ezezph Privacy Policy

1. Overview & Scope

This Privacy Policy ("Policy") describes how ezezph ("the Platform," "we," "us," "our") collects, processes, stores, and protects the personal information of users ("Player," "you," "your") who access or use the ezezph website and gaming services at ezezph.one.

This Policy applies to all personal data processed by ezezph in connection with the provision of its online gaming services to players in the Philippines and any other jurisdiction where the platform is lawfully accessible. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

ezezph is committed to complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). We are also guided by applicable PAGCOR data governance requirements.

By registering for an account or using the ezezph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

ezezph collects the following categories of personal data:

We do not collect sensitive personal information (as defined under the DPA) unless strictly required for identity verification or legal compliance purposes, and only with your explicit consent where required.

3. How We Collect Your Data

ezezph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the platform, via cookies, log files, and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification data from KYC/AML service providers; fraud detection signals from payment processors; publicly available information used to verify your identity or detect prohibited conduct.
• Payment processors: Transaction confirmation data from GCash, Maya, and Philippine banking partners, limited to what is necessary to process and verify your deposits and withdrawals.

4. Purpose & Legal Basis for Processing

ezezph processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account creation and management — necessary for the performance of our contract with you as a registered player.
• Identity and age verification (KYC) — necessary for compliance with PAGCOR regulations and Philippine anti-money laundering laws (Republic Act No. 9160, as amended). Players must be 21 years of age or older.
• Processing deposits and withdrawals — necessary for the performance of our contract with you.
• Fraud prevention and security — necessary for our legitimate interests in protecting the platform and all players from fraudulent activity.
• Responsible gaming compliance — necessary for compliance with PAGCOR responsible gaming requirements and our legal obligations to protect vulnerable players.
• Customer support — necessary for the performance of our contract with you and our legitimate interest in resolving player issues efficiently.
• Marketing communications — based on your consent, where you have opted in to receive promotional emails or notifications from ezezph. You may withdraw consent at any time.
• Platform improvement and analytics — based on our legitimate interest in improving the ezezph platform experience for Filipino players.
• Legal and regulatory compliance — necessary to comply with applicable Philippine laws, PAGCOR directives, and NPC requirements.

5. Sharing Your Personal Data

ezezph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• KYC and identity verification providers: To verify your identity and age in compliance with PAGCOR and AML requirements.
• Payment processors: GCash, Maya, and Philippine banking partners, to process your deposits and withdrawals.
• Game software providers: Third-party game studios whose titles are available on the ezezph platform, limited to the data necessary to deliver game functionality.
• Fraud detection and security services: To protect the platform and all players from fraudulent activity, account takeover, and money laundering.
• IT and hosting providers: Cloud infrastructure and data hosting partners who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where we are legally required to disclose information.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, under strict confidentiality obligations.

All third-party service providers who process personal data on behalf of ezezph are required to enter into data processing agreements that comply with the Data Privacy Act of 2012 and ensure an equivalent level of data protection.

6. Data Retention

ezezph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements under Republic Act No. 9160.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction, as required by PAGCOR and AML regulations.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for compliance documentation purposes.
• Technical and usage data: Retained for up to thirteen (13) months from collection, after which it is aggregated or deleted.

When personal data is no longer required, ezezph will securely delete or anonymise it in accordance with our data disposal procedures.

7. Security Measures

ezezph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ezezph platform.
• Encryption of sensitive data at rest, including financial information and government ID data.
• Two-factor authentication (2FA) available for all player accounts.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While ezezph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying ezezph immediately if you suspect any unauthorised access to your account.

8. Cookies & Tracking Technologies

ezezph uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players use our services. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits, and display options to personalise your experience on ezezph.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform, which pages are visited most, and where errors occur. This helps us improve the ezezph experience over time.
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your active session while you play.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the ezezph platform. We do not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.

9. Your Rights Under the Data Privacy Act

As a data subject under the Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by ezezph:

• Right to be informed: You have the right to know what personal data ezezph collects about you and how it is processed — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data ezezph holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to applicable legal grounds.
• Right to data portability: You may request that ezezph provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified requests within thirty (30) days, as required under the DPA. We may need to verify your identity before processing your request.

10. Minors & Age Verification

The ezezph platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under the age of 21.

As part of our registration and KYC process, ezezph requires all players to verify their age and identity before they can deposit funds or participate in any real-money games. If we discover that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and return any deposits at our discretion.

Parents and guardians who believe that a minor may have registered on the ezezph platform are encouraged to contact our support team immediately at support@ezezph.one so that we can investigate and take appropriate action without delay.

11. Cross-Border Data Transfers

ezezph primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game software studios.

Where such transfers occur, ezezph ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses in data processing agreements that require overseas recipients to apply data protection standards equivalent to those required under the Data Privacy Act of 2012.
• Transfer only to countries or organisations that the NPC has recognised as providing adequate data protection.
• Your explicit consent, where required by applicable law.

By using the ezezph platform, you acknowledge that your personal data may be transferred and processed outside the Philippines in accordance with the safeguards described above.

12. Changes to This Privacy Policy

ezezph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players by email and/or by posting a prominent notice on the platform at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this page periodically. Your continued use of the ezezph platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13. Contact & Data Protection Officer

ezezph has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

• Data Protection Officer, ezezph
• Email: privacy@ezezph.one
• General Support: support@ezezph.one
• Response Time: We aim to acknowledge all privacy-related requests within five (5) business days and resolve them within thirty (30) days.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Further information about the NPC and how to file a complaint is available through official Philippine government channels.