Your Privacy Matters: This Privacy Policy describes how zk666 ("we," "us," "our") collects, uses, stores, and protects the personal information of players who register and use the zk666 platform at zk666.bio. It has been prepared in accordance with Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations, and applicable PAGCOR data governance requirements. Please read this policy carefully. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
Section 1
Introduction
zk666 is a PAGCOR-licensed online casino and sports betting platform serving Filipino players 21 years of age and above. As part of operating this platform, we necessarily collect and process certain personal information about our players — information you provide directly when registering, information generated through your use of the platform, and technical information collected automatically by our systems.
This Privacy Policy is a transparent account of all data processing activities carried out by zk666. We believe Filipino players have the right to know exactly what happens to their personal information. There are no hidden data practices at zk666 — everything we do with your data is described in this document.
This policy applies to all players accessing zk666 through any device or browser. It does not apply to third-party game providers or payment processors, each of whom maintain their own privacy policies governing their own data processing activities. We encourage you to review those policies where relevant.
Section 2
Data Controller
For the purposes of the Data Privacy Act of 2012 and PAGCOR regulations, zk666 is the personal information controller responsible for the personal data described in this policy.
Platform Name: zk666
Website: zk666.bio
Regulatory Authority: Philippine Amusement and Gaming Corporation (PAGCOR)
All data subject requests and privacy-related enquiries should be directed to our Data Protection Officer (DPO) at the email address above. We aim to acknowledge all data requests within five (5) business days and to resolve them within thirty (30) calendar days.
Section 3
Personal Data We Collect
The categories of personal data collected by zk666 are set out below. We collect data only where there is a legitimate purpose and a legal basis for doing so.
| Category |
Specific Data Points |
Mandatory? |
| Identity Data |
Full legal name, date of birth, gender, government ID type and number, nationality |
Yes |
| Contact Data |
Philippine mobile number, email address, residential address |
Yes |
| Financial Data |
GCash number, Maya account, bank account details (BPI, BDO, UnionBank), USDT wallet address, transaction history |
Yes |
| KYC Documents |
Copies of government-issued ID, proof of address, selfie with ID |
Withdrawal |
| Gaming Data |
Game sessions, stakes, outcomes, bonus activity, bet history, session durations |
Auto |
| Technical Data |
IP address, device type, browser, operating system, screen resolution, session tokens |
Auto |
| Communications Data |
Live chat transcripts, support ticket content, email correspondence |
If used |
| Preference Data |
Communication preferences, responsible gaming settings, favourite games list |
Optional |
Sensitive Personal Information: Government ID numbers and biometric data (selfie photographs submitted for KYC) are classified as sensitive personal information under RA 10173. zk666 processes this category of data solely for KYC compliance purposes and applies additional security controls to its storage and access.
Section 4
How We Collect Your Data
zk666 collects your personal data through the following means:
- Direct provision: Information you submit during account registration, identity verification (KYC), payment setup, contact form submissions, or live chat conversations.
- Automated collection: Technical data and gaming data collected automatically when you access and use the Platform, including through cookies, session logs, and platform analytics systems.
- Third-party sources: Data received from payment processors (GCash, Maya, BPI, BDO) to confirm deposit and withdrawal transactions; data received from identity verification service providers used to validate KYC documents; and fraud screening data from licensed third-party risk management providers.
- Regulatory sources: Data received from PAGCOR or law enforcement agencies in connection with regulatory enquiries, where zk666 is lawfully required to receive and process such data.
Section 5
Legal Basis for Processing
zk666 processes your personal data on the following legal bases as recognised by RA 10173 and its Implementing Rules:
- Contractual necessity: Processing required to open and maintain your Account, process deposits and withdrawals, and deliver gaming services in accordance with our Terms and Conditions.
- Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act, and other applicable Philippine law.
- Legitimate interest: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, and internal analytics — where our legitimate interest is not overridden by your rights.
- Consent: Processing for marketing communications, where you have given specific, informed, and freely given consent. You may withdraw marketing consent at any time without affecting other processing.
Section 6
How We Use Your Personal Data
zk666 uses your personal data for the following purposes, each tied to a legal basis described in Section 5:
- Opening, verifying, and maintaining your zk666 Account
- Processing deposits via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, Coins.ph, and USDT
- Processing withdrawal requests to your nominated payment method
- Verifying your identity and age (21+) as required by PAGCOR
- Detecting and preventing fraud, money laundering, and account abuse
- Providing customer support via live chat and email
- Monitoring gameplay to identify problem gambling patterns and enforce responsible gaming tools
- Delivering bonuses, free spins, and promotional credits to eligible accounts
- Sending transactional communications (deposit confirmations, withdrawal status, security alerts)
- Sending marketing communications to players who have opted in
- Improving platform performance, game recommendations, and user experience
- Complying with reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC)
Marketing opt-out: If you have previously opted in to marketing communications and no longer wish to receive them, you may unsubscribe at any time via the link in any marketing email or by contacting
[email protected]. Opting out of marketing does not affect transactional or security communications, which are sent regardless of marketing preference.
Section 7
Sharing Your Personal Data
zk666 does not sell your personal data. We share your data only with the categories of recipient listed below, and only to the extent necessary for the purpose stated:
- Payment processors: GCash (Globe Fintech Innovations), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other payment service providers — solely to process deposit and withdrawal transactions.
- Identity verification providers: Licensed KYC and AML screening service providers used to verify government-issued IDs and screen for sanctions list matches as required by PAGCOR and RA 9160.
- Game providers: Third-party game studios and live dealer operators who supply games on the Platform receive the minimum user session data required to deliver gameplay. They do not receive your full identity or financial data.
- Regulatory authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and Philippine law enforcement agencies — where zk666 is legally required or authorised to disclose data.
- Technology infrastructure providers: Cloud hosting, cybersecurity, and platform monitoring providers operating under strict data processing agreements with zk666, bound by confidentiality and security obligations equivalent to or exceeding those required by RA 10173.
- Professional advisers: Legal counsel, auditors, and compliance consultants where strictly necessary and subject to professional confidentiality obligations.
Data Processing Agreements: All third-party service providers who process personal data on behalf of zk666 are required to enter into Data Processing Agreements (DPAs) that impose security, confidentiality, and data handling obligations consistent with RA 10173. zk666 maintains a register of all such agreements.
Section 8
Cookies & Tracking Technologies
zk666 uses cookies and similar tracking technologies to operate the Platform securely and to understand how players use it. A cookie is a small data file stored on your browser or device when you visit a website.
We use the following categories of cookies:
Strictly Necessary
Session & Authentication Cookies
These cookies are essential for the Platform to function. They maintain your login session, prevent cross-site request forgery attacks, and remember your responsible gaming settings. They cannot be disabled without breaking the Platform.
Analytics
Performance & Analytics Cookies
These cookies help us understand which pages are visited most often, how players navigate the lobby, and where technical errors occur. Data collected is aggregated and anonymised. These cookies are set only with your consent.
Functional
Preference & Localisation Cookies
These cookies remember your display preferences, preferred language, and game filter settings so the Platform adapts to your experience on return visits. They are set with your consent and can be cleared via browser settings.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality, including login. For guidance on managing cookies in Chrome, Safari, or Firefox on Android or iOS, please contact our support team.
Section 9
Data Retention
zk666 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to minimum retention periods prescribed by Philippine law:
- Active account data: Retained for the duration of the account relationship and updated continuously as you use the Platform.
- Closed account data and transaction records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and Republic Act No. 9160 (Anti-Money Laundering Act).
- KYC and identity documents: Retained for five (5) years following account closure, or longer if required by an active regulatory enquiry or legal hold.
- Customer support communications: Retained for two (2) years following resolution of the relevant enquiry.
- Marketing consent records: Retained for the duration of the consent period plus three (3) years to evidence lawful processing.
- Technical and log data: Retained for twelve (12) months from collection for security monitoring purposes, then deleted or anonymised.
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual identities.
Section 10
Data Security
zk666 implements technical and organisational security measures appropriate to the nature and sensitivity of personal data processed. These measures include but are not limited to:
- TLS 1.3 / 256-bit SSL encryption for all data in transit between player devices and zk666 servers
- AES-256 encryption for sensitive personal data and financial records stored at rest
- Multi-factor authentication required for all zk666 staff accessing systems containing player data
- Role-based access controls limiting staff access to personal data strictly to job-function requirements
- Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure
- 24/7 security monitoring and automated threat detection systems
- Segregation of player funds in accounts separate from zk666 operational funds
- Regular staff training on data protection obligations and information security practices
Your Responsibility: While zk666 implements robust security measures, the security of your Account also depends on you. You are responsible for keeping your login credentials confidential. zk666 will never ask for your password in an email, chat message, or phone call. If you receive any such request, do not respond and report it to
[email protected] immediately.
Section 11
Your Data Rights
Under the Data Privacy Act of 2012 (RA 10173) and PAGCOR regulations, Filipino players on the zk666 platform have the following rights with respect to their personal data:
1
Right to be Informed
You have the right to be informed about the collection and processing of your personal data — including the purpose, legal basis, and scope of processing. This Privacy Policy fulfils that obligation. If anything is unclear, contact our DPO.
2
Right of Access
You may request a copy of all personal data we hold about you. We will provide this in a structured, readable format within thirty (30) calendar days of a verified request. Your Account dashboard provides immediate self-service access to basic account and transaction data.
3
Right to Rectification
If any personal data we hold is inaccurate, incomplete, or outdated, you have the right to request correction. Update basic details directly in your Account settings. For changes to identity data, contact support with supporting documentation.
4
Right to Erasure
You may request deletion of your personal data. This right applies where the data is no longer necessary for its original purpose, where consent has been withdrawn, or where processing is unlawful. This right is subject to legal retention obligations under PAGCOR and AML regulations which may prevent immediate deletion.
5
Right to Object
You may object to processing carried out on the basis of legitimate interest. You may also object to direct marketing processing at any time, in which case we will immediately cease marketing communications. Objecting to legitimate-interest processing requires a balancing assessment by our DPO.
6
Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
7
Right to Lodge a Complaint
If you believe zk666 has not processed your data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). We encourage you to contact our DPO first — most concerns can be resolved directly and more quickly through that channel.
To exercise any of the rights above, submit a written request to [email protected]. Include your full name, registered email address, and a clear description of the right you wish to exercise. We may request additional identity verification before processing the request.
Section 12
International Data Transfers
zk666 primarily stores and processes player data within data centre infrastructure located in Southeast Asia. However, certain third-party service providers (particularly game studios and cloud infrastructure providers) may process data in other jurisdictions.
Where personal data is transferred outside the Philippines, zk666 ensures that such transfers are made only to countries with adequate data protection frameworks, or that appropriate safeguards are in place — such as contractual clauses approved by the National Privacy Commission or equivalent data processing agreements that impose obligations meeting the standard required by RA 10173.
zk666 does not transfer personal data to jurisdictions listed on PAGCOR's or the AMLC's watch lists, nor to jurisdictions subject to international sanctions applicable in the Philippines.
Section 13
Children's Privacy and the 21+ Requirement
The zk666 Platform is strictly for persons who are at least 21 years of age. This is not merely a contractual restriction — it is a legal requirement mandated by PAGCOR for all online gambling services operating in the Philippines. zk666 does not knowingly collect personal data from any person under 21 years of age.
Age verification is a mandatory component of the KYC process. Any Account identified as belonging to a player under 21 will be immediately closed and the matter referred to PAGCOR in accordance with regulatory reporting obligations.
If you are a parent or guardian and believe a person under 21 in your household has registered an account with zk666, please contact [email protected] immediately with details. We will investigate and act promptly.
Section 14
Changes to This Privacy Policy
zk666 may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, our data processing practices, or the services we offer. When we make material changes to this policy, we will:
- Update the "Effective Date" at the top of this page and increment the version number
- Send an email notification to all registered players at their registered email address, providing a summary of significant changes and a link to the updated policy
- Display a prominent notice on the Platform for a period of not less than fourteen (14) calendar days prior to the effective date of material changes
Your continued use of the Platform after the effective date of any updated policy constitutes your acknowledgement and acceptance of the changes. If you do not agree with the updated policy, you may close your Account by contacting support prior to the effective date.
Section 15
Contact & Data Protection Officer
For all privacy-related matters — including data subject requests, questions about this policy, concerns about data processing, or to report a potential data breach — please contact zk666's Data Protection Officer:
Response Time: Acknowledgement within 5 business days; resolution within 30 calendar days
Support Hours: 24 hours a day, 7 days a week
Supervisory Authority: National Privacy Commission, Philippines (privacy.gov.ph)
This Privacy Policy was last reviewed and updated on January 1, 2026. Version 2.4.