zzcc Casino – Privacy Policy

About This Privacy Policy

This Privacy Policy governs the collection, processing, storage, use, and disclosure of personal data by zzcc Casino in connection with the operation of the zzcc.win platform and all services offered through it. This Policy applies to all users of the zzcc Casino platform, including registered account holders, prospective registrants who interact with the platform without completing registration, and visitors to the zzcc.win website.

This Privacy Policy should be read in conjunction with zzcc Casino's Terms & Conditions, which form the overarching agreement between zzcc Casino and its players. The Terms & Conditions incorporate this Privacy Policy by reference.

zzcc Casino processes personal data in compliance with:

• Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations;
• National Privacy Commission (NPC) issuances and advisory opinions applicable to online gaming platforms in the Philippines;
• PAGCOR regulatory requirements applicable to licensed online gaming operators, including anti-money-laundering data collection obligations under Republic Act No. 9160 (Anti-Money Laundering Act), as amended.

Data Controller Identity

For the purposes of the Philippine Data Privacy Act and this Privacy Policy, the data controller responsible for personal data processed through the zzcc Casino platform is:

zzcc Casino has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with data protection obligations, responding to data subject requests, and serving as the point of contact for the National Privacy Commission. Players may contact the DPO directly at the email address listed above for any privacy-related inquiry.

What Personal Data We Collect

zzcc Casino collects the minimum personal data necessary to provide its licensed gaming services, comply with legal obligations, and maintain account security. The categories of personal data zzcc Casino collects are set out in the table below:

How We Collect Your Personal Data

zzcc Casino collects personal data through the following channels and mechanisms:

Directly from You

• When you register a zzcc Casino account by submitting your mobile number and creating a password;
• When you complete identity verification (KYC) by submitting government ID documents and selfie photographs;
• When you make a deposit or withdrawal request, including payment method information;
• When you contact zzcc Casino's support team via live chat or email;
• When you set responsible gaming limits or submit a self-exclusion request;
• When you participate in promotions, surveys, or loyalty program activities.

Automatically Through Platform Usage

• Through server logs that record your IP address, device information, and page interaction data when you visit zzcc.win;
• Through cookies and similar tracking technologies as described in Section 8 of this Policy;
• Through your gameplay activity, which is recorded in zzcc Casino's gaming systems for account management and regulatory reporting purposes.

From Third Parties

• From payment processors (e.g., GCash, Maya, BPI) confirming the status of deposit and withdrawal transactions — zzcc receives confirmation data only, not your full financial account details;
• From identity verification service providers used in the KYC process where automated document checking is employed;
• From PAGCOR or other regulatory authorities where data sharing is required by law or regulatory instruction.

Legal Basis for Processing Personal Data

Under the Philippine Data Privacy Act of 2012, zzcc Casino processes personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between zzcc Casino and the player — specifically, to operate your account, process deposits and withdrawals, and provide gaming services.
• Legal Obligation: Processing is required by Philippine law — including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160), and National Privacy Commission regulations — such as KYC data collection, AML monitoring, and regulatory reporting.
• Legitimate Interests: Processing is necessary for zzcc Casino's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: For optional communications such as promotional notifications and marketing emails, zzcc Casino relies on your freely given, specific consent, which you may withdraw at any time.

How We Use Your Personal Data

zzcc Casino uses the personal data it collects for the following specific purposes:

• Account management — creating, maintaining, and securing your zzcc Casino account, including authentication and password reset processes;
• Identity verification (KYC) — verifying your identity to satisfy PAGCOR licensing requirements and Philippine anti-money-laundering obligations;
• Payment processing — processing your deposits and withdrawals via GCash, Maya, and other supported Philippine payment channels;
• Gaming services delivery — making games and betting markets available in your account and recording your gameplay activity for account accuracy;
• Bonus and loyalty program administration — tracking wagering activity for loyalty tier calculation, cashback calculation, and bonus eligibility assessment;
• Fraud prevention and security — monitoring account and transaction activity to detect unauthorized access, payment fraud, multi-accounting, and other prohibited behaviors;
• Responsible gaming — monitoring gameplay patterns to identify potential problem gambling indicators and giving effect to self-exclusion or limit requests;
• Regulatory compliance and reporting — fulfilling zzcc Casino's PAGCOR reporting obligations and AML suspicious transaction reporting requirements;
• Customer support — responding to your inquiries, resolving disputes, and maintaining support records;
• Platform improvement — analyzing aggregated, anonymized usage data to improve platform performance and user experience;
• Marketing communications — sending promotional offers and bonus notifications where you have provided consent, and from which you may unsubscribe at any time.

zzcc Casino does not use your personal data for automated decision-making that produces legal effects on you without human review, except in cases where such processing is required by law or expressly permitted by PAGCOR regulation.

Data Sharing & Disclosure

zzcc Casino does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your personal data may be shared in the following limited and controlled circumstances:

Service Providers (Data Processors)

zzcc Casino engages third-party service providers who process personal data on zzcc's behalf, subject to written data processing agreements that require them to maintain appropriate security and confidentiality standards. These include:

• Payment processors and e-wallet providers (GCash, Maya, BPI, BDO, UnionBank, Coins.ph) for deposit and withdrawal processing;
• KYC and identity verification service providers;
• Game software providers (e.g., JILI, PG Soft, Evolution, Pragmatic Play) who may receive account session tokens but not personal identity data;
• Cloud hosting and infrastructure providers;
• Fraud detection and anti-money-laundering screening services.

Regulatory Authorities

zzcc Casino is legally required to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities in the following circumstances:

• Routine regulatory reporting required by zzcc Casino's PAGCOR operating license;
• Suspicious transaction reports filed under RA 9160 (Anti-Money Laundering Act);
• Responses to valid court orders, subpoenas, or law enforcement requests under Philippine law;
• Reports required under the Data Privacy Act in the event of a personal data breach.

Cookies & Tracking Technologies

zzcc Casino uses cookies and similar tracking technologies on the zzcc.win website to enable platform functionality, maintain session security, and analyze usage patterns. The categories of cookies used by zzcc Casino are:

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse non-essential cookies, delete existing cookies, or receive alerts when a website attempts to set a cookie. Note that disabling strictly necessary or security cookies will prevent you from logging in to your zzcc Casino account.

Data Retention

zzcc Casino retains personal data for as long as it is necessary for the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The principal retention periods applicable to zzcc Casino player data are:

• Active account data — retained for the duration of the active account relationship plus five (5) years after account closure, in accordance with PAGCOR record-keeping requirements;
• KYC and identity verification records — retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• Financial transaction records — retained for a minimum of five (5) years, as required by the Anti-Money Laundering Act (RA 9160);
• Gaming session records — retained for five (5) years for regulatory compliance and dispute resolution purposes;
• Support and communications records — retained for three (3) years after the last interaction for dispute resolution and quality assurance;
• Responsible gaming records — self-exclusion records are retained indefinitely to prevent circumvention of exclusion orders; other responsible gaming data is retained for five (5) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Anonymized data aggregated for statistical analysis does not constitute personal data and may be retained indefinitely.

Data Security

zzcc Casino implements a comprehensive set of technical, organizational, and procedural security measures to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the zzcc Casino platform;
• Encrypted storage of sensitive data including passwords (stored as salted cryptographic hashes, never in plaintext) and identity documents;
• Two-factor authentication (2FA) available to all zzcc Casino account holders as an additional account security layer;
• Role-based access controls ensuring that zzcc Casino staff can only access player data categories necessary for their specific job function;
• Continuous security monitoring of platform systems for unauthorized access attempts, unusual transaction patterns, and data exfiltration indicators;
• Regular security audits and penetration testing conducted by qualified information security professionals;
• Staff data privacy training ensuring all personnel who handle player data understand their obligations under RA 10173.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, zzcc Casino will notify you and the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the Philippine Data Privacy Act and NPC Circular No. 16-03.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, zzcc Casino players have the following rights regarding their personal data. These rights may be exercised by contacting the zzcc Casino Data Privacy Officer at [email protected]:

zzcc Casino will respond to all data subject requests within fifteen (15) working days of receipt. Where a request is complex or involves a large volume of data, zzcc Casino may extend this period by a further fifteen (15) working days, with notification to the requestor. Certain rights are subject to legal limitations — for example, the right to erasure does not apply to data zzcc Casino is legally required to retain under PAGCOR or AML regulations.

Minors & Age Restriction

If zzcc Casino discovers that personal data belonging to a person under 21 years of age has been collected — including through age misrepresentation during registration — the following actions will be taken immediately:

• The account will be permanently closed;
• All personal data associated with the account will be deleted, except where retention is required by law;
• Any funds deposited will be returned to the payment method of origin after identity verification of the rightful owner;
• The incident will be reported to PAGCOR as required under zzcc Casino's licensing conditions.

If you have reason to believe that a person under 21 has registered a zzcc Casino account, please contact the zzcc Casino Data Privacy Officer at [email protected] immediately.

Third-Party Services & Game Providers

The zzcc Casino game lobby includes games developed and operated by third-party providers including JILI Games, PG Soft, Pragmatic Play, Evolution Gaming, and others. When you play a game from a third-party provider within the zzcc Casino platform, the game software may transmit technical session data (such as bet amounts, game results, and session tokens) to the provider's servers for the purpose of running the game. This data is governed by the relevant provider's own terms and technical service agreements with zzcc Casino.

zzcc Casino does not share your name, government ID, or contact details with game providers. Game providers receive only the anonymized or pseudonymized session data necessary to operate the specific game you are playing. All third-party game providers integrated into zzcc Casino are required to maintain information security standards consistent with their international operating licenses.

zzcc.win does not contain links to external third-party websites. Any reference to external organizations (such as PAGCOR or the National Privacy Commission) in this document is for informational purposes in accordance with zzcc Casino's legal obligations.

Cross-Border Data Transfers

zzcc Casino's primary data processing infrastructure is located within or operates in connection with the Philippine jurisdictional area appropriate to its PAGCOR license. However, certain service providers — particularly cloud infrastructure providers and international game providers — may process or store data in servers located outside the Philippines.

Where personal data is transferred outside the Philippines, zzcc Casino ensures that such transfers comply with the cross-border data transfer requirements of the Philippine Data Privacy Act, specifically by ensuring that the recipient country or organization provides a level of data protection at least equivalent to the standards required under RA 10173, or by entering into contractual arrangements that impose equivalent data protection obligations on the recipient.

Changes to This Privacy Policy

zzcc Casino reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made to this Policy, zzcc Casino will provide reasonable advance notice to registered players via:

• A notification displayed on the zzcc Casino platform at login;
• An SMS notification to your registered mobile number; or
• Both of the above, where the change is particularly significant.

The "Last Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. Your continued use of the zzcc Casino platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any amendment, you may close your account and request data deletion in accordance with Section 11 of this Policy.

How to Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the personal data zzcc Casino holds about you, please contact our Data Privacy Officer using the following channels:

If you are not satisfied with zzcc Casino's response to your privacy inquiry or believe that your data privacy rights have been violated, you have the right to file a complaint with the Philippine National Privacy Commission (NPC). The NPC is the independent government body responsible for enforcing the Philippine Data Privacy Act. Information on filing a complaint with the NPC is available through the official Philippine government channels.