I got the email too and am not signed up with their program. However I have some listings on the Lotza topsites, so I assumed they just got my email from that database, unless the two sites are not the same company. I don't care because that's just one of about 300 spams I get a day.
I highly doubt CCBill would sell their email database, but it would be simple for an employee working there (or at any place that collects email addresses) to do so. Who knows
