266plusph
Privacy Policy

This Privacy Policy ("Policy") describes how 266plusph ("we," "us," "our," or "the Platform") collects, uses, stores, discloses, and protects the personal information of users ("you," "your," or "Player") who access or use the 266plusph website and associated online gaming services available at https://266plusph.org.

This Policy applies to all personal data collected through the 266plusph platform, including data provided during account registration, identity verification, financial transactions, gameplay activity, customer support interactions, and your general use of the website. It covers data collected via desktop browsers, mobile browsers, and any 266plusph mobile application.

266plusph is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC).

266plusph collects personal information that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of information we collect include:

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, nationality, residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati), email address, and mobile number.
• Identity verification documents: Government-issued ID (e.g., Philippine passport, PhilSys national ID, SSS ID, driver's license), selfie or liveness check images, and proof of address documents.
• Financial information: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank), and transaction history on the 266plusph platform.
• Communications: Messages sent to 266plusph customer support via live chat or email, including the content of those communications.
• Responsible gaming preferences: Self-exclusion requests, deposit limit settings, and cooling-off period requests submitted through the 266plusph platform.

2.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited on 266plusph, games played, betting history, session duration, click patterns, and navigation paths.
• Location data: General geographic location derived from your IP address, used to verify eligibility and comply with jurisdictional restrictions.
• Cookies and tracking technologies: Data collected via cookies, web beacons, and similar technologies as described in Section 6 of this Policy.

2.3 Information from Third Parties

266plusph may receive personal information about you from third-party identity verification providers, payment processors, fraud prevention services, and publicly available sources, where this is necessary to verify your identity, process transactions, or comply with our legal obligations.

266plusph uses the personal information we collect for the following purposes:

Under the Philippine Data Privacy Act of 2012, 266plusph processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications from 266plusph.
• Contractual necessity: Where processing is necessary to perform the contract between you and 266plusph — for example, to operate your player account, process transactions, and deliver gaming services.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to 266plusph, including KYC, AML, and PAGCOR regulatory requirements.
• Legitimate interests: Where processing is necessary for the legitimate interests of 266plusph, such as fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and freedoms.

Where 266plusph relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

266plusph does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers engaged by 266plusph to verify your identity and comply with regulatory requirements.
• Fraud prevention and security services: Service providers that assist 266plusph in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Game content providers: Licensed game studios and live dealer operators whose games are available on the 266plusph platform, to the extent necessary to deliver those games to you.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or regulatory obligation.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by 266plusph, subject to strict confidentiality obligations.

266plusph uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver a personalised experience. The types of cookies used on 266plusph include:

• Strictly necessary cookies: Essential for the operation of the 266plusph platform, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to improve your experience on 266plusph.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the 266plusph platform, helping us identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of 266plusph marketing campaigns, only where you have consented.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 266plusph platform. For more information on managing cookies, refer to your browser's help documentation.

266plusph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your account with 266plusph and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC process.
• Customer support communications: Retained for a period of two (2) years from the date of the last communication, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, 266plusph will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

266plusph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• AES-256 encryption for data stored on 266plusph servers.
• TLS (Transport Layer Security) encryption for all data transmitted between your device and the 266plusph platform.
• Multi-factor authentication options for player accounts.
• Regular security assessments, penetration testing, and vulnerability scanning of the 266plusph platform.
• Strict role-based access controls limiting internal access to personal data on a need-to-know basis.
• Comprehensive employee data protection training and confidentiality obligations.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 266plusph will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine Data Privacy Act and NPC Circular No. 16-03.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 266plusph:

To exercise any of these rights, please contact the 266plusph Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy. We will respond to all verified data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing your request.

If you are not satisfied with how 266plusph has handled your personal data or responded to your request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The 266plusph platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. 266plusph does not knowingly collect personal data from individuals under the age of 21.

During the registration process, 266plusph collects date of birth information and conducts age verification checks to enforce this requirement. Where 266plusph discovers that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data collected, and return any deposited funds to the original payment source.

The 266plusph platform may integrate with or link to third-party services, including payment gateways (GCash, PayMaya, BPI, BDO, Metrobank) and licensed game content providers. These third-party services operate under their own privacy policies, which are independent of this Policy.

266plusph is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of 266plusph. 266plusph will only share the minimum personal data necessary with third-party service providers to enable the delivery of services on the platform.

All third-party service providers engaged by 266plusph who process personal data on our behalf are contractually required to implement appropriate data protection measures and to process personal data only in accordance with our instructions and applicable Philippine data protection law.

266plusph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision will always be displayed at the top of this page.

Where changes to this Policy are material, 266plusph will notify registered players via the email address on file or through a prominent notice on the 266plusph platform prior to the changes taking effect. Your continued use of the 266plusph platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 266plusph is protecting your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 266plusph, please contact our Data Protection Officer (DPO):

For complaints regarding the handling of your personal data, you may also contact the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.

266plusph is committed to resolving all privacy-related concerns promptly and transparently. We aim to acknowledge all data subject requests within five (5) business days and to provide a full response within fifteen (15) business days of receipt.