ezph Privacy Policy

ezph ("we," "our," or "the Company") is the operator of the online gaming platform accessible at ezph.bio. We operate under a license issued by the Philippine Amusement and Gaming Corporation ("PAGCOR") and are bound by the regulatory requirements of that license in addition to applicable Philippine law, including the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").

This Privacy Policy ("Policy") describes how ezph collects, processes, stores, uses, shares, and protects the personal information of users ("you" or "the player") who access or use the ezph platform. It also describes the rights you hold over your personal data and how you can exercise those rights.

By registering an account on ezph or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy. If you do not agree with any provision of this Policy, you must not use the ezph platform.

ezph collects the following categories of personal data in connection with the operation of the platform and compliance with applicable regulations:

2.1 Registration & Identity Data. When you create an ezph account, we collect your full legal name, date of birth, nationality, email address, and Philippine mobile number. Age verification requires submission of a government-issued identification document such as a Philippine passport, UMID, SSS ID, driver's license, or PhilSys national ID.

2.2 KYC & Verification Data. To comply with PAGCOR licensing conditions and the Anti-Money Laundering Act ("AMLA"), ezph is required to perform Know Your Customer ("KYC") verification. This process may involve collecting copies of government-issued identification, proof of address (e.g., utility bill or bank statement issued in the Philippines within the past three months), and, in some cases, a selfie or video verification to confirm identity.

2.3 Financial & Transaction Data. We collect data related to deposits, withdrawals, and gaming transactions, including GCash account references, PayMaya wallet identifiers, bank account details (BPI, BDO, Metrobank), transaction amounts in Philippine Peso (PHP), timestamps, and payment reference numbers. This data is required for transaction processing, fraud prevention, and regulatory reporting.

2.4 Gaming Activity Data. We record your gaming activity on the ezph platform, including games played, wager amounts, game outcomes, session durations, and responsible gaming settings. This data is used for regulatory compliance, account management, dispute resolution, and improving the platform.

2.5 Technical & Device Data. We automatically collect technical information when you access the platform, including your IP address, browser type and version, device type and operating system, referring URL, and session activity logs. This data is used for security monitoring, fraud detection, and platform optimization.

2.6 Communications Data. If you contact ezph customer support, we retain records of those communications, including chat transcripts, email correspondence, and any information you provide during support interactions.

ezph uses the personal data it collects for the following purposes:

• Account creation and management: to register you as a player, verify your identity, manage your account settings, and communicate account-related information;
• Transaction processing: to process deposits, withdrawals, and gaming transactions via GCash, PayMaya, and bank transfer channels;
• Regulatory compliance: to fulfil our obligations under PAGCOR licensing conditions, AMLA, the DPA, and other applicable Philippine laws and regulations, including mandatory reporting requirements;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct;
• Responsible gaming: to administer deposit limits, session controls, self-exclusion requests, and other responsible gaming tools in accordance with PAGCOR's responsible gaming framework;
• Customer support: to respond to your inquiries, process complaints, and resolve disputes relating to your account or gaming activity;
• Platform improvement: to analyze usage patterns, optimize platform performance, and develop new features and services;
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates where you have provided consent or where a legitimate interest applies — you may opt out of marketing communications at any time.

Under the Philippine Data Privacy Act and its Implementing Rules, ezph processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between you and ezph, including account creation, transaction processing, and game provision;
• Legal obligation: processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, NPC requirements, and other applicable Philippine law;
• Legitimate interest: processing necessary for fraud prevention, platform security, and improving the gaming experience, where such interests are not overridden by your rights;
• Consent: processing for marketing communications and optional features where you have provided explicit consent, which you may withdraw at any time.

ezph does not sell your personal data to third parties. We share personal data only in the following circumstances:

5.1 Regulatory Authorities. ezph is required to disclose certain player information to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, and other Philippine government authorities upon lawful request or as required by our licensing conditions.

5.2 Payment Processors. To process your GCash, PayMaya, and bank transfer transactions, we share necessary transaction data with our licensed payment processing partners. These partners are bound by confidentiality agreements and applicable data protection regulations.

5.3 Game Providers. Game providers whose titles are offered on the ezph platform may receive anonymized or pseudonymized session data required for game operation, certification, and audit purposes. Full identity data is not shared with game providers.

5.4 Technology Service Providers. We engage trusted third-party vendors for cloud hosting, KYC verification, fraud detection, customer support software, and analytics. These vendors process data solely on our behalf under binding data processing agreements and are prohibited from using your data for their own purposes.

5.5 Legal Proceedings. We may disclose personal data where required by a court order, subpoena, or other lawful legal process, or where necessary to protect the rights, property, or safety of ezph, its players, or the public.

The ezph platform uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and support security operations. The following categories of cookies are used:

• Essential cookies: required for login session management, security token validation, and core platform functionality. These cannot be disabled without impairing basic platform operation;
• Functional cookies: used to remember your preferences, language settings, and responsible gaming configurations across sessions;
• Analytics cookies: used to collect aggregated, anonymized data about how players interact with the platform, enabling us to identify areas for improvement;
• Security cookies: used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core gaming functions of ezph, but may affect the personalization of your experience.

ezph retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account and identity data: retained for the duration of your account relationship and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations;
• Transaction and gaming records: retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA record-keeping obligations;
• KYC documents: retained for the duration of the account relationship plus five (5) years following closure;
• Customer support communications: retained for two (2) years from the date of the communication, unless related to an ongoing dispute or legal proceeding;
• Technical and device logs: retained for up to twelve (12) months for security and fraud prevention purposes.

After the applicable retention period has expired, personal data is securely deleted or anonymized in accordance with the DPA's requirements for data disposal.

ezph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ezph platform;
• Encryption of sensitive data at rest, including payment credentials and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing of the platform;
• Multi-factor authentication requirements for internal administrative access to player data systems;
• Incident response procedures designed to detect, contain, and report data breaches in accordance with NPC notification requirements.

While ezph takes data security seriously, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your ezph account has been compromised, contact customer support immediately.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ezph:

• Right to be informed: the right to be told how your personal data is collected and used, as described in this Policy;
• Right of access: the right to request a copy of the personal data ezph holds about you and information about how it is processed;
• Right to rectification: the right to request correction of inaccurate or incomplete personal data in your ezph account;
• Right to erasure: the right to request deletion of your personal data, subject to our legal retention obligations under AMLA and PAGCOR requirements;
• Right to data portability: the right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to object: the right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to damages: the right to claim compensation for damages sustained as a result of inaccurate, incomplete, or unauthorized use of your personal data.

To exercise any of these rights, contact the ezph Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will respond within fifteen (15) business days. For unresolved concerns, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

The ezph platform is strictly intended for individuals who are 21 years of age or older, as required by PAGCOR regulations. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has accessed the ezph platform or provided personal data to us, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete the relevant data and close the associated account.

Age verification is performed at the point of registration and may be re-verified at any subsequent stage of the account relationship. ezph takes its obligations with respect to protecting minors from accessing gambling services seriously, consistent with PAGCOR's requirements.

ezph's primary operations and data infrastructure are based in the Philippines. Where it is necessary to transfer personal data outside the Philippines — for example, to cloud service providers or technology partners operating in other jurisdictions — ezph ensures that such transfers are made in compliance with the DPA's requirements for cross-border data transfers, including ensuring that the recipient country or organization provides an adequate level of data protection or that appropriate contractual safeguards are in place.

We do not transfer your personal data to countries or entities that do not meet the applicable data protection standards required under Philippine law.

ezph may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, platform operations, or data processing practices. Material changes to this Policy will be communicated to registered players via email notification or a prominent notice on the platform prior to the changes taking effect.

The "Effective Date" displayed at the top of this page indicates when the current version of this Policy was last updated. We encourage you to review this Policy periodically. Continued use of the ezph platform following the effective date of any update constitutes your acknowledgment of the revised Policy.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how ezph handles your personal data, please contact our Data Protection Officer:

Responses to data subject rights requests are provided within fifteen (15) business days. For complaints that remain unresolved after our internal review, you may contact the National Privacy Commission of the Philippines.