Privacy Policy — cczzz Casino Philippines

01 Introduction

cczzz ("cczzz", "we", "us", "our") is committed to protecting the privacy and personal information of every individual who accesses or uses the cczzz online gaming platform at cczzz.club and all associated services ("Platform"). This Privacy Policy ("Policy") sets out the basis on which personal data collected from or about you will be processed by cczzz.

This Policy is written in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines ("NPC"). Where applicable, this Policy is also informed by international data protection principles consistent with the DPA framework.

By registering an account on cczzz, accessing the Platform, depositing funds, or otherwise interacting with our services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein. If you do not agree to this Policy, you must not register an account or use the cczzz Platform.

This Policy should be read alongside the cczzz Terms and Conditions, which govern the overall contractual relationship between you and cczzz. In the event of any conflict between this Policy and the Terms and Conditions on matters of personal data, this Policy shall prevail.

02 Data Controller

For the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, the personal information controller responsible for your data is:

cczzz has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection law. Inquiries, complaints, or requests relating to personal data may be directed to the DPO via the contact details in Section 15 of this Policy.

03 Categories of Personal Data We Collect

cczzz collects the following categories of personal information in connection with the operation of the Platform and the provision of gaming services:

04 How We Collect Personal Data

cczzz collects personal data through the following methods:

• Direct Provision: Information you provide during account registration, KYC verification, deposit and withdrawal processes, customer support interactions, and promotional opt-ins;
• Automated Technical Collection: Data generated automatically by your device and browser when you access the Platform, including IP address, session data, cookie data, and device identifiers;
• Payment Processors: Confirmation and reference data received from GCash, Maya (PayMaya), GrabPay, BPI, BDO, Metrobank, InstaPay, and other payment intermediaries in connection with deposit and withdrawal processing;
• Game Providers: Game session outcome data and RTP-related records received from our certified game software providers in connection with each gaming session conducted on the Platform;
• Fraud and Security Systems: Risk signals and device reputation data received from fraud prevention and security monitoring tools used to protect the Platform and its users;
• Publicly Available Sources: Where necessary for compliance or fraud prevention purposes, information from publicly accessible Philippine government databases or records.

05 Purposes of Processing

cczzz processes personal data for the following specific, explicit, and legitimate purposes:

1. Account Registration and Management: To create, maintain, and secure your cczzz account, verify your identity, and manage your account settings and preferences;
2. KYC and Age Verification: To verify that you are at least twenty-one (21) years of age and to confirm your identity in compliance with age restriction requirements applicable to online gaming in the Philippines;
3. Payment Processing: To process deposits, withdrawals, and wallet transactions in Philippine Peso through GCash, Maya, and other supported payment channels;
4. Gaming Service Provision: To deliver live casino, slot, bingo, and sports betting services, record game outcomes, apply bonus awards, and maintain accurate wagering history;
5. Anti-Money Laundering (AML) Compliance: To monitor transactions for suspicious activity, conduct enhanced due diligence where required, and fulfill reporting obligations under applicable Philippine AML law;
6. Fraud Prevention and Platform Security: To detect and prevent unauthorized account access, bonus abuse, multi-accounting, payment fraud, and other prohibited conduct;
7. Responsible Gaming: To administer self-exclusion requests, deposit limits, session reminders, and cooling-off periods, and to monitor account activity for indicators of problem gambling;
8. Customer Support: To respond to support inquiries, investigate complaints, and resolve disputes relating to your cczzz account or gaming activity;
9. Legal and Regulatory Compliance: To comply with applicable Philippine law, regulatory directions, court orders, and other legal obligations;
10. Marketing Communications: To send you promotional offers, bonuses, and platform updates, subject to your marketing preferences and applicable opt-in requirements.

06 Legal Basis for Processing

Under the Data Privacy Act of 2012, cczzz relies on the following legal bases for processing personal information:

• Consent: For marketing communications and any processing not covered by the bases below. You may withdraw consent at any time through your account settings or by contacting support, without affecting the lawfulness of prior processing;
• Contractual Necessity: Processing necessary to perform our obligations under the cczzz Terms and Conditions — including account management, payment processing, and game service delivery;
• Legal Obligation: Processing required to comply with applicable Philippine law, including KYC obligations, AML reporting requirements, age verification mandates, and regulatory directives;
• Legitimate Interest: Processing necessary for cczzz's legitimate interests in operating a secure, fraud-free platform — including fraud detection, security monitoring, abuse prevention, and platform integrity — where such interests are not overridden by your rights and freedoms.

07 Data Sharing and Disclosure

cczzz does not sell your personal data to third parties. We share personal information only in the following circumstances and only to the extent necessary for the specified purpose:

• Payment Processors: GCash, Maya (PayMaya), GrabPay, BPI, BDO, Metrobank, InstaPay, and other payment intermediaries receive transaction-relevant data necessary to process your deposits and withdrawals;
• Game Software Providers: Certified game studios (including but not limited to Evolution Gaming, JILI, PG Soft, Pragmatic Play, Asia Gaming) receive session identifiers and bet data necessary to deliver game services, subject to their own data processing agreements with cczzz;
• KYC Verification Services: Where automated identity verification is used, identity document images and data may be processed by a certified KYC verification technology provider under a data processing agreement with cczzz;
• Fraud and Security Providers: Technical and behavioral data may be shared with fraud prevention and device fingerprinting service providers to protect the Platform and its users;
• Legal and Regulatory Authorities: cczzz will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, courts, or other competent authorities where required or permitted by applicable Philippine law;
• Professional Advisers: Legal counsel, auditors, and other professional advisers where disclosure is necessary for the provision of professional services to cczzz, subject to confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of cczzz's assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third parties to whom cczzz discloses personal data are required to implement appropriate technical and organizational safeguards to protect the data received, and are contractually restricted from using such data for purposes other than those specified in their agreements with cczzz.

08 Data Retention

cczzz retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Account Data and Gaming Records: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations under Philippine law;
• KYC Documents: Retained for a minimum of five (5) years following the completion of the business relationship or the relevant transaction, consistent with AMLC record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years following each transaction, as required by applicable AML regulations;
• Support Communications: Retained for three (3) years following the closure of the relevant support case or account, for dispute resolution and quality assurance purposes;
• Marketing Data: Retained until you withdraw your marketing consent or request deletion, subject to any legal minimum retention periods that may apply;
• Technical and Security Logs: Retained for up to ninety (90) days for operational and security purposes, after which they are routinely purged unless required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized so that it can no longer be attributed to any identifiable individual.

09 Data Security

cczzz implements technical and organizational security measures appropriate to the nature of the personal data we process and the risks involved. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and cczzz servers is protected by 256-bit SSL/TLS encryption, consistent with the standard used by Philippine banks and BSP-regulated e-money issuers such as GCash and Maya;
• Encryption at Rest: Sensitive personal information and KYC documents stored on cczzz systems are encrypted at rest using industry-standard encryption algorithms;
• Password Protection: Account passwords are processed through one-way cryptographic hashing using bcrypt. cczzz staff cannot view or recover passwords in plain text;
• Two-Factor Authentication (2FA): SMS OTP-based two-factor authentication is available for all accounts and is strongly recommended as an additional layer of account security;
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive regular data privacy training;
• Anomaly Detection: Automated systems monitor login patterns, transaction behaviors, and other account activity to detect and respond to unauthorized access and suspicious activity in real time;
• Penetration Testing and Audits: cczzz conducts regular security assessments, including penetration testing and vulnerability scans, to identify and remediate security weaknesses proactively.

While cczzz maintains robust security measures, no internet-based system can guarantee absolute security against all threats. Users are encouraged to use strong, unique passwords for their cczzz account and to enable two-factor authentication to minimize the risk of unauthorized access.

10 Cookies and Tracking Technologies

cczzz uses cookies and similar tracking technologies to operate the Platform, enhance user experience, and support security and analytics functions. Cookies are small data files stored on your device by your browser when you visit the cczzz Platform.

The categories of cookies used by cczzz are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function, including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Store your preferences such as remembered device status, language settings, and game lobby configuration to personalize your experience;
• Analytics Cookies: Collect anonymized usage data (pages visited, session duration, navigation paths) to help cczzz improve Platform performance and user experience. No personally identifiable information is included in analytics data;
• Security and Fraud Prevention Cookies: Support device fingerprinting and fraud detection systems used to protect your account and the Platform from unauthorized access and abuse.

You may control or disable non-essential cookies through your browser settings. Please be aware that disabling certain cookies may limit Platform functionality. Your continued use of the cczzz Platform after being informed of cookie use constitutes consent to the use of cookies as described in this Policy.

11 Minors and Age Restriction

The cczzz Platform is strictly for individuals aged twenty-one (21) years and above. cczzz does not knowingly collect personal information from individuals under 21 years of age. The collection of personal data from a minor in connection with the cczzz Platform is strictly prohibited and will not be undertaken by cczzz intentionally.

Where cczzz discovers or has reasonable grounds to believe that an account has been registered by or is being used by an individual under 21 years of age, cczzz will immediately suspend the account, delete or restrict the processing of the associated personal data to the extent required by applicable law, and handle any wallet balance in accordance with the cczzz Terms and Conditions and applicable regulatory requirements.

If you are the parent or guardian of an individual under 21 who you believe may have accessed the cczzz Platform, please contact us immediately at the contact details in Section 15 so that we can take appropriate action.

12 Your Data Privacy Rights

Under Republic Act No. 10173 (Data Privacy Act of 2012), you are entitled to the following rights with respect to your personal data processed by cczzz:

These rights are described in further detail as follows:

• Right to Access: You have the right to request confirmation of whether cczzz processes personal data about you, and to receive a copy of that data along with information about how it is being processed;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by cczzz. You may update most account information directly through your account settings;
• Right to Erasure (Right to Be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to retention obligations under applicable law that may require cczzz to retain certain data notwithstanding your request;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to cczzz's right to demonstrate compelling legitimate grounds that override your interests;
• Right to Data Portability: Where processing is based on your consent or contract, you may request that cczzz provide your personal data in a structured, commonly used, machine-readable format;
• Right to File a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe cczzz has not handled your personal data in compliance with the Data Privacy Act of 2012.

To exercise any of these rights, please contact cczzz via the channels described in Section 15. cczzz will respond to all valid rights requests within fifteen (15) calendar days of receipt, or within such extended period as permitted by applicable law, notifying you of the outcome and any actions taken.

13 Cross-Border Data Transfers

Some of cczzz's service providers and game software partners may be located outside the Republic of the Philippines. Where personal data is transferred to recipients in other countries in connection with the provision of Platform services, cczzz ensures that such transfers are made in accordance with the requirements of the Data Privacy Act of 2012 and the implementing rules issued by the National Privacy Commission.

Specifically, cczzz ensures that cross-border transfers of personal data are made only to recipients in countries or jurisdictions that provide an adequate level of data protection, or where appropriate contractual safeguards (such as data processing agreements incorporating standard contractual clauses) have been put in place to protect the rights of Philippine data subjects.

cczzz's primary server infrastructure serving the Philippine market is located in data centers with robust physical and technical security certifications. Where data is processed offshore, it is subject to the same confidentiality, security, and purpose-limitation obligations that apply to data processed in the Philippines.

14 Amendments to This Policy

cczzz reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or Platform operations. Material changes to this Policy that affect your rights or how your data is processed will be communicated to registered users via SMS to their registered Philippine mobile number or by email, with a minimum of seven (7) calendar days' notice before the changes take effect.

Non-material changes, such as formatting updates, typographical corrections, or clarifications that do not alter the substance of data processing practices or user rights, may be made without prior notice. The "Last Updated" date at the top of this Policy reflects the date of the most recent modification.

Your continued use of the cczzz Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree to the amended Policy, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions.

15 Contact, DPO, and NPC Complaints

For questions, concerns, data access requests, or complaints relating to this Privacy Policy or cczzz's handling of your personal data, please contact our Data Protection Officer through the following channels:

If you are not satisfied with cczzz's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of Philippine data subjects. Information about filing a complaint with the NPC is available on the NPC's official website.