cczzz Privacy Policy

cczzz ("we", "us", "our") operates the online gaming platform accessible at cczzz.one (the "Platform"). This Privacy Policy explains how cczzz collects, uses, stores, shares, and protects the personal information of individuals ("Players", "you", "your") who register for or use the Platform.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA) of the Republic of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal information collected by cczzz in connection with the operation of the Platform, regardless of how that information is collected — whether online, through our live support channels, or through payment processing systems.

By creating a cczzz account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein. If you do not agree to this Policy, you must not use the Platform.

cczzz collects personal information in the following categories. We collect only what is necessary for the purposes described in Section 3 of this Policy.

2.1 Registration & Identity Data

When you create a cczzz account, we collect: your full legal name, date of birth, Philippine mobile number, a hashed version of your chosen password (plain-text passwords are never stored), and any username you select. This information forms the basis of your account identity.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR licensing requirements and Republic Act No. 9160 (Anti-Money Laundering Act), cczzz may collect copies of your government-issued identification documents — such as a Philippine passport, UMID card, SSS/GSIS ID, driver's license, or Postal ID. We may also collect a selfie photograph for document-matching purposes during the KYC verification process.

2.3 Financial & Transaction Data

When you make deposits or request withdrawals, we collect transaction details including the payment method used (GCash, PayMaya, BPI, BDO, Metrobank, or Instapay account reference), transaction amounts in Philippine Peso (₱), timestamps, and transaction outcomes. We do not store full bank account numbers or complete payment credentials — these are processed and tokenised by our payment service providers.

2.4 Gaming Activity Data

We collect records of your gaming activity on the Platform, including game sessions, bet amounts, game outcomes, bonus claims and wagering progress, login and logout timestamps, and session duration. This data is used for account management, fraud detection, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data

When you access the Platform, we automatically collect technical data including your IP address, device type and model, operating system, browser type and version, and approximate geolocation (country and region level, derived from IP). This data is used for security, fraud prevention, and service optimisation.

2.6 Communications Data

We retain records of communications between you and the cczzz support team, including live chat transcripts and any email correspondence, for quality assurance, dispute resolution, and regulatory audit purposes.

cczzz uses the personal information we collect for the following specific purposes:

• Account creation and management: Registering your account, authenticating your identity at login, and maintaining the integrity and security of your account throughout its lifecycle.
• Payment processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and Instapay, and maintaining accurate records of all financial transactions on your account.
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, Republic Act No. 9160 (Anti-Money Laundering Act), and Republic Act No. 10173 (Data Privacy Act), including mandatory reporting to the Anti-Money Laundering Council (AMLC) where required.
• Identity verification (KYC): Confirming that all Players are at least 21 years of age and meet eligibility requirements, and verifying the identity of players conducting high-value transactions.
• Fraud detection and security: Monitoring account activity for signs of unauthorised access, payment fraud, bonus abuse, multi-accounting, and other prohibited conduct as defined in the cczzz Terms & Conditions.
• Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling, and to enforce responsible gaming tools such as deposit limits, loss limits, and self-exclusion requests initiated by the Player.
• Customer support: Investigating and responding to account queries, payment disputes, technical issues, and responsible gaming requests submitted through the Platform's support channels.
• Platform improvement: Analysing aggregated and anonymised usage data to identify technical issues, optimise Platform performance for Philippine network conditions, and improve the overall player experience.
• Direct communications: Sending transactional notifications (account updates, payment confirmations, security alerts) and, where you have consented, promotional communications about cczzz offers and bonuses. You may opt out of promotional communications at any time via your account notification settings.

Under Republic Act No. 10173, cczzz processes your personal information on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the cczzz Terms & Conditions, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, AML reporting obligations under RA 9160, and tax compliance requirements.
• Legitimate interest: Processing carried out for fraud prevention, security monitoring, and Platform improvement, where our legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes — such as sending promotional communications — where we have obtained your prior, informed, and freely given consent. You may withdraw consent at any time without detriment to your account.

cczzz shares personal information only in the following limited circumstances and with the following categories of recipients:

5.1 Payment Service Providers

We share necessary transaction data with Philippine payment processors — including GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, Metrobank, and Instapay — for the sole purpose of facilitating deposits and withdrawals. These providers are bound by their own data privacy obligations under Philippine law and are not authorised to use your data for any other purpose.

5.2 Identity Verification Providers

We may share your KYC documentation with authorised third-party identity verification service providers for the purpose of age and identity verification. These providers process data under strict data processing agreements with cczzz and may not retain or use your documents beyond the verification purpose.

5.3 Game Software Providers

Third-party game providers may receive limited technical identifiers (such as an anonymised player ID) to facilitate game session management and RNG certification. Game providers do not receive your full personal profile, payment details, or contact information.

5.4 Regulatory Authorities

cczzz is legally obligated to disclose personal and transaction data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies when lawfully required to do so. Such disclosures are not subject to player consent requirements.

5.5 Law Enforcement

We may disclose personal information to Philippine law enforcement authorities where required by court order, subpoena, or applicable law, or where disclosure is necessary to prevent, detect, or prosecute criminal activity affecting cczzz or its players.

The cczzz Platform uses cookies and similar tracking technologies to operate essential Platform functions, enhance performance, and support security monitoring. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing Platform use.
• Functional cookies: Used to remember your preferences, such as your preferred language, display settings, and "Remember me" login preference. These improve your experience but are not required for basic Platform operation.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, to help cczzz identify and fix issues and optimise the user experience. Individual players are not identifiable from analytics data.
• Security cookies: Used for fraud detection, bot identification, and anomalous activity monitoring.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging into your cczzz account. cczzz does not use third-party advertising or retargeting cookies.

cczzz retains personal information for the following periods, after which data is securely deleted or anonymised unless a longer retention period is required by applicable law:

• Account data and gaming history: Retained for the duration of your active account plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by Republic Act No. 9160 (Anti-Money Laundering Act).
• Transaction records: Retained for a minimum of five (5) years following each transaction, consistent with AML and PAGCOR requirements.
• Support communications: Retained for three (3) years following the closure of each support ticket, to facilitate dispute resolution and regulatory audits.
• Technical / device data: Retained for twelve (12) months from collection, except where required for active security investigations.
• Marketing consent records: Retained for three (3) years following withdrawal of consent, to demonstrate that consent was properly obtained.

Upon the expiry of applicable retention periods, data is securely deleted using industry-standard methods. Where deletion of specific data fields is technically constrained, the data is anonymised such that it can no longer be linked to an identified or identifiable individual.

cczzz implements the following technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction:

While cczzz employs industry-standard security measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying cczzz immediately if you suspect unauthorised access to your account.

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal information held by cczzz:

• Right to be Informed: The right to know whether cczzz holds personal information about you, and to receive clear and accessible information about how it is being processed — as provided in this Privacy Policy.
• Right to Access: The right to request a copy of the personal information cczzz holds about you, along with information about its source, the purposes for which it is being processed, and the recipients to whom it has been disclosed.
• Right to Rectification: The right to request that inaccurate, incomplete, or outdated personal information held about you be corrected or updated. Minor corrections (such as changes to your contact number) can be made directly through your Account Settings.
• Right to Erasure / Blocking: The right to request the deletion or blocking of personal information that is no longer necessary for the purposes for which it was collected, or that has been unlawfully processed. Note that this right is subject to cczzz's legal retention obligations under RA 9160 and PAGCOR requirements.
• Right to Object: The right to object to the processing of your personal information for direct marketing purposes or on grounds relating to your particular situation, where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format, and to request its transmission to another personal information controller where technically feasible.
• Right to Damages: The right to be compensated for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of personal information by cczzz.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe cczzz has violated your rights under RA 10173.

The cczzz Platform is strictly restricted to individuals who are at least 21 years of age, as required by PAGCOR regulations and Philippine gambling law. cczzz does not knowingly collect personal information from any person under 21 years of age.

If cczzz determines that personal information has been collected from an individual under the age of 21, that account will be immediately suspended, all associated personal data will be deleted (subject to any minimum legal retention requirements), and any funds held will be returned to the payment source used for deposit.

The cczzz Platform is operated from and primarily processes data within the Philippines. However, some of our service providers — including game software providers and identity verification services — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, cczzz ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers, including contractual clauses that require the recipient to maintain standards of data protection substantially equivalent to those required under RA 10173.

cczzz does not transfer personal data to jurisdictions that do not provide adequate data protection standards without appropriate contractual or technical safeguards. Players may request information about the specific safeguards applicable to any cross-border transfer of their personal data by contacting the cczzz Data Protection Officer.

cczzz may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory guidance from the National Privacy Commission. The "Last Updated" date at the top of this document will be revised whenever material changes are made.

Material changes to this Policy — such as new categories of data collection, new sharing arrangements, or changes to your rights — will be communicated to registered Players via on-site notification prior to the changes taking effect, allowing you a reasonable period to review the updated Policy. Non-material changes, such as clarifications or typographical corrections, may be made without prior notice.

Your continued use of the Platform following notification of material changes constitutes your acceptance of the revised Policy. If you do not accept the changes, you may request account closure as described in the cczzz Terms & Conditions.

cczzz has designated a Data Protection Officer (DPO) as required under Republic Act No. 10173 and its Implementing Rules. The DPO is responsible for overseeing cczzz's compliance with the DPA and for handling data rights requests from Players.

To contact the cczzz Data Protection Officer or to exercise any of your data rights under RA 10173, you may reach us through the following channels:

• Live Chat: Available 24/7 on the Platform at cczzz.one — identify your inquiry as a "Data Privacy Request" for priority routing to the DPO.
• Email: [email protected] (plain text — not a clickable link) — include "DATA PRIVACY" in the subject line.
• Service Area: Philippines — cczzz serves players nationwide, from Manila and Makati to Cebu, Davao, and beyond.

For complaints that cannot be resolved directly with cczzz, you may file a complaint with the National Privacy Commission of the Philippines through the NPC's official channels.