ezph Privacy Policy — How We Handle Your Personal Data

1. Overview & Scope

This Privacy Policy ("Policy") is issued by the operator of the ezph platform ("ezph," "we," "us," or "our") and applies to all personal data collected from individuals ("you," "the Player," or "User") who access, register for, or use the ezph online gaming platform at ezph.one and any associated services.

ezph is committed to protecting the privacy and personal data of every Filipino player on our platform. This Policy has been prepared in compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 of the Philippines and its Implementing Rules and Regulations, as well as applicable PAGCOR data handling requirements. Where you have provided personal data to ezph, we are responsible for it and bound by the obligations set out in this Policy.

By registering an account or using the ezph platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the ezph platform.

2. Data Controller

The data controller responsible for your personal information collected through the ezph platform is the registered operator of ezph.one, operating under the PAGCOR regulatory framework in the Republic of the Philippines.

For all data privacy matters, including the exercise of your data subject rights, you may contact our designated Data Protection Officer (DPO) at:

• Email: [email protected] (subject line: "Data Privacy Inquiry")
• Live Chat: Available 24/7 via your account dashboard after signing in at the ezph Login page.

3. Personal Data We Collect

ezph collects personal data through various means, including account registration, identity verification, payment processing, gameplay activity, and communications with our support team. The categories of personal data we collect include:

We do not collect sensitive personal data — such as racial or ethnic origin, religious beliefs, or political opinions — unless required by applicable law or PAGCOR compliance obligations. We do not collect payment card numbers; all payment data is processed by our certified third-party payment providers (GCash, Maya) and is not stored on ezph servers.

4. How We Use Your Personal Data

ezph uses the personal data collected for the following purposes:

• Account Management: To register, maintain, and administer your ezph account, including verifying your identity and age (21+) as required by PAGCOR;
• Service Delivery: To provide access to all games, payment services, bonuses, and support functions on the Platform;
• Payment Processing: To process deposits and withdrawals via GCash, Maya, and other approved payment methods, and to maintain financial records as required by Philippine law;
• Regulatory Compliance: To fulfil ezph's obligations under PAGCOR regulations, the Philippine Data Privacy Act, and anti-money laundering laws — including identity verification, suspicious transaction reporting, and audit trail maintenance;
• Fraud Prevention & Security: To detect and investigate suspected fraud, unauthorised account access, or other security incidents affecting the Platform or its players;
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming limits set by you or required by PAGCOR; to identify players who may be experiencing gambling-related harm;
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email;
• Platform Improvement: To analyse usage patterns (in aggregated, anonymised form) to improve the ezph Platform, game library, and user experience;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent and not opted out. You may unsubscribe at any time via your account notification settings.

ezph will not use your personal data for any purpose incompatible with the purposes listed above without first obtaining your consent or where required by applicable law.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ezph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to provide the ezph gaming services you have registered for;
• Legal Obligation: Processing required to comply with PAGCOR regulations, Philippine AML laws, tax obligations, and court orders;
• Legitimate Interests: Processing for fraud detection, platform security, and responsible gaming monitoring, where our legitimate interests do not override your fundamental rights;
• Consent: Processing for direct marketing communications, where you have given explicit and freely withdrawable consent.

6. Data Sharing & Disclosure

ezph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Providers: GCash, Maya, and other approved payment processors, for the purpose of processing your deposits and withdrawals. These providers are independently regulated and bound by their own privacy policies;
• Identity Verification Services: Third-party KYC and AML compliance providers used to verify your identity and age in accordance with PAGCOR requirements;
• Game Software Providers: Game studios whose software is integrated into the ezph platform may receive anonymised technical data necessary to operate and audit game functionality;
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC) of the Philippines, and other competent Philippine government authorities where disclosure is required by law or court order;
• IT & Hosting Providers: Cloud infrastructure and data hosting providers who process data strictly on ezph's instructions and under data processing agreements consistent with the Data Privacy Act;
• Professional Advisors: Legal, accounting, and compliance advisors bound by professional confidentiality obligations.

All third parties with whom ezph shares personal data are required to maintain appropriate technical and organisational security measures to protect that data.

7. Data Retention

ezph retains your personal data for as long as your account remains active and for such additional periods as required by applicable Philippine law and PAGCOR regulations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by AML and financial record-keeping laws;
• Transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Support and communication records are retained for three (3) years from the date of the last interaction;
• Marketing consent records are retained until you withdraw consent plus a standard audit period of two (2) years.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8. Data Security

ezph employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit TLS (Transport Layer Security) encryption for all data transmitted between your browser and the ezph platform;
• Encryption of sensitive data fields at rest in our databases;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all ezph administrative system access;
• Regular penetration testing and security audits by independent third parties;
• Automated monitoring for unusual account activity, triggering SMS alerts to affected Players.

In the event of a personal data breach that poses a risk to your rights and freedoms, ezph will notify the National Privacy Commission (NPC) and affected Players within the timeframes prescribed by the Philippine Data Privacy Act and its Implementing Rules.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ezph:

• Right to be Informed: The right to know what personal data ezph holds about you and how it is used — as provided in this Policy;
• Right of Access: The right to request a copy of the personal data ezph holds about you;
• Right to Rectification: The right to correct inaccurate or incomplete personal data — many fields are editable directly in your Account Settings;
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ezph's legal retention obligations;
• Right to Object: The right to object to certain types of processing, including direct marketing — you may opt out at any time via account notification settings;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and transmit it to another controller where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact the ezph Data Protection Officer via live chat or email at [email protected]. We will respond to all verified requests within thirty (30) days of receipt.

10. Cookies & Tracking Technologies

ezph uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings and "Remember Me" login status on personal devices;
• Analytics Cookies: Used in aggregated, anonymised form to understand how players use ezph — page visit frequency, session duration, and navigation paths. This data is never used to identify individual players.

You can control non-essential cookies through your browser settings. Note that disabling functional cookies may affect your experience on the Platform. ezph does not use advertising tracking cookies or share cookie data with third-party advertising networks.

11. Minors & Age Verification

The ezph platform is strictly for adults aged 21 years and above, as required by Philippine law and PAGCOR regulations governing online gaming. ezph does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as part of the registration process and again at the time of KYC completion before withdrawals above specified thresholds are processed. If ezph discovers that an account has been created by a person under the age of 21, the account will be immediately suspended, any deposits returned in accordance with PAGCOR rules, and all associated personal data deleted to the extent permitted by law.

If you are a parent or guardian and believe your minor child has registered on the ezph platform without your knowledge, please contact us immediately at [email protected].

12. Cross-Border Data Transfers

ezph primarily processes personal data within the Philippines. In certain cases — such as the use of international cloud hosting infrastructure or game software providers — personal data may be transferred to servers or processors located outside the Philippines.

Where such transfers occur, ezph ensures that adequate safeguards are in place consistent with the requirements of the Philippine Data Privacy Act, including contractual data processing agreements that impose obligations equivalent to those applicable in the Philippines. ezph will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate additional safeguards.

13. Changes to This Privacy Policy

ezph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or PAGCOR requirements. Material changes will be communicated to registered Players via the email address on file and/or via a prominent notice on the Platform at least fourteen (14) days before the changes take effect, where practicable.

The effective date of the current version is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the ezph platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact & Data Protection Officer

For any questions, requests, or concerns about this Privacy Policy or the handling of your personal data by ezph, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 inside your ezph account dashboard (sign in at the ezph Login page). This is the fastest channel for urgent privacy matters.
• Email: [email protected] — use the subject line "Data Privacy Request" and include your registered username and a clear description of your request.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Republic of the Philippines if you believe ezph has not handled your personal data in accordance with the Data Privacy Act of 2012.