66zk Casino Privacy Policy

66zk Casino ("66zk", "we", "us", "our") is an online gaming platform operated at 66zk.cam under authorization from the Philippine Amusement and Gaming Corporation (PAGCOR). We take the privacy and security of our players' personal data seriously — not just as a regulatory obligation, but as a fundamental commitment to the Filipino players who trust us with their information every day.

This Privacy Policy applies to all personal data collected by 66zk Casino through: (a) your use of the 66zk website and any associated mobile application; (b) the account registration and KYC verification process; (c) your financial transactions and gaming activity on the platform; and (d) any direct communications between you and 66zk's customer support team.

This Policy is intended to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the National Privacy Commission's issuances, and PAGCOR's data governance requirements applicable to licensed Philippine online gaming operators. This Policy forms part of and should be read together with 66zk's Terms & Conditions.

The following terms carry the meanings set out below throughout this Privacy Policy:

"Personal Data"

Any information that identifies or can reasonably identify a natural person, including name, contact details, identification document numbers, financial data, IP address, and device identifiers.

"Processing"

Any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.

"Data Subject"

The individual to whom personal data pertains — in this context, a registered 66zk Casino player or website visitor.

"Data Controller"

66zk Casino, which determines the purposes and means of processing personal data collected through the platform.

"Consent"

A freely given, specific, informed, and unambiguous agreement by the Data Subject to the processing of their personal data for a stated purpose.

"NPC"

The National Privacy Commission of the Philippines — the government authority responsible for administering and enforcing the Data Privacy Act of 2012.

"KYC"

Know Your Customer — the identity and age verification process required under PAGCOR's licensing conditions before real-money gaming activity is permitted on a player's account.

66zk Casino collects the following categories of personal data from players and platform visitors. We collect only what is necessary for the specific purposes described in Section 4.

66zk does not collect sensitive personal information beyond what is required by PAGCOR's KYC obligations — specifically, we do not collect health, biometric (except facial comparison where required for ID verification), racial, political, or religious data unless specifically required by PAGCOR or Philippine law in a particular context.

66zk Casino processes your personal data for the following specific purposes:

• Account Registration: To create and manage your 66zk Casino account, including verifying your identity and age (21+) as required by PAGCOR.
• KYC & AML Compliance: To fulfil 66zk's obligations under PAGCOR's Know Your Customer requirements and the Philippine Anti-Money Laundering Act (AMLA), including identity verification, source of funds assessment, and transaction monitoring.
• Payment Processing: To facilitate deposits and withdrawals via GCash, Maya, BDO, BPI, Metrobank, and other supported payment methods, including communicating with payment service providers to process transactions securely.
• Platform Service Delivery: To operate, maintain, and improve the 66zk Casino platform, including game delivery, account management, security monitoring, and technical support.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling, enforce player-set limits, manage self-exclusion programs, and fulfil PAGCOR's player protection reporting obligations.
• Customer Support: To respond to player inquiries, resolve disputes, process complaints, and maintain support interaction records.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, cheating, collusion, and money laundering on the platform.
• Regulatory Reporting: To meet PAGCOR's licensing reporting requirements, including activity reports, AML reports, and responsible gaming compliance submissions.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have consented to marketing communications. This is always opt-in and can be withdrawn at any time.
• Legal Obligations: To comply with court orders, law enforcement requests, NPC investigations, and other lawful obligations under Philippine law.

Under the Philippine Data Privacy Act of 2012, all personal data processing by 66zk Casino is conducted on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform 66zk's obligations under the Terms & Conditions governing your account — including account management, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine legal obligations.
• Legitimate Interest: Processing conducted to protect the security and integrity of the 66zk platform, prevent fraud, and ensure responsible gaming compliance, where such interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

The 66zk Casino website uses cookies and similar tracking technologies to enable platform functionality, maintain your login session, analyse platform performance, and — where you have consented — deliver relevant promotional content. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function — including session management, security tokens, and load balancing. These cannot be disabled without impairing platform use.
• Functional Cookies: Remember your preferences and settings across sessions, such as language preferences and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymized or pseudonymized data about how players use the 66zk platform, helping the team identify technical issues and improve the user experience. These are enabled by default but can be disabled.
• Marketing Cookies: Used only where you have explicitly consented to receive tailored promotional communications related to 66zk Casino. These are always opt-in and are never shared with advertising networks outside the 66zk platform.

You may manage your cookie preferences through your browser settings at any time. Disabling essential cookies will impair platform functionality. Disabling analytics or marketing cookies will not affect your ability to play or access your account.

66zk Casino does not sell your personal data to third parties under any circumstances. Personal data is shared only in the following limited and controlled circumstances:

• Payment Service Providers: GCash (Mynt), Maya (Voyager Innovations), BDO, BPI, Metrobank, and other payment processors receive the minimum data necessary to process your transactions — typically your registered account name, mobile number or account number, and transaction amount.
• KYC & Identity Verification Providers: Certified third-party identity verification services receive copies of identity documents and facial comparison data submitted during KYC, for the sole purpose of verifying your identity and age on behalf of 66zk and as required by PAGCOR.
• PAGCOR: As a licensed operator, 66zk is required to submit certain player activity data, responsible gaming reports, AML transaction reports, and KYC records to PAGCOR as a condition of its operating license.
• Law Enforcement & Courts: 66zk will disclose personal data to the Philippine National Police, Anti-Money Laundering Council (AMLC), National Bureau of Investigation, National Privacy Commission, or other competent Philippine authorities when required to do so by a lawful order, warrant, or subpoena.
• Game Content Providers: Game providers (e.g., Pragmatic Play, PG Soft, JILI) receive anonymized session and bet data for technical and RNG audit purposes. They do not receive personally identifiable information that identifies you as an individual.
• Professional Advisors: Legal, accounting, or audit firms engaged by 66zk may access personal data in the course of providing professional services, subject to confidentiality obligations.

All third parties who receive 66zk player data are bound by data sharing agreements requiring them to handle such data in compliance with the Philippine Data Privacy Act and to use it only for the purposes for which it was shared.

Some of 66zk's service providers and game content partners operate infrastructure outside the Philippines. Where personal data is transferred to jurisdictions outside the Philippines, 66zk ensures that appropriate safeguards are in place to protect such data to a standard consistent with the Philippine Data Privacy Act. These safeguards include contractual data transfer agreements incorporating the National Privacy Commission's standard contractual clauses, and technical security measures equivalent to those applied to data stored within the Philippines.

66zk does not transfer personal data to jurisdictions that do not provide adequate levels of data protection without implementing the contractual safeguards described above. The categories of data subject to potential international transfer are limited to technical and game activity data processed by certified game content providers for RNG audit purposes. Identity documents, financial data, and KYC records are stored within PAGCOR-compliant infrastructure.

66zk Casino retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR's record-keeping obligations. The following general retention periods apply:

• Account and KYC Records: Retained for a minimum of five (5) years following account closure, as required under PAGCOR's licensing conditions and the Anti-Money Laundering Act's record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and PAGCOR financial reporting obligations.
• Gaming Activity Data: Retained for a minimum of two (2) years following the relevant gaming session, and for a minimum of five (5) years where the data is relevant to an active dispute, investigation, or regulatory inquiry.
• Customer Support Records: Retained for two (2) years following the closure of the relevant support interaction, unless the matter relates to an ongoing dispute or regulatory inquiry.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal, to evidence compliance with consent obligations.
• Technical Logs: Retained for ninety (90) days under normal circumstances, and extended where required for security investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or permanently anonymized using methods that prevent recovery or re-identification. Data subject to an active legal hold, regulatory inquiry, or dispute resolution process will be retained until that process is concluded.

66zk Casino implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or app and the 66zk platform is encrypted using TLS 1.2 or higher with 256-bit SSL encryption.
• Encryption at Rest: Sensitive personal data fields — including identity document data, financial account details, and password hashes — are encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within 66zk's systems is restricted on a strict need-to-know basis. Staff access to player data is logged, audited, and subject to formal access control policies.
• Password Security: Player passwords are stored as one-way cryptographic hashes with unique per-account salts. 66zk never stores or has access to plaintext passwords.
• Two-Factor Authentication: OTP-based two-factor authentication is available to all registered 66zk players for account login, adding a layer of protection beyond the password.
• Intrusion Detection: 66zk's platform is monitored continuously for unauthorized access attempts, anomalous activity patterns, and potential security incidents by a dedicated security team.
• Vendor Security Standards: All third-party service providers who process 66zk player data are required to maintain security standards consistent with those applied by 66zk, as verified through contractual due diligence.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, 66zk Casino will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required under the Data Privacy Act of 2012.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 66zk Casino. To exercise any of these rights, contact 66zk's Data Privacy Officer at [email protected] with the subject line "Data Privacy Request":

66zk Casino will respond to all verified data subject requests within thirty (30) days of receipt. In complex cases, this may be extended by a further thirty (30) days with prior notification to the requestor. Requests submitted by unverified parties will require identity confirmation before being processed to protect the integrity of our players' data.

The 66zk Casino platform is strictly intended for use by adults aged 21 years and above, as mandated by PAGCOR's licensing conditions governing online gaming in the Philippines. 66zk does not knowingly collect, store, or process personal data of persons under 21 years of age.

Any registration attempt that indicates an age below 21 will be rejected by the platform's registration system. All accounts that pass initial registration are subject to KYC verification, during which age is confirmed via government-issued Philippine ID. Any account discovered to belong to a person under 21 will be immediately closed, all associated data will be deleted in accordance with our retention policy, and the matter may be referred to PAGCOR as required by our license obligations.

If you believe that a person under 21 has provided personal data to 66zk Casino without appropriate consent, please notify our Data Privacy Officer immediately at [email protected] and we will take immediate action to delete such data.

66zk Casino will send promotional communications — including bonus offers, game announcements, and platform updates — only to players who have explicitly opted in to receive such communications during registration or through their account communication preferences.

Marketing communications from 66zk will only pertain to the 66zk Casino platform itself. Your contact details will never be used to send marketing materials on behalf of third parties, and will never be sold to external marketing platforms or data brokers.

You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link in any 66zk marketing email; (b) updating your communication preferences in your account settings; or (c) contacting 66zk support via live chat. Opt-out requests are processed within five (5) business days. Opting out of marketing does not affect transactional communications (e.g., deposit confirmations, withdrawal notifications, KYC status updates) which are required for platform service delivery.

The 66zk Casino platform may contain references to third-party services such as PAGCOR's official regulatory website or payment provider pages. 66zk is not responsible for the privacy practices of any third-party website or service. This Privacy Policy applies exclusively to the 66zk Casino platform and the personal data collected through it. We encourage players to review the privacy policies of any third-party platforms they visit independently of 66zk.

66zk Casino reserves the right to update or modify this Privacy Policy at any time in response to changes in Philippine data privacy law, PAGCOR regulatory requirements, or the operational practices of the platform. The current version of this Policy, with its effective date, is always available on this page.

Where changes are material — i.e., they significantly affect how your personal data is used or your rights as a data subject — 66zk will notify registered players via their registered email address or an in-platform notification at least fourteen (14) days before the amended Policy takes effect. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

66zk Casino has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act of 2012. If you have any questions about this Policy, wish to exercise your data subject rights, or wish to report a privacy concern, please contact the 66zk DPO through the following channels:

• Email: [email protected] — use subject line "Data Privacy Request" for all formal data subject right requests.
• Live Chat: Available 24 hours a day, 7 days a week from the 66zk website. Live chat is the recommended channel for urgent privacy concerns or suspected data security incidents.
• NPC Complaints: If you believe your rights under the Data Privacy Act have been violated and 66zk has not adequately resolved your concern, you may lodge a complaint with the National Privacy Commission at www.privacy.gov.ph.