cc60c Casino Privacy Policy

1Introduction

cc60c Casino ("cc60c," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who use the cc60c platform at cc60c.app (the "Platform"). This Privacy Policy ("Policy") describes how cc60c collects, uses, stores, shares, and protects personal information in connection with your use of the Platform and all associated services.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects applicable guidelines issued by the Philippine Amusement and Gaming Corporation (PAGCOR) regarding player data handling in the online gaming industry.

By registering an account on cc60c, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read together with cc60c's Terms & Conditions, which govern your overall use of the Platform.

2Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, cc60c Casino is the personal information controller ("PIC") responsible for your personal data. As the PIC, cc60c determines the purposes and means of processing your personal data and is accountable for ensuring that all processing activities comply with the DPA and its IRR.

cc60c has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO directly for any privacy-related concerns at [email protected] with the subject line "Data Privacy – DPO Inquiry."

3Personal Data We Collect

cc60c collects personal data only to the extent necessary to provide a safe, compliant, and functional gaming platform. The categories of personal data we collect are as follows:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Gender
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address (city, province, region)

3.2 Identity Verification (KYC) Data

• Government-issued ID (e.g., Philippine passport, PhilSys National ID, SSS ID, UMID, driver's license, PRC ID, voter's ID)
• Selfie or live photo for facial verification
• Proof of address (utility bill, bank statement, or barangay certificate)
• Proof of payment method ownership where required

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method details (GCash number, Maya account, bank account name — not full account numbers)
• Transaction history and account balance records
• Bonus and promotion redemption history

3.4 Gaming Activity Data

• Games played, bet amounts, win/loss records
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session logs and access timestamps
• Cookie identifiers and analytics data

3.6 Communications Data

• Support chat transcripts and email correspondence
• Feedback and survey responses
• Marketing communication preferences

4How We Use Your Personal Data

cc60c processes your personal data for the following specific purposes:

cc60c will not use your personal data for any purpose not listed above without first obtaining your explicit consent or as otherwise required by applicable Philippine law.

5Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, cc60c processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions), including account management, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and the DPA itself.
• Legitimate Interests: Processing is necessary for cc60c's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Data Sharing & Third-Party Disclosure

cc60c does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: GCash, PayMaya/Maya, and partner banks receive the minimum data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC Verification Providers: Third-party identity verification services process your KYC documents on our behalf under strict data processing agreements that comply with the DPA.
• Game Providers: Game software providers may receive anonymized or pseudonymized session data necessary to deliver their games. They do not receive your full identity or financial data.
• Regulatory Authorities: cc60c is legally required to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies upon lawful request or as mandated by regulation.
• Law Enforcement: cc60c will disclose personal data to law enforcement agencies when required by a valid court order, subpoena, or other lawful legal process under Philippine law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, player data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

7Data Retention

cc60c retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus 5 years following account closure, in compliance with PAGCOR record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of the last transaction, as required by the Anti-Money Laundering Act and its implementing rules.
• Financial Transaction Records: Retained for 5 years from the date of each transaction.
• Support Communications: Retained for 3 years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your account plus 3 years to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with cc60c's data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes.

8Data Security

cc60c implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and cc60c's servers is encrypted using TLS 1.3 / 256-bit SSL encryption.
• Encryption at Rest: Sensitive personal data stored in cc60c's databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized cc60c personnel on a strict need-to-know basis. All staff with data access undergo regular privacy and security training.
• Two-Factor Authentication: cc60c's internal systems require multi-factor authentication for all staff accessing player data.
• Regular Security Audits: cc60c conducts regular penetration testing and security audits of its platform and data infrastructure.
• Incident Response: In the event of a personal data breach, cc60c will notify the National Privacy Commission (NPC) within 72 hours of discovery, and affected players will be notified without undue delay where required by the DPA.

9Cookies & Tracking Technologies

cc60c uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Essential Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to understand how players interact with the Platform — which games are most popular, how long sessions last, and where players encounter difficulties. This data is aggregated and anonymized.
• Preference Cookies: Store your language, display, and notification preferences so you don't have to re-enter them on each visit.

cc60c does not use third-party advertising cookies or cross-site tracking cookies. You can manage or delete cookies through your browser settings at any time. Disabling essential cookies may affect your ability to use certain Platform features.

10Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by cc60c:

• Right to Be Informed: You have the right to be informed about how your personal data is collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data cc60c holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. You can update most account information directly from your cc60c account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cc60c's legal retention obligations under PAGCOR and AMLA regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your rights override those interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: If you believe cc60c has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact cc60c's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." cc60c will respond to all verified requests within 15 business days.

11Children's Privacy & Age Restriction

cc60c Casino is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. cc60c does not knowingly collect personal data from any person under the age of 21.

If cc60c discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all funds will be handled in accordance with applicable regulations, and all personal data associated with the account will be deleted as soon as legally permissible.

12International Data Transfers

cc60c's primary data infrastructure is located within the Asia-Pacific region. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software suppliers with servers in other jurisdictions.

Where such transfers occur, cc60c ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the NPC
• Transfers to jurisdictions recognized by the NPC as providing adequate data protection
• Binding corporate rules where applicable

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting our Data Protection Officer.

13Updates to This Privacy Policy

cc60c reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, cc60c will notify registered players via email or an in-platform notification at least 7 days before the changes take effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how cc60c protects your data.

14Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or cc60c's data processing practices, please contact our Data Protection Officer:

• Email: [email protected] (Subject: "Data Privacy Inquiry")
• Live Chat: Available 24/7 via the cc60c Platform

cc60c aims to resolve all privacy-related inquiries within 15 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.