666zk Casino Privacy Policy

1 Scope and Data Controller Identity

This Privacy Policy applies to all personal data collected, processed, and stored by 666zk Casino (the "Platform") in connection with the provision of online gaming services, account management, customer support, payment processing, and marketing communications. It applies to all users who access 666zk Casino via the website at 666zk.cam, regardless of their location, though it is specifically designed to address the rights of Filipino residents under Philippine data protection law.

The data controller for personal information processed under this Policy is the licensed operator of 666zk Casino, a PAGCOR-authorized entity (the "Company"). The Company determines the purposes and means of personal data processing in relation to the 666zk platform.

This Privacy Policy should be read in conjunction with the 666zk Casino Terms & Conditions, which form the overarching contractual framework governing your use of the Platform.

2 Categories of Personal Data We Collect

666zk Casino collects personal data through multiple touchpoints: direct registration, KYC verification, financial transactions, platform usage, customer support interactions, and technical systems. The categories of data collected are described below.

2.1 Registration and Identity Data

• Full legal name (as appearing on government-issued ID)
• Date of birth (to verify compliance with the 21+ age requirement)
• Residential address in the Philippines (barangay, city/municipality, province)
• Philippine mobile number (used for account communications and optional 2FA)
• Email address
• Username (chosen at registration)
• Encrypted password (we store only a salted hash — never your plaintext password)

2.2 KYC and Identity Verification Data

• Copy of government-issued Philippine identification document (PhilSys, passport, driver's license, UMID, SSS ID, or equivalent)
• Selfie photograph for biometric liveness checks (where required)
• Proof of address documentation (utility bill, bank statement)
• Source of funds documentation for high-value accounts (as required under AMLA compliance)

2.3 Financial and Transaction Data

• GCash account number (linked mobile number) or Maya account identifier
• Bank account name and number (for bank transfer withdrawals — digits partially masked in storage)
• Deposit amounts, dates, and transaction reference numbers
• Withdrawal amounts, dates, destination payment method, and transaction reference numbers
• Bonus and promotional credit transactions

2.4 Gaming Activity Data

• Game sessions played (type, duration, stake amounts, outcomes)
• Sports bets placed (event, market, odds, stake, settlement)
• Bingo game participation records
• Bonus wagering progress and completion records
• Responsible gaming tool activations (deposit limits, self-exclusion records)

2.5 Technical and Device Data

• IP address at time of login and major account actions
• Device type, operating system, and browser type
• Session timestamps and session duration
• Cookie identifiers and similar tracking technology data (see Section 6)
• Geolocation data (city-level, derived from IP address)

2.6 Customer Support Data

When you contact 666zk Casino's customer support team via live chat or email, records of your communications — including the chat transcript, email content, account details referenced, and support resolution notes — are retained for quality assurance, training, and dispute resolution purposes.

3 How 666zk Casino Uses Your Personal Data

Personal data collected by 666zk Casino is used only for legitimate purposes directly connected to the operation of the Platform and our legal obligations. The primary purposes are as follows:

Personal data is not used for purposes incompatible with those listed above. Where we intend to process data for a new purpose, we will notify you and obtain consent where required under applicable law.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act and its Implementing Rules and Regulations, personal data processing must be based on one or more lawful bases. 666zk Casino relies on the following bases for processing personal data:

• Contractual necessity: Processing required to perform the contract between you and 666zk Casino — including account management, game access, and payment processing — is conducted on the basis of contractual necessity. Without this processing, 666zk Casino cannot provide the Platform's services.
• Legal obligation: Processing required for 666zk Casino to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act itself, and other applicable Philippine laws. This includes KYC verification, PAGCOR reporting, and AMLA transaction monitoring.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and customer support quality assurance is conducted on the basis of 666zk Casino's legitimate interests, balanced against your rights and interests as a data subject.
• Consent: Processing for direct marketing communications and optional analytics cookies is conducted on the basis of your explicit consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Data Sharing and Third-Party Disclosure

5.1 Service Providers and Processors

666zk Casino shares personal data with select third-party service providers who process data on our behalf under strict data processing agreements. These providers are bound by confidentiality obligations and may only process your data for the purposes specified in their agreements with 666zk Casino. Categories of service providers include:

• Payment processing partners (GCash/Mynt, Maya/Paymaya, banking partners) — for processing deposits and withdrawals.
• KYC and identity verification providers — for document verification and biometric checks.
• Game software providers (JILI Games, WM Live, Dreams of Macao) — to the extent necessary for game delivery and integrity monitoring.
• Cloud infrastructure and hosting providers — for secure data storage and platform operation.
• Customer support platform providers — for live chat service delivery.
• Security and anti-fraud analytics providers — for detecting and preventing fraudulent account activity.

5.2 Regulatory and Legal Disclosures

666zk Casino will disclose personal data to regulatory bodies, law enforcement agencies, and courts where required by Philippine law, valid legal process, or a binding regulatory directive. Mandatory disclosures include:

• PAGCOR — as required under the terms of our gaming license and applicable PAGCOR issuances.
• Anti-Money Laundering Council (AMLC) — for covered and suspicious transaction reports required under the AMLA and its amendments.
• National Privacy Commission (NPC) — for data breach notifications and regulatory inquiries.
• Philippine courts — in response to valid court orders or subpoenas.

666zk Casino does not voluntarily disclose player data to government agencies beyond what is legally mandated. Where permitted by law, we will notify you of a legal data request before complying.

5.3 No Sale of Personal Data

666zk Casino does not sell, lease, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This is an absolute prohibition that applies regardless of any commercial consideration offered.

6 Cookies and Tracking Technologies

6.1 Types of Cookies Used

666zk Casino uses cookies and similar technologies (web beacons, local storage) on its platform. The categories of cookies deployed are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies (which keep you logged in during a session), security cookies (CSRF protection), and load-balancing cookies. These cannot be disabled without breaking the Platform's core functionality.
• Functional Cookies: Store your preferences such as language settings, responsible gaming reminder intervals, and display preferences. Disabling these will not break the Platform but may result in loss of personalized settings.
• Analytics Cookies: Used to understand how players navigate and use the Platform in aggregate. Analytics data is anonymized and used only for internal platform improvement purposes. These require your consent and can be disabled.

6.2 Cookie Consent and Control

On your first visit to 666zk Casino, a cookie consent notice is displayed. Strictly necessary cookies are deployed without consent as they are essential to the service. Analytics and functional cookies require your affirmative consent. You may change your cookie preferences at any time through your browser settings or the cookie management interface in your 666zk account settings.

Note that disabling all cookies may affect your ability to remain logged in and access certain platform features. Most modern browsers (Chrome, Firefox, Safari) allow granular cookie control through their privacy settings menus.

7 Data Retention

666zk Casino retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of the active account relationship plus 5 years following account closure, in accordance with PAGCOR record-keeping requirements and the AMLA's retention obligations.
• KYC documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later — consistent with AMLA retention requirements under the Revised Implementing Rules and Regulations of Republic Act 9160.
• Financial transaction records: Retained for 5 years from the date of each transaction, as required by Philippine financial reporting and AMLA regulations.
• Gaming activity logs: Retained for 2 years from the date of each session, for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Customer support records: Retained for 2 years from the date of the support interaction.
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction methods. Anonymized data — which can no longer be linked to any individual — may be retained indefinitely for aggregate analytics purposes.

8 Security Measures

666zk Casino implements a layered information security program designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. Key technical and organizational security measures include:

• Encryption in transit: All data transmitted between your device and 666zk Casino's servers is protected by TLS 1.2/1.3 with 256-bit encryption. The Platform enforces HTTPS across all pages and connections.
• Encryption at rest: Sensitive data stored in 666zk Casino's databases is encrypted using AES-256, including identity documents, financial identifiers, and authentication credentials.
• Password security: User passwords are never stored in plaintext. The Platform uses bcrypt with per-user salting, making stored password hashes resistant to brute-force attacks even in the event of a database breach.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis using role-based access controls. All staff access to production systems is logged and subject to periodic review.
• Two-factor authentication: Optional SMS-based 2FA is available to all 666zk Casino players. Staff with access to sensitive systems are required to use multi-factor authentication.
• Penetration testing: 666zk Casino's platform and infrastructure undergo periodic third-party penetration testing and vulnerability assessments.
• Incident response: 666zk Casino maintains a documented data breach incident response plan consistent with the NPC's breach notification requirements under the Data Privacy Act.

9 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 666zk Casino. These rights are exercisable subject to applicable legal exceptions, such as data required to be retained for AMLA or PAGCOR compliance.

9.1 Exercising Your Rights

To exercise any of the above rights, contact the 666zk Casino Data Protection Officer (DPO) via email at [email protected] with the subject line "Data Subject Rights Request." Please include your full name, registered mobile number, and a clear description of the right you wish to exercise. 666zk Casino will respond within 15 business days of receiving a verifiable request.

Before processing any data subject rights request, 666zk Casino will verify your identity to prevent unauthorized third parties from accessing or deleting your data on your behalf. For requests involving highly sensitive data, additional verification steps may be required.

10 Children's Privacy and the 21+ Requirement

666zk Casino is strictly an adult gambling platform. Access is limited to individuals who are 21 years of age or older under PAGCOR regulations. The Platform does not knowingly collect personal data from individuals under the age of 21.

Where 666zk Casino discovers that a registered account belongs to a person under 21, the account will be immediately closed, all gaming activity associated with the account will be reviewed, and any personal data associated with the account will be securely deleted or retained only to the extent required by law to document the underage access incident and comply with applicable regulatory obligations.

Parents and guardians who believe their minor child has registered a 666zk Casino account should contact our support team immediately via live chat or at [email protected] so that appropriate action can be taken without delay.

11 International Data Transfers

666zk Casino's primary data processing infrastructure is located in jurisdictions with adequate data protection frameworks. Where personal data is transferred to service providers or infrastructure hosted outside the Philippines, 666zk Casino ensures that:

• The receiving jurisdiction provides an adequate level of data protection as recognized by Philippine law or international standards;
• Appropriate contractual safeguards — including data processing agreements incorporating standard contractual clauses — are in place with the receiving entity; or
• The transfer is necessary for the performance of the contract between 666zk Casino and the data subject (for example, processing an international cryptocurrency transaction).

Game software providers such as JILI Games and live studio providers may process certain session and gameplay data on infrastructure outside the Philippines. These transfers are governed by agreements that require the same level of data protection as applicable under Philippine law.

12 Marketing Communications

12.1 Opt-in Basis

666zk Casino sends promotional communications — including bonus offers, new game announcements, seasonal promotions, and platform updates — only to players who have affirmatively opted in to receive them during registration or subsequently through account settings. We do not send unsolicited marketing to players who have not consented.

12.2 Opt-out Mechanism

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email sent by 666zk Casino;
• Adjusting your communication preferences in your 666zk Casino account settings; or
• Contacting 666zk Casino support via live chat or email with a request to opt out of all marketing communications.

Opting out of marketing communications does not affect delivery of transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, or KYC verification requests — which are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

12.3 Self-Excluded Players

Players who have activated a self-exclusion or cooling-off period under the 666zk Casino Responsible Gaming system are automatically removed from all marketing communication lists for the duration of the exclusion period. 666zk Casino will not send bonus offers or promotional materials to self-excluded players.

13 Data Breach Notification

In the event of a personal data breach that is reasonably likely to result in harm to affected data subjects, 666zk Casino will:

• Notify the National Privacy Commission of the Philippines (NPC) within 72 hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03 on Personal Data Breach Management;
• Notify affected players as soon as practicable, via their registered email address, with information on the nature of the breach, the data categories affected, likely consequences, and the measures taken or proposed to address the breach;
• Maintain a breach register documenting all breaches, their circumstances, and the response actions taken, regardless of whether NPC notification was required.

14 Amendments to This Privacy Policy

666zk Casino reviews this Privacy Policy periodically and may update it to reflect changes in data processing practices, applicable laws, PAGCOR requirements, or the structure of the Platform. The "Last Updated" date at the top of this document indicates when the most recent revision was made effective.

For material changes that affect your privacy rights or the legal basis for processing your data, 666zk Casino will provide notice via email to all registered players at least 14 days before the changes take effect. For minor clarifications or corrections that do not affect substantive rights, changes take effect immediately upon publication.

Your continued use of the 666zk Casino platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any material change, you may close your account before the effective date; we will process any remaining balance in accordance with the Terms & Conditions.

15 Contact and Data Protection Officer

666zk Casino has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for overseeing 666zk Casino's compliance with data protection obligations and is the primary point of contact for data subject rights requests, privacy inquiries, and regulatory matters.

You may contact the 666zk Casino DPO or our general support team via the following channels:

• Live Chat: Available 24/7 via the in-platform support widget. For privacy-specific matters, please begin your message with "Privacy Inquiry" or "DPO Request" so it is routed appropriately.
• Email: [email protected] — Subject line: "Privacy Policy Inquiry" or "Data Subject Rights Request"

For escalation to Philippine data protection authorities, you may contact the National Privacy Commission at their official government portal. 666zk Casino cooperates fully with NPC inquiries and will not penalize any player for exercising their legal rights under the Data Privacy Act.