Privacy Policy – ezeph

Who We Are

ezeph is the operator of the online casino and sports betting platform accessible at ezeph.net. ezeph is a PAGCOR-regulated gaming platform serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and throughout the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), ezeph acts as the Personal Information Controller in respect of personal data collected from users of the Platform. Our data protection contact is reachable at [email protected].

Personal Data We Collect

ezeph collects personal data in the following categories:

Identity Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (required to verify the 21+ age requirement for PAGCOR compliance);
• Government-issued identification document number (e.g., Philippine National ID, Passport, UMID, Driver's Licence);
• Photograph or selfie submitted for identity verification.

Contact Data

• Email address (used as primary account identifier and for service communications);
• Mobile phone number (used for two-factor authentication and account security);
• Residential address in the Philippines.

Financial Data

• GCash or Maya account number linked to your ezeph account;
• Bank account details for BPI, BDO, Metrobank, or other linked PH bank accounts;
• Transaction history including deposit amounts, withdrawal amounts, and timestamps.

Technical & Usage Data

• IP address and approximate geolocation at the time of login;
• Device type, operating system, and browser information;
• Session logs including login timestamps, pages visited, and games played;
• Cookies and similar tracking technologies as described in Section 6.

How ezeph Uses Your Personal Data

ezeph uses your personal data for the following purposes:

• Account registration and management — to create, maintain, and secure your ezeph account;
• Identity and age verification — to verify that you are at least 21 years of age as required by PAGCOR, and to confirm your identity for Know Your Customer (KYC) compliance;
• Payment processing — to process deposits via GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, and 7-Eleven CLiQQ, and to send withdrawals to your verified payment account;
• Anti-money laundering (AML) compliance — to monitor transactions in accordance with the Philippine Anti-Money Laundering Act and PAGCOR requirements;
• Responsible gaming — to administer deposit limits, loss limits, cool-off periods, and self-exclusion requests you have set on your account;
• Security and fraud prevention — to detect and prevent unauthorised access, bonus abuse, collusion, and other prohibited activities;
• Customer support — to respond to enquiries, complaints, and disputes submitted to the ezeph support team;
• Platform improvement — to analyse usage data in aggregate form to improve game performance, user interface, and service reliability;
• Legal and regulatory compliance — to respond to lawful requests from PAGCOR, Philippine courts, or other government authorities.

Legal Basis for Processing

Under the Data Privacy Act of 2012, ezeph processes your personal data on the following lawful bases:

• Contractual necessity — processing required to provide the gaming and payment services you have requested by registering an account;
• Legal obligation — processing required to comply with PAGCOR's licensing conditions, AML laws, KYC requirements, and other applicable Philippine regulations;
• Legitimate interests — processing for fraud detection, security monitoring, and aggregate platform analytics, where our interests do not override your fundamental rights;
• Consent — where we send you promotional communications, subject to your ability to withdraw consent at any time by contacting [email protected].

Sharing Your Personal Data

5.1  ezeph does not sell, rent, or trade your personal data to any third party for their own marketing purposes.

5.2  ezeph may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors — GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), and PH banks, to facilitate deposits and withdrawals;
• Identity verification providers — third-party KYC service providers used to verify identity documents in compliance with PAGCOR requirements;
• Game technology providers — game suppliers such as JILI, Pragmatic Play, and others, who may receive anonymised session data for game performance purposes;
• Regulatory authorities — PAGCOR and, where lawfully required, Philippine law enforcement agencies;
• Legal and professional advisers — lawyers, auditors, and compliance consultants bound by professional confidentiality obligations.

5.3  All third-party processors engaged by ezeph are required to process personal data only in accordance with ezeph's instructions and applicable Philippine data protection law.

Cookies & Tracking Technologies

6.1  ezeph uses the following categories of cookies on the Platform:

• Strictly necessary cookies — required for session management, login authentication, and basic security functions. These cannot be disabled without affecting your ability to use the Platform.
• Performance cookies — used to collect anonymised data on how users navigate the Platform, helping ezeph identify and fix performance issues. No personally identifying information is included.
• Functional cookies — used to remember your preferences such as language settings and display options.

6.2  ezeph does not use cookies for cross-site behavioural advertising or for building advertising profiles about you.

6.3  You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use the ezeph Platform.

Data Retention

7.1  ezeph retains personal data for as long as your account remains active and for a period thereafter as required by applicable law, including:

• Transaction and KYC records — minimum five (5) years following account closure, in accordance with PAGCOR licensing conditions and AML regulations;
• Support correspondence — three (3) years from the date of the interaction;
• Technical logs — twelve (12) months from collection, unless a specific incident requires extended retention;
• Self-exclusion records — retained indefinitely to prevent the opening of a new account by an excluded individual.

7.2  After applicable retention periods expire, ezeph will securely delete or irreversibly anonymise your personal data.

Data Security

8.1  ezeph implements technical and organisational security measures appropriate to the nature of the personal data processed, including:

• 256-bit SSL encryption for all data in transit;
• Encryption of sensitive data fields (payment details, government ID numbers) at rest;
• Access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of the Platform;
• Two-factor authentication options for user accounts to prevent unauthorised access.

8.2  In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ezeph will notify the National Privacy Commission (NPC) and, where required, affected users, in accordance with the Data Privacy Act of 2012 and NPC regulations.

Your Data Rights

9.1  Under the Data Privacy Act of 2012, as an ezeph user you have the following rights with respect to your personal data:

• Right to be informed — the right to know what personal data ezeph holds about you and how it is processed;
• Right of access — the right to request a copy of your personal data held by ezeph;
• Right to rectification — the right to have inaccurate or incomplete personal data corrected;
• Right to erasure — the right to request deletion of your personal data, subject to ezeph's legal and regulatory retention obligations;
• Right to data portability — the right to receive your personal data in a structured, commonly used format;
• Right to object — the right to object to processing of your personal data carried out on the basis of legitimate interests;
• Right to lodge a complaint — the right to file a complaint with the Philippine National Privacy Commission (NPC) if you believe ezeph has not handled your personal data in accordance with the law.

9.2  To exercise any of these rights, please contact ezeph at [email protected] with "Data Rights Request" in the subject line. ezeph will respond to all verifiable requests within thirty (30) days.

Children and Minors

10.1  The ezeph Platform is strictly for adults aged 21 years and above, as required by PAGCOR. ezeph does not knowingly collect personal data from individuals under the age of 21.

10.2  If ezeph becomes aware that personal data has been collected from a person under 21 years of age, that account will be closed immediately, all balances dealt with in accordance with PAGCOR guidelines, and the personal data deleted.

10.3  If you believe a minor may have registered an account on ezeph, please contact [email protected] immediately.

Changes to This Privacy Policy

11.1  ezeph may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR requirements. The date at the top of this page indicates when the Policy was last revised.

11.2  Where changes are material, ezeph will notify registered users by email and/or by a notice on the Platform at least seven (7) days before the changes take effect. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

Contact & Complaints

12.1  For any questions about this Privacy Policy or how ezeph handles your personal data, please contact:

12.2  If you are not satisfied with ezeph's response to a data rights request or privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through their official channels. ezeph cooperates fully with NPC investigations.

12.3  This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 and its Implementing Rules and Regulations.