🔒 Data Privacy · Philippine Law · PAGCOR Compliant

ezeph Privacy Policy — How We Handle Your Personal Data

This Privacy Policy explains what personal data ezeph collects from players, how it is used and stored, who it may be shared with, and what rights you have over your data under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Please read this document carefully before using the ezeph platform.

Effective Date: January 1, 2026 Governing Language: English Jurisdiction: Philippines
Regulated by PAGCOR · Compliant with RA 10173 · Data Controller: ezeph

Your Privacy at ezeph — Key Commitments

The full policy text follows in the sections below. These cards summarize the principles that guide how ezeph handles your personal information every day.

256-Bit SSL on All Data in Transit

Every piece of personal and financial data you transmit to ezeph — during login, registration, deposit, or withdrawal — is encrypted via 256-bit SSL. Your credentials and payment details are never transmitted in plain text over the network.

Data Collected Only as Necessary

ezeph applies a data minimization principle — we collect only the personal data required to operate the platform, fulfill PAGCOR compliance obligations, process payments, and deliver customer support. We do not collect data speculatively or for purposes unrelated to the ezeph service.

No Sale of Personal Data to Third Parties

ezeph does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data is shared with third parties only where necessary to operate the platform — such as payment processors and game providers — and only under strict confidentiality obligations.

Philippine Data Privacy Act Compliance

ezeph's data handling practices comply fully with Republic Act No. 10173 (the Data Privacy Act of 2012) and its implementing rules. A Data Protection Officer (DPO) is appointed, a Privacy Management Program is in place, and player data subject requests are processed within legally mandated timeframes.

Full Transparency on Data Use

This policy clearly explains every purpose for which ezeph collects personal data, the legal basis for each processing activity, and how long data is retained. There are no hidden data uses. If ezeph ever needs to process your data for a new purpose, we will update this policy and notify you before doing so.

Your Rights Are Enforceable

Under the Data Privacy Act, you have real, enforceable rights over your personal data — including the right to access, correct, delete, and object to processing. ezeph has a dedicated process for handling data subject requests, and we respond within the timelines required by Philippine law.

Your Data Rights Under RA 10173

The Philippine Data Privacy Act grants every data subject — including every ezeph player — a defined set of rights over their personal information. Here is what each right means in practice.

Right to Be Informed

You have the right to know what personal data ezeph collects about you, why it is collected, and how it is processed — before or at the time of collection. This policy fulfills that right.

Right to Access

You may request a copy of all personal data ezeph holds about you at any time. Submit a written request to our Data Protection Officer and we will respond within 15 business days.

Right to Rectification

If any personal data ezeph holds about you is inaccurate or incomplete, you have the right to request correction. Most personal details can be updated directly in your account profile.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal and regulatory retention obligations that ezeph must comply with.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling purposes. Where processing is based on legitimate interests, you may object where your rights and interests override those interests.

Right to Complain

If you believe ezeph has mishandled your personal data, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, the authority that administers the Data Privacy Act.

Section 1

Introduction and Scope of This Policy

This Privacy Policy ("Policy") is issued by ezeph ("ezeph," "we," "us," or "our"), the operator of the online gaming platform accessible at ezeph.club and all associated subdomains and mobile interfaces. This Policy describes how ezeph collects, uses, discloses, stores, and protects personal information relating to individuals who access or use the ezeph platform ("you," "your," or "Player").

This Policy is prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). It supplements, and should be read together with, the ezeph Terms & Conditions.

By creating an account on ezeph, using the platform in any capacity, or submitting personal data through any channel associated with ezeph, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the ezeph platform.

Scope: This Policy applies to all personal data collected through the ezeph website, mobile interface, customer support channels, and any other means by which you interact with the ezeph platform. It applies to registered players and to individuals who visit the site without registering an account.

Section 2

Identity of the Data Controller

For the purposes of the Philippine Data Privacy Act, ezeph is the personal information controller in respect of all player data collected and processed through the ezeph platform. ezeph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy.

For data subject requests, privacy concerns, or inquiries relating to this Policy, you may contact the ezeph Data Protection Officer at [email protected] with the subject line "Data Privacy Request — DPO." Correspondence should include your full name, registered email address, and a clear description of your request.

Section 3

Categories of Personal Data We Collect

3.1 Registration and Identity Data

When you create an ezeph account, we collect the information you provide in the registration form, including:

  • Full legal name;
  • Date of birth;
  • Residential address;
  • Email address;
  • Philippine mobile number;
  • Username and encrypted password.

3.2 Identity Verification (KYC) Data

As required by PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA), ezeph collects identity verification documentation prior to enabling withdrawal functionality. This includes:

  • Government-issued photo identification (passport, driver's license, UMID, or PhilSys national ID);
  • Proof of address documentation where requested;
  • Source of funds documentation for enhanced due diligence cases;
  • Selfie or biometric verification where required by our KYC process.

3.3 Financial Transaction Data

We collect data relating to your deposits, withdrawals, and in-platform financial activity. This includes payment method identifiers (GCash account references, bank account numbers, e-wallet identifiers), transaction amounts, timestamps, and transaction reference numbers. ezeph does not store full payment card numbers or complete bank account details in its own systems.

3.4 Gaming Activity Data

We collect records of your gaming activity on the ezeph platform, including games played, bet amounts, game outcomes, session durations, and responsible gaming tool usage. This data is required for PAGCOR compliance reporting, dispute resolution, and the provision of responsible gaming services.

3.5 Technical and Device Data

We automatically collect certain technical data when you access the ezeph platform, including your IP address, device type and operating system, browser type and version, session identifiers, and general geolocation data derived from your IP address. This data is used for security monitoring, fraud detection, and platform performance optimization.

3.6 Customer Support Data

When you contact ezeph customer support via Live Chat or email, we collect the content of your communications and any documentation you provide. Support interactions are logged for quality assurance, dispute resolution, and training purposes.

Special Category Data: ezeph does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health information, religious beliefs, or political affiliations) except where strictly required for responsible gaming assessments or where you voluntarily disclose such information in the course of a support interaction.

Section 4

How We Use Your Personal Data

ezeph uses the personal data it collects for the following purposes:

Purpose Data Categories Used
Account registration and authentication Registration data, technical data
Identity verification and KYC compliance KYC data, registration data
Processing deposits, withdrawals, and transactions Financial data, registration data
Providing gaming services and game history Gaming activity data, registration data
PAGCOR regulatory reporting and compliance All categories as required
Anti-money laundering (AMLA) monitoring Financial data, KYC data, gaming data
Fraud detection and account security Technical data, financial data, registration data
Customer support and dispute resolution Support data, gaming data, financial data
Responsible gaming monitoring and interventions Gaming activity data, registration data
Service communications (account notices, policy updates) Registration data (email, mobile)
Platform analytics and performance improvement Technical data, gaming activity data (aggregated)
Direct marketing (with consent where required) Registration data, gaming activity data
Section 5

Legal Basis for Processing

Under the Philippine Data Privacy Act, all processing of personal data must be founded on a lawful criterion. The following legal bases apply to ezeph's processing activities:

  • Contractual necessity: Processing required to perform our contract with you — including account management, game provision, payment processing, and customer support;
  • Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act requirements, Tax Code obligations, and other applicable Philippine legal requirements;
  • Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and analytics — where such interests are not overridden by your fundamental rights and freedoms;
  • Consent: Processing for direct marketing communications and non-essential cookies, where your specific, informed, and freely given consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Section 6

Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit the ezeph platform. They allow ezeph to recognize your browser, maintain your session, remember preferences, and collect usage data. ezeph uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

6.2 Categories of Cookies Used by ezeph

  • Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without impairing the platform;
  • Functional Cookies: Remember your preferences such as language settings and responsible gaming limit configurations;
  • Analytics Cookies: Collect aggregated, anonymized data on how players interact with the platform to support performance improvements. No individual player is identified in analytics reports;
  • Security Cookies: Detect and prevent fraudulent access attempts, bot activity, and account anomalies.

6.3 Managing Cookies

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging in to or using the ezeph platform. For all other cookie categories, you may adjust your preferences without affecting your ability to use the core platform.

Section 7

Disclosure and Third-Party Sharing

7.1 Service Providers

ezeph shares personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processing providers (GCash, PayMaya, and banking partners), game software providers, KYC and identity verification services, fraud detection technology providers, and cloud infrastructure providers. All service providers are bound by confidentiality obligations and may only use your data for the specific purpose for which it was disclosed.

7.2 Regulatory and Law Enforcement Disclosure

ezeph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue, or other government authorities where required to do so by applicable law, regulatory obligation, court order, or valid legal process. ezeph will, where legally permissible, notify affected players of such disclosures.

7.3 No Commercial Sale of Data

ezeph does not sell, rent, exchange, or otherwise commercially transfer your personal data to any third party for marketing purposes. Data disclosed to third parties is limited to what is strictly necessary for the operational or legal purpose for which it is shared.

7.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or transfer of business operations involving ezeph, personal data held by ezeph may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights under this Policy will be preserved.

Section 8

Data Retention

ezeph retains personal data for no longer than is necessary for the purposes for which it was collected, subject to overriding legal, regulatory, and dispute resolution requirements. The following general retention principles apply:

  • Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing and AMLA obligations;
  • KYC and identity verification records: Retained for a minimum of five (5) years following account closure or the conclusion of any related regulatory investigation, whichever is later;
  • Financial transaction records: Retained for a minimum of ten (10) years in compliance with AMLA and relevant tax reporting obligations;
  • Customer support records: Retained for a minimum of three (3) years following the closure of the relevant support case;
  • Technical and device data: Retained for rolling periods determined by security and fraud detection requirements, typically not exceeding twelve (12) months for individual session logs.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Anonymized, aggregated data may be retained indefinitely for analytics and reporting purposes.

Section 9

Data Security Measures

ezeph implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include:

  • 256-bit SSL/TLS encryption on all data transmitted between your device and the ezeph platform;
  • Encryption of sensitive data fields — including KYC documents and payment identifiers — in ezeph's databases at rest;
  • Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
  • Multi-factor authentication requirements for administrative access to systems containing personal data;
  • Continuous automated monitoring for anomalous access patterns, intrusion attempts, and data breach indicators;
  • Regular independent security audits and penetration testing conducted as part of ezeph's PAGCOR compliance obligations;
  • Documented incident response procedures aligned with the NPC's mandatory breach notification requirements.

Data Breach Notification: In the event of a personal data breach that is likely to give rise to a real risk of serious harm to affected individuals, ezeph will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the Data Privacy Act and NPC Circular 16-03.

Section 10

Exercising Your Data Subject Rights

You may exercise your rights under the Data Privacy Act at any time by submitting a request to the ezeph Data Protection Officer at [email protected] with the subject line "Data Privacy Request." Your request should include your full name, registered email address, and a clear description of the right you wish to exercise.

ezeph will acknowledge receipt of your request within five (5) business days and will complete the request, or provide a substantive response explaining why the request cannot be fulfilled, within fifteen (15) business days. This timeline may be extended by a further fifteen (15) business days where the complexity of the request warrants it, with notification to you.

Requests to exercise data subject rights are free of charge for the first request in any twelve-month period. For subsequent requests within the same period that are manifestly unfounded or excessive, ezeph may charge a reasonable administrative fee or decline to act on the request, with written explanation.

Where a data subject request cannot be granted in whole or in part — for example, where retention of data is legally required — ezeph will clearly explain the legal basis for declining the request and advise you of your right to lodge a complaint with the National Privacy Commission.

Section 11

Children's Privacy and Age Restriction

The ezeph platform is strictly restricted to individuals aged 21 years and above under PAGCOR regulations and applicable Philippine law. ezeph does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process.

If ezeph determines that personal data has been collected from an individual under the age of 21, the associated account will be immediately closed, all data collected will be securely deleted to the extent legally permissible, and the matter will be reported to PAGCOR as required under our licensing obligations. If you are a parent or guardian and believe your child has registered on the ezeph platform, please contact us immediately at [email protected].

Section 12

Cross-Border Data Transfers

In the course of providing the ezeph service, personal data may be processed by service providers whose infrastructure is located outside the Philippines — including cloud servers, game provider platforms, and fraud detection systems. Where such cross-border data transfers occur, ezeph ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act and NPC guidelines on cross-border data flows.

These safeguards include contractual obligations imposed on receiving parties — such as standard data protection clauses — that require equivalent levels of data protection to those applied within the Philippines. ezeph does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without the implementation of appropriate contractual safeguards.

Section 13

Updates to This Privacy Policy

ezeph reserves the right to update, amend, or revise this Privacy Policy at any time. The effective date of the current version is displayed at the top of this page. Where changes are material — such as changes to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — ezeph will provide reasonable advance notice by posting a notice on the platform or sending an email to your registered address.

Your continued use of the ezeph platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the platform and may request account closure in accordance with the ezeph Terms & Conditions.

Section 14

Contact Information and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the ezeph Data Protection Officer through the following channels:

  • Email: [email protected] — Subject line: "Data Privacy Request — DPO"
  • Live Chat: Available 24/7 through the ezeph platform for general privacy inquiries

For formal complaints regarding the processing of your personal data by ezeph that have not been resolved through our internal process, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, the government body responsible for administering the Data Privacy Act.

NPC Complaint Process: Complaints to the National Privacy Commission (NPC) may be submitted via the NPC's official channels. Information on the NPC's complaint procedures is available through official Philippine government resources. ezeph encourages players to attempt resolution through our internal DPO process first, as this is typically the fastest route to resolution.

Play with Confidence at ezeph

Now that you understand how ezeph handles your personal data — transparently, securely, and in full compliance with Philippine law — you can focus on what matters: enjoying 800+ PAGCOR-certified games, fast GCash withdrawals, and 24/7 Filipino support. Players must be 21 years or older.

21+ only · PAGCOR Regulated · RA 10173 Compliant · Terms & Conditions

⚠️ 21+ ONLY — All real-money gaming on ezeph is strictly restricted to players aged 21 and above under PAGCOR regulations and Philippine law. Play responsibly. Responsible Gaming tools available.