Summary: 16zk ("we," "us," "our") takes your privacy seriously. This Privacy Policy explains what personal data we collect when you use the 16zk platform at 16zk.cam, why we collect it, how we use it, who we may share it with, and what rights you have under the Republic Act No. 10173 (Philippine Data Privacy Act of 2012) and its Implementing Rules and Regulations. By registering and using the 16zk platform, you acknowledge that you have read and understood this Privacy Policy.
01 Overview & Scope
This Privacy Policy applies to all personal data collected by 16zk in connection with the operation of the 16zk online gaming platform, accessible at 16zk.cam, including all games, services, promotions, customer support interactions, and payment processing activities offered through the platform.
This Policy applies to all registered users, prospective users, and visitors to the 16zk platform regardless of the device used to access the platform (desktop, mobile browser, or mobile application). It applies to personal data processed in the Philippines and, where applicable, personal data of Philippine residents processed by our service providers.
This Policy should be read together with the Terms & Conditions and the Responsible Gaming Policy, all of which form part of the complete agreement governing your use of 16zk. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions on data privacy matters, this Privacy Policy shall prevail.
02 Data Controller Identity
For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, the data controller responsible for your personal information is 16zk, the operator of the online gaming platform at 16zk.cam.
16zk has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. You may contact the DPO directly for any data privacy concerns, requests to exercise your data subject rights, or to report a suspected data breach. Contact details are provided in Section 14 of this Policy.
16zk is registered with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act of 2012. All personal data processing activities described in this Policy are conducted in accordance with NPC-registered purposes and are consistent with the principles of transparency, legitimate purpose, and proportionality established by the Act.
03 Personal Data We Collect
16zk collects personal data that is necessary for the legitimate operation of a regulated online gaming platform. We collect only what is required — we do not collect data beyond what is proportionate to the purposes described in this Policy. The categories of personal data we collect are as follows:
| Data Category | Specific Data Points | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number (e.g., PhilSys, UMID, passport, driver's license) | Mandatory (KYC) |
| Contact Data | Philippine mobile number, email address, and optionally a residential address in the Philippines | Mandatory |
| Account Data | Username, hashed password, account creation date, account status, login history, and session timestamps | Mandatory |
| Financial Data | Deposit and withdrawal amounts, payment method type (GCash, Maya, BPI, BDO, etc.), transaction reference numbers. We do not store full GCash or bank account numbers — only masked references. | Mandatory |
| Gaming Activity Data | Game history, bets placed, wins and losses, bonuses claimed and redeemed, wagering records, session durations | Mandatory |
| Technical Data | IP address, device type, operating system, browser type and version, mobile carrier, and platform access logs | Automatic |
| Communications Data | Customer support chat transcripts, support ticket contents, email correspondence with 16zk | Contextual |
| Responsible Gaming Data | Self-exclusion elections, deposit and loss limit settings, responsible gaming tool usage history | Contextual |
16zk does not collect sensitive personal information — as defined under Section 3(l) of the Data Privacy Act — unless it is strictly necessary for regulatory compliance (for example, verifying age for PAGCOR-mandated 21+ eligibility requirements) and you have been clearly informed of such collection.
04 How We Collect Your Data
16zk collects your personal data through the following means:
4.1 Directly From You
The majority of personal data we hold is provided directly by you during account registration, KYC verification, payment transactions, customer support interactions, and voluntary participation in surveys or promotions.
4.2 Automated Collection
When you use the 16zk platform, certain technical data is collected automatically via server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, and browsing behavior within the platform. See Section 10 for details on cookies and how to manage them.
4.3 Third-Party Sources
In limited circumstances — specifically during KYC verification and fraud screening — 16zk may receive data about you from Philippine government identity verification services or third-party anti-fraud and anti-money-laundering (AML) screening providers. Any such data is handled with the same level of protection as data collected directly from you.
4.4 Payment Processors
When you make a deposit or withdrawal via GCash, Maya, BPI, BDO, or other integrated Philippine payment channels, we receive transaction confirmation data (reference number, amount, masked account identifier) from the relevant payment processor. We do not receive or store full payment account credentials.
05 Purposes of Processing
16zk processes your personal data only for the specific, legitimate purposes declared to the National Privacy Commission. These purposes are:
- Account Registration & Management: Creating, maintaining, and securing your 16zk account, including authentication and password management;
- KYC & Age Verification: Verifying that you are 21 years of age or older in compliance with PAGCOR regulations, and confirming your identity as required by Anti-Money Laundering Act (AMLA) obligations;
- Payment Processing: Processing deposits, withdrawals, and refunds through your chosen Philippine payment method;
- Service Delivery: Enabling access to all 16zk games, betting products, and platform features;
- Regulatory Compliance: Meeting reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other applicable Philippine regulatory bodies;
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized access, and other prohibited conduct;
- Responsible Gaming: Monitoring gaming activity for signs of problem gambling, enforcing self-exclusion elections, and applying deposit and loss limits set by you;
- Customer Support: Responding to your inquiries, complaints, and support requests;
- Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, user experience, and game offerings;
- Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time from within your account settings.
06 Legal Basis for Processing
Under the Data Privacy Act of 2012, 16zk processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to on registration — including operating your account, processing payments, and delivering gaming services;
- Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, NPC registration requirements, and other mandatory Philippine regulatory obligations;
- Legitimate Interests: Processing for fraud detection, platform security, and service improvement, where such interests are not overridden by your rights and freedoms as a data subject;
- Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
07 Data Sharing & Disclosure
16zk does not sell your personal data to third parties. We share your personal data only in the following circumstances, and only to the extent necessary for each specific purpose:
7.1 Regulatory Authorities
We are required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities upon lawful request or as part of our mandatory regulatory reporting obligations. This sharing is non-negotiable as a matter of Philippine law.
7.2 Payment Processors
We share necessary transaction data with GCash (G-Xchange, Inc.), Maya (Paymaya Philippines, Inc.), BPI, BDO, Metrobank, and other payment processors solely for the purpose of executing your deposit and withdrawal requests. These providers process your payment data under their own privacy policies and applicable Philippine financial regulations.
7.3 KYC & AML Service Providers
We use regulated third-party identity verification and AML screening services to verify your identity and screen transactions. These providers are contractually bound to process your data only for the specified verification purpose and in compliance with the Data Privacy Act.
7.4 Game Providers
Certain game providers (such as JILI and Pragmatic Play) receive a unique, anonymised player identifier and game session data necessary to operate the games you play. These providers do not receive your full name, contact details, or financial data.
Cross-border transfers: Where data is transferred to service providers located outside the Philippines, 16zk ensures that adequate data protection safeguards are in place, including appropriate contractual clauses consistent with NPC-approved transfer mechanisms. You will be informed of any such transfer at the time of collection where practicable.
08 Data Retention
16zk retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods mandated by Philippine law and regulation:
- Account and gaming records: Retained for a minimum of 5 years from the date of last account activity, as required by PAGCOR licensing conditions;
- Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in compliance with AMLA obligations;
- KYC documents: Retained for a minimum of 5 years from account closure in compliance with AMLA obligations;
- Customer support communications: Retained for 3 years from the date of the interaction;
- Marketing consent records: Retained for the duration of the consent and 3 years thereafter as evidence of consent;
- Self-exclusion records: Retained permanently to prevent re-registration during an active exclusion period, and for 5 years following expiry of the exclusion.
After applicable retention periods expire and there is no other legal basis for continued retention, your personal data will be securely deleted or irreversibly anonymised.
09 Data Security Measures
16zk implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:
- 256-bit SSL/TLS encryption on all data transmitted between your device and 16zk servers;
- AES-256 encryption for sensitive data fields stored in our databases, including government ID numbers and payment reference data;
- Bcrypt password hashing — your password is never stored in plain text;
- Two-factor authentication (2FA) available on all user accounts to protect against unauthorised login;
- Regular security vulnerability assessments and penetration testing by independent security professionals;
- Role-based access control ensuring that 16zk staff can only access data necessary for their specific job function;
- Incident response procedures designed to detect, contain, and report data breaches in accordance with NPC notification requirements under the Data Privacy Act.
While 16zk takes all reasonable precautions to protect your data, no online system is completely immune to security risks. You play an important role in keeping your account secure — please use a strong, unique password, enable 2FA, and never share your login credentials with anyone. 16zk staff will never ask for your password.
10 Cookies & Tracking Technologies
16zk uses cookies and similar tracking technologies on the platform to improve your experience, maintain your session, and — where you have consented — deliver personalised content. The types of cookies used are:
10.1 Strictly Necessary Cookies
These cookies are essential for the platform to function. They maintain your login session, remember your preferred language, and ensure platform security. These cookies cannot be disabled without affecting core platform functionality.
10.2 Performance & Analytics Cookies
These cookies collect anonymised information about how users interact with the platform — which pages are visited most frequently, where errors occur, and how users navigate between sections. This data helps us improve the platform experience for all Filipino users. We use aggregated, non-identifiable data only for this purpose.
10.3 Preference Cookies
These cookies remember your platform preferences such as your default game lobby view, notification settings, and deposit method choices, to make your return visits faster and more convenient.
10.4 Managing Cookies
You can manage non-essential cookie preferences through your browser settings. However, please note that disabling certain cookies may affect the functionality and user experience of the 16zk platform. Strictly necessary cookies cannot be disabled through browser settings without disrupting platform operation.
11 Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 16zk. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14:
Right to Access
Request a copy of the personal data 16zk holds about you, along with information about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you. Some corrections require supporting documentation.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations under AMLA and PAGCOR rules.
Right to Object
Object to processing of your personal data for marketing purposes. We will stop marketing communications immediately upon receipt of a valid objection.
Right to Block Processing
Request restriction of processing while a complaint or accuracy dispute is under review, where technically and legally feasible.
Right to Damages
Claim compensation for damages sustained as a result of inaccurate, incomplete, or false data, or unlawful use of your personal data by 16zk.
Right to Data Portability
Request your personal data in a structured, machine-readable format for transfer to another data controller, where technically feasible.
Right to Complain
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 16zk has violated your data privacy rights.
16zk will respond to all valid data subject requests within 15 business days of receipt. Complex requests may require up to 30 business days, in which case you will be informed of the extended timeline and the reason for it. There is no charge for exercising your rights under the Data Privacy Act, unless requests are manifestly unfounded or excessive.
12 Minors & Age-Restricted Platform
The 16zk platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. 16zk does not knowingly collect, process, or retain personal data from individuals under 21 years of age.
If 16zk discovers that personal data has been collected from a person under 21 years of age — whether through erroneous registration, falsified identity documents, or any other means — that data will be immediately deleted, the associated account will be permanently closed, and the matter may be referred to relevant Philippine authorities.
Parents and guardians who believe their child may have registered on the 16zk platform are urged to contact our Data Protection Officer immediately using the contact details in Section 14. We will investigate and take appropriate action within 24 hours of a verified report.
13 Updates to This Privacy Policy
16zk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidelines, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this document will be revised whenever material changes are made.
For material changes that significantly affect your rights or how we process your personal data, 16zk will notify you via the email address or mobile number registered to your account at least 14 days prior to the change taking effect, unless a shorter notice period is required by law.
Your continued use of the 16zk platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the platform and may request account closure by contacting our support team.
14 Contact & Data Protection Officer
For all data privacy inquiries, requests to exercise your data subject rights, or to report a suspected data breach or privacy concern, please contact the 16zk Data Protection Officer (DPO) through the following channels:
- Email: [email protected] — please include "Privacy / DPO Request" in the subject line
- Live Chat: Available from within your logged-in 16zk account, available during operational hours
- Support Tickets: Accessible 24/7 from the Help section of your account dashboard
Our DPO team aims to acknowledge all data privacy requests within 3 business days and to resolve them fully within 15 business days. For urgent matters involving potential data breaches or suspected identity compromise, please mark your message as urgent in the subject line — these are escalated for same-day response.
If you are not satisfied with 16zk's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.
How 16zk Protects Your Data
Our data security commitments in practice — what we do every day to keep your personal and financial information safe on the 16zk platform.
End-to-End Encryption
Every byte of data transmitted between your device and 16zk servers is encrypted with 256-bit SSL/TLS. Sensitive stored data — including ID references and payment data — uses AES-256 encryption at rest.
Strict KYC Verification
We verify every player's identity and age before allowing withdrawals. This protects the platform from fraud, money laundering, and underage access — keeping 16zk safe for all legitimate Filipino players.
We Don't Sell Your Data
16zk does not sell, rent, or trade your personal data to marketers or data brokers — ever. Data shared with third parties is limited to payment processors, regulated KYC providers, and PAGCOR-mandated reporting only.
NPC Registered & Compliant
16zk is registered with the National Privacy Commission of the Philippines and processes personal data in full compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules.
Dedicated Data Protection Officer
A designated DPO oversees all data privacy compliance at 16zk. You can contact our DPO directly to exercise your rights under the Data Privacy Act — no runaround, no delays beyond the statutory response windows.
Breach Notification Ready
In the unlikely event of a data breach, 16zk's incident response procedures ensure notification to affected users and the NPC within the timeframes required by the Data Privacy Act — no cover-ups, full transparency.
Play at 16zk — Your Data, Fully Protected
16zk is built on trust. Your personal data is protected by Philippine law, NPC registration, 256-bit encryption, and a dedicated data privacy team. Join over 500,000 Filipino players who game with confidence. 21+ only.
🔞 Must be 21 years of age or older. PAGCOR regulations apply. Visit our Responsible Gaming page for self-exclusion tools. Read our Terms & Conditions for the full platform agreement.