1. Introduction and Scope RA 10173
This Privacy Policy ("Policy") describes how 2006ph ("Company", "we", "us", or "our") collects, uses, processes, stores, and protects the personal data of users ("you", "Player", or "User") who access or use our online gaming platform located at https://2006ph.cam (the "Platform"). This Policy applies to all services offered through the Platform, including casino games, sports betting, promotions, customer support, and related features.
By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you must immediately cease using the Platform and refrain from providing any personal information.
This Policy is designed to comply with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). As a PAGCOR-licensed gaming operator, 2006ph also adheres to relevant gaming regulations and anti-money laundering (AML) requirements.
Important Notice:
This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform. In the event of any conflict between the two documents, the Terms and Conditions shall prevail with respect to the use of the Platform, while this Privacy Policy shall govern data protection matters.
2. Data Controller Information
2006ph acts as the data controller for all personal data collected through the Platform. As the data controller, we determine the purposes and means of processing your personal information and are responsible for ensuring that such processing complies with applicable data protection laws.
2.1 Contact Information
For any questions, concerns, or requests related to your personal data or this Privacy Policy, you may contact our Data Protection Officer:
2.2 Regulatory Compliance
2006ph is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). We comply with all applicable Philippine laws, including the Data Privacy Act of 2012, the Anti-Money Laundering Act (AMLA), and PAGCOR regulations governing online gaming operations.
3. Personal Data We Collect Disclosed
We collect various types of personal data to provide, maintain, and improve our services, verify your identity, process transactions, prevent fraud, and comply with legal obligations. The categories of personal data we collect include:
3.1 Registration and Account Information
- Full legal name (first name, middle name, surname)
- Date of birth (to verify you are 21 years or older)
- Gender
- Email address
- Mobile phone number
- Residential address (street, barangay, city, province, postal code)
- Username and encrypted password
- Security questions and answers (if applicable)
3.2 Identity Verification (KYC) Data
- Government-issued identification documents (Philippine passport, driver's license, UMID, PhilID, postal ID, voter's ID)
- Proof of address documents (utility bills, bank statements, government correspondence)
- Selfie or photo for biometric verification (if required)
- Social Security System (SSS) or Tax Identification Number (TIN) (if applicable)
3.3 Financial and Transaction Data
- Payment method information (GCash number, Maya account, bank account details)
- Transaction history (deposits, withdrawals, wagers, winnings)
- Payment receipts and confirmation codes
- Bonus and promotion history
- Cryptocurrency wallet addresses (if applicable)
3.4 Gaming and Usage Data
- Betting history (games played, bet amounts, outcomes)
- Account balance and transaction logs
- Login history and session duration
- Responsible gaming settings (deposit limits, self-exclusion status)
- Game preferences and favorites
3.5 Technical and Device Information
- IP address and geolocation data
- Device type, model, and operating system
- Browser type and version
- Cookies and similar tracking technologies (see Section 9)
- Referring website or source of traffic
- Time zone and language preferences
3.6 Communications and Support Data
- Customer support inquiries and correspondence
- Live chat transcripts
- Email communications with our team
- Feedback, surveys, and reviews
- Marketing preferences and communication history
Sensitive Personal Information:
Under the Data Privacy Act of 2012, certain categories of data are classified as "sensitive personal information," including government-issued IDs, biometric data, and financial information. We process sensitive personal information only when necessary for KYC verification, fraud prevention, or legal compliance, and we implement enhanced security measures to protect this data.
4. How We Collect Your Data
4.1 Information You Provide Directly
Most of the personal data we collect is provided directly by you when you:
- Register for an account
- Complete your profile or KYC verification
- Make deposits or withdrawals
- Place bets or play games
- Contact customer support
- Subscribe to newsletters or promotional communications
- Participate in surveys, contests, or promotions
4.2 Information We Collect Automatically
When you access or use the Platform, we automatically collect certain information, including:
- Technical data through cookies, web beacons, and similar tracking technologies
- Usage data, such as pages visited, features used, and time spent on the Platform
- Device and connection information
- Location data based on your IP address (to comply with Philippine licensing requirements)
4.3 Information from Third Parties
In certain cases, we may receive personal data from third-party sources, including:
- Payment processors: GCash, Maya, banks, and other financial institutions
- Identity verification providers: Third-party KYC and AML compliance services
- Marketing partners: Affiliates or advertising networks (only with your consent)
- Social media platforms: If you choose to link your account to social media
- Fraud detection services: Providers that help us identify suspicious activity
5. How We Use Your Personal Data
We process your personal data for the following purposes:
5.1 Account Management and Service Provision
- Create and maintain your player account
- Process your registration and verify your identity
- Provide access to gaming services, sports betting, and promotional offers
- Manage your account balance, deposits, and withdrawals
- Process bets, wagers, and payouts
- Track your gaming activity and transaction history
5.2 Legal and Regulatory Compliance
- Verify that you are at least 21 years old
- Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
- Fulfill reporting obligations to PAGCOR and other regulatory authorities
- Prevent fraud, money laundering, and other illegal activities
- Respond to legal requests, court orders, or government inquiries
- Enforce our Terms and Conditions and other policies
5.3 Customer Support and Communications
- Respond to your inquiries, complaints, and support requests
- Send transactional emails (account confirmations, deposit receipts, withdrawal notifications)
- Provide important account or security updates
- Conduct customer satisfaction surveys
5.4 Marketing and Promotions (With Consent)
- Send promotional emails, SMS, or push notifications about bonuses, tournaments, and new games (you may opt out at any time)
- Personalize offers and recommendations based on your gaming preferences
- Conduct marketing campaigns and track their effectiveness
5.5 Security and Fraud Prevention
- Monitor for suspicious account activity and unauthorized access
- Detect and prevent fraud, bonus abuse, and violation of Terms and Conditions
- Implement security measures to protect your account and data
- Investigate disputes and resolve complaints
5.6 Platform Improvement and Analytics
- Analyze usage patterns to improve the Platform's functionality and user experience
- Test new features, games, and services
- Conduct research and statistical analysis (using anonymized or aggregated data)
- Optimize website performance and troubleshoot technical issues
5.7 Responsible Gaming
- Monitor for signs of problem gambling
- Implement deposit limits, loss limits, and self-exclusion tools
- Provide resources and support for responsible gaming
- Enforce cooling-off periods and account restrictions when necessary
6. Legal Basis for Processing
Under the Data Privacy Act of 2012, we must have a lawful basis for processing your personal data. We process your personal information based on one or more of the following legal grounds:
6.1 Consent
You provide explicit consent when you register an account, accept our Terms and Conditions and Privacy Policy, or opt in to marketing communications. You may withdraw your consent at any time by contacting us or updating your account settings.
6.2 Contractual Necessity
Processing is necessary to fulfill our contractual obligations under the Terms and Conditions, including providing gaming services, processing transactions, and managing your account.
6.3 Legal Obligation
We are required by Philippine law to process certain personal data for KYC verification, AML compliance, age verification, tax reporting, and regulatory reporting to PAGCOR and other authorities.
6.4 Legitimate Interests
We process certain data based on our legitimate business interests, such as preventing fraud, improving our services, conducting analytics, and ensuring the security of the Platform. We balance these interests against your rights and freedoms to ensure fair processing.
6.5 Vital Interests
In rare cases, we may process data to protect your vital interests or those of another person (e.g., responding to a medical emergency or preventing imminent harm).
7. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we may share your personal information with the following categories of recipients when necessary:
7.1 Service Providers and Business Partners
- Payment processors: GCash, Maya, banks, and other financial institutions to process deposits and withdrawals
- Identity verification services: Third-party KYC and AML compliance providers
- Game providers: Software developers and suppliers of casino games, live dealer studios, and sports betting platforms
- Hosting and cloud services: Providers that store and manage our data infrastructure
- Customer support tools: Live chat platforms and ticketing systems
- Marketing and analytics providers: Email service providers, analytics platforms (e.g., Google Analytics), and advertising networks (only with your consent)
7.2 Regulatory and Government Authorities
We may disclose your personal data to PAGCOR, the National Privacy Commission, law enforcement agencies, tax authorities, or other government bodies when required by law or when necessary to:
- Comply with legal obligations, court orders, or subpoenas
- Report suspicious transactions under AML regulations
- Cooperate with investigations of fraud, money laundering, or other crimes
- Respond to requests for information from regulatory authorities
7.3 Legal and Professional Advisors
We may share your data with lawyers, accountants, auditors, and other professional advisors when necessary for legal compliance, dispute resolution, or business operations.
7.4 Business Transfers
In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to a successor entity. We will notify you of any such transfer and provide you with options regarding your data.
7.5 Protection of Rights and Safety
We may disclose personal data if we believe in good faith that such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or the public.
Data Processing Agreements:
All third-party service providers with whom we share personal data are bound by data processing agreements that require them to protect your information in accordance with applicable data protection laws and to use your data only for the purposes specified by 2006ph.
8. International Data Transfers
Your personal data is primarily stored and processed in servers located within the Philippines or in jurisdictions with data protection standards equivalent to those required by Philippine law. However, some of our service providers (such as cloud hosting providers, payment processors, or game suppliers) may be located outside the Philippines.
When we transfer personal data internationally, we ensure that appropriate safeguards are in place, including:
- Standard contractual clauses approved by the National Privacy Commission
- Data processing agreements with adequate security provisions
- Verification that the recipient country has adequate data protection laws
- Compliance with cross-border transfer requirements under the Data Privacy Act of 2012
By using the Platform, you consent to the transfer of your personal data to third-party service providers located outside the Philippines, subject to the safeguards described above.
9. Cookies and Tracking Technologies
9.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites recognize your device, remember your preferences, and improve your browsing experience. 2006ph uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to provide and improve our services.
9.2 Types of Cookies We Use
- Essential Cookies: Required for the Platform to function properly (e.g., session management, authentication, security). These cannot be disabled.
- Performance Cookies: Collect anonymous data about how you use the Platform (e.g., pages visited, features used) to help us improve performance.
- Functional Cookies: Remember your preferences (e.g., language, display settings) to enhance your experience.
- Marketing Cookies: Track your activity across websites to deliver personalized ads and promotions (only with your consent).
9.3 Third-Party Cookies
Some cookies are set by third-party service providers, such as Google Analytics (for website analytics), Facebook Pixel (for advertising), or game providers (for fraud prevention). These third parties are subject to their own privacy policies.
9.4 Managing Cookies
You can manage or disable cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of the Platform. To opt out of third-party advertising cookies, visit industry opt-out tools such as the Digital Advertising Alliance or Network Advertising Initiative.
For more information, visit our Cookie Policy or contact our support team.
10. Data Security Measures Protected
2006ph takes data security seriously and implements industry-standard technical, organizational, and physical safeguards to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:
10.1 Encryption
- 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
- Database encryption: Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
- Password hashing: User passwords are hashed using bcrypt or similar one-way hashing algorithms and are never stored in plain text.
10.2 Access Controls
- Role-based access controls (RBAC) to limit employee access to personal data on a need-to-know basis
- Multi-factor authentication (MFA) for administrative access
- Regular review and audit of user permissions
10.3 Network Security
- Firewalls and intrusion detection/prevention systems (IDS/IPS)
- Regular security audits and vulnerability assessments
- DDoS protection and traffic filtering
10.4 Monitoring and Incident Response
- 24/7 monitoring of systems for suspicious activity
- Automated alerts for security incidents
- Incident response plan to address data breaches promptly
- Regular security training for employees
10.5 Compliance
- PCI DSS compliance for payment card data (if applicable)
- ISO 27001 information security management practices
- Regular third-party security audits
Data Breach Notification:
In the unlikely event of a data breach that affects your personal data, we will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with the Data Privacy Act of 2012. We will provide information about the nature of the breach, the data affected, and the steps we are taking to mitigate harm.
While we implement robust security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.
11. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the purpose for which it is processed:
11.1 Account Data
- Active accounts: Retained for the duration of your account's active status
- Inactive accounts: Accounts inactive for 12 months may be closed, and data may be anonymized or deleted (subject to legal requirements)
- Closed accounts: Account data is retained for up to 5 years after account closure to comply with AML and tax regulations
11.2 Transaction and Financial Data
Transaction records, deposit and withdrawal history, and financial data are retained for a minimum of 5 years after the transaction date, as required by Philippine AML regulations and PAGCOR licensing requirements.
11.3 KYC and Identity Verification Data
Government-issued IDs, proof of address, and other identity verification documents are retained for a minimum of 5 years after account closure or the last verification update, in compliance with AML and KYC regulations.
11.4 Gaming and Usage Data
Betting history, gameplay logs, and usage data are retained for up to 5 years for regulatory compliance, dispute resolution, and fraud prevention purposes.
11.5 Marketing and Communications Data
Marketing preferences and communication history are retained until you withdraw consent or close your account, after which the data is deleted within 30 days.
11.6 Legal and Regulatory Data
Data related to legal disputes, regulatory investigations, or compliance obligations may be retained for longer periods as required by law or until the matter is resolved.
After the applicable retention period expires, we will securely delete or anonymize your personal data so that it can no longer be associated with you.
12. Your Data Protection Rights
Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:
12.1 Right to be Informed
You have the right to be informed about how your personal data is collected, used, and shared. This Privacy Policy serves to fulfill that right. You may request additional information about our data processing practices at any time.
12.2 Right to Access
You have the right to request a copy of the personal data we hold about you. You can access most of your account information by logging into your 2006ph account. For additional data or a comprehensive report, contact our Data Protection Officer at [email protected].
12.3 Right to Rectification
If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to have it corrected or updated. You can update most information directly through your account settings or by contacting customer support.
12.4 Right to Erasure (Right to be Forgotten)
You may request deletion of your personal data in certain circumstances, such as:
- The data is no longer necessary for the purposes for which it was collected
- You withdraw consent (where consent was the legal basis for processing)
- You object to processing based on legitimate interests
- The data has been unlawfully processed
However, we may be required to retain certain data to comply with legal obligations (e.g., AML regulations, tax laws) or to resolve disputes.
12.5 Right to Object
You have the right to object to processing of your personal data for direct marketing purposes or processing based on our legitimate interests. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or updating your account settings.
12.6 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller. This right applies to data you provided to us with your consent or for the performance of a contract.
12.7 Right to Restrict Processing
You may request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of the data or assess your objection to processing.
12.8 Right to Withdraw Consent
Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
12.9 Right to Lodge a Complaint
If you believe we have violated your data protection rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact information for the NPC is available at www.privacy.gov.ph.
How to Exercise Your Rights:
To exercise any of these rights, please contact our Data Protection Officer at [email protected] or submit a request through our customer support channel. We will respond to your request within 30 days. We may require verification of your identity before processing your request to protect your data from unauthorized access.
13. Children's Privacy 21+ Only
The 2006ph Platform is intended solely for individuals who are at least 21 years of age. We do not knowingly collect, use, or solicit personal data from anyone under the age of 21, and we do not knowingly allow persons under 21 to register for accounts or use our services.
If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately delete that information from our systems and close any associated account. Parents or guardians who believe that a minor has provided personal data to 2006ph should contact us immediately at [email protected] so that we can take appropriate action.
Age verification is a critical component of our compliance with Philippine gaming regulations. We may request government-issued identification to verify your age before allowing you to make deposits or place wagers.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes to this Policy, we will notify you by:
- Posting the updated Policy on the Platform with a revised "Last Updated" date
- Sending an email notification to the address associated with your account
- Displaying a prominent notice on the Platform
Your continued use of the Platform after the updated Policy takes effect constitutes acceptance of the changes. If you do not agree with the updated Policy, you must cease using the Platform and may close your account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
15. Contact and Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact us:
We will respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you may escalate your complaint to the National Privacy Commission of the Philippines.
National Privacy Commission Contact Information:
Effective Date:
This Privacy Policy was last updated on January 15, 2025 and is effective as of that date. Version 2.3. By continuing to use the 2006ph Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy.