cc66 Privacy Policy

This Privacy Policy ("Policy") describes how cc66 ("the Platform," "we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you," "the Player," or "the User") who access or register on cc66.one and its associated services.

cc66 operates as an online casino platform serving Filipino players across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions. We take the privacy and security of your personal data seriously, and we are committed to handling it responsibly, transparently, and in accordance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Policy applies to all personal data collected through cc66.one, the cc66 mobile platform, our customer support channels, and any other service operated by cc66. It should be read together with our Terms & Conditions, which govern your use of the cc66 platform as a whole.

If you have any questions about how cc66 handles your personal data, please refer to Section 14 (Contact Us) of this Policy for the appropriate contact channels.

For the purposes of the Data Privacy Act of 2012 and applicable data protection regulations, cc66 acts as the Personal Information Controller (PIC) with respect to the personal data collected from users of cc66.one.

As the Personal Information Controller, cc66 determines the purposes and means by which your personal data is processed. We are responsible for ensuring that all data processing activities carried out by cc66 — and by any third-party processors acting on our behalf — comply with the requirements of the Data Privacy Act of 2012 and the regulations issued by the National Privacy Commission (NPC) of the Philippines.

cc66 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO through the support channels listed in Section 14 of this Policy.

cc66 collects the following categories of personal data from registered players and platform visitors:

A. Identity & Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — players must be 21 or older)
• Gender
• Nationality and country of residence
• Username and account credentials

B. Contact Data

• Email address
• Mobile phone number
• Residential address (city, province, postal code)

C. Identity Verification (KYC) Data

• Government-issued ID documents (e.g., Philippine passport, SSS ID, UMID, PhilSys ID, driver's license, PRC ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or live photo for identity verification purposes

D. Financial & Payment Data

• GCash account number or registered mobile number
• PayMaya / Maya account details
• Bank account details (BPI, BDO, Metrobank) for withdrawal processing
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used

E. Gaming Activity Data

• Game session history (games played, bet amounts, win/loss records)
• Bonus and promotion usage history
• Responsible gaming settings (deposit limits, self-exclusion status)

F. Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and tracking data (see Section 09)

G. Communications Data

• Records of your communications with cc66 customer support (live chat transcripts, email correspondence)
• Feedback, complaints, and dispute records

cc66 collects your personal data through the following means:

• Direct collection: Information you provide when registering your cc66 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access cc66.one, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from anti-fraud partners; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with licensing compliance or investigations.

cc66 processes your personal data only for specific, legitimate purposes. The table below summarizes the key purposes for which we process your data and the legal basis for each:

cc66 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new legal basis for the processing.

cc66 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party KYC service providers process your identity documents and verification data on behalf of cc66 to fulfill our regulatory obligations.
• Fraud prevention and AML partners: Anti-fraud and anti-money laundering service providers may receive transaction and behavioral data to help detect and prevent financial crime.
• Game content providers: Third-party game studios and live casino operators may receive your player ID and session data to deliver their games on the cc66 platform.
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies may receive your data where required by law or regulatory mandate.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Legal and professional advisors: Lawyers, auditors, and compliance consultants who require access to data in connection with legal proceedings or regulatory audits.

All third-party processors engaged by cc66 are required to process your personal data only in accordance with our instructions and in compliance with the Data Privacy Act of 2012. We do not permit third-party processors to use your data for their own independent purposes.

cc66 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and AML compliance obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with the Anti-Money Laundering Act (AMLA) of the Philippines.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an unresolved dispute or legal proceeding.
• Marketing and promotional data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted or anonymized within thirty (30) days.
• Technical and device data (logs): Retained for up to twelve (12) months from the date of collection, unless required for longer retention in connection with a security investigation.

Upon expiry of the applicable retention period, cc66 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

cc66 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and cc66.one is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols.
• Data encryption at rest: Sensitive personal data — including KYC documents and financial account details — is encrypted when stored on our servers.
• Access controls: Access to personal data is restricted to authorized cc66 personnel and third-party processors on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication (2FA): 2FA is available for all cc66 player accounts and is strongly recommended to protect your login credentials.
• Regular security audits: cc66 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our platform.
• Incident response: cc66 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) and affected users in accordance with the Data Privacy Act of 2012.

While cc66 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your cc66 account credentials and for notifying us immediately if you suspect unauthorized access to your account.

cc66 uses cookies and similar tracking technologies on cc66.one to enhance your user experience, maintain your session, and analyze platform usage. The following types of cookies are used:

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of cc66.one and prevent you from accessing certain features of your account. cc66 does not use cookies to serve third-party advertising on cc66.one.

Under the Data Privacy Act of 2012, registered players have the following rights with respect to their personal data held by cc66:

• Right to be informed: You have the right to know what personal data cc66 collects about you, how it is used, and with whom it is shared — as described in this Policy.
• Right of access: You may request a copy of the personal data cc66 holds about you at any time.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held by cc66.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cc66's legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, subject to cc66's overriding legal obligations.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe cc66 has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact the cc66 Data Protection Officer through the support channels listed in Section 14. We will respond to all verified data rights requests within fifteen (15) business days, in accordance with NPC guidelines.

cc66 conducts mandatory age verification as part of the KYC process for all registered accounts. Any account found to belong to a person under the age of 21 will be immediately closed, all associated data will be deleted in accordance with our data disposal procedures, and any funds held in the account will be handled in accordance with applicable Philippine law.

If you are a parent or guardian and believe that a minor has registered on cc66 without your knowledge, please contact our support team immediately through the channels listed in Section 14. We will investigate and take appropriate action as quickly as possible.

cc66 supports the responsible gaming initiatives of PAGCOR and encourages parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. For more information, visit our Responsible Gaming page.

In some cases, the personal data of cc66 players may be transferred to, stored in, or processed in countries outside the Philippines — for example, where our cloud infrastructure providers or game content partners operate servers in other jurisdictions.

Where such international transfers occur, cc66 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012.
• Transfers only to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules or equivalent mechanisms where data is transferred within a corporate group.

By using the cc66 platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the operation of the platform, subject to the safeguards described above.

cc66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made to this Policy, we will notify registered users via the email address associated with their account and/or by displaying a prominent notice on cc66.one.

The "Last Updated" date at the top of this page reflects the date on which the most recent version of this Policy came into effect. We encourage you to review this Policy periodically to stay informed about how cc66 protects your personal data.

Your continued use of the cc66 platform following the posting of any amendments to this Policy constitutes your acceptance of the revised Policy. If you do not agree to any amended version of this Policy, you must immediately cease using the platform and contact our support team to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data cc66 holds about you, please contact us through any of the following channels:

• Data Privacy inquiries: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 inside your cc66 account dashboard after login.
• Support Center: Visit our Support page for all available contact options.
• FAQ: Visit our FAQ page for answers to common privacy and account questions.

cc66 aims to respond to all privacy-related inquiries within five (5) business days. For formal data subject access requests or complaints, please allow up to fifteen (15) business days for a full response, in accordance with National Privacy Commission guidelines.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 and protecting the privacy rights of Filipino citizens.