zk666 Privacy Policy

This Privacy Policy ("Policy") describes how zk666 ("we," "us," or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you" or "your") who access or use the zk666 online casino and sports betting platform at zk666.one ("Platform").

zk666 is committed to safeguarding the privacy and personal data of all Filipino players and users of the Platform. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA"), its Implementing Rules and Regulations, and applicable international best practices for data protection in the online gaming industry.

By accessing the Platform, creating a zk666 Account, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must immediately cease using the Platform.

For the purposes of the Philippine Data Privacy Act of 2012, zk666 acts as the Personal Information Controller in respect of the personal data collected from players and users of the Platform.

As the Personal Information Controller, zk666 determines the purposes for which and the means by which your personal data is processed. Where zk666 engages third-party service providers to assist with the delivery of Platform services — such as payment processors, game providers, and analytics platforms — those third parties process personal data as Personal Information Processors acting on zk666's documented instructions.

Our designated Data Privacy Officer can be contacted via the details set out in Section 15 of this Policy. Any request to exercise your data subject rights, or any data privacy inquiry, should be directed to our Data Privacy Officer.

zk666 collects personal data through a variety of means, including information you provide directly, information generated by your use of the Platform, and information received from third-party sources. The categories of personal data we collect include:

When you create a zk666 Account, we collect: your chosen username; your Philippine mobile number; your date of birth (to verify age eligibility); and your account password (stored in encrypted form using industry-standard hashing — never in plain text).

To comply with anti-money laundering (AML) obligations and to verify your eligibility to use the Platform, zk666 may request: copies of government-issued Philippine identification documents (e.g., PhilSys National ID, UMID, driver's licence, or passport); proof of address documentation; and documentation verifying ownership of your nominated payment methods.

We collect records of all financial transactions on your Account, including: deposit amounts, dates, and payment method references; withdrawal requests and amounts; game wagering history; bonus credits and debits; and Wallet balance records. Note: zk666 does not store full card numbers or full GCash/PayMaya account credentials — payment processing is handled by our licensed payment processors.

When you access the Platform, we automatically collect: your IP address and approximate geolocation; device type, operating system, and browser version; session start and end times; pages and game sections visited; game play events and outcomes; and error logs and diagnostic data.

When you contact our support team, we collect records of communications including live chat transcripts, support ticket content, and, where applicable, records of any complaints or dispute resolutions.

Where you use voluntary responsible gaming tools (deposit limits, session time limits, cool-off periods, or self-exclusion), we record your preferences and the dates on which such restrictions were applied or modified, as required for compliance with responsible gaming obligations.

zk666 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your zk666 Account, including processing login requests, updating account details, and managing Account security.
• Service Delivery: To provide access to the full range of Platform features, including casino games, sports betting, live dealer tables, bingo, and fishing games, and to ensure those services function correctly on your device.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet, Visa, and Mastercard, and to maintain accurate Wallet records.
• Identity Verification and KYC: To verify your identity, age (21+), and payment method ownership as required by applicable law and our own anti-fraud and AML policies.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized Account access, money laundering, and other forms of financial crime or platform abuse.
• Customer Support: To respond to your support enquiries, resolve disputes, and process complaints in a timely and effective manner.
• Legal and Regulatory Compliance: To comply with obligations under Philippine law, including the DPA, AML/CTF regulations, and PAGCOR guidelines, including record-keeping and regulatory reporting requirements.
• Responsible Gaming: To monitor gameplay patterns for responsible gaming purposes, to apply account restrictions where requested, and to implement mandatory safeguards for at-risk players.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance, features, and user experience of the zk666 Platform.
• Communications: To send you important account notifications, transaction confirmations, and, where you have consented, promotional communications about zk666 products and offers.

Under the Philippine Data Privacy Act of 2012, processing of personal data must be based on one or more lawful criteria. The legal bases on which zk666 relies for each category of processing are as follows:

• Contractual Necessity: Processing required to perform our obligations under the contract formed when you register a zk666 Account and accept our Terms & Conditions — including account management, game provision, and payment processing.
• Legal Obligation: Processing necessary to comply with applicable Philippine law, including AML/CTF regulations, tax obligations, and PAGCOR regulatory requirements — such as KYC verification, transaction records, and regulatory reporting.
• Legitimate Interests: Processing in pursuit of zk666's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud detection, platform security, and service improvement analytics.
• Consent: Processing based on your specific, freely given, and informed consent — including the sending of optional promotional communications. You may withdraw consent for such processing at any time by contacting our support team.

zk666 does not sell your personal data. We share your personal data with third parties only in the circumstances described below, and only to the extent necessary for the specific purpose:

We share transaction data with licensed payment service providers including GCash, PayMaya, BPI, BDO, Metrobank, and card networks to facilitate deposits and withdrawals. These providers are contractually bound to process your data solely for payment processing purposes and in compliance with applicable data protection law.

Technical session data is shared with licensed game software providers (such as JILI, PG Soft, and CQ9) as necessary to deliver game content and verify game results. Game providers do not receive identifying personal data beyond what is technically required for game session management.

For KYC verification purposes, we may share your identity documents and personal details with regulated identity verification service providers who verify your data against authoritative Philippine identity records.

We may disclose your personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities where required by law, court order, or regulatory direction.

We may share technical identifiers (such as device fingerprints and IP addresses) with third-party fraud detection services to identify and prevent fraudulent activity on the Platform.

The zk666 Platform uses cookies and similar tracking technologies to deliver and improve our services. A cookie is a small text file placed on your device when you access a website. We use the following categories of cookies:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair the functionality of the Platform and may prevent you from accessing your Account. zk666 does not use third-party advertising cookies.

zk666 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• Transport Encryption: All data transmitted between your device and the zk666 Platform is encrypted using 256-bit SSL/TLS protocols. The padlock icon in your browser confirms that your connection is secure.
• Password Security: All account passwords are stored using bcrypt hashing — a one-way encryption algorithm. Passwords are never stored or transmitted in plain text. Even zk666's own staff cannot view your password.
• OTP Authentication: Login attempts from new devices trigger a one-time password (OTP) verification sent to your registered Philippine mobile number, providing an additional layer of account security.
• Access Controls: Access to personal data within zk666's internal systems is restricted on a strict need-to-know basis. All staff access is logged and audited. Privileged access requires multi-factor authentication.
• Infrastructure Security: zk666's servers are hosted in secure data centre facilities with physical access controls, redundant power supplies, and continuous security monitoring.
• Regular Security Assessments: zk666 conducts regular vulnerability assessments and security reviews to identify and remediate potential security gaps in our systems and processes.

While zk666 takes all reasonable steps to protect your personal data, no electronic transmission or storage system can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, zk666 will notify you and the National Privacy Commission (NPC) as required under the DPA.

zk666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following retention periods apply:

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised in accordance with zk666's data disposal procedures, unless a legal obligation requires continued retention.

zk666 primarily processes your personal data within the Philippines. However, in connection with the provision of Platform services, some personal data may be transferred to, or accessed by, systems or personnel located outside the Philippines — for example, in connection with certain game providers' technical infrastructure or cloud-hosted services.

Where personal data is transferred outside the Philippines, zk666 ensures that appropriate safeguards are in place in accordance with the Philippine DPA, including: contractual data processing agreements incorporating standard data protection clauses; transfers to countries or organisations recognised as providing an adequate level of data protection by the National Privacy Commission; and technical security controls that maintain the same standard of data protection regardless of where data is processed.

You may request information about the safeguards applicable to any specific international transfer of your personal data by contacting our Data Privacy Officer.

The zk666 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. zk666 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

Age verification is a required step in the zk666 Account registration process. Where we have reason to believe that personal data has been submitted by or on behalf of a person under the age of 21, we will immediately suspend the relevant Account pending verification, and if the individual is confirmed to be under 21, we will close the Account and delete all associated personal data.

Under the Philippine Data Privacy Act of 2012, Filipino players whose personal data is processed by zk666 have the following rights. You may exercise any of these rights by contacting our Data Privacy Officer using the contact details in Section 15.

zk666 will respond to all data subject rights requests within 30 days of receipt. We may ask you to verify your identity before processing your request to ensure that personal data is disclosed only to the correct individual. Some rights are subject to limitations under applicable law — for example, we may be required to retain certain data for regulatory compliance purposes even where a deletion request is made.

If you are dissatisfied with our response to a data rights request, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC).

In connection with our responsible gaming obligations, zk666 may process data that relates to your gambling behaviour, including: deposit patterns, wagering frequency and amounts, time spent on the Platform, use of responsible gaming tools, and any assessments made by our responsible gaming team.

This data is processed solely for the purpose of: fulfilling our obligations under PAGCOR responsible gaming standards; detecting and responding to indicators of at-risk or problem gambling behaviour; and enabling you to use the voluntary responsible gaming tools available in your Account.

Responsible gaming data is treated with the highest level of sensitivity and is accessible only to zk666 staff with specific responsibilities in this area. We retain responsible gaming records for the periods set out in Section 9 of this Policy, as required for compliance and player protection purposes.

For more information about the responsible gaming tools available at zk666, please visit our Responsible Gaming page. Membership requires players to be 21 years of age or above.

zk666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, or applicable legal requirements. When we make material changes, we will:

• Update the "Effective" date at the top of this page;
• Post the revised Policy on this page with a clear change notice;
• Where required by law or where changes materially affect your rights, notify you directly via your registered contact details prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how zk666 protects your personal data. Your continued use of the Platform following the posting of any changes constitutes your acknowledgement of the revised Policy. If you do not agree to any revised terms, you must cease using the Platform and may request Account closure as described in our Terms & Conditions.

For all matters relating to this Privacy Policy — including exercising your data subject rights, submitting a data privacy inquiry, or reporting a concern about our data processing practices — please contact the zk666 Data Privacy Officer using the details below.

When submitting a data privacy request, please include your registered zk666 username and a clear description of your request. We may ask you to provide proof of identity before processing your request. If you are unsatisfied with our response, you may submit a complaint to the Philippine National Privacy Commission at its published contact address.