cc66 Privacy Policy
Your Data, Your Rights, Our Obligations

1. Who We Are

1.1   cc66 is an online gaming platform operated in compliance with the Philippine Amusement and Gaming Corporation (PAGCOR) regulatory framework. The platform is accessible at cc66.vu and provides Filipino players with sports betting, live casino, slots, bingo, e-sabong, and related gaming services.

1.2   For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its implementing rules, cc66 acts as a personal information controller in respect of personal data collected from Players and site visitors.

1.3   If you have any questions about this Policy or wish to exercise your data rights, please refer to Section 14 of this Policy for contact details.

2. Scope of This Policy

2.1   This Policy applies to all personal data collected and processed by cc66 in connection with: (a) the registration and maintenance of player accounts; (b) the provision of gaming and related services through the cc66 platform; (c) customer support interactions; (d) marketing communications (where consent has been obtained); and (e) visits to the cc66.vu website whether or not the visitor is a registered Player.

2.2   This Policy does not apply to third-party websites, services, or game providers that may be linked to or embedded within the cc66 platform. Those third parties operate under their own privacy policies, and cc66 is not responsible for their data practices.

2.3   Where cc66 acts as a personal information processor on behalf of a third-party controller (for example, where a licensed game provider instructs cc66 on a limited processing activity), cc66's obligations are governed by the relevant data processing agreement with that controller.

3. Personal Data We Collect

cc66 collects the following categories of personal data, depending on your interaction with the platform:

3.1   cc66 does not intentionally collect sensitive personal information as defined under the DPA (such as religious beliefs, political opinions, or health information) unless this is directly relevant to a responsible gaming assessment or a legal obligation.

3.2   Where you provide personal data about third parties (for example, a beneficiary for an account or a payment method registered in a family member's name), you warrant that you have that person's consent to provide their information to cc66 for the purposes described in this Policy.

4. How We Use Your Personal Data

4.1   Account Administration

cc66 uses Identity Data, Contact Data, and Financial Data to create and maintain your player account, process deposits and withdrawals, and communicate with you regarding your account status, security alerts, and transaction confirmations.

4.2   Regulatory Compliance and KYC

cc66 is required by PAGCOR regulations and Philippine anti-money-laundering law (Republic Act No. 9160 as amended) to verify the identity and age of all Players before permitting real-money gameplay. Identity Data and Financial Data are processed for this purpose. KYC documentation is retained in accordance with Section 8 of this Policy.

4.3   Fraud Prevention and Security

Technical Data, Gaming Activity Data, and Financial Data are processed to detect and prevent fraud, money laundering, account takeover, bonus abuse, and other prohibited conduct as described in the cc66 Terms & Conditions. Automated risk scoring may be applied to transactions and login events.

4.4   Responsible Gaming

Gaming Activity Data and Preference Data are used to monitor player behaviour against responsible gaming indicators, enforce player-set limits, and identify players who may benefit from responsible gaming interventions. This processing reflects cc66's obligations under the PAGCOR framework and our commitment to player welfare.

4.5   Customer Support

Communications Data is used to investigate and resolve support requests, complaints, and disputes. Support records are retained to maintain a history of interactions and to improve service quality.

4.6   Marketing Communications

Where you have provided explicit consent, cc66 may use your Contact Data and Preference Data to send you promotional communications about bonuses, new games, platform updates, and special offers via SMS, email, or Viber. You may withdraw your consent at any time by contacting cc66 support or updating your account preferences.

4.7   Platform Improvement and Analytics

Aggregated and anonymised Technical Data and Gaming Activity Data may be used by cc66 to analyse platform performance, understand player behaviour patterns, improve user experience, and develop new features. This processing uses data that cannot reasonably be used to identify you as an individual.

5. Legal Basis for Processing

cc66 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Performance of Contract: Processing necessary to register your account, provide gaming services, process payments, and fulfil our obligations to you as a Player.
• Legal Obligation: Processing required to comply with PAGCOR regulations, anti-money-laundering obligations, tax law, and other Applicable Law of the Philippines.
• Legitimate Interests: Processing carried out in pursuit of cc66's legitimate interests in fraud prevention, security, responsible gaming monitoring, and platform improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain optional features, where you have given freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time.

6. Sharing Your Personal Data

6.1   cc66 does not sell, rent, or trade your personal data to third parties. Your data is shared only in the circumstances described below, and always subject to appropriate contractual safeguards or legal requirements.

6.2   Service Providers

cc66 shares personal data with carefully selected service providers who process data on our behalf under written contracts that prohibit independent use of your data. Service provider categories include: payment processors (GCash, PayMaya, Visa, Mastercard, InstaPay, PESONet, and Philippine banks), KYC and identity verification services, IT infrastructure and cloud hosting providers, customer support platform operators, and fraud detection services.

6.3   Game Providers

Game software providers integrated into the cc66 platform may receive limited technical and gaming activity data necessary to facilitate gameplay, resolve disputes, and comply with their own licensing obligations. All game providers integrated into cc66 hold current gaming licences and are bound by data processing agreements.

6.4   Regulatory and Law Enforcement Authorities

cc66 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine regulatory and law enforcement authorities where required by Applicable Law. Such disclosures are made as legal obligations and do not constitute a breach of cc66's confidentiality obligations to you.

6.5   Business Transfers

In the event of a merger, acquisition, sale of assets, or other business transfer involving cc66, player data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material changes to how their data will be processed.

7. Cookies and Tracking Technologies

7.1   cc66 uses cookies and similar tracking technologies on the cc66.vu website to: (a) ensure the platform functions correctly across sessions; (b) maintain your login session and security state; (c) remember your language and display preferences; (d) analyse aggregated platform usage to improve performance; and (e) support fraud detection and responsible gaming monitoring.

7.2   The following categories of cookies are used on cc66:

• Strictly Necessary Cookies: Required for the platform to function. These cannot be disabled without impairing core platform features such as login and payment processing.
• Functional Cookies: Remember your preferences and settings to improve your experience across sessions.
• Analytics Cookies: Collect anonymised information about how players use the platform to improve performance and user experience.
• Security Cookies: Support fraud detection, session integrity, and responsible gaming monitoring functions.

7.3   You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in or using core platform features. cc66 does not use cookies for third-party advertising targeting.

8. Data Retention

8.1   cc66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Applicable Law. The following indicative retention periods apply:

8.2   On expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained beyond these periods due to an active legal proceeding or regulatory investigation, it will be retained until that matter is resolved.

9. Security Measures

9.1   cc66 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks presented by its processing. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cc66 platform;
• Encryption of personal data stored in cc66's databases;
• Role-based access controls restricting staff access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for administrative access to data systems;
• Regular penetration testing and vulnerability assessments by qualified security professionals;
• Incident response procedures aligned with NPC breach notification requirements.

9.2   In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cc66 will notify the National Privacy Commission and, where required, affected data subjects, within the timeframes prescribed by the DPA and its implementing rules.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data processed by cc66. To exercise any of these rights, contact cc66 as described in Section 14.

11. Children and Minors

11.1   cc66 prohibits the use of its platform by persons under 21 years of age. This restriction is enforced through mandatory age verification procedures at account registration and prior to withdrawal, as required by PAGCOR regulations.

11.2   If cc66 becomes aware that personal data has been collected from a person under the age of 21, cc66 will immediately suspend the associated account, delete the collected data to the extent permitted by its regulatory obligations, and take such further action as is required under Applicable Law.

11.3   Parents and guardians who believe that their minor child has created a cc66 account or provided personal data to cc66 are encouraged to contact cc66 immediately via Live Chat or support email so that cc66 can take prompt remedial action.

12. Cross-Border Data Transfers

12.1   cc66's primary operations and data infrastructure are based in or aligned with Philippine legal requirements. In limited circumstances, personal data may be transferred to or accessed from service providers located outside the Philippines — for example, cloud infrastructure providers, game software providers, or fraud detection services.

12.2   Where personal data is transferred outside the Philippines, cc66 ensures that appropriate safeguards are in place as required by the DPA, including: (a) transfers to countries with an adequate level of data protection as recognised by the NPC; or (b) transfers governed by appropriate contractual clauses that impose data protection obligations on the receiving party equivalent to those under Philippine law.

12.3   cc66 does not transfer personal data to third countries in a manner that would undermine the data protection rights of Filipino data subjects. If you have questions about specific cross-border transfers involving your data, please contact cc66's Data Protection Officer at the details provided in Section 14.

13. Updates to This Policy

13.1   cc66 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. The "effective date" at the top of this Policy will be updated whenever a material change is made.

13.2   Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — cc66 will provide advance notice to registered Players via email or platform notification at least fourteen (14) days before the changes take effect.

13.3   We encourage all cc66 Players to review this Policy periodically. Continued use of the cc66 platform following notification of a material Policy update constitutes your acknowledgment of the revised Policy.

14. Contact Us & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a suspected data breach or privacy concern, you may contact cc66 through the following channels:

If you believe that cc66 has not handled your personal data in accordance with the Data Privacy Act of 2012 and you are not satisfied with cc66's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about the NPC complaints process is available through official Philippine government channels.