ezvip Privacy Policy

1. Scope & Data Controller

1.1 Scope. This Privacy Policy applies to all personal data collected by ezvip in connection with the operation of the ezvip platform (ezvip.one), including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and general website browsing.

1.2 Data Controller. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), ezvip — the operator of the ezvip platform, licensed by PAGCOR — is the personal information controller responsible for the personal data of Filipino players and visitors. ezvip's designated Data Protection Officer (DPO) can be reached through the contact details in Section 14 of this policy.

1.3 Acceptance. By accessing the ezvip platform or completing the ezvip registration process, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein to the extent that consent is the applicable legal basis for processing.

2. Personal Data We Collect

ezvip collects personal data through direct provision by you, automatic collection through platform use, and from third parties in the course of identity verification and payment processing. The categories of data collected include:

Sensitive Personal Information. Biometric data collected during identity verification (including ID photographs) constitutes sensitive personal information under the Data Privacy Act and is subject to enhanced security and processing restrictions.

3. How ezvip Uses Your Personal Data

ezvip processes your personal data for the following purposes:

• Account creation and management — to register your ezvip account, verify your identity, and maintain account records throughout the customer relationship.
• Service delivery — to provide access to casino games, process wagers, calculate payouts, and deliver all features of the ezvip platform.
• Payment processing — to facilitate deposits via GCash, PayMaya, BDO, BPI, and Metrobank, and to process withdrawal requests to verified payment methods.
• Regulatory compliance — to fulfil PAGCOR reporting obligations, comply with Anti-Money Laundering Act (AMLA) requirements, and respond to lawful requests from Philippine government authorities.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent account activity, unauthorized access, money laundering, and bonus abuse.
• Customer support — to respond to your enquiries, complaints, and support requests via live chat and email.
• Responsible gaming — to monitor gameplay patterns that may indicate problem gambling, to enforce player-requested limits and exclusions, and to fulfil PAGCOR's responsible gaming compliance requirements.
• Service improvement — to analyse aggregated usage data for the purpose of improving platform performance, game selection, and user experience.
• Promotional communications — to send you information about ezvip bonuses, promotions, and new games, where you have given separate consent to receive such communications and have not subsequently withdrawn that consent.

4. Legal Bases for Processing

Under the Data Privacy Act of 2012, ezvip processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil ezvip's obligations under the Terms & Conditions, including account management, game delivery, and payment processing.
• Legal obligation — processing required to comply with PAGCOR regulations, AMLA obligations, NPC requirements, and other applicable Philippine law.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent — processing for optional purposes such as promotional email communications, where you have provided freely given, specific, informed, and unambiguous consent which you may withdraw at any time.

5. Data Sharing & Disclosure

5.1 Service Providers. ezvip shares personal data with third-party service providers who assist in operating the platform, including payment processors (GCash/GXI, Maya Philippines, BancNet), game content suppliers, cloud infrastructure providers, and KYC verification technology providers. All such providers are subject to contractual data processing agreements that restrict use of your data to specified purposes only.

5.2 Regulatory Authorities. ezvip is required by law to disclose certain player information to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities upon lawful demand. ezvip will not provide advance notice of such disclosures where prohibited by law.

5.3 Corporate Transactions. In the event of a merger, acquisition, or restructuring of the ezvip operating entity, player data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this policy. Affected players will be notified before their data is transferred and becomes subject to a different privacy policy.

5.4 No Sale of Data. ezvip does not sell, license, or rent personal data to third parties for their own marketing or commercial purposes under any circumstances.

6. International Data Transfers

Where ezvip transfers personal data outside the Republic of the Philippines — for example, to cloud infrastructure providers operating data centers in other jurisdictions — such transfers are conducted only where: (a) the recipient country provides an adequate level of data protection as assessed by the National Privacy Commission; or (b) adequate safeguards are in place through contractual clauses that impose data protection obligations consistent with the Data Privacy Act; or (c) the transfer is necessary for the performance of a contract with you. ezvip maintains records of all cross-border data transfers and makes these available to the NPC upon request.

7. Data Retention

ezvip retains personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following minimum retention periods required by Philippine law:

• Account and identity records — retained for a minimum of five (5) years from account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, as required under AMLA regulations.
• Customer support records — retained for three (3) years from the date of the interaction, or until resolution of any related dispute, whichever is later.
• Marketing consent records — retained until consent is withdrawn, plus an additional two (2) years to evidence prior consent.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with ezvip's data destruction procedures.

8. Cookies & Tracking Technologies

8.1 ezvip uses cookies and similar tracking technologies on the ezvip.one website for the following purposes: (a) session management — to keep you logged in during your ezvip session; (b) platform functionality — to remember your game preferences and settings; (c) security — to detect and prevent fraudulent access attempts; and (d) analytics — to understand aggregate usage patterns and improve platform performance.

8.2 ezvip does not use third-party advertising cookies or permit advertising networks to place tracking technologies on the ezvip platform.

8.3 You may configure your browser to reject or delete cookies; however, disabling session cookies will prevent you from maintaining an authenticated ezvip login session. Essential security cookies cannot be disabled as they are necessary for platform security.

9. Your Data Subject Rights

Under Republic Act No. 10173, you have the following rights with respect to your personal data held by ezvip:

• Right to be informed — to receive clear information about how ezvip processes your personal data, as provided in this Privacy Policy.
• Right of access — to obtain a copy of the personal data ezvip holds about you and information about how it is processed.
• Right to rectification — to request correction of inaccurate or incomplete personal data held about you.
• Right to erasure — to request deletion of personal data no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to object — to object to processing of your personal data based on legitimate interests, including processing for direct marketing purposes.
• Right to data portability — to receive a structured, commonly used, machine-readable copy of your personal data for transfer to another controller where technically feasible.
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) if you believe ezvip has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact ezvip's Data Protection Officer as described in Section 14. ezvip will respond to data subject requests within thirty (30) days of receipt, as required by the Data Privacy Act's implementing rules.

10. Children's Privacy

The ezvip platform is strictly restricted to persons aged 21 years and older in accordance with PAGCOR regulations. ezvip does not knowingly collect personal data from persons under 21 years of age. If ezvip discovers that an account has been created by a person under 21, the account will be immediately terminated and all associated data will be securely deleted, except where retention is required by applicable law. Parents and guardians are responsible for ensuring that minors in their households do not access the ezvip platform or the ezvip login page.

11. Security Measures

ezvip implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and ezvip servers.
• Encryption at rest for sensitive personal data, including identity documents and financial account references.
• Access controls limiting employee access to personal data on a strict need-to-know basis, with all access logged and auditable.
• Regular penetration testing and vulnerability assessments of the ezvip platform and infrastructure.
• Multi-factor authentication requirements for internal systems accessing player data.
• Incident response procedures aligned with Data Privacy Act breach notification requirements.

While ezvip takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your ezvip login credentials and for notifying support immediately of any suspected unauthorized account access.

12. Third-Party Services & Links

The ezvip platform integrates third-party game content from licensed game providers. These providers may process limited technical data (such as session tokens and game result data) through their software components embedded in the ezvip platform. Such processing is governed by data processing agreements with each provider and is limited to what is necessary for game delivery.

The ezvip platform does not contain links to external third-party websites that are outside ezvip's control. ezvip is not responsible for the privacy practices of any third-party websites that you may independently access.

13. Amendments to This Privacy Policy

ezvip reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, or our data processing practices. Material changes that affect your rights or the way we use your personal data will be communicated to you via your registered email address at least fourteen (14) days before taking effect. The updated policy will be published on the ezvip platform with a revised effective date. Continued use of the ezvip platform after the effective date of amendments constitutes your acknowledgment of the updated policy.

14. Contact & Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or ezvip's data processing practices, or to exercise your data subject rights, please contact the ezvip Data Protection Officer:

Email: [email protected] (mark subject line: "Data Privacy Request")

ezvip's support team is available 24 hours a day, 7 days a week via the live chat feature on the ezvip platform. The DPO will acknowledge your request within five (5) business days and respond substantively within thirty (30) days in accordance with the Data Privacy Act's implementing rules.

If you are not satisfied with ezvip's response to your data subject request, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information about the NPC complaints process is available on the NPC's official government website.