ezjili Privacy Policy

1 Introduction and Data Controller Identity

This Privacy Policy ("Policy") is issued by ezjili ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at ezjili.asia ("the Platform"). ezjili acts as the Personal Information Controller (PIC) with respect to the personal data of all Users ("you", "Player", "Data Subject") collected through the Platform.

ezjili is committed to protecting the privacy and personal information of every person who accesses the Platform, in full compliance with the Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account with ezjili or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2 Personal Data We Collect

ezjili collects the following categories of personal data in the course of providing its services:

3 How We Collect Your Data

ezjili collects personal data through the following means:

• Direct Submission — Information you provide during account registration, KYC submission, deposit/withdrawal requests, or when contacting support.
• Automated Technologies — Session cookies, device fingerprinting, and server log data collected automatically when you access the Platform.
• Payment Processors — Transaction confirmation data received from GCash, PayMaya, and Philippine banking partners when you initiate deposits or withdrawals.
• Third-Party Verification Services — Identity verification responses from KYC service providers engaged by ezjili for compliance purposes.

4 Legal Basis for Processing

ezjili processes personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual Necessity — Processing required to perform the services described in the ezjili Terms and Conditions, including account management, game delivery, and payment processing.
• Legal Obligation — Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act obligations (RA 9160 as amended by RA 10365), and NPC regulations.
• Legitimate Interest — Processing for fraud prevention, platform security, abuse detection, and responsible gaming monitoring.
• Consent — Processing for direct marketing communications, where you have given specific, freely-given, and informed consent. You may withdraw this consent at any time via your account notification settings.

5 How We Use Your Personal Data

ezjili uses collected personal data for the following purposes:

• Creating, verifying, and managing your ezjili player account
• Processing deposits, withdrawals, and related financial transactions
• Complying with PAGCOR KYC requirements and Anti-Money Laundering obligations
• Delivering and improving the games, features, and services available on the Platform
• Detecting and preventing fraud, cheating, multi-accounting, and other prohibited conduct
• Administering responsible gaming tools, including deposit limits and self-exclusion requests
• Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts)
• Sending promotional communications, subject to your communication preferences
• Responding to support enquiries and resolving disputes
• Maintaining internal records and audit trails as required by PAGCOR and the NPC

6 Sharing and Disclosure of Data

6.1 ezjili does not sell personal data to third parties. We share personal data only in the following circumstances:

• Regulatory Authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies with lawful authority to request data.
• Payment Service Providers — GCash (Mynt), PayMaya (PayMongo/Voyager), and partner banks, solely for the purpose of processing transactions.
• KYC and Fraud Prevention Partners — Third-party identity verification and fraud detection providers engaged under data processing agreements that require them to maintain at minimum the same data protection standards as ezjili.
• Game Providers — Game session data (not full identity data) is shared with game studios where necessary to resolve game disputes or technical malfunctions.
• Law Enforcement — Where required by a valid legal order, court order, or in cases where disclosure is necessary to protect the rights, property, or safety of ezjili, its players, or the public.

6.2 All third-party recipients are required to handle personal data in accordance with the Data Privacy Act of 2012 and the terms of binding data processing agreements with ezjili.

7 Cookies and Tracking Technologies

7.1 The ezjili Platform uses cookies and similar tracking technologies to maintain session state, prevent fraud, analyse Platform usage, and personalise the player experience. The following cookie categories are used:

• Strictly Necessary Cookies — Required for the Platform to function. These cannot be disabled without impairing core functionality such as login session management and payment processing.
• Analytics Cookies — Aggregate, anonymised data on how players navigate the Platform, used to improve the user experience. No personally identifiable information is transmitted to analytics providers.
• Security Cookies — Used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts.

7.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use core Platform features including login and cashier functions.

8 Data Retention

ezjili retains personal data for the following periods, measured from the date of account closure or last transaction (whichever is later):

• Identity and KYC Data — Minimum five (5) years, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act.
• Financial Transaction Records — Minimum five (5) years from the date of each transaction.
• Gaming Activity Data — Two (2) years from the date of account closure.
• Support and Communication Records — Three (3) years from the date of the interaction.
• Technical Logs — Ninety (90) days, unless required to be preserved in connection with an active investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-prescribed standards.

9 Data Security

ezjili implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Passwords stored using industry-standard adaptive hashing algorithms (bcrypt)
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Regular third-party penetration testing and security audits of Platform infrastructure
• Intrusion detection systems and real-time security event monitoring
• Two-factor authentication (2FA) available for all player accounts
• Incident response procedures compliant with NPC breach notification requirements under Circular No. 16-03

In the event of a personal data breach that poses a real risk of serious harm to data subjects, ezjili will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by NPC Circular No. 16-03.

10 Your Rights Under the Data Privacy Act

As a Data Subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by ezjili:

• Right to be Informed — To be informed of how your data is collected and processed (fulfilled by this Policy).
• Right to Access — To request a copy of the personal data we hold about you.
• Right to Rectification — To request correction of inaccurate or incomplete personal data.
• Right to Erasure or Blocking — To request deletion or blocking of data that is unlawfully processed or no longer necessary, subject to legal retention obligations.
• Right to Object — To object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability — To receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Damages — To claim compensation for any damages sustained due to inaccurate, incomplete, outdated, or unlawfully processed personal data.
• Right to File a Complaint — To file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of these rights, submit a written request to ezjili's Data Protection Officer via the support channels described in Section 14. We will respond within fifteen (15) working days of receiving a verified request.

11 Children and Minors

The ezjili Platform is strictly intended for persons aged twenty-one (21) years and older. ezjili does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted, and any deposits held will be processed for return to the funding source in accordance with our procedures.

If you have reason to believe that a person under 21 has registered on the Platform, please contact our support team immediately via live chat.

12 Cross-Border Data Transfers

Some of ezjili's technical service providers and game studios are located outside the Philippines. Where personal data is transferred to recipients in other countries, ezjili ensures such transfers are conducted under binding contractual clauses that impose data protection obligations equivalent to those required under the Data Privacy Act of 2012. ezjili does not transfer personal data to any recipient in a jurisdiction that the NPC has determined provides an inadequate level of protection without appropriate safeguards in place.

13 Changes to This Privacy Policy

ezjili reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via their registered mobile number or on-Platform notification no less than seven (7) days before the revised Policy takes effect. The current version of this Policy, with its effective date, is always published at ezjili.asia/privacy-policy. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

14 Contact and Data Subject Requests

For all data privacy enquiries, data subject rights requests, or complaints relating to this Privacy Policy, please contact the ezjili Data Protection Officer via the following channels:

• Live Chat — Available 24/7 from your logged-in account dashboard. Preferred channel for urgent requests.
• Email — [email protected] — mark your subject line "Data Privacy Request".

If you are not satisfied with our response to a data privacy concern, you may escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.