earph Casino Privacy Policy

This Privacy Policy applies to earph Casino ("earph", "we", "us", or "our") and governs the collection, use, storage, and disclosure of personal data relating to individuals ("you" or "the data subject") who access or use the earph platform at earph.vip, including all associated games, features, and services.

earph is the data controller responsible for the personal data described in this Policy. earph processes personal data in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines.

This Policy is incorporated into and forms part of earph's Terms and Conditions. By registering an account, making a deposit, or using the earph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

earph collects the following categories of personal data in connection with its services:

earph collects personal data through the following means:

• Direct collection: Data you provide when registering an earph account, completing KYC verification, making a deposit or withdrawal, contacting earph support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically as you interact with the earph platform, including data collected through cookies, server logs, and similar tracking technologies described in Section 6.
• Third-party sources: Identity verification data received from KYC service providers; fraud detection signals from risk management partners; payment confirmation data from payment processors including GCash, PayMaya, and earph's banking partners.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with earph's licensing obligations.

earph only collects personal data that is necessary for the purposes described in this Policy. Where earph is required by law to collect certain data and you decline to provide it, earph may be unable to provide the relevant service — for example, earph cannot process withdrawal requests without completing KYC verification.

earph processes personal data for the following purposes:

• Account management: Creating, maintaining, and securing your earph account, processing login requests, and enabling account recovery.
• Service delivery: Providing access to earph's game library, processing bets and game outcomes, maintaining your balance, and delivering the platform features you use.
• Payment processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; verifying payment method ownership; and maintaining accurate financial records.
• Identity verification and KYC: Verifying your identity and age as required by PAGCOR's licensing conditions and Philippine anti-money laundering laws.
• Fraud prevention and security: Detecting and preventing unauthorized account access, fraudulent transactions, multi-accounting, and other prohibited conduct described in the earph Terms and Conditions.
• Legal and regulatory compliance: Meeting earph's obligations under PAGCOR's licensing framework, the Anti-Money Laundering Act (AMLA), the DPA, and other applicable Philippine laws.
• Responsible gaming: Monitoring for signs of problem gambling, enforcing self-exclusion requests, and administering deposit limit and session time controls.
• Customer support: Responding to queries, managing disputes, and maintaining records of support interactions.
• Marketing and promotions: Where you have provided consent, sending promotional communications about earph bonuses, tournaments, and new game releases. You may withdraw marketing consent at any time.
• Platform improvement: Analyzing aggregated usage data to improve earph's game selection, features, and user experience. This analysis does not involve individual-level profiling for non-service purposes.

earph processes personal data on the following legal bases as recognized under the DPA:

• Performance of a contract: Processing necessary to provide the earph service to you following your registration, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with earph's obligations under PAGCOR regulations, AMLA, and other applicable Philippine laws — including KYC verification and suspicious transaction reporting.
• Legitimate interests: Processing necessary for fraud detection, platform security, and responsible gaming monitoring, where earph's interests in preventing harm do not override your fundamental rights.
• Consent: Processing for marketing communications and optional analytics, where you have given clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

earph uses cookies and similar tracking technologies to operate the platform, improve your experience, and analyze usage patterns. The following categories of cookies are used on the earph platform:

• Strictly necessary cookies: Required for the earph platform to function. These include session authentication tokens, security cookies, and load balancing identifiers. These cannot be disabled without breaking the service.
• Functional cookies: Remember your preferences such as language settings, remembered login state, and responsible gaming configuration. Disabling these may affect your earph experience.
• Analytics cookies: Collect aggregated information about how players interact with earph pages and features. earph uses this data to identify areas for platform improvement. These cookies do not personally identify you.
• Security cookies: Used to detect fraud, bot activity, and unusual login patterns that may indicate unauthorized access attempts on your earph account.

You can control non-essential cookies through your browser settings. Note that disabling all cookies will prevent certain earph features from functioning correctly. By continuing to use earph after being presented with this Policy, you consent to the use of cookies as described above.

earph does not sell your personal data to unaffiliated third parties. earph may share your personal data with the following categories of recipients where necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and their respective processing partners, to the extent necessary to execute your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC service providers that assist earph in verifying your identity and age in compliance with PAGCOR requirements.
• Game content providers: Providers whose games are accessible through the earph platform may receive technical identifiers (not full identity data) necessary to facilitate game sessions and resolve technical disputes.
• Fraud and security service providers: Third-party providers that assist earph in detecting fraudulent accounts, payment fraud, and unauthorized access attempts.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where earph is legally required or authorized to disclose.
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid legal process, court order, or other binding legal authority.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by earph, subject to binding confidentiality obligations.

earph retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account earph's legal, regulatory, and operational requirements. The following general retention periods apply:

Upon expiry of the applicable retention period, earph will securely delete or anonymize personal data such that it can no longer be attributed to any individual. Where anonymization is not technically feasible, earph will retain the data in a form that prevents re-identification.

earph implements appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the earph platform.
• Encryption of financial data and authentication credentials at rest using industry-standard encryption protocols.
• Access controls limiting earph employee access to personal data on a strict need-to-know basis, with all access logged and audited.
• Multi-factor authentication for earph system access by internal personnel.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures enabling earph to detect, assess, and notify affected individuals and the NPC of data breaches within the timeframes required under the DPA.

earph's primary data processing infrastructure is based in the Philippines. However, certain service providers and technology partners used by earph may process data in other jurisdictions. Where personal data is transferred outside the Philippines, earph ensures that appropriate safeguards are in place, including:

• Contractual clauses binding the recipient to data protection standards equivalent to those required under Philippine law.
• Transfer only to jurisdictions recognized by the NPC as providing an adequate level of data protection, where applicable.
• Technical measures to ensure data in transit remains encrypted and access-controlled regardless of geographic location.

earph will not transfer personal data to jurisdictions that do not offer adequate protections without first implementing appropriate contractual or technical safeguards and, where required, obtaining your explicit consent.

The earph platform is strictly for adults. You must be at least 21 years of age to register an account or access any earph service, consistent with the minimum age for casino-style gaming under Philippine law.

earph does not knowingly collect personal data from individuals under the age of 21. If earph discovers that a registered account belongs to a person below the minimum age, that account will be immediately closed, all deposits refunded, any winnings forfeited, and all associated personal data deleted from earph's records in accordance with applicable legal requirements.

If you believe that earph may have inadvertently collected personal data from a person under 21, please contact earph immediately at [email protected] so that the matter can be investigated and remediated promptly.

You may exercise any of the data subject rights described in this Policy by submitting a written request to earph at [email protected]. Your request should include:

• Your full name and registered earph account username or email address.
• The specific right you wish to exercise and, where relevant, the specific data or processing activity your request relates to.
• Sufficient identification to enable earph to verify your identity before processing the request — earph will not action privacy rights requests from unverified senders.

earph will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or earph receives a high volume of requests, earph may extend this period by a further 30 days, with written notification to you of the extension and the reason for it.

If you believe that earph has processed your personal data in a manner inconsistent with this Privacy Policy or in violation of the DPA, you have the right to lodge a complaint with earph directly and, if unsatisfied with earph's response, with the National Privacy Commission of the Philippines.

earph encourages you to contact earph first, as most privacy concerns can be resolved through earph's internal process without the need for regulatory intervention. earph's Data Protection Officer can be reached at [email protected].

The National Privacy Commission of the Philippines is the independent regulatory authority responsible for enforcing the DPA. You may submit a complaint to the NPC through the official channels published on the NPC's website.

earph may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect your rights or earph's processing activities — earph will provide notice to registered players via their registered email address at least 7 days before the changes take effect. For non-material changes, such as typographical corrections or clarifications, earph will update this Policy without prior individual notice.

Your continued use of the earph platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you must discontinue use of earph and request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or earph's data processing practices, please contact earph's Data Protection Officer:

Please include "Privacy Request" in the subject line of your email and provide sufficient information for earph to identify your account and understand the nature of your request. earph's DPO will handle all privacy-related communications with strict confidentiality.