6cczz Privacy Policy

1 Who We Are

6cczz Casino operates the online gaming platform accessible at 6cczz.app, providing casino games, live dealer games, slots, bingo, and related gaming services to players in the Philippines. 6cczz acts as the data controller in respect of personal data collected through the platform, meaning we determine the purposes and means of processing your personal data.

6cczz is committed to operating in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines. We are also subject to the data handling requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) as part of our gaming compliance obligations.

This Privacy Policy is intended to inform you clearly and transparently about how 6cczz handles your personal data. If you have any questions about this policy or our data practices, please refer to Section 14 for contact details.

2 Personal Data We Collect

6cczz collects the following categories of personal data, depending on how you interact with the platform:

We do not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is handled with heightened security measures.

3 How We Collect Your Data

6cczz collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the 6cczz platform, including through cookies, web beacons, and server logs. See Section 7 for details on cookies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and risk data from security service providers; payment verification data from payment processors such as GCash and Maya.
• Regulatory Sources: Information received from PAGCOR or other regulatory authorities in connection with compliance obligations, including self-exclusion registers.

4 How We Use Your Personal Data

6cczz uses your personal data for the following purposes:

• Account Management: Creating and maintaining your 6cczz player account, verifying your identity , and managing your login credentials.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, bank transfer, and debit card; verifying payment method ownership; maintaining transaction records.
• KYC and Age Verification: Verifying that you meet the 21+ age requirement and confirming your identity in compliance with PAGCOR regulations.
• Regulatory Compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: Monitoring gaming activity to identify signs of problem gambling; administering deposit limits, session limits, and self-exclusion requests; complying with PAGCOR responsible gaming requirements.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Platform Improvement: Analyzing usage patterns to improve the 6cczz platform, fix bugs, and develop new features.
• Marketing Communications: Sending you information about 6cczz promotions, bonuses, and new games, where you have consented to receive such communications. You may opt out at any time.
• Legal Claims: Establishing, exercising, or defending legal claims involving 6cczz.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, 6cczz processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your 6cczz account, process transactions, and provide gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AMLA obligations, and NPC data protection requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

6cczz does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the platform, including KYC verification providers, payment processors (GCash, Maya, banks), IT infrastructure providers, fraud detection services, and customer support platforms. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.
• Regulatory Authorities: We disclose data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory or law enforcement authorities where required by law or regulatory obligation.
• Game Providers: Certain technical data (such as session identifiers) may be shared with third-party game software providers to enable game functionality. These providers do not receive your full identity or financial data.
• Legal Proceedings: We may disclose your data to courts, legal advisers, or opposing parties where necessary to establish, exercise, or defend legal claims.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 6cczz's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom 6cczz shares personal data are required to maintain appropriate security measures and to use the data only for the specified purpose.

7 Cookies and Tracking Technologies

6cczz uses cookies and similar tracking technologies on the 6cczz.app platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the platform.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool settings.
• Analytics Cookies: Collect anonymized data about how players use the platform, which pages are visited most, and where errors occur. This data helps us improve the 6cczz experience.
• Marketing Cookies: Used to deliver relevant promotional content about 6cczz to you. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 6cczz platform. For strictly necessary cookies, no consent is required as they are essential to platform operation.

8 Data Retention

6cczz retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account Data: Retained for the duration of your active account plus five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, as required by AMLA and PAGCOR regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA.
• Gaming History: Retained for five (5) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for two (2) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 6cczz's data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes.

9 Data Security

6cczz implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• AES-256 encryption for data at rest and TLS 1.3 encryption for data in transit
• Multi-factor authentication (MFA) for player accounts and internal administrative access
• Regular penetration testing and vulnerability assessments by independent security firms
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• 24/7 security monitoring and intrusion detection systems
• Regular staff training on data protection and information security
• Secure data centers with physical access controls

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 6cczz will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the Data Privacy Act of 2012.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 6cczz:

To exercise any of these rights, please contact 6cczz's Data Protection Officer using the details in Section 14. We will respond to all valid data subject requests within fifteen (15) business days. We may need to verify your identity before processing your request. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children's Privacy

The 6cczz platform is strictly intended for individuals aged 21 years and above. 6cczz does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is enforced through our KYC verification process, which requires submission of a valid government-issued ID confirming date of birth.

If 6cczz becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, return any deposits, and securely delete the personal data collected, in accordance with our data retention and disposal procedures.

If you believe that a minor has registered an account on the 6cczz platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

12 Cross-Border Data Transfers

6cczz primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, KYC verification services, and game software providers — may process data in other countries.

Where personal data is transferred outside the Philippines, 6cczz ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the NPC
• Implementing contractual clauses with overseas recipients that require them to protect your data to standards equivalent to those required under the Data Privacy Act of 2012
• Conducting due diligence on overseas service providers to verify their data protection practices

By using the 6cczz platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

13 Updates to This Privacy Policy

6cczz may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by posting a notice on the 6cczz platform and, where practicable, by sending a notification to your registered mobile number or email address.

The revised Privacy Policy will take effect on the date specified in the notice. Your continued use of the 6cczz platform after the effective date constitutes your acknowledgment of the updated policy. We encourage you to review this Privacy Policy periodically. The date of the most recent revision is displayed at the top of this page.

If you do not agree with any changes to this Privacy Policy, you should stop using the platform and may request account closure in accordance with the Terms & Conditions. For the full terms governing your use of 6cczz, please refer to our Terms & Conditions.

14 Contact Us and Data Protection Officer

6cczz has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat widget on 6cczz.app — the fastest way to reach us
• Email (Data Privacy): [email protected]
• General Support: [email protected]

Please mark any data subject rights requests clearly as "Data Privacy Request" so that our DPO team can prioritize your inquiry. We aim to acknowledge all privacy-related inquiries within two (2) business days and to resolve them within fifteen (15) business days.

If you are not satisfied with our handling of your personal data or your data subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.