01 Who We Are
This Privacy Policy is issued by cc6ph ("cc6ph," "the Company," "we," "us," or "our"), the operator of the online gaming platform accessible at cc6ph.cam ("the Platform"). cc6ph is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in full compliance with applicable Philippine laws, including Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR").
For the purposes of the DPA, cc6ph acts as the Personal Information Controller with respect to the personal data of players and visitors collected through the Platform. Where cc6ph engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors and are bound by data processing agreements consistent with the DPA.
By accessing or using the cc6ph Platform, or by creating a registered account, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.
02 Personal Data We Collect
cc6ph collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we may collect and process are outlined in the table below:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government ID number, nationality, selfie photograph | Account registration and KYC verification |
| Contact Data | Email address, mobile number, residential address (including city and province) | Account registration |
| Financial Data | GCash wallet number, Maya wallet number, bank account details, transaction history, deposit and withdrawal records | Payment processing and KYC |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, geolocation data | Platform access and session activity |
| Gaming Data | Wagering history, game preferences, bet amounts, win/loss records, session duration, bonus usage | Active gaming sessions |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer support interactions |
| Marketing Data | Promotional preferences, communication opt-in/opt-out status, campaign response data | Account settings and marketing interactions |
cc6ph does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (such as health data, religious beliefs, or political affiliation) unless specifically required by PAGCOR regulatory compliance obligations (e.g., problem gambling self-exclusion records) and only with your explicit consent.
03 How We Collect Your Data
cc6ph collects personal data through the following channels:
3.1 Data You Provide Directly
- Account registration forms (name, email, mobile number, date of birth)
- KYC document uploads (government-issued ID, proof of address, payment method verification)
- Deposit and withdrawal request forms
- Customer support live chat and email correspondence
- Promotional opt-in forms and survey responses
3.2 Data Collected Automatically
- Browser cookies and similar tracking technologies placed when you visit cc6ph.cam
- Server logs recording IP addresses, access timestamps, and page requests
- Gaming platform logs recording all wager, game launch, and session events
- Device fingerprinting data used for fraud prevention and account security
3.3 Data Received from Third Parties
- Identity verification results from KYC service providers
- Transaction confirmation data from GCash, Maya, and partner banks (BPI, BDO, UnionBank, Metrobank)
- Fraud risk scores from anti-fraud and AML screening providers
- PAGCOR self-exclusion register data (where applicable)
04 Purposes of Data Processing
cc6ph processes your personal data only for specified, explicit, and legitimate purposes. We do not use your data in any way incompatible with the purposes for which it was collected. Our processing purposes include:
- Account Management: Creating, maintaining, verifying, and securing your cc6ph player account, including identity verification in compliance with PAGCOR's Know Your Customer (KYC) requirements.
- Service Delivery: Processing deposits, withdrawals, bonus allocations, and enabling access to the full range of cc6ph gaming products and services.
- Regulatory Compliance: Fulfilling cc6ph's obligations under PAGCOR licensing conditions, the DPA, the Anti-Money Laundering Act (AMLA), and all other applicable Philippine laws and regulations.
- Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct.
- Responsible Gaming: Monitoring gaming behavior to identify potential problem gambling patterns, administering self-exclusion and deposit limit tools, and fulfilling responsible gaming obligations under PAGCOR regulations.
- Customer Support: Responding to queries, resolving disputes, processing complaints, and maintaining support records.
- Marketing and Promotions: Sending you promotional communications about cc6ph bonuses, tournaments, and new games — but only where you have opted in to receive marketing communications. You may withdraw your marketing consent at any time from your account settings.
- Platform Improvement: Analyzing aggregated, anonymized usage data to improve the cc6ph Platform's features, performance, and user experience.
05 Legal Basis for Processing
cc6ph processes your personal data on one or more of the following legal bases as defined under the Data Privacy Act of 2012:
- Contractual Necessity: Processing is necessary to perform our contractual obligations to you under the cc6ph Terms & Conditions — including operating your account, processing transactions, and delivering gaming services.
- Legal Obligation: Processing is required to comply with PAGCOR licensing conditions, AMLA obligations, the DPA itself, and any court order or regulatory direction issued by a competent Philippine authority.
- Legitimate Interest: Processing is necessary for cc6ph's legitimate business interests, including fraud prevention, platform security, and aggregated analytics — provided those interests are not overridden by your data protection rights.
- Consent: For marketing communications and the use of non-essential cookies, cc6ph relies on your explicit, freely given consent, which you may withdraw at any time without affecting the lawfulness of processing that occurred before withdrawal.
06 Data Sharing and Disclosure
cc6ph does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the following limited and controlled circumstances:
6.1 PAGCOR and Regulatory Authorities
cc6ph is required by law to share certain player data with PAGCOR as part of its licensing obligations. This includes player identity records, transaction data, and self-exclusion information. We may also be required to disclose data to other Philippine government agencies, law enforcement bodies, or courts where required by law or valid legal process.
6.2 Anti-Money Laundering Council (AMLC)
As a PAGCOR-licensed entity, cc6ph is subject to reporting obligations under the Philippine Anti-Money Laundering Act (Republic Act No. 9160, as amended). Suspicious transactions and covered transactions meeting statutory thresholds are reported to the AMLC as required.
6.3 Service Providers and Processors
cc6ph engages trusted third-party service providers who process data on our behalf under binding data processing agreements. These include:
- KYC and identity verification providers
- Payment processors and e-wallet platforms (GCash, Maya, and partner banks)
- Cloud hosting and server infrastructure providers
- Customer support software providers
- Fraud detection and anti-money laundering screening tools
- Game software providers (for session and wagering data required to operate games)
All processors are contractually prohibited from using your data for any purpose other than providing services to cc6ph, and are required to maintain security standards no less protective than those applied by cc6ph.
cc6ph will never share your personal data with advertisers, data brokers, or any third party for their independent marketing use.
07 Data Storage and Security
cc6ph stores all player personal data on secure servers physically located within the Philippines. All data at rest is encrypted using AES-256 encryption. All data in transit between your device and cc6ph's servers is protected by TLS 1.3 (256-bit SSL encryption).
cc6ph implements the following technical and organizational security measures to protect your personal data:
- Role-based access controls limiting data access to authorized personnel only
- Multi-factor authentication required for all cc6ph staff accessing player data systems
- Regular penetration testing and vulnerability assessments by independent security firms
- 24/7 intrusion detection and monitoring systems
- Annual staff data privacy training and awareness programs
- Documented data breach response procedures compliant with NPC notification requirements
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cc6ph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.
08 Data Retention Periods
cc6ph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Key retention periods are as follows:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | PAGCOR licensing requirements and AMLA obligations |
| Financial Transaction Records | 5 years from transaction date | Anti-Money Laundering Act (RA 9160) |
| KYC Verification Documents | 5 years after account closure | PAGCOR regulatory requirement |
| Gaming Activity Logs | 5 years from date of activity | PAGCOR licensing and dispute resolution |
| Self-Exclusion Records | Indefinitely or as directed by PAGCOR | Responsible gaming regulatory requirement |
| Marketing Preferences | Until consent is withdrawn + 1 year | DPA consent records obligation |
| Support Chat Transcripts | 3 years from date of interaction | Dispute resolution and legitimate interest |
Upon expiry of the applicable retention period, cc6ph will securely delete or permanently anonymize your personal data using methods that prevent any possibility of reconstruction or re-identification.
09 Cookies and Tracking Technologies
cc6ph uses cookies and similar tracking technologies on the Platform to ensure its proper functioning, enhance your experience, and support analytics and fraud prevention operations. The types of cookies we use are:
- Strictly Necessary Cookies: Essential for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impairing core Platform functionality.
- Performance and Analytics Cookies: Used to collect anonymized data on how players navigate the Platform, which pages are most visited, and where errors occur. This data is used solely to improve Platform performance.
- Functionality Cookies: Store your Platform preferences, such as language settings, preferred game categories, and responsible gaming reminder configurations.
- Security and Fraud Prevention Cookies: Used for device fingerprinting, detecting suspicious login patterns, and preventing account takeover attempts.
cc6ph does not use third-party advertising or behavioral targeting cookies. You can manage cookie preferences through your browser settings or through the cc6ph cookie preference center, accessible from the Platform's footer. Disabling non-essential cookies will not prevent you from accessing core gaming and account services.
10 Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by cc6ph. You may exercise any of these rights by contacting our Data Protection Officer (DPO) using the contact details in Section 14.
Right to Be Informed
The right to be informed that your personal data is being or will be processed, and to receive the information contained in this Privacy Policy before collection occurs.
Right to Access
The right to request a copy of the personal data cc6ph holds about you, along with information about how it is being processed.
Right to Correction
The right to request correction of any inaccurate, incomplete, or outdated personal data cc6ph holds about you, subject to verification requirements.
Right to Erasure
The right to request deletion of your personal data where it is no longer necessary, subject to cc6ph's legal retention obligations under PAGCOR and AMLA regulations.
Right to Object
The right to object to processing based on legitimate interest grounds, including direct marketing. Upon valid objection, cc6ph will cease the relevant processing activity.
Right to Data Portability
The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
Right to Lodge a Complaint
The right to file a complaint with the National Privacy Commission (NPC) if you believe cc6ph has violated any provision of the Data Privacy Act in processing your data.
Right to Damages
The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
cc6ph will respond to all verified data subject rights requests within fifteen (15) calendar days of receipt. Complex requests may be extended by an additional 15 days with notification to you. Identity verification is required before any request is actioned.
11 Children's Privacy
The cc6ph Platform is strictly for persons who are 21 years of age or older, in accordance with the minimum legal gambling age in the Philippines. cc6ph does not knowingly collect, process, or retain personal data of individuals under the age of 21.
If cc6ph discovers or is notified that personal data has been collected from a person under the age of 21 — whether through account registration or any other means — it will immediately suspend the relevant account, delete all associated personal data to the extent permitted by regulatory obligations, and report the matter to PAGCOR and, where appropriate, to the relevant Philippine authorities. Age verification is conducted during the account registration and KYC process for all accounts.
12 International Data Transfers
cc6ph's primary data storage infrastructure is located within the Philippines. In limited circumstances, personal data may be transferred to or accessed from systems located outside the Philippines — for example, where a third-party processor (such as a global KYC provider or cloud service infrastructure partner) operates servers in another jurisdiction.
Where such transfers occur, cc6ph ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers, including contractual clauses that impose data protection obligations equivalent to those under the Philippine DPA. cc6ph will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or a valid legal basis for the transfer.
13 Amendments to This Policy
cc6ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, cc6ph will notify registered players by email and/or by a prominent notice on the Platform at least 14 days before the changes take effect.
The effective date displayed at the top of this page will always reflect when this Policy was most recently updated. Your continued use of the cc6ph Platform after an amended Privacy Policy becomes effective constitutes your acceptance of the updated terms. If you do not agree with any amendment, you may request account closure as described in the Terms & Conditions.
14 Contact Us and Data Protection Officer
cc6ph has appointed a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing cc6ph's compliance with the DPA and serving as the primary point of contact for all data privacy matters.
To exercise your data subject rights, report a privacy concern, or ask any question about this Privacy Policy, please contact cc6ph's DPO using the following details:
Data Protection Officer, cc6ph
Email: [email protected]
Live Chat: Available 24/7 via the cc6ph Platform
Registered operator address available on written request to the DPO email above
If you are not satisfied with cc6ph's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. NPC contact details are available on the NPC's official government website.