zk666 Privacy Policy

This Privacy Policy applies to all personal information collected, processed, stored, or shared by zk666 in connection with your use of the Platform at zk666.co, including all games, account services, payment processing, customer support interactions, and marketing communications.

zk666 acts as the Personal Information Controller for the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines. zk666 operates under a licence issued by PAGCOR, and certain data processing obligations arise directly from PAGCOR's regulatory requirements, which take precedence to the extent they conflict with other provisions of this Policy.

The following table identifies each category of personal data collected by zk666, its source, and the context in which it is gathered:

zk666 does not collect sensitive personal information as defined under RA 10173 (such as racial origin, health data, or political affiliations) except where identity documents submitted for KYC incidentally contain such information, in which case only the minimum required fields are recorded and the source document is securely stored.

zk666 processes your personal data only where at least one of the following lawful bases under RA 10173 and PAGCOR's data governance framework applies:

zk666 uses your personal data for the following specific purposes, each tied to a lawful basis identified in Section 3:

• Account Management: Creating, maintaining, securing, and closing your Account; processing login authentication including SMS OTP delivery.
• Identity & Age Verification: Confirming that you meet the 21+ age requirement and verifying your identity for KYC purposes as required by PAGCOR.
• Payment Processing: Facilitating deposits via GCash, Maya, and Philippine bank transfers; processing withdrawal requests to your verified payment accounts.
• Game Provision: Delivering game content, recording game outcomes, calculating winnings, applying bonus credits, and resolving game disputes.
• Regulatory Compliance: Fulfilling PAGCOR reporting requirements, AML monitoring and suspicious transaction reporting to the AMLC, and tax authority disclosures where legally mandated.
• Fraud & Security: Detecting unauthorised access, identifying prohibited conduct, investigating bonus abuse, and protecting the Platform's integrity.
• Responsible Gaming: Monitoring for patterns associated with problem gambling; surfacing responsible gaming tools; enforcing self-exclusion and deposit limits you have set.
• Customer Support: Responding to queries, resolving complaints, and maintaining communication records for dispute resolution.
• Marketing (with consent): Sending promotional offers, bonus notifications, and game recommendations to Users who have opted in. You can withdraw this consent at any time via your Account settings or by contacting support.
• Analytics: Improving Platform performance, understanding aggregate usage patterns, and informing product development decisions.

zk666 does not sell, rent, or trade your personal information. Your data is shared only with the following categories of recipients and only to the extent strictly necessary:

• Payment Processors: GCash (GXI), Maya (Mynt), and Philippine banking partners receive only the transaction data required to process your specific deposit or withdrawal. zk666 does not store full bank account numbers.
• Game Providers: Third-party game studios receive an anonymised player session token for game operation. They do not receive your identity data, contact details, or financial information.
• Regulatory Authorities: PAGCOR, AMLC, and Philippine tax authorities receive data as required by law. These disclosures are non-negotiable legal obligations and are not governed by consent.
• Identity Verification Services: KYC verification is performed using an NPC-registered third-party processor. Identity documents are handled by that processor under a data processing agreement that enforces the same security standards as zk666's own systems.
• Cloud Infrastructure: Platform data is hosted on servers located in the Philippines or in jurisdictions that meet equivalent data protection standards. zk666's cloud infrastructure provider operates under a data processing agreement.
• Legal & Compliance Advisors: External legal counsel may access relevant Account data when required for dispute resolution or regulatory proceedings, subject to professional confidentiality obligations.

zk666 uses cookies and similar technologies to maintain your authenticated session, remember your preferences, and analyse aggregate Platform usage. The following cookie categories are in use:

zk666 does not deploy advertising or cross-site tracking cookies. No third-party advertising network has access to your browsing behaviour on the Platform.

zk666 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable Philippine law:

Data retained beyond the closure of your Account for regulatory compliance purposes is held in a restricted access environment and is not used for any commercial purpose.

zk666 implements technical and organisational security measures proportionate to the sensitivity of the data processed and the risks associated with an online gaming platform. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• AES-256 encryption for personal data stored at rest, including identity documents and financial records.
• Role-based access controls limiting employee access to personal data to those with a demonstrable operational need.
• Multi-factor authentication required for all administrative access to systems holding personal data.
• Regular penetration testing by an independent third-party security firm.
• Automated anomaly detection systems monitoring for unauthorised data access or exfiltration attempts.
• Annual data privacy training for all zk666 staff with access to personal data.
• A documented Personal Data Breach Response Plan meeting NPC notification requirements under RA 10173.

Under Republic Act 10173, you have the following rights with respect to your personal data held by zk666. All rights may be exercised by contacting the zk666 Data Protection Officer (see Section 13):

The zk666 Platform is not intended for, and does not knowingly collect personal data from, persons under the age of 21. The minimum age restriction for the Platform is 21 years, as mandated by PAGCOR for online gaming operators in the Philippines.

zk666 actively employs age verification controls at registration. Players are also encouraged to use operating system and browser parental controls to restrict access to gambling content on shared household devices.

Primary Platform data is hosted on servers located within the Philippines. Where any processing by a third-party service provider involves transfer of personal data outside Philippine territory (for example, international cloud services), zk666 ensures that such transfers are conducted only to jurisdictions or processors that provide an adequate level of data protection, assessed according to the following criteria:

• The receiving country has been assessed by the NPC as providing adequate data protection; or
• The transfer is governed by a data processing agreement incorporating standard contractual clauses approved by the NPC; or
• The receiving organisation maintains binding corporate rules or equivalent certification acceptable under RA 10173.

A list of jurisdictions and processors involved in cross-border transfers is available upon request from the Data Protection Officer.

zk666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material changes — those that significantly alter how your personal data is processed or that reduce your rights — will be communicated to registered Users via SMS to your registered Philippine mobile number not less than 14 days before taking effect.

Non-material updates (for example, clarifications, typographical corrections, or changes to contact information) take effect upon publication. The "Last Updated" date at the top of this Policy indicates when the current version was published.

Continued use of the Platform following the effective date of a material update constitutes your acknowledgement of the revised Policy. If you object to any material change, you may request Account closure before the change takes effect by contacting the support team.

zk666 has appointed a Data Protection Officer (DPO) as required under RA 10173. All data privacy requests, rights exercises, and privacy complaints should be directed to the DPO:

For complaints that cannot be resolved with the zk666 DPO, you may submit a formal complaint to the National Privacy Commission of the Philippines through their official channels.