This Privacy Policy ("Policy") applies to all personal data collected and processed by cc6c9 in connection with the operation of the cc6c9 online gaming platform accessible at cc6c9.app, including all associated games, services, mobile interfaces, live chat, promotional campaigns, and customer support channels (collectively, the "Platform").
This Policy applies to all individuals who interact with cc6c9 in any capacity, including registered players, visitors to the Platform who have not registered, individuals who contact cc6c9 customer support, and applicants for cc6c9 affiliate or promotional programs.
This Policy should be read together with the cc6c9 Terms & Conditions, which govern your use of the Platform and incorporate this Policy by reference. In the event of any inconsistency between this Policy and the Terms & Conditions on a data privacy matter, this Policy shall prevail.
For the purposes of the Data Privacy Act of 2012, cc6c9 is the personal information controller with respect to all personal data collected through the Platform. cc6c9 determines the purposes and means of processing personal data submitted by users in connection with account registration, transactions, gameplay, and customer support.
Where cc6c9 engages third-party service providers to process personal data on its behalf — including payment processors, identity verification services, and customer support platforms — those parties operate as personal information processors under written data processing agreements that bind them to data protection standards consistent with RA 10173.
cc6c9 collects the following categories of personal data, depending on the nature of your interaction with the Platform:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number | Required for account registration & verification |
| Contact Data | Mobile number, email address, residential address, city, province | Required for account registration |
| Financial Data | GCash account number, bank account details (BPI/BDO/Metrobank), transaction history, deposit and withdrawal records | Required for payment processing |
| Verification Data | Government-issued ID images (UMID, PhilSys, passport, driver's license, voter's ID), selfie photographs for liveness verification | Required for KYC compliance |
| Gaming Data | Game history, bet amounts, win/loss records, session durations, bonus usage, responsible gaming settings | Generated automatically during gameplay |
| Technical Data | IP address, device type, operating system, browser type, unique device identifiers, login timestamps | Collected automatically |
| Communications Data | Live chat transcripts, email correspondence, Viber and Messenger messages with cc6c9 support | Collected when you contact support |
| Marketing Data | Communication preferences, promotional offer history, referral source | Optional / consent-based |
cc6c9 does not knowingly collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for identity verification and PAGCOR compliance obligations. cc6c9 does not collect biometric data beyond liveness-check photographs used solely for KYC verification.
cc6c9 collects personal data through the following channels:
cc6c9 processes personal data for the following purposes, each of which has a lawful basis under the Data Privacy Act of 2012:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (your agreement with cc6c9) |
| Age and identity verification (KYC) | Legal obligation (PAGCOR licensing requirements) |
| Processing deposits and withdrawals | Performance of contract |
| Anti-money laundering screening and reporting | Legal obligation (RA 9160 AMLA, PAGCOR AML directives) |
| Responsible gaming monitoring and intervention | Legal obligation (PAGCOR responsible gaming framework) |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Platform security and fraud prevention | Legitimate interests of cc6c9 and its players |
| Compliance reporting to PAGCOR and AMLC | Legal obligation |
| Marketing and promotional communications | Consent (opt-in only; you may withdraw at any time) |
| Platform improvement and analytics | Legitimate interests; anonymized/aggregated data only where possible |
cc6c9 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Personal data is shared only in the following circumstances:
cc6c9 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR licensing conditions.
Upon expiry of the applicable retention period, cc6c9 will securely delete or anonymize your personal data so that it can no longer be associated with you.
cc6c9 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
cc6c9 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain your session, remember your preferences, detect fraudulent activity, and understand how players use cc6c9.
cc6c9 does not use third-party advertising cookies or share cookie data with advertising networks. You may manage your cookie preferences through your browser settings; however, disabling essential cookies may prevent you from accessing certain features of the cc6c9 Platform.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by cc6c9. These rights may be exercised by submitting a written request to cc6c9's Data Protection Officer (contact details in Section 14):
If you are a parent or guardian and believe that someone under the age of 21 has registered a cc6c9 account, please contact our support team immediately. cc6c9 will take prompt action to investigate and, where confirmed, terminate the account and erase associated data.
In the ordinary course of operating the cc6c9 Platform, personal data may be transferred to, stored, or processed in jurisdictions outside the Philippines — for example, in connection with cloud infrastructure providers or international KYC service platforms. When such transfers occur, cc6c9 ensures that:
Cross-border transfers are disclosed to the National Privacy Commission as required. cc6c9 maintains a register of all cross-border data transfers as part of its data processing records.
cc6c9 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the Platform's data processing practices. Material changes will be communicated to registered players by email or in-platform notification at least 7 days before the revised Policy takes effect.
The current version of this Privacy Policy is always accessible at cc6c9.app/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the cc6c9 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.
For any questions, concerns, or formal data subject rights requests under this Privacy Policy, please contact cc6c9's Data Protection Officer or support team through the following channels:
If you are not satisfied with cc6c9's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing RA 10173.
All data transmitted between your device and cc6c9 — including your GCash details, passwords, and personal information — is protected by industry-standard TLS 1.3 encryption. The same technology used by Philippine banks.
cc6c9 fully complies with the Data Privacy Act of 2012 (Republic Act No. 10173). We maintain a registered Data Protection Officer, conduct regular privacy impact assessments, and report to the National Privacy Commission as required.
cc6c9 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data stays within the cc6c9 ecosystem and is shared with processors only to deliver services to you.
cc6c9 collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect data speculatively. Every data point we hold has a documented, lawful processing purpose.
cc6c9 maintains a documented incident response plan aligned with NPC breach notification requirements. In the event of a material data breach, cc6c9 will notify the NPC within 72 hours and affected players as promptly as possible.
cc6c9 honors all data subject rights under RA 10173 — including access, rectification, erasure, portability, and the right to object. Verified requests are processed within 15 business days. Reach our DPO team via support email or Live Chat.
Our Data Privacy team responds within 15 business days. Or check out the full cc6c9 platform — 21+ only, PAGCOR regulated.