c66 Privacy Policy

This Privacy Policy applies to the c66 online gaming platform, accessible at c66.live (the "Platform"). For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), c66 acts as the Personal Information Controller in respect of all personal data collected from players and visitors through the Platform.

c66 operates under applicable Philippine gaming regulations and is committed to handling all personal data in a manner that is lawful, fair, transparent, and consistent with the rights of data subjects under Philippine law. Our designated Data Protection Officer (DPO) can be contacted using the details provided in Section 14 of this Policy.

This Policy applies to all personal data collected through the c66 Platform, including data collected during account registration, identity verification (KYC), payment processing, customer support interactions, and general use of the Platform's features and games.

c66 collects the following categories of personal data, depending on how you interact with the Platform:

c66 does not collect sensitive personal information as defined under the Data Privacy Act (such as health data, religious beliefs, or political affiliations) unless specifically required by law or regulatory instruction and with your explicit consent.

c66 collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access or use the Platform. See Section 7 for full details on our cookie practices.
• Payment Processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners when you initiate a deposit or withdrawal. c66 does not store full bank account numbers or card details on its own servers.
• Identity Verification Partners: Data received from third-party KYC and identity verification service providers engaged by c66 to validate government-issued identification documents.
• Fraud Prevention Services: Risk signals and device fingerprint data received from fraud detection partners to protect the integrity of the Platform and the security of all players.
• Publicly Available Sources: In limited circumstances, c66 may verify information against publicly available Philippine government databases or records where required by our AML compliance obligations.

c66 uses the personal data we collect for the following specific purposes:

• Account Creation and Management: To register your c66 account, verify your identity, maintain your account profile, and provide you with access to all Platform features.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required by PAGCOR regulations and Philippine anti-money laundering laws.
• Payment Processing: To process deposits and withdrawals in Philippine Peso (₱) via your chosen payment method, and to maintain accurate financial records of all transactions.
• Game Delivery and Fairness: To deliver game content, record game outcomes, resolve disputes, and ensure the integrity and fairness of all games on the Platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling, to enforce self-exclusion and deposit limit settings, and to provide responsible gaming support where appropriate.
• Customer Support: To respond to your queries, complaints, and requests, and to maintain records of support interactions for quality assurance purposes.
• Legal and Regulatory Compliance: To comply with our obligations under Philippine law, including the Data Privacy Act, the Anti-Money Laundering Act, PAGCOR licensing conditions, and any lawful requests from Philippine regulatory or law enforcement authorities.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, security, and user experience of the c66 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about c66 — but only where you have given your consent to receive such communications. See Section 12 for details on how to opt out.

Under the Philippine Data Privacy Act of 2012, c66 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your c66 account, process your transactions, and deliver gaming services as described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with Philippine law, including KYC verification, AML record-keeping, PAGCOR reporting obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing necessary for c66's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms as a data subject.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

c66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC and Identity Verification Providers: Third-party identity verification services receive copies of your identification documents and personal details solely for the purpose of verifying your identity and age as required by PAGCOR regulations.
• Fraud Prevention and Security Partners: Risk management and fraud detection service providers receive technical and behavioral data to help c66 identify and prevent fraudulent activity on the Platform.
• Game Content Providers: Third-party game studios and live dealer operators may receive your player ID and gaming session data to deliver their games and resolve technical disputes. These providers do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: c66 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities when required by law, court order, or regulatory instruction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by c66 may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom c66 shares personal data are required to implement appropriate technical and organizational security measures and to process data only for the purposes specified by c66. c66 does not authorize any third party to use your personal data for their own independent purposes.

c66 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and support our security and fraud prevention systems. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations. Disabling these may affect your experience but will not prevent access to the Platform.
• Analytics Cookies: Collect anonymized data about how players use the Platform — which pages are visited most, where players encounter errors, and how navigation flows are used. This data helps c66 improve the Platform experience.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized account access. These are essential for the security of all players on the Platform.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your c66 account. c66 does not use third-party advertising or retargeting cookies.

c66 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and c66 servers is encrypted using industry-standard TLS protocols. The c66.live domain enforces HTTPS on all pages.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial information, is stored in encrypted form on secured servers. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within c66's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data protection training.
• Two-Factor Authentication: c66 supports and encourages the use of two-factor authentication (2FA) for all player accounts to provide an additional layer of protection against unauthorized access.
• Regular Security Audits: c66's systems and infrastructure are subject to regular penetration testing and security audits by independent third-party security specialists.
• Incident Response: c66 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, c66 will notify the National Privacy Commission and affected players within the timeframes required by Philippine law.

While c66 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own c66 account credentials. If you suspect unauthorized access to your account, contact c66 support immediately.

c66 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

• Account and Identity Data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLC record-keeping requirements.
• Gaming History: Retained for a minimum of three (3) years after account closure for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless the matter relates to an ongoing dispute or regulatory investigation.
• Marketing Consent Records: Retained for the duration of your account and for two (2) years after account closure, to demonstrate compliance with consent requirements.
• Technical and Usage Data: Retained in anonymized or aggregated form for up to two (2) years for analytics and platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with c66's data disposal procedures. Where data is anonymized rather than deleted, the resulting anonymized data no longer constitutes personal data and may be retained indefinitely for statistical purposes.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by c66:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and shared — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data c66 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by c66. You can update most account information directly through your c66 account settings.
• Right to Erasure: The right to request deletion of your personal data, subject to c66's legal retention obligations. Note that data required for regulatory compliance cannot be deleted before the applicable retention period expires.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to c66's overriding legal obligations.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe c66 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact c66's Data Protection Officer using the contact details in Section 14. c66 will respond to all data subject requests within fifteen (15) business days. We may need to verify your identity before processing your request.

The c66 Platform is strictly intended for adults aged 21 years and above. c66 does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement is enforced through our KYC verification process, which requires all players to submit a valid Philippine government-issued identification document confirming their date of birth.

If c66 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, void all transactions, and securely delete the personal data in question in accordance with our data disposal procedures. Any funds deposited by an underage player will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that your child has registered an account on c66.live, please contact our support team immediately using the contact details in Section 14. We will investigate and take appropriate action without delay.

c66 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, special events, and other c66 offers — but only where you have given your explicit consent to receive such communications during registration or through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email sent by c66.
• Updating your communication preferences in your c66 account settings under the "Notifications" section.
• Contacting c66 support and requesting removal from all marketing lists.

Opting out of marketing communications will not affect transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, and important account updates. These operational communications cannot be disabled while your account remains active.

c66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — c66 will notify registered players via email and/or a prominent notice on the Platform at least seven (7) days before the changes take effect. For non-material changes (such as clarifications or formatting updates), the revised Policy will take effect immediately upon publication.

Your continued use of the c66 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you should stop using the Platform and close your account. Closing your account in response to a Policy change will not result in any penalty.

We encourage you to review this Privacy Policy periodically to stay informed about how c66 protects your personal data. Previous versions of this Policy are available upon request from our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way c66 handles your personal data, please contact our Data Protection Officer (DPO) or our general support team using the details below.

• General Privacy Inquiries: [email protected] — for questions about this Policy, data subject access requests, and consent withdrawal.
• Data Protection Officer: [email protected] — for formal data subject rights requests, data breach notifications, and NPC-related matters.
• General Support: [email protected] — for account-related queries, including updating your personal information or opting out of marketing.
• Live Chat: Available directly on the c66 Platform during peak Philippine gaming hours (6PM–2AM PHT) for real-time assistance.

Please include your registered account username and a clear description of your request in all correspondence. c66 aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within fifteen (15) business days.