Privacy Policy – ccc66 Online Casino

1. Data Controller

ccc66 is the data controller responsible for the personal data collected through the ccc66 platform at ccc66.app. As data controller, ccc66 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection legislation, including the Republic Act No. 10173 or Data Privacy Act of 2012 (DPA) of the Philippines and its Implementing Rules and Regulations (IRR).

Where ccc66 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as data processors and are contractually bound to process data only in accordance with ccc66's documented instructions and applicable law.

2. Personal Data We Collect

ccc66 collects the following categories of personal data, depending on your interactions with the Platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, government ID number, selfie/photo for verification	Registration; KYC verification
Contact Data	Philippine mobile number (+63), email address, postal address (if required)	Registration; account updates
Financial Data	GCash/Maya account references, bank account details, transaction history, deposit and withdrawal records	Payment processing; AML compliance
Technical Data	IP address, device type, browser type and version, operating system, session tokens	Platform access; fraud prevention
Usage Data	Game history, bet amounts, session duration, pages visited, features accessed	Platform use; analytics; responsible gaming monitoring
Communications Data	Live chat transcripts, support ticket content, email correspondence	Customer support interactions
Marketing Preferences	Communication preferences, opted-in promotional channels	Account settings; promotional opt-in

ccc66 does not knowingly collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the photographic identity documentation required for age and identity verification.

3. How We Collect Your Data

3.1 Directly From You

The majority of personal data ccc66 holds is provided directly by you during the account registration process, KYC verification, deposit and withdrawal requests, and communications with ccc66 support.

3.2 Automatically

When you access ccc66.app, certain technical and usage data is collected automatically through server logs, session tracking systems, and cookies. This includes your IP address, device identifiers, and behavioural data relating to how you interact with the Platform. See Section 8 (Cookies & Tracking) for more details.

3.3 From Third Parties

ccc66 may receive personal data about you from third-party service providers engaged to support Platform operations, including:

• Identity verification and KYC service providers;
• Payment processors (including GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, USDT TRC20 platforms, and Coins.ph);
• Fraud detection and anti-money laundering screening providers; and
• Analytics providers who process aggregated usage data on ccc66's behalf.

4. Purpose and Legal Basis for Processing

ccc66 processes your personal data only for defined, specific, and legitimate purposes. The table below outlines the primary processing activities and the legal basis for each:

Purpose	Legal Basis
Creating and managing your ccc66 account	Performance of contract
Processing deposits and withdrawals	Performance of contract
Age verification and KYC compliance	Legal obligation
Anti-money laundering (AML) screening	Legal obligation
Responsible gaming monitoring	Legal obligation; legitimate interest
Fraud detection and account security	Legitimate interest
Customer support and dispute resolution	Performance of contract; legitimate interest
Sending promotional offers (opted-in only)	Consent
Platform analytics and improvement	Legitimate interest
Regulatory reporting to competent authorities	Legal obligation

5. Sharing Your Personal Data

ccc66 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. ccc66 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, BDO, BPI, Metrobank, UnionBank, 7-Eleven, Coins.ph, and USDT TRC20 platform providers, to process your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC service providers who verify the authenticity of identity documents submitted during registration or withdrawal;
• Fraud and AML Screening Providers: Services that screen transactions and account activity against sanctions lists and fraud indicators, as required by applicable law;
• Game Technology Providers: Licensed game studios whose platforms power individual games within the ccc66 lobby, to the extent necessary for game operation and dispute resolution;
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or regulatory demand, ccc66 will disclose personal data to competent authorities including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies; and
• Professional Advisors: Legal, accounting, and audit advisors where access to your data is necessary in the course of their professional services to ccc66.

Where ccc66 shares data with third-party processors, those processors are required by contract to process data solely on ccc66's instructions, to maintain appropriate security measures, and to comply with applicable data protection law.

6. Data Retention

ccc66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Transaction Data: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under applicable Philippine law;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later;
• Communications and Support Records: Retained for three (3) years from the date of the interaction; and
• Marketing Preference Records: Retained until you withdraw consent, plus a reasonable period thereafter for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ccc66's data destruction procedures. Where data is anonymised, the anonymised dataset may be retained for analytical purposes indefinitely, as it no longer constitutes personal data.

7. Data Security

ccc66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and ccc66 servers;
• Encryption of personal data at rest on ccc66's database infrastructure;
• Role-based access controls restricting internal access to personal data on a strict need-to-know basis;
• Multi-factor authentication for administrative access to systems holding personal data;
• Regular penetration testing and security audits conducted by independent third-party security specialists;
• Automated intrusion detection and anomaly monitoring systems; and
• Formal data breach response procedures, including notification to the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act of 2012.

While ccc66 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ccc66 account credentials. If you suspect unauthorised access to your account, contact ccc66 support immediately via in-app live chat.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit ccc66.app. ccc66 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, recognise returning players, maintain session security, and improve user experience.

8.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for core Platform functions such as maintaining your login session, processing transactions, and enforcing security measures. These cannot be disabled without impairing Platform functionality;
• Performance Cookies: Collect anonymised information about how players use ccc66.app (e.g., pages visited, error messages encountered) to help ccc66 improve Platform performance; and
• Functionality Cookies: Remember your preferences (e.g., language settings, game display preferences) to personalise your experience on return visits.

8.3 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use ccc66. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

9. Your Data Protection Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights with respect to the personal data ccc66 holds about you:

To exercise any of the above rights, please submit a written request to ccc66 via in-app live chat or by email to [email protected]. ccc66 will respond to verified data subject requests within thirty (30) calendar days of receipt. Identity verification may be required before ccc66 can process your request.

10. Minors and Age Restriction

ccc66 strictly prohibits the registration and use of its Platform by any person under the age of 21 years, in accordance with PAGCOR's minimum age requirements for gambling in the Philippines. ccc66 does not knowingly collect personal data from persons under the age of 21.

As part of the registration and KYC process, ccc66 verifies the age of all players. Where ccc66 becomes aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent, that data will be deleted and the associated account immediately suspended.

If you are a parent or guardian and believe that your child under 21 has registered on ccc66 without your knowledge, please contact ccc66 immediately at [email protected].

11. International Data Transfers

ccc66 primarily processes and stores personal data within secure data centre infrastructure. Where data is transferred to or processed by service providers located outside the Philippines, ccc66 ensures that such transfers are made subject to appropriate safeguards — including contractual clauses that impose data protection obligations equivalent to those required by Philippine law.

Specifically, ccc66 requires all international data processors to: (a) implement appropriate technical and organisational security measures; (b) process data only on documented instructions from ccc66; (c) not transfer data onward to further third parties without ccc66's prior written approval; and (d) notify ccc66 immediately in the event of any personal data breach.

12. Third-Party Services and Links

The ccc66 Platform integrates with a number of third-party service providers to deliver its full range of features. These include game software providers, payment processors, and identity verification services. Each of these providers operates under their own privacy policies and data processing agreements.

ccc66 does not share more data than is necessary with any third-party provider and requires all providers to maintain data protection standards consistent with applicable Philippine law. ccc66 is not responsible for the privacy practices of third-party providers beyond the scope of its contractual agreements with them.

13. Amendments to This Policy

ccc66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Material changes to this Policy will be communicated to you via a prominent notice on ccc66.app and, where practical, by notification to your registered contact details, prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this Policy. Your continued use of ccc66 after the effective date of any amendment constitutes your acknowledgement of the updated Policy. We encourage you to review this Policy periodically to stay informed about how ccc66 protects your personal data.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ccc66, please contact us through the following channels:

• In-App Live Chat: Available 24/7 from within your logged-in ccc66 account — this is the fastest way to reach the team;
• Email: [email protected] (plain text — this address is not a clickable link).

For formal data privacy complaints or requests to exercise your data subject rights, please clearly identify your request in your message and provide sufficient information for ccc66 to verify your identity. ccc66 will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or notify you if additional time is required.

If you are not satisfied with ccc66's response to your data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.