ezwinph Privacy Policy

This Privacy Policy is issued by ezwinph ("we," "us," "our," or "the Platform"), the operator of the online casino and sports betting platform accessible at https://ezwinph.net, including all associated subdomains, mobile web interfaces, and related digital services.

ezwinph acts as the data controller in respect of the personal data you provide when you register an account, make a deposit, place a wager, or otherwise interact with our platform. This means we are responsible for determining the purposes and means by which your personal data is processed.

This Privacy Policy applies to all registered players, prospective players who visit the ezwinph website, and any individual whose personal data we receive in connection with the operation of the platform — including players located across Manila, Cebu, Davao, Quezon City, Makati, and all other regions of the Philippines.

ezwinph collects only the personal data necessary to provide you with a safe, legal, and personalised gaming experience. The categories of personal data we collect include:

We do not collect sensitive personal information such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data, except where identity document photographs are strictly required for KYC purposes.

ezwinph collects personal data through the following channels:

• Direct registration: Data you provide when you create an account, complete KYC verification, or update your profile settings.
• Transactions: Data generated when you make deposits, request withdrawals, or place bets on casino games or sports markets.
• Automated technical collection: Data collected automatically when you access the platform, including IP addresses, device identifiers, and session information via server logs and cookies.
• Customer support interactions: Data included in messages you send to our support team through live chat or email, including chat transcripts and email correspondence.
• Third-party payment processors: Confirmation data returned by GCash, PayMaya, BPI, BDO, Metrobank, or card processing networks to confirm transaction status (we do not receive full card numbers from these providers).
• Fraud and AML screening: Data received from third-party identity verification and anti-money laundering screening services to comply with Philippine regulatory requirements.

ezwinph processes your personal data for the following purposes:

• Account management: To create, maintain, and manage your player account, verify your identity and age (21+), and process your login sessions securely.
• Transaction processing: To process deposits, calculate and credit winnings, process withdrawal requests, and maintain accurate financial records for your account.
• Regulatory compliance: To comply with Know Your Customer (KYC) obligations, Anti-Money Laundering (AML) requirements, and applicable Philippine gaming regulations administered by PAGCOR.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, bonus abuse, and other prohibited conduct.
• Customer support: To respond to your support queries, complaints, and account-related requests in a timely and accurate manner.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance, security, and content of the ezwinph platform.
• Responsible gaming: To monitor betting patterns for indicators of problem gambling behaviour and to facilitate the operation of self-exclusion, deposit limit, and cool-off tools.
• Marketing communications: To send you promotional offers, bonus announcements, and personalised recommendations — but only where you have given explicit consent to receive such communications.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ezwinph relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including account management, deposits, withdrawals, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AML laws (Republic Act No. 9160 as amended), and tax reporting obligations.
• Legitimate interests: Processing undertaken for fraud prevention, platform security, abuse detection, and the protection of other players and the integrity of the platform — where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given clear, affirmative, and freely withdrawable consent.

Where we rely on consent as the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ezwinph does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard processing networks receive only the data necessary to execute and verify your financial transactions.
• KYC and AML service providers: Authorised third-party identity verification and screening providers receive relevant identity data to complete regulatory compliance checks. These providers are contractually bound to confidentiality and data protection obligations.
• Game software providers: Our casino and sports betting software licensors receive session and bet data necessary to deliver and audit game outcomes. No personally identifiable registration data is shared beyond what is technically required.
• Regulatory authorities: PAGCOR and other Philippine government agencies may receive account and transaction data where required by law, court order, or regulatory directive.
• Fraud prevention networks: Anonymised or pseudonymised risk signals may be shared with industry fraud prevention services to protect the platform and its player community.
• Professional advisers: Legal, audit, and compliance advisers acting under strict confidentiality obligations may access limited personal data in the course of providing their professional services to ezwinph.

ezwinph uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and — where consented — to deliver relevant promotional content. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without impairing the platform's core functionality.
• Functional cookies: Used to remember your preferences such as language settings, game display options, and last-viewed sections. These improve your experience but are not essential to core functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform, helping us identify technical issues and improve user experience. We use first-party analytics only.
• Marketing cookies (consent-only): Used to personalise promotional messages and bonus offers displayed on-platform. These are activated only where you have provided explicit consent.

You may manage your cookie preferences at any time by adjusting your browser settings. Blocking strictly necessary cookies will impair your ability to use the platform. Withdrawing consent for marketing cookies will not affect your ability to play — it will only affect the personalisation of promotional content you see.

ezwinph retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with legal, regulatory, and operational requirements. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• KYC documents: Retained for the duration of the account plus five (5) years post-closure. Hard copies are not stored — documents are held in encrypted digital format only.
• Customer support communications: Retained for three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing preference data: Retained until you withdraw consent, plus a short additional period sufficient to ensure your opt-out preference has been propagated across all communication channels.
• Technical and session logs: Retained for ninety (90) days for security monitoring and fraud investigation purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual player.

ezwinph implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your browser or mobile device and the ezwinph platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data including KYC documents and financial records are encrypted at rest using AES-256 encryption on secured, access-controlled servers.
• Password hashing: Player passwords are never stored in plain text. We use industry-standard one-way hashing with salting to store password credentials.
• Access controls: Internal access to player personal data is restricted to authorised personnel only, governed by role-based access control (RBAC) policies. All internal access is logged and audited.
• Two-factor authentication: Available and encouraged for all player accounts as an additional layer of account security.
• Penetration testing: The ezwinph platform undergoes periodic third-party security assessments to identify and remediate potential vulnerabilities.
• Incident response: In the event of a personal data breach that poses a risk to your rights, ezwinph will notify you and the National Privacy Commission (NPC) of the Philippines within 72 hours of becoming aware of the breach, as required by law.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by ezwinph:

To exercise any of the above rights, please contact our Data Protection Officer (DPO) at [email protected] with the subject line "Data Rights Request." We will respond within thirty (30) days of receiving your request. We may ask you to verify your identity before processing the request to protect your account security.

If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The ezwinph platform is strictly for adults aged 21 years and above, in accordance with applicable Philippine gaming regulations. ezwinph does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If we discover that a registered account belongs to a person under 21, the account will be immediately suspended, all data will be securely deleted, and any deposited funds will be returned to the verified payment source after a brief investigation period.

ezwinph primarily processes personal data on servers located within or serving the Philippines region. In certain operational circumstances — such as the use of internationally-hosted game software providers or cloud infrastructure — your personal data may be transferred to and processed in countries outside the Philippines.

Where cross-border transfers occur, ezwinph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law. These safeguards may include:

• Contractual data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission;
• Transfers only to countries or organisations that the NPC has determined provide an adequate level of data protection; or
• Other legally recognised mechanisms for cross-border transfers under the Data Privacy Act and its Implementing Rules.

By registering an account with ezwinph and accepting these Terms, you acknowledge and consent to such cross-border transfers where they are necessary to provide you with the services you have requested.

ezwinph may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this policy will always be accessible at https://ezwinph.net/privacy-policy, with the effective date prominently displayed at the top of the page.

Where changes are material — meaning they significantly affect how we use your personal data or your rights under this policy — we will notify you via your registered email address or by displaying a prominent notice on the platform before the changes take effect. Your continued use of the ezwinph platform after such notice constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how ezwinph processes your personal data, please contact our Data Protection Officer using the details below:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 via the ezwinph platform support widget
• Response time: We aim to respond to all privacy-related enquiries within five (5) business days, and to formal data rights requests within thirty (30) calendar days.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC), the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on their official government website.