ey447 Privacy Policy

1. Who We Are and How to Contact Us

This Privacy Policy is issued by ey447 ("ey447," "we," "us," or "our"), the operator of the online gaming platform accessible at ey447.net. ey447 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

For the purposes of the Data Privacy Act, ey447 acts as the Personal Information Controller (PIC) in respect of the personal data of registered players and website visitors.

This Privacy Policy applies to all personal data collected through the ey447 website, mobile applications, customer support channels, and any other touchpoint through which you interact with ey447.

2. Personal Data We Collect

ey447 collects the following categories of personal data, depending on how you interact with our platform:

ey447 does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly required for identity verification and regulatory compliance purposes.

3. How We Collect Your Data

ey447 collects personal data through the following methods:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the ey447 platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment data from GCash, Maya, and banking partners.
• Regulatory Sources: Information received from PAGCOR or other regulatory authorities in connection with compliance obligations.

4. Purposes and Legal Bases for Processing

ey447 processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account Registration and Management — To create and maintain your ey447 account, verify your identity, and provide access to platform features. Legal basis: Performance of contract.
• Payment Processing — To process deposits, withdrawals, and refunds through GCash, Maya, bank transfer, and debit card channels. Legal basis: Performance of contract.
• Identity Verification (KYC) — To verify your identity and age (21+) in compliance with PAGCOR requirements and the Anti-Money Laundering Act. Legal basis: Legal obligation.
• Fraud Prevention and AML Compliance — To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. Legal basis: Legal obligation and legitimate interest.
• Responsible Gaming — To monitor gaming behavior, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of gambling-related harm. Legal basis: Legal obligation and legitimate interest.
• Customer Support — To respond to your inquiries, complaints, and support requests. Legal basis: Performance of contract.
• Platform Improvement — To analyze usage patterns and improve the ey447 platform, games, and user experience. Legal basis: Legitimate interest.
• Marketing Communications — To send you promotional offers, bonuses, and platform updates, where you have opted in to receive such communications. Legal basis: Consent (you may withdraw at any time).
• Regulatory Reporting — To fulfill reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities. Legal basis: Legal obligation.

5. How We Share Your Data

ey447 does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya/Maya, BPI, BDO, Metrobank, UnionBank, and other Philippine banking partners — for processing deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services engaged to perform document checks and liveness verification.
• AML and Fraud Screening Providers: Compliance technology providers that screen transactions and accounts against sanctions lists and fraud databases.
• Game Content Providers: Third-party game studios and live casino operators whose games are available on the ey447 platform — limited to session and game data necessary to operate the games.
• Cloud and Hosting Providers: Infrastructure providers that host the ey447 platform and store data on our behalf, under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies, where required by law.
• Law Enforcement: Philippine law enforcement agencies, where ey447 is legally compelled to disclose data in connection with a criminal investigation or court order.

6. Cookies and Tracking Technologies

ey447 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymized data about how players use the ey447 platform to help us improve performance and user experience. No personally identifiable information is included in analytics data.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the ey447 platform. ey447 does not use third-party advertising or retargeting cookies.

7. Data Security Measures

ey447 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data in transit.
• Access Controls: Role-based access control (RBAC) ensures that only authorized ey447 personnel can access personal data, and only to the extent required for their job function.
• Two-Factor Authentication: All ey447 internal systems require multi-factor authentication for staff access.
• Penetration Testing: Regular third-party security audits and penetration tests are conducted to identify and remediate vulnerabilities.
• Intrusion Detection: Real-time monitoring systems detect and alert on suspicious access patterns and potential security incidents.
• Staff Training: All ey447 employees with access to personal data receive regular data privacy and security training.
• Incident Response: A documented incident response plan is in place to ensure rapid containment and notification in the event of a data breach.

While ey447 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials.

8. Data Retention

ey447 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymized:

• Account and Identity Data: Retained for the duration of your account plus five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction and Financial Data: Retained for five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines.
• Gaming History: Retained for three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of consent.
• Technical and Log Data: Retained for ninety (90) days for security monitoring purposes, then deleted.

9. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ey447:

• Right to Be Informed: The right to know what personal data ey447 collects about you and how it is used — which this Privacy Policy fulfills.
• Right of Access: The right to request a copy of the personal data ey447 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data, subject to ey447's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe ey447 has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer as described in Section 13 of this Policy. ey447 will respond to all data subject requests within fifteen (15) business days of receipt.

10. Children's Privacy

The ey447 platform is strictly intended for individuals who are at least 21 years of age, in compliance with PAGCOR's minimum age requirements for online gambling in the Philippines. ey447 does not knowingly collect personal data from individuals under the age of 21.

If ey447 discovers that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the incident to PAGCOR as required.

11. Cross-Border Data Transfers

Some of ey447's service providers — including cloud hosting providers, KYC verification services, and game content providers — may process personal data outside of the Philippines. Where such cross-border transfers occur, ey447 ensures that appropriate safeguards are in place, including:

• Data processing agreements that incorporate the standard contractual clauses recognized by the National Privacy Commission.
• Transfers only to countries or organizations that provide an adequate level of data protection as assessed by the NPC.
• Binding corporate rules where transfers occur within a group of companies.

ey447 does not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without implementing appropriate contractual protections.

12. Changes to This Privacy Policy

ey447 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

For significant changes that materially affect your rights or how we use your data, ey447 will provide advance notice via:

• Email notification to your registered email address, and/or
• A prominent notice displayed on the ey447 platform upon your next login.

Your continued use of the ey447 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this page periodically.

13. How to Exercise Your Rights

To exercise any of your data subject rights, submit a data privacy inquiry, or file a complaint regarding ey447's data practices, please contact our Data Protection Officer through the following channels:

• Email: [email protected] — Subject line: "Data Privacy Request"
• Live Chat: Available 24/7 on the ey447 platform — mention "Data Privacy" to be routed to the appropriate team
• Response Time: All data subject requests are acknowledged within 2 business days and resolved within 15 business days

If you are not satisfied with ey447's response to your data privacy request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.