ezeph Privacy
Policy

This Privacy Policy ("Policy") applies to the online gaming platform operated by ezeph ("ezeph," "we," "us," or "our") at ezeph.org and all associated pages, features, mobile-optimised interfaces, and services (collectively the "Platform"). This Policy governs the collection, processing, storage, and disclosure of personal data relating to players and visitors ("you" or "your") who access or use the Platform.

ezeph is committed to processing personal data responsibly, transparently, and in full compliance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission ("NPC").

By registering an account, accessing the Platform, or submitting personal information to ezeph in any form, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not create an account or use the Platform.

For the purposes of the Philippines Data Privacy Act of 2012 and its Implementing Rules and Regulations, ezeph acts as the personal information controller with respect to all personal data processed in connection with the operation of the Platform and the provision of online gaming services to players.

ezeph has designated a Data Protection Officer ("DPO") who is responsible for overseeing the organisation's data protection compliance programme, responding to data subject requests, and liaising with the National Privacy Commission. The DPO may be contacted through the support channels listed in Section 14 of this Policy.

ezeph collects personal data from you in the following categories, depending on how you interact with the Platform:

3.1 Registration and Identity Data

Data collected when you create an ezeph account or complete identity verification:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (for mandatory 21+ age verification)
• Residential address (current Philippine address)
• Email address
• Philippine mobile telephone number
• Username and encrypted password
• Copies of government-issued identification documents (for KYC purposes)
• Selfie or biometric verification image (where required for enhanced verification)

3.2 Financial and Transaction Data

Data generated in connection with deposits, withdrawals, and gameplay transactions:

• GCash account reference (not the GCash PIN or password)
• Maya account reference
• Bank account name and account number for BPI, BDO, Metrobank, or UnionBank transactions
• Transaction amounts, timestamps, and reference numbers
• Deposit and withdrawal history
• Account balance and transaction ledger

3.3 Gameplay and Activity Data

• Game session records including wager amounts, outcomes, and session duration
• Game category preferences and play history
• Bonus activation and wagering records
• Responsible gaming tool settings and usage

3.4 Technical and Device Data

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser type and version
• Session timestamps and login activity logs
• Cookies and similar tracking technologies (see Section 7)

3.5 Communications Data

• Live chat and support ticket correspondence
• Email inquiry content and response records
• Survey responses and feedback submissions

ezeph uses the personal data described in Section 3 for the following specific purposes. We process personal data only where a lawful basis exists for such processing, as described in Section 5.

1. Account creation and management: To register your ezeph account, verify your identity, manage your profile, and provide access to the Platform's features and game library.
2. Age verification: To confirm that you meet the mandatory 21-year minimum age requirement in compliance with applicable Philippine gaming regulations and ezeph's responsible gaming obligations.
3. Payment processing: To facilitate deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment channels, and to maintain accurate transaction records.
4. Identity verification (KYC): To verify your identity in accordance with anti-money laundering (AML) obligations and to prevent fraud, multiple account abuse, and financial crime on the Platform.
5. Game and service delivery: To operate, maintain, and improve the gaming products and platform features available at ezeph.
6. Responsible gaming: To monitor gameplay patterns for indicators of problem gambling behaviour and to administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.
7. Customer support: To respond to your support inquiries, resolve disputes, and investigate complaints submitted through ezeph's support channels.
8. Fraud and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, and other security threats to the Platform.
9. Legal and regulatory compliance: To comply with obligations under the DPA, AML regulations, tax reporting requirements, and any applicable gaming regulatory framework.
10. Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and Platform updates where you have provided explicit consent for such communications.
11. Platform analytics and improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and the overall player experience.

Under the Philippines Data Privacy Act of 2012, ezeph processes your personal data based on the following lawful grounds:

• Contractual necessity: Processing required to register your account, process payments, deliver gaming services, and fulfil ezeph's obligations under the Terms and Conditions you accepted upon registration.
• Legal obligation: Processing required to comply with applicable law, including KYC and anti-money laundering obligations, age verification requirements, and reporting obligations to relevant Philippine regulatory authorities.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud and financial crime, and conduct analytics to improve our services, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent – primarily in connection with optional marketing communications. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ezeph does not sell, rent, or otherwise trade your personal data to third-party marketers, data brokers, or advertising networks. Personal data is shared with third parties only in the following limited and controlled circumstances:

6.1 Operational Service Providers

ezeph engages verified third-party service providers who process personal data on our behalf as personal information processors under data processing agreements that impose obligations consistent with the DPA. These include:

• Payment processors: GCash (GXI), Maya (Voyager Innovations), BPI, BDO, Metrobank – for deposit and withdrawal processing
• Identity verification providers: For KYC document verification and biometric identity checks
• Game software providers: Licensed third-party game studios and aggregators who supply games to the ezeph Platform
• Cloud infrastructure providers: For secure data storage and Platform hosting
• Customer support platforms: Live chat and ticketing system providers
• Fraud detection services: Risk and compliance technology providers

6.2 Regulatory and Legal Disclosure

ezeph may disclose personal data to Philippine government agencies, law enforcement authorities, or the National Privacy Commission where required to do so by law, court order, regulatory directive, or where disclosure is necessary to protect the legal rights of ezeph or other parties.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or other corporate restructuring transaction involving ezeph, personal data may be transferred to the acquiring or successor entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any material changes to data processing practices that may result.

ezeph uses cookies and similar tracking technologies to operate the Platform, recognise returning players, maintain session security, and analyse Platform usage patterns. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These cookies enable session management, login authentication, and security features. They cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your account preferences, language settings, and responsible gaming tool configurations across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the Platform, which game categories are accessed most frequently, and where technical issues are encountered. This data is used to improve the Platform.
• Marketing cookies: Used only with your consent to track promotion effectiveness. You can control marketing cookie preferences from your account settings.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or marketing cookies does not affect core Platform functionality.

ezeph retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce agreements.

Upon expiry of the applicable retention period, personal data is securely destroyed or anonymised in accordance with ezeph's data disposal procedures. Self-exclusion records are retained permanently to prevent excluded individuals from re-registering on the Platform.

ezeph implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and ezeph servers is encrypted using Transport Layer Security (TLS) with 256-bit SSL certificates.
• Encryption at rest: Sensitive personal data, including identity documents and financial references, is encrypted in storage using industry-standard algorithms.
• Access controls: Access to personal data by ezeph staff is restricted on a strict need-to-know basis. All access events are logged and subject to regular audit.
• Two-factor authentication: Player accounts are protected by optional two-factor authentication via Philippine mobile number SMS codes.
• Session management: Automated session expiry and anomalous login detection reduce the risk of unauthorised account access.
• Password hashing: Account passwords are stored in hashed format only. ezeph employees cannot retrieve your plaintext password.
• Penetration testing: The Platform is subject to regular security assessments and penetration testing by qualified third-party security professionals.

In the event of a personal data breach that poses a risk to your rights and freedoms, ezeph will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected data subjects without undue delay, in accordance with NPC Circular No. 16-03 and applicable DPA obligations.

Under the Philippines Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ezeph. To exercise any of these rights, please contact the ezeph Data Protection Officer using the channels described in Section 14.

ezeph will respond to verified data rights requests within fifteen (15) calendar days of receipt. Where a request is complex or ezeph receives a large volume of requests simultaneously, this period may be extended by a further thirty (30) days, of which you will be informed. Requests must be submitted with sufficient information to verify your identity before processing can commence.

If you are not satisfied with ezeph's response to a data rights request, or if you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) at privacy.gov.ph.

ezeph enforces age verification as a mandatory step during account registration. Accounts for which age verification cannot be satisfactorily completed will not be granted access to real-money gaming features. If ezeph becomes aware that personal data has been collected from an individual under 21, that data will be deleted promptly, the associated account will be closed, and any funds deposited will be returned to the originating payment method.

If you are a parent or guardian and believe that a minor in your care has provided personal data to ezeph or accessed the Platform, please contact the ezeph support team immediately via live chat.

The ezeph Platform is operated primarily in and for the Philippine market. Some of the third-party service providers that ezeph engages – including game software providers and cloud infrastructure providers – may be located outside of the Philippines and may process your personal data in their home jurisdictions.

Where personal data is transferred to a recipient outside the Philippines, ezeph takes appropriate safeguards to ensure that such data is afforded a level of protection consistent with the Philippines Data Privacy Act. These safeguards include:

• Entering into data transfer agreements that incorporate the standard contractual clauses recognised by the NPC;
• Transferring data only to jurisdictions or organisations that the NPC has determined to provide adequate protection for personal data;
• Applying technical and contractual measures to restrict what data is shared, for what purpose, and for how long.

ezeph may update or revise this Privacy Policy from time to time to reflect changes in applicable law, Platform features, data processing practices, or organisational structure. When material changes are made, ezeph will:

• Update the "Last Updated" date at the top of this page;
• Display a notice on the Platform advising players of the update;
• Where changes are significant, send a notification to your registered email address before the revised Policy takes effect.

Continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We recommend reviewing this page periodically. Previous versions of this Policy are available on request from the ezeph DPO.

For all privacy-related inquiries, data rights requests, DPO correspondence, or to report a privacy concern, please use the following ezeph contact channels:

• Live Chat: Available 24 hours a day, 7 days a week, accessible directly from the Platform. For DPO matters, please indicate "Data Privacy Inquiry" at the start of the conversation.
• Email: [email protected] — please include "Privacy Policy" or "DPO Request" in the subject line. Average response time: under 4 hours for support; within 5 business days for formal DPO requests.
• Account Settings: Marketing preferences, cookie preferences, and data download requests can be managed directly in your account dashboard.

If you believe your data protection rights have been violated and you are not satisfied with ezeph's response, you may lodge a formal complaint with the Philippine National Privacy Commission. Information on the complaint process is available on the NPC's official website.