Privacy Policy
cc6c9 Casino Philippines
This Privacy Policy explains how cc6c9 collects, uses, stores, shares, and protects your personal data. It is written in plain English to ensure Filipino players fully understand their rights and how cc6c9 handles their information under the Philippine Data Privacy Act of 2012.
Who We Are — Personal Information Controller
1.1 Identity of the Controller. cc6c9 ("cc6c9", "the Operator", "we", "us") is the Personal Information Controller responsible for all personal data collected and processed through the cc6c9 online gaming platform accessible at cc6c9.club. cc6c9 operates under a Philippine Amusement and Gaming Corporation (PAGCOR) online gaming licence and is subject to the data protection obligations of the Data Privacy Act of 2012, the Anti-Money Laundering Act (AMLA) as amended, and all other applicable Philippine laws.
1.2 Data Protection Officer. cc6c9 has appointed a Data Protection Officer (DPO) to oversee compliance with the DPA and to serve as the primary point of contact for all data privacy inquiries, access requests, and complaints from data subjects. Contact details for the DPO are provided in Section 13 of this Policy.
1.3 Scope. This Privacy Policy applies to all personal data processed by cc6c9 in connection with the cc6c9 Platform, including data collected during account registration, identity verification (KYC), payment processing, gameplay, customer support interactions, and marketing communications. It does not apply to the personal data practices of third-party websites or services that may be linked from the Platform.
Personal Data We Collect
cc6c9 collects personal data in several categories depending on the nature of your interaction with the Platform. Below is a comprehensive description of the types of data collected and the context in which each arises.
Full legal name, date of birth, gender, nationality, registered mobile number, email address, username, and password hash. Collected at account registration. Required to create and maintain a cc6c9 account.
Government-issued Philippine identification document (PhilSys ID, Passport, LTO Driver's Licence, SSS/GSIS ID, or Voter's ID), document number, document expiry date, biometric selfie image for document matching. Collected when a Player submits a withdrawal request for the first time or when cc6c9 initiates an AML review.
GCash registered mobile number, Maya account number, bank account details (BPI, BDO, Metrobank, UnionBank — account name and account number), USDT wallet address, deposit history, withdrawal history, and running account balance. cc6c9 does not store full payment card numbers; card data is handled directly by PCI-DSS compliant payment gateways.
Game session history, wager amounts, bet outcomes, game titles accessed, responsible gaming tool usage (deposit limits set, self-exclusion activations), bonus claims and wagering progress, and sports betting slip history. Used for account management, dispute resolution, and PAGCOR compliance reporting.
IP address, device type and model, operating system and version, browser type and version, screen resolution, session timestamps, page views, click-path data, and login timestamps. Collected automatically when you access the Platform via server logs and first-party analytics.
Live chat transcripts, support ticket content, email correspondence, and any personal data you voluntarily provide when contacting cc6c9 support. Retained for quality assurance, dispute resolution, and training purposes.
Communication preferences (SMS, email, push notification opt-in/out status), promotion response history, and voluntary survey responses. cc6c9 does not collect marketing preference data from Players who have opted out of all marketing communications.
How We Collect Your Data
3.1 Directly from You. The majority of personal data cc6c9 processes is provided directly by you during account registration, KYC submission, deposit and withdrawal requests, customer support interactions, and responses to promotions or surveys.
3.2 Automatically. Technical and device data is collected automatically when you access or interact with the cc6c9 Platform through server logs, session tracking, and first-party analytics tools. cc6c9 does not use third-party analytics platforms that transmit your data to external analytics providers.
3.3 From Third-Party Verification Partners. For KYC identity verification, cc6c9 may use the services of licensed third-party identity verification providers who perform document authentication and biometric matching on cc6c9's behalf. These providers act as Personal Information Processors (PIP) under the DPA and are contractually bound to process data only for cc6c9's specified verification purposes.
3.4 From Payment Processors. cc6c9 receives transaction confirmation data (amount, reference number, timestamp, sender account identifier) from GCash, Maya, BPI, BDO, Metrobank, and other payment processors when you make a deposit or receive a withdrawal. The full payment credentials remain with the payment processor and are not transmitted to cc6c9.
3.5 From Cookies and Similar Technologies. cc6c9 uses cookies and similar tracking technologies as described in Section 7. You may manage your cookie preferences through your browser settings.
Purposes of Processing & Legal Basis
Under the Data Privacy Act of 2012, cc6c9 is required to identify the legal basis for processing each category of personal data. The primary legal bases applicable to cc6c9's processing activities are: (a) performance of a contract (the account agreement with the Player), (b) compliance with a legal obligation (PAGCOR, AMLA, and NPC requirements), (c) legitimate interests of cc6c9, and (d) consent, where explicitly obtained.
| Purpose of Processing | Data Categories Involved | Legal Basis |
|---|---|---|
| Account creation and management | Identity & registration data | Contract performance |
| Identity verification (KYC) | KYC / identity verification data | Legal obligation (PAGCOR, AMLA) |
| Payment processing — deposits and withdrawals | Financial & payment data | Contract performance |
| Anti-money laundering (AML) monitoring | Financial, gaming, identity data | Legal obligation (AMLA) |
| Fraud prevention and security monitoring | Technical, financial, gaming data | Legitimate interest |
| Provision of gaming services | Gaming activity, technical data | Contract performance |
| Responsible gaming monitoring | Gaming activity, identity data | Legal obligation (PAGCOR RG rules) |
| Customer support | Support & communication data | Contract performance / legitimate interest |
| PAGCOR regulatory reporting | Gaming, financial, identity data | Legal obligation (PAGCOR licence) |
| Marketing communications | Identity, marketing preference data | Consent (opt-in only) |
| Platform analytics and improvement | Technical & device data | Legitimate interest |
Data Sharing & Third-Party Disclosure
5.1 cc6c9 does not sell your personal data. cc6c9 does not sell, rent, or otherwise commercially transfer your personal data to any third party for their independent marketing, advertising, or commercial purposes.
5.2 Service Providers (Personal Information Processors). cc6c9 engages carefully vetted third-party service providers who process personal data exclusively on cc6c9's behalf and under cc6c9's documented instructions. These include:
- KYC verification providers: process identity document images and biometric selfie data solely for the purpose of account verification;
- Payment processors (GCash, Maya, BPI, BDO, Metrobank): receive transaction reference data necessary to process deposits and withdrawals;
- Game providers (JILI, PG Soft, Pragmatic Play, Habanero, and others): receive anonymised session tokens necessary to load and authenticate game sessions;
- Cloud infrastructure providers: host platform data on servers with appropriate security certifications under a processor agreement;
- Customer support platform: processes support ticket and live chat data on behalf of cc6c9.
5.3 Regulatory and Legal Disclosures. cc6c9 is legally required to disclose certain personal data to the following Philippine government bodies:
- PAGCOR: gaming activity data, responsible gaming metrics, player identification data, and AML red-flag reports as required under the cc6c9 PAGCOR licence;
- Anti-Money Laundering Council (AMLC): suspicious transaction reports (STRs) and covered transaction reports (CTRs) as mandated under AMLA;
- National Privacy Commission (NPC): personal data breach notifications and other disclosures required under the DPA and its IRR;
- Philippine courts and law enforcement: in response to valid legal process such as court orders, subpoenas, or lawful requests from Philippine law enforcement agencies.
Data Retention
6.1 General Retention Period. cc6c9 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes or enforce cc6c9's agreements with Players.
6.2 Account Data. Account registration data and gaming activity records are retained for the duration of the Player's active account. Upon account closure, data is retained for a minimum of five (5) years to satisfy PAGCOR audit requirements, AMLA obligations, and any potential legal proceedings. After this period, data is securely deleted or anonymised.
6.3 KYC Data. Identity verification documents are retained for a minimum of five (5) years from the date of the last transaction associated with the account, as required by AMLA. Where an AML investigation is ongoing, data is retained until the investigation is formally closed.
6.4 Financial Data. Transaction records (deposit and withdrawal history) are retained for ten (10) years from the date of the transaction in accordance with Philippine financial record-keeping requirements applicable to gaming operators.
6.5 Support Data. Customer support interaction records are retained for two (2) years from the date of the interaction for quality assurance and dispute resolution purposes, after which they are deleted.
6.6 Marketing Data. Marketing preference data is retained until you withdraw your consent or request deletion. Following withdrawal of consent, your data is removed from active marketing lists within seventy-two (72) hours.
Cookies & Similar Technologies
7.1 What Cookies Are. Cookies are small text files that are stored on your device when you visit the cc6c9 Platform. They allow the Platform to recognise your device, remember your preferences, maintain your session after login, and support the Platform's security functions.
7.2 Types of Cookies Used by cc6c9.
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core Platform functionality.
- Functional Cookies: Remember your preferences such as language settings, responsible gaming limit configurations, and game lobby view preferences. Help personalise your experience without tracking you across other websites.
- Performance Cookies: First-party analytics cookies that collect anonymised data about how Players use the Platform — pages visited, time on page, error events, and load performance. This data is used solely to improve the cc6c9 Platform. cc6c9 does not use third-party analytics cookies that transmit data to external platforms.
7.3 Cookie Management. You may control and delete cookies through your browser settings. Instructions for managing cookies on Chrome, Firefox, Safari, and Samsung Internet — the most widely used browsers among Filipino cc6c9 players — are available in each browser's Help section. Note that disabling strictly necessary cookies will prevent you from logging in to your cc6c9 account.
7.4 No Third-Party Advertising Cookies. cc6c9 does not use third-party advertising cookies or participate in cross-site behavioural advertising networks. Your gaming activity on cc6c9 is not shared with advertising platforms.
Security Measures
8.1 Technical Safeguards. cc6c9 implements the following technical security measures to protect personal data on the Platform:
- TLS 1.3 Encryption: All data transmitted between your device and the cc6c9 Platform is encrypted using TLS 1.3 protocol. The Platform enforces HTTPS exclusively — unencrypted HTTP connections are rejected.
- Data Encryption at Rest: Sensitive personal data stored on cc6c9 servers — including KYC documents, password hashes, and financial records — is encrypted at rest using AES-256 encryption.
- Two-Factor Authentication (2FA): Available for all cc6c9 accounts. Strongly recommended for accounts with active balances. 2FA provides an additional layer of protection beyond passwords.
- Access Controls: Personal data access within cc6c9's internal systems is restricted on a strict need-to-know basis. All internal access to personal data is logged and audited.
- DDoS Protection and WAF: The Platform is protected by a web application firewall (WAF) and DDoS mitigation infrastructure to prevent unauthorised access and service disruption.
8.2 Organisational Safeguards. cc6c9 personnel who handle personal data are subject to confidentiality obligations and receive regular training on data privacy requirements under the DPA. Third-party processors are required to maintain equivalent security standards through contractual obligations.
8.3 Data Breach Response. In the event of a personal data breach affecting cc6c9 Players, cc6c9 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under Section 20(f) of the DPA. Affected Players will be individually notified as required under NPC breach notification guidelines. cc6c9 maintains a documented Data Breach Response Plan that is reviewed and tested annually.
Your Data Subject Rights
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by cc6c9. These rights apply to all Philippine residents regardless of where cc6c9's servers are located, and they are enforceable before the National Privacy Commission.
Right to Be Informed
The right to know whether your personal data is being or has been collected and processed, and on what legal basis. This Privacy Policy fulfils this right.
Right of Access
The right to obtain from cc6c9 a copy of the personal data cc6c9 holds about you, free of charge, within thirty (30) days of a verified request.
Right to Rectification
The right to correct inaccurate or incomplete personal data cc6c9 holds about you. Contact support to update your registered details.
Right to Object
The right to object to cc6c9's processing of your data on the basis of legitimate interests, including the right to opt out of all marketing communications at any time.
Right to Erasure
The right to request deletion of your personal data where it is no longer necessary, subject to cc6c9's overriding legal obligations (AMLA, PAGCOR retention requirements).
Right to Complain
The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe cc6c9 has violated your data privacy rights under the DPA.
To exercise any of the above rights, contact cc6c9's Data Protection Officer using the details in Section 13. cc6c9 will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or within the timeframes mandated by the NPC where shorter periods apply.
Children & Protection of Minors
10.1 Age Restriction. The cc6c9 Platform is strictly restricted to individuals who are twenty-one (21) years of age or older. cc6c9 does not knowingly collect or process personal data of individuals under 21 years of age. This restriction is enforced through mandatory KYC identity verification prior to any withdrawal processing.
10.2 Discovery of Minor Access. If cc6c9 discovers or is notified that a person under 21 years of age has registered an account or provided personal data, cc6c9 will immediately suspend the account, purge or anonymise the associated personal data to the extent permitted by legal obligations, and report the matter to PAGCOR as required under responsible gaming regulations.
10.3 Parental Reporting. If you are a parent or guardian and believe your child under 21 has registered a cc6c9 account, please contact cc6c9 support immediately via live chat on the Platform. cc6c9 will investigate and act promptly.
Cross-Border Data Transfers
11.1 General Policy. cc6c9 processes the majority of personal data on servers located within the Philippines or in jurisdictions with data protection standards comparable to the DPA, as assessed by the National Privacy Commission's guidelines on cross-border data transfers.
11.2 Game Provider Transfers. Game providers (such as PG Soft, Pragmatic Play, and others) may receive anonymised session tokens or usernames necessary to authenticate gameplay sessions. These transfers are governed by data processing agreements that include standard contractual clauses consistent with NPC requirements for cross-border processing.
11.3 Safeguards Applied. Where personal data is transferred to a jurisdiction outside the Philippines, cc6c9 ensures that appropriate safeguards are in place, including: binding data processing agreements with equivalent data protection obligations; transfer impact assessments where required; and documentation filed with the NPC in accordance with Section 21 of the DPA's IRR.
Changes to This Privacy Policy
12.1 Right to Update. cc6c9 reserves the right to update or revise this Privacy Policy at any time, including to reflect changes in Philippine law (including NPC circulars and advisories), PAGCOR regulatory requirements, cc6c9's data processing practices, or the range of services offered on the Platform.
12.2 Notification of Changes. Material changes to this Privacy Policy — including changes that significantly affect your rights or how cc6c9 uses your personal data — will be communicated to registered Players via: (a) a notice displayed prominently on the Platform; and (b) a notification to the Player's registered email address or mobile number, at least seven (7) calendar days before the change takes effect.
12.3 Continued Use as Acceptance. Your continued use of the cc6c9 Platform after the effective date of an updated Privacy Policy constitutes acceptance of the updated terms. If you do not accept the updated Policy, you should close your account before the changes take effect. The right to close an account and request data deletion remains available to you under Section 9 at any time.
12.4 Version History. Previous versions of this Privacy Policy are available upon written request to the cc6c9 DPO.
Contact Us & Data Protection Officer
For all data privacy inquiries, access requests, rectification requests, objections, deletion requests, or complaints under the Data Privacy Act of 2012, please contact cc6c9's Data Protection Officer through the following channels. All communications should identify your registered cc6c9 account email or mobile number for verification purposes.
- Live Chat (Fastest): Available 24/7 via the live chat icon on the cc6c9 Platform. For data subject rights requests, use the subject "DATA PRIVACY REQUEST" when initiating the chat so the request is routed directly to the DPO team.
- DPO Email (plain text, not a link): [email protected]
- Support Email (plain text, not a link): [email protected]
- Postal / Legal Notices: For formal legal correspondence, please use the DPO email above with the subject line "FORMAL PRIVACY NOTICE". cc6c9 will respond within the timeframes required by the DPA and NPC regulations.
If you are dissatisfied with cc6c9's response to your data privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines via the NPC's official complaint portal. cc6c9 supports and cooperates fully with all NPC investigations.
Six Ways cc6c9 Protects Your Data
Privacy commitments are only as strong as the systems and habits behind them. Here is what cc6c9's privacy framework looks like in practice.
DPA-Registered Controller
cc6c9 is registered with the National Privacy Commission as a Personal Information Controller under the Data Privacy Act of 2012. This is not a voluntary badge — it is a legal requirement that cc6c9 meets through annual registration, DPO appointment, and documented privacy management programs.
AES-256 Encryption at Rest
Your KYC documents, financial records, and sensitive account data are stored encrypted using AES-256 — the same standard used by Philippine financial institutions. Data in transit is secured with TLS 1.3. Even in the unlikely event of a server intrusion, stored data is unreadable without the encryption keys.
No Data Sales — Ever
cc6c9 does not sell, rent, or trade your personal data to third parties for advertising or marketing purposes. The only data sharing that occurs is with service providers acting on cc6c9's instructions, and government authorities when legally required under PAGCOR, AMLA, or NPC mandates.
Clear Data Retention Periods
cc6c9 retains data only for as long as legally required or necessary for the stated purpose. Account data is deleted five years after closure. Marketing data is removed within 72 hours of opt-out. Retention schedules are documented, reviewed annually, and aligned with PAGCOR and AMLA requirements.
72-Hour Breach Notification
In the event of a data breach, cc6c9 notifies the National Privacy Commission within 72 hours and affected Players as required. A documented breach response plan — tested annually — ensures that cc6c9 can detect, contain, and communicate any breach with minimum delay.
Enforceable Player Rights
Your rights under the DPA — access, rectification, erasure, objection — are enforceable before the National Privacy Commission, not just goodwill statements. cc6c9's DPO processes rights requests within 30 days, and you can escalate to the NPC at any time if you feel your rights have not been respected.
Privacy Protected. Gaming Licenced. Built for Filipinos.
cc6c9 is the Philippines' PAGCOR-licensed online casino that takes data privacy as seriously as it takes gaming quality. Your personal data is protected. Your pesos are safe. Your rights are enforceable.
For Filipino players 21 years and above only. Play responsibly. See Responsible Gaming for player protection tools.