pintu6 Privacy Policy

1. Introduction

1.1 pintu6 takes the privacy and security of your personal data seriously. As a PAGCOR-licensed online casino operator serving Filipino players across the Philippines — from Metro Manila and Cebu City to Davao and beyond — we are subject to the Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations, and related issuances by the National Privacy Commission (NPC).

1.2 This Policy applies to all personal data collected through the pintu6 platform at pintu6.cam, including during account registration, gameplay, deposits and withdrawals, customer support interactions, and any other use of our services.

1.3 This Policy should be read alongside pintu6's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the overall framework governing your relationship with pintu6.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, the personal information controller in respect of your data is pintu6, the operator of pintu6.cam.

2.2 pintu6 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable Philippine data privacy law. The DPO may be contacted at:

• Email: [email protected] (subject line: "Data Privacy – DPO Inquiry")
• Platform: Via the 24/7 live chat support inside pintu6.cam

3. Personal Data We Collect

3.1 pintu6 collects personal data that is adequate, relevant, and limited to what is necessary for the purposes set out in this Policy. The categories of personal data we collect include:

3.2 pintu6 does not collect sensitive personal information as defined under RA 10173 (such as health data, biometric data, or political/religious affiliations) except to the extent required by law or PAGCOR regulation — for example, where a player voluntarily discloses a health condition in the context of responsible gaming support.

4. How We Collect Your Data

4.1 pintu6 collects personal data through the following channels:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automated technologies: Through cookies, web beacons, server logs, and similar tracking technologies as you navigate the pintu6 platform (see Section 9 – Cookies);
• Third-party sources: From payment processors (GCash, PayMaya, banks) for transaction verification, and from identity verification service providers engaged for KYC purposes;
• PAGCOR and regulatory sources: Where pintu6 is required to receive or share data with PAGCOR or other Philippine regulatory authorities in the course of licensing and compliance activities.

5. Purpose & Legal Basis for Processing

5.1 pintu6 processes your personal data only where we have a lawful basis for doing so under the Data Privacy Act of 2012. The primary legal bases we rely on are:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your pintu6 account, process transactions, and provide gaming services;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests do not override your privacy rights;
• Consent: Where you have expressly consented to processing for purposes such as receiving promotional communications from pintu6.

5.2 You may withdraw consent for consent-based processing at any time by updating your communication preferences within your pintu6 account settings or by contacting our DPO. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

6.1 pintu6 does not sell, rent, or trade your personal data to third parties. We share your personal data only in the following circumstances:

• Service providers: Third-party processors engaged to support platform operations, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, cloud infrastructure providers, and customer support tools. All service providers are bound by data processing agreements requiring them to handle your data in compliance with RA 10173;
• Game providers: Game software providers whose titles are available on pintu6 may receive technical data necessary to deliver their game content (e.g., session tokens and bet data) but do not receive your identity or contact information;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies, where disclosure is required by law, court order, or regulatory demand;
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of pintu6's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 Where personal data is shared with third-party service providers located outside the Philippines, pintu6 ensures that appropriate safeguards are in place as required under Section 13 (Cross-Border Transfers) of this Policy.

7. Data Retention

7.1 pintu6 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, tax, and accounting requirements.

7.2 The following general retention periods apply:

• Account data and KYC documents: Retained for the duration of the active account relationship and for a period of five (5) years following account closure, as required by PAGCOR and AMLA regulations;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of transaction in compliance with AMLA obligations;
• Customer support communications: Retained for up to two (2) years from the date of the interaction;
• Technical and usage data: Retained in aggregated or anonymized form for analytics purposes indefinitely; identifiable technical data retained for up to twelve (12) months.

7.3 Where personal data is no longer required for any legitimate purpose and no legal retention obligation applies, pintu6 will securely delete or anonymize it in accordance with our data disposal procedures.

8. Security Measures

8.1 pintu6 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmission between your device and pintu6 servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular security audits, penetration testing, and vulnerability assessments;
• Two-factor authentication options for player accounts to prevent unauthorized access;
• Incident response procedures for detecting, reporting, and managing personal data breaches in compliance with NPC notification requirements.

8.2 While pintu6 takes reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your pintu6 account credentials and for notifying us immediately if you suspect unauthorized account access.

9. Cookies & Tracking Technologies

9.1 pintu6 uses cookies and similar tracking technologies to operate the platform, enhance user experience, and gather analytics data. Cookies are small text files stored on your device when you visit pintu6.cam.

9.2 The types of cookies used by pintu6 include:

• Strictly necessary cookies: Required for the platform to function, including session authentication and security cookies. These cannot be disabled without affecting core functionality;
• Functional cookies: Remember your preferences (e.g., language settings, preferred games) to improve your experience on pintu6;
• Analytics cookies: Collect aggregated data about how players use the platform to help pintu6 improve performance, identify popular features, and fix technical issues;
• Security cookies: Used for fraud detection, bot prevention, and ensuring that only authorized users access account features.

9.3 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using pintu6, but may affect certain platform features and personalization. Note that strictly necessary cookies cannot be disabled via browser settings without disrupting your session.

10. Your Privacy Rights

10.1 Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by pintu6:

• Right to be informed: The right to be notified of how your data is collected, used, and stored — fulfilled by this Privacy Policy;
• Right of access: The right to obtain confirmation of whether pintu6 holds personal data about you and to receive a copy of that data;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected without undue delay;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: The right to object to certain types of processing, including direct marketing communications;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

10.2 To exercise any of the above rights, please contact pintu6's Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request." We will respond within fifteen (15) business days of receiving your request and may require identity verification before processing your request.

11. Minors & Age Restriction

11.1 pintu6 is a strictly 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account or use the pintu6 platform.

11.2 If pintu6 becomes aware that personal data has been collected from an individual under the age of 21 without valid parental or guardian consent, we will take immediate steps to delete such data and close the associated account in accordance with PAGCOR regulations.

11.3 If you believe a minor has created a pintu6 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. Cross-Border Data Transfers

12.1 As an online platform, pintu6 may engage service providers — including cloud infrastructure, game software, and KYC verification providers — that process personal data in jurisdictions outside the Philippines.

12.2 Where personal data is transferred outside the Philippines, pintu6 ensures that such transfers are subject to appropriate safeguards in accordance with RA 10173 and NPC guidelines, including data processing agreements requiring the receiving party to maintain data protection standards equivalent to those required under Philippine law.

12.3 By using the pintu6 platform, you acknowledge and consent to the transfer of your personal data to third-party service providers located outside the Philippines where necessary to provide the services you have requested, subject to the safeguards described above.

13. Amendments to This Policy

13.1 pintu6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or platform features.

13.2 Material changes to this Policy will be communicated to registered players by email to the address associated with their pintu6 account and/or by a prominent notice on pintu6.cam at least seven (7) calendar days before the revised Policy takes effect.

13.3 Your continued use of the pintu6 platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

14. Contact & Data Protection Officer

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or pintu6's data processing practices, please contact our Data Protection Officer:

• Email: [email protected] (subject: "Data Privacy – DPO Inquiry")
• Live Chat: Available 24/7 inside the pintu6 platform dashboard
• Website: pintu6.cam

14.2 If you are not satisfied with pintu6's response to your privacy inquiry or believe that your rights under the Data Privacy Act have been violated, you have the right to file a complaint with the National Privacy Commission of the Philippines.