ccc66 Privacy Policy

This Privacy Policy ("Policy") describes the information practices of ccc66 ("ccc66," "we," "us," or "our"), the operator of the online gaming platform accessible at ccc66.cam (the "Platform"). It applies to all personal data collected from individuals ("you," "User," or "Player") who access, register on, or otherwise interact with the Platform, whether via desktop browser, mobile browser, or any other access method.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"), ccc66 is the Personal Information Controller in respect of all personal data collected through the Platform.

By registering a ccc66 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please discontinue use of the Platform and contact us to close your account.

ccc66 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

ccc66 does not collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless this becomes strictly necessary for a specific regulatory purpose, in which case you will be separately notified and your explicit consent obtained.

ccc66 collects personal data through the following means:

• Direct provision: Information you actively provide during account registration, identity verification, payment method setup, bonus claims, and support interactions.
• Automated collection: Technical and behavioural data automatically collected when you access the Platform, via server logs, session tokens, and cookies. See Section 7 for details on cookies.
• Third-party sources: Identity and financial verification data provided by KYC service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention services engaged by ccc66 to verify the accuracy of information you have provided.
• Regulatory sources: Information shared by PAGCOR or other competent Philippine authorities in connection with licensing, compliance investigations, or player protection measures.

ccc66 processes personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary purposes and the corresponding legal basis under the Data Privacy Act of 2012:

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

ccc66 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under binding data protection agreements:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, solely to process financial transactions you initiate.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR requirements and the Anti-Money Laundering Act (AMLA).
• Fraud and security providers: Specialist services that help ccc66 detect and prevent unauthorised account access and financial crime.
• Cloud and hosting infrastructure providers: Providers of the technical infrastructure on which the ccc66 Platform operates, bound by strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal or compliance purposes and under strict confidentiality obligations.

Any third party that receives personal data from ccc66 is required to process that data only for the specific purpose for which it was shared, and in accordance with the Data Privacy Act of 2012.

ccc66 retains personal data for only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your ccc66 account.
• Transaction and financial records: Retained for a minimum of five (5) years after the date of each transaction, in compliance with AMLC and BIR record-keeping requirements applicable in the Philippines.
• KYC and identity verification records: Retained for a minimum of five (5) years after account closure, or longer if required by a regulatory investigation.
• Communications and support records: Retained for three (3) years from the date of last interaction.
• Technical and log data: Typically retained for up to twelve (12) months for security monitoring purposes.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

ccc66 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These enable your ccc66 login session, remember your language preference, and maintain shopping cart or game state. They cannot be disabled without breaking the Platform.
• Performance and analytics cookies: Used to understand how players use the Platform — which pages are visited most, where sessions drop off, and how game loading times can be improved. Data collected is aggregated and not linked to individual identities.
• Functional cookies: Remember preferences you have set (such as preferred deposit method or game category) to personalise your experience on return visits.

ccc66 does not use third-party advertising or cross-site tracking cookies for the purpose of serving targeted advertisements on external websites.

Most browsers allow you to manage cookie settings directly. Disabling strictly necessary cookies will impair your ability to use the Platform, including the ccc66 login function.

ccc66 implements technical, organisational, and physical safeguards designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit TLS/SSL encryption for all data transmitted between your device and ccc66 servers
• Encrypted storage for sensitive data at rest, including financial records and identity documents
• Multi-factor authentication options for ccc66 player accounts
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits and vulnerability assessments of Platform infrastructure
• Monitoring systems designed to detect and respond to anomalous access patterns
• Formal data breach response procedures, including NPC notification obligations under RA 10173

While ccc66 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own ccc66 login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

The ccc66 Platform is primarily operated for Filipino players within the Philippines. However, some of the third-party service providers ccc66 engages — including cloud infrastructure providers and certain KYC verification partners — may be located in, or process data in, jurisdictions outside the Philippines.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to the Philippines, ccc66 ensures appropriate safeguards are in place through contractual protections that align with the requirements of the Data Privacy Act of 2012 and NPC guidance on cross-border data flows.

ccc66 does not transfer your data to a foreign jurisdiction for the purpose of evading Philippine data protection law.

Under the Data Privacy Act of 2012, as a Filipino data subject you are entitled to the following rights with respect to your personal data held by ccc66:

• Right to be informed: You have the right to know what personal data ccc66 holds about you and how it is being used. This Policy fulfils that obligation.
• Right of access: You may request a copy of the personal data ccc66 holds about you at any time.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (email address, contact number) can be made directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data, subject to ccc66's legal retention obligations. Data required for AML, KYC, or regulatory purposes cannot be deleted during the applicable retention period.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time with immediate effect.
• Right to data portability: You may request that ccc66 provide your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible.

To exercise any of these rights, contact the ccc66 Data Protection Officer at [email protected]. We will respond within five (5) Philippine business days. We may need to verify your identity before actioning a request.

If you are dissatisfied with how ccc66 handles your request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The ccc66 Platform is strictly for adults aged 21 years and above as required by PAGCOR regulations governing online gambling in the Philippines. ccc66 does not knowingly collect personal data from individuals under the age of 21.

If ccc66 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted to the extent permitted by law, and any funds on deposit will be returned to the source payment method following verification.

If you believe a minor has registered on the ccc66 Platform, please contact us immediately at [email protected].

The ccc66 Platform may contain references to or navigation links toward third-party services, including payment processors such as GCash and PayMaya. Once you leave the ccc66 Platform and access a third-party website or application, this Privacy Policy no longer applies to the personal data you provide to that third party.

ccc66 is not responsible for the privacy practices of third-party platforms and encourages you to review their privacy policies before providing any personal information. ccc66 does not endorse or assume liability for the data practices of any third-party service.

ccc66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance from the NPC or PAGCOR. When material changes are made, ccc66 will publish the revised Policy on this page with an updated "Last Updated" date and, where practicable, notify registered players via their registered email address.

Your continued use of the Platform after any amendment constitutes your acceptance of the updated Policy. If you do not agree with a material change, you should cease using the Platform and contact us to discuss your options.

ccc66 has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data ccc66 holds about you, please contact the DPO using the details below.

Data Protection Officer — ccc66
Email (plain text only): [email protected]

All privacy-related queries are handled by the ccc66 compliance team and will receive a substantive response within five (5) Philippine business days of receipt. For urgent account security issues, our support team is available 24 hours a day, seven days a week.