c66 Privacy Policy

Last Updated: May 2026  |  Effective Date: May 2026  |  Applies to: c66.asia

1. Who We Are and How to Contact Us

c66 operates the online gaming platform accessible at c66.asia (the "Platform"). For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, c66 is the personal information controller responsible for the personal data you provide when using the Platform.

If you have any questions about this Privacy Policy or wish to exercise your data subject rights, please contact our Data Protection Officer (DPO) at:

Email: [email protected]

Please note that this email address is displayed as plain text for informational purposes only. c66 will acknowledge all privacy-related enquiries within five (5) business days.

2. Personal Data We Collect

c66 collects the following categories of personal data from players and platform visitors:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine passport number, SSS/UMID number, PhilSys National ID number, or driver's licence number).
• Contact Data: Email address, mobile phone number, and residential address (including city, province, and postal code).
• Account Data: Username, encrypted password, account preferences, and communication settings.
• Financial Data: Payment method details (e.g., GCash mobile number, PayMaya/Maya account reference, bank account details for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, or Security Bank transfers, or debit card details). c66 does not store full card numbers; payment data is tokenised by our payment processors.
• Transaction Data: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance history.
• Technical Data: IP address, browser type and version, device type, operating system, time zone, and session duration.
• Usage Data: Information about how you navigate and interact with the c66 platform, including pages visited, features used, and click patterns.
• Communications Data: Records of your interactions with c66 customer support, including live chat transcripts and email correspondence.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, cooling-off period activations, and any problem gambling disclosures you make to c66.

3. How We Collect Your Data

c66 collects personal data through the following means:

• Direct interactions: When you register a c66 account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automated technologies: When you browse the c66 platform, we automatically collect technical and usage data through cookies, web beacons, and server logs.
• Third-party sources: c66 may receive identity verification data from licensed Know Your Customer (KYC) service providers, fraud prevention agencies, and payment processors in order to comply with anti-money laundering (AML) obligations under Philippine law.

4. How We Use Your Personal Data

c66 uses your personal data for the following purposes:

• To create, verify, and manage your c66 account.
• To process deposits, withdrawals, and other financial transactions on the Platform.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine gaming law.
• To detect and prevent fraud, money laundering, and other prohibited activities.
• To provide customer support and respond to your enquiries.
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts).
• To send you marketing communications about c66 promotions, new games, and platform updates, where you have consented to receive such communications.
• To personalise your c66 experience and recommend games or promotions that may be of interest to you.
• To administer our responsible gaming programme, including monitoring for signs of problem gambling and enforcing self-exclusion requests.
• To comply with our legal and regulatory obligations under Philippine law, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
• To improve the c66 platform through analytics and user research.

5. Legal Bases for Processing

c66 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform the contract between you and c66 (i.e., to operate your c66 account and provide gaming services).
• Legal obligation: Processing is necessary to comply with c66's obligations under Philippine law, including PAGCOR licensing conditions, AML regulations, and data retention requirements.
• Legitimate interests: Processing is necessary for c66's legitimate interests in fraud prevention, platform security, and business analytics, provided those interests are not overridden by your rights and freedoms.
• Consent: Where c66 relies on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Your Personal Data

c66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. c66 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

• Payment processors: To facilitate deposits and withdrawals through GCash, PayMaya/Maya, Philippine banks, and debit card networks.
• KYC and identity verification providers: To verify your identity and age in compliance with PAGCOR requirements.
• Fraud prevention and AML service providers: To detect and prevent financial crime in accordance with Philippine AML law.
• IT and platform service providers: Cloud hosting, security, and analytics providers who process data on c66's behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants where necessary for c66's legal and compliance obligations.

All third-party service providers who process personal data on behalf of c66 are contractually required to implement appropriate technical and organisational security measures and to process data only in accordance with c66's instructions.

7. Cookies and Tracking Technologies

c66 uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use the Platform.

c66 uses the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled.
• Performance and analytics cookies: Help us understand how players use the Platform so we can improve it.
• Functionality cookies: Remember your preferences (e.g., language, display settings) to personalise your experience.
• Marketing cookies: Used to deliver relevant promotional content about c66 games and offers. These are only activated where you have provided consent.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the c66 platform. For detailed instructions on managing cookies, refer to your browser's help documentation.

8. Data Retention

c66 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your c66 account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
• Transaction data: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes.
• Technical and usage data: Retained for up to twenty-four (24) months from collection.

When personal data is no longer required, c66 will securely delete or anonymise it in accordance with industry best practices.

9. Data Security

c66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the c66 platform.
• Encryption of sensitive data at rest, including financial and identity information.
• Role-based access controls ensuring that only authorised c66 personnel can access personal data, and only to the extent required for their job function.
• Regular penetration testing and vulnerability assessments of the c66 platform and infrastructure.
• Incident response procedures to detect, report, and address personal data breaches in accordance with the NPC's breach notification requirements.

While c66 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your c66 login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by c66:

• Right to be informed: The right to know what personal data c66 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data c66 holds about you.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to c66's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe c66 has violated your data privacy rights.

To exercise any of these rights, please contact the c66 Data Protection Officer at the email address provided in Section 1. c66 will respond to all verified data subject requests within fifteen (15) calendar days of receipt, as required by the Data Privacy Act.

11. Children's Privacy

The c66 platform is strictly intended for individuals aged 21 years and above. c66 does not knowingly collect personal data from persons under the age of 21. If c66 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on the c66 platform, please contact our support team immediately so that we can take appropriate action.

12. Changes to This Privacy Policy

c66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, c66 will notify registered players via email and/or a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the c66 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how c66 protects your personal data.

13. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or c66's data handling practices, please contact our Data Protection Officer:

Email: [email protected]

This email address is displayed as plain text for informational purposes only. If you are not satisfied with c66's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines:

National Privacy Commission (NPC)
3rd Floor, Core G, GSIS Headquarters, Financial Center, Roxas Boulevard, Pasay City, Metro Manila, Philippines

Further information about the NPC and your rights under Philippine privacy law is available through official Philippine government channels.