audit trails.
• Customer Support Tools: Our live chat and ticketing system provider processes your communication content solely to facilitate support delivery.
• Cybersecurity Providers: Fraud detection and DDoS mitigation vendors receive technical data (IP address, device fingerprint) to protect the platform and your account.

2006ph may disclose your personal data to the following authorities where required or permitted by Philippine law, without requiring your prior consent:

• PAGCOR — for gaming regulatory oversight and compliance audits.
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under the AMLA.
• National Privacy Commission (NPC) — for data breach notifications or regulatory investigations.
• Philippine law enforcement agencies — pursuant to a valid court order or lawful directive.

06 Cookies & Tracking Technologies

2006ph uses cookies and similar tracking technologies on the platform. These are small data files stored on your device that help us deliver a functional, secure, and personalized experience. We do not use cross-site advertising cookies or any third-party behavioral tracking technologies that share your data with external advertising networks.

• Strictly Necessary Cookies: Required for core platform functionality, including session management, login authentication, and CSRF protection. These cannot be disabled without significantly impairing your ability to use the platform.
• Preference Cookies: Store your language preference, display settings, and last-visited game category to provide a more convenient experience on return visits.
• Security Cookies: Used by our fraud detection systems to recognize trusted devices, detect anomalous login patterns, and flag potentially compromised sessions.
• Analytics Cookies: Collect anonymized, aggregated data about how players navigate the platform — which pages are visited most frequently, where navigation drop-offs occur, and how game categories perform. No individual player is identifiable from this data.

You can manage or delete cookies through your browser's privacy settings. Disabling strictly necessary cookies may prevent you from logging in or using certain features of the platform. Disabling analytics cookies will not affect your core gaming experience.

07 Data Retention

2006ph retains your personal data for as long as necessary to fulfill the purposes outlined in this Policy, and in compliance with retention periods mandated by Philippine law and PAGCOR regulations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized. Data subject to an ongoing investigation, legal proceeding, or regulatory audit will be retained until that matter is fully resolved, regardless of the standard retention period.

08 Security Measures

2006ph implements a multi-layered security framework to protect your personal data from unauthorized access, loss, destruction, alteration, or disclosure. Our security program includes the following technical and organizational measures:

• TLS Encryption in Transit: All data transmitted between your device and the 2006ph platform is encrypted using TLS 1.2 or higher, preventing interception during transmission.
• AES-256 Encryption at Rest: Stored personal and financial data is encrypted at rest using AES-256, an industry-standard cipher used by financial institutions worldwide.
• Password Hashing: Account passwords are hashed using a modern, salted hashing algorithm. 2006ph never stores plain-text passwords and cannot retrieve your password — only reset it.
• Two-Factor Authentication (2FA): 2FA is available to all players and strongly recommended. High-value withdrawal requests may require 2FA completion regardless of your general account settings.
• Automated Fraud Detection: Real-time behavioral analysis flags anomalous login attempts, unusual transaction patterns, and suspected account compromise for immediate review.
• DDoS Protection & WAF: The platform is protected by web application firewall (WAF) rules and DDoS mitigation systems to maintain availability and prevent exploitation of vulnerabilities.

• Access to personal data is restricted to 2006ph staff and authorized contractors who have a legitimate operational need and are bound by confidentiality obligations.
• All staff with access to personal data undergo data privacy training aligned with NPC guidelines upon onboarding and annually thereafter.
• 2006ph has appointed a Data Protection Officer (DPO) responsible for overseeing our data privacy compliance program.
• In the event of a personal data breach that poses a real risk of harm to affected data subjects, 2006ph will notify the NPC within 72 hours of breach discovery and will notify affected players without undue delay, as required by NPC Circular 16-03.

09 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, all Filipino players registered on 2006ph are entitled to the following rights regarding their personal data. These rights may be exercised by contacting our Data Protection Officer at [email protected] with your full name and account details.

10 Children & Minors

All new player registrations on 2006ph are subject to mandatory age verification through our KYC process. You will be required to submit a valid, government-issued Philippine ID (such as a PhilSys National ID, passport, or driver's license) that confirms your date of birth. Any account found to belong to a person below the age of 21 will be immediately suspended, all funds held pending review, and the matter referred to PAGCOR as required.

If you are a parent or guardian and believe that a minor has registered on our platform or accessed our services, please contact us immediately at [email protected]. We will investigate promptly, close the account, and securely delete all associated personal data that is not required to be retained under applicable law.

11 Cross-Border Data Transfers

2006ph primarily operates and stores data within the Philippines. However, some of our authorized third-party processors — including game suppliers, KYC verification vendors, and cybersecurity providers — may be located outside the Philippines and may process your data in their respective jurisdictions.

Where personal data is transferred outside the Philippines, 2006ph ensures that an adequate level of data protection is maintained through one or more of the following safeguards:

• Binding data processing agreements that require the recipient to apply data protection standards equivalent to those required under RA 10173.
• Assessment of the recipient country's data protection framework to confirm it meets NPC adequacy standards.
• Standard contractual clauses approved by or acceptable to the National Privacy Commission of the Philippines.

By registering and using 2006ph, you acknowledge that your data may be transferred to and processed in countries outside the Philippines for the limited purposes described in this Policy, subject to the safeguards described above.

12 Changes to This Policy

2006ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or NPC guidance. All updates are effective from the date indicated in the "Last Updated" notice at the top of this page.

For material changes — those that significantly affect how we process your personal data or your rights — we will notify registered players via email or an in-platform notification at least 7 days before the updated Policy takes effect. Continued use of the 2006ph platform after the effective date of a revised Policy constitutes your acknowledgment of the updated terms.

We encourage you to review this Policy periodically. The most current version will always be available at 2006ph.net/privacy-policy. If you have any questions about a particular change, contact our Data Protection Officer before the effective date.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 2006ph, please contact our Data Protection Officer through any of the following channels:

If you are not satisfied with the outcome of your request or our handling of your complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC). The NPC accepts complaints through its official channels as published on the NPC's website.