eziwin Privacy Policy

This Privacy Policy ("Policy") is issued by the operator of eziwin Casino ("eziwin," "we," "us," or "our") and applies to all personal data processed in connection with the operation of the eziwin platform accessible at eziwin.org, including all associated games, services, promotional features, and customer support channels.

This Policy is addressed to all individuals who interact with the eziwin platform, including registered account holders ("Players"), prospective registrants who access the platform without completing registration, and any other individual whose personal data is processed by eziwin in connection with the Services.

By accessing the eziwin platform, registering for an account, or using any Service offered by eziwin, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not access or use the eziwin platform.

For the purposes of applicable Philippine data protection legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, eziwin acts as the personal information controller ("PIC") in respect of the personal data of its players and platform users.

As personal information controller, eziwin determines the purposes and means of processing personal data collected through the eziwin platform. eziwin is responsible for ensuring that personal data is processed lawfully, fairly, and in accordance with this Privacy Policy and applicable law.

Certain third-party service providers who process personal data on behalf of eziwin — including payment processors, game technology providers, and identity verification services — act as personal information processors ("PIPs") and are bound by data processing agreements that obligate them to process data only on eziwin's documented instructions and to maintain appropriate security measures.

eziwin collects the following categories of personal data in connection with the operation of the platform and the provision of Services to Players:

eziwin collects personal data through the following channels:

eziwin processes personal data for the following defined purposes:

1. Account Management: To create, maintain, verify, and administer your eziwin account, including processing your registration, verifying your identity, and managing your account settings and preferences.
2. Service Delivery: To provide access to the games, betting services, and promotional features available on the eziwin platform and to process all related transactions.
3. Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported Philippine payment channels, and to maintain accurate transaction records.
4. Regulatory Compliance: To fulfil obligations under applicable Philippine gaming regulations, anti-money laundering laws, and data protection legislation, including the conduct of KYC verification and transaction monitoring.
5. Responsible Gaming: To administer player-set responsible gaming controls, monitor for indicators of problem gambling, and comply with any regulatory obligations relating to player protection.
6. Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
7. Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and any other conduct that breaches the eziwin Terms & Conditions or applicable law.
8. Marketing Communications: To send you promotional offers, bonus notifications, and gaming-related communications — where you have provided consent or where a legitimate interest applies — and to allow you to opt out of such communications at any time.
9. Platform Improvement: To analyse aggregated, anonymised usage data for the purposes of improving platform performance, game selection, user experience, and security architecture.

eziwin processes personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing regulations:

• Contractual Necessity: Processing required to perform the contract between eziwin and the account holder — including account management, game access, and payment processing — is conducted on the basis that such processing is necessary for the performance of the contract to which you are a party.
• Legal Obligation: Processing required to comply with eziwin's obligations under Philippine gaming regulations, anti-money laundering laws, and other applicable legal requirements is conducted on the basis of legal obligation.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, and anonymised platform analytics is carried out on the basis of eziwin's legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications is conducted on the basis of your consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

eziwin does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Personal data is disclosed to third parties only in the following circumstances:

• Payment Processors: Financial transaction data is shared with certified payment processing partners — including GCash, Maya, BPI, BDO, and other providers listed in the Cashier — solely to process your deposits and withdrawals.
• Identity Verification Providers: Identity documents and biometric data submitted during KYC are shared with accredited third-party identity verification services for the purpose of authenticating your identity in compliance with regulatory requirements.
• Game Technology Providers: Gaming activity data may be processed by the third-party providers who supply the games available on eziwin, to the extent necessary for game functionality, RNG certification, and technical support.
• Fraud Prevention Services: Technical data and account behaviour patterns may be shared with fraud detection and prevention service providers to protect the integrity of the eziwin platform and its player community.
• Regulatory and Law Enforcement Authorities: Personal data will be disclosed to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities where required by law, court order, or regulatory mandate.
• Professional Advisers: Personal data may be disclosed to legal counsel, auditors, and compliance advisers on a strictly need-to-know basis, subject to professional confidentiality obligations.

All third-party service providers who process personal data on eziwin's behalf are subject to data processing agreements that bind them to process data only for specified purposes, to maintain appropriate security measures, and not to sub-process data without eziwin's written authorisation.

Some of eziwin's service providers — particularly game technology providers and cloud infrastructure operators — may be located or operate servers outside the Philippines. Where personal data is transferred to a country or territory outside the Philippines, eziwin ensures that appropriate safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012.

Such safeguards may include contractual data protection clauses that impose obligations equivalent to those required under Philippine law, or reliance on the third party's certification under a recognised privacy framework. eziwin does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without ensuring that equivalent contractual protections are in place.

eziwin retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active eziwin account is retained for the duration of the account relationship.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction, in compliance with anti-money laundering regulatory requirements applicable in the Philippines.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following account closure, as required by applicable regulatory obligations.
• Gaming Activity Logs: Detailed gaming activity records are retained for a minimum of three (3) years for dispute resolution, regulatory audit, and responsible gaming monitoring purposes.
• Customer Support Records: Communications with eziwin customer support are retained for a period of three (3) years, except where they relate to a formal complaint or legal proceeding, in which case they are retained until final resolution.
• Marketing Data: Data processed on the basis of consent for marketing purposes is deleted within ninety (90) days of consent being withdrawn, except where retention is required for legal compliance reasons.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

eziwin implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, disclosure, alteration, or misuse. These measures include, but are not limited to:

• Transport Encryption: All data transmitted between your device and the eziwin platform is encrypted using TLS/SSL technology (256-bit encryption), consistent with the standard used by Philippine banks and major financial institutions.
• Data Storage Encryption: Sensitive personal data — including identity documents, payment references, and account credentials — is stored using encryption at rest.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. eziwin staff access to player data is logged and audited. Privileged access requires multi-factor authentication.
• Intrusion Detection: eziwin employs automated systems to detect and alert on suspicious activity patterns, including unauthorised login attempts, anomalous transaction volumes, and network intrusion indicators.
• Third-Party Security Assessments: eziwin conducts or commissions regular security assessments of its platform and data processing systems to identify and remediate vulnerabilities.
• Incident Response: eziwin maintains an incident response plan for data security incidents. In the event of a data breach that poses a risk to your rights and freedoms, eziwin will notify affected individuals and the National Privacy Commission in accordance with the mandatory breach notification requirements under the Data Privacy Act of 2012.

The eziwin platform uses cookies and similar tracking technologies to support platform functionality, maintain your session state, analyse usage patterns, and deliver a personalised experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the basic operation of the eziwin platform, including session management, login state maintenance, and security token handling. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, interface customisations, and responsible gaming tool configurations — to provide a consistent experience across sessions.
• Performance and Analytics Cookies: Used to collect anonymised data about how players interact with the eziwin platform, including pages visited, features used, and navigation paths. This data is used to improve platform design and performance.
• Security Cookies: Used to support fraud prevention mechanisms, detect suspicious access patterns, and protect the integrity of player accounts and the platform as a whole.

You may configure your browser to block or delete cookies; however, doing so may affect the functionality of the eziwin platform, including your ability to maintain a logged-in session or use certain features. eziwin does not use advertising or third-party tracking cookies to serve targeted advertisements on external websites.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by eziwin. These rights are subject to certain conditions and exceptions under applicable law.

To exercise any of these rights, please contact eziwin customer support with a description of your request and sufficient identity information to allow us to verify your identity before processing your request. eziwin will respond to data rights requests within thirty (30) calendar days of receipt, or notify you if a longer period is required.

The eziwin platform is strictly intended for individuals who are 21 years of age or older. eziwin does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

Registration is subject to age verification. Any account found to have been registered by an individual under the age of 21 will be immediately suspended upon discovery. Any personal data associated with a minor's account will be securely deleted in accordance with this Privacy Policy and applicable data protection law.

If you are a parent or guardian and you believe that your child has registered for or accessed the eziwin platform, please contact eziwin customer support immediately. We will promptly investigate and, where confirmed, take all necessary steps to close the account and delete associated personal data.

The eziwin platform integrates with third-party services — including payment gateways, game software providers, and identity verification platforms — necessary for the operation of the Services. These third-party services may process certain personal data in connection with their functions.

eziwin is not responsible for the privacy practices of third-party service providers operating under their own independent privacy policies. However, all third-party providers who process personal data on eziwin's behalf are required to enter into data processing agreements that mandate compliance with applicable data protection standards and prohibit the use of eziwin player data for independent commercial purposes.

Links contained within the eziwin platform that direct to external websites are not covered by this Privacy Policy. eziwin encourages you to review the privacy policies of any third-party websites you access through such links.

eziwin reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform operations, or data processing practices. Material amendments to this Policy will be communicated to registered account holders via the contact information on file and/or via a prominent notice on the eziwin platform, prior to the changes taking effect.

The current version of this Privacy Policy is identified by the "Last Updated" date displayed at the top of this page. Your continued use of the eziwin platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

If you have any concerns about a proposed amendment to this Privacy Policy, you may contact eziwin before the effective date of the change, or you may exercise your right to request account closure under Section 13.1 of the Terms & Conditions.

For questions, concerns, or formal data privacy complaints relating to this Privacy Policy or to eziwin's processing of your personal data, please contact our Data Privacy team using the details below:

If you are not satisfied with eziwin's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.