ernph Privacy Policy

1Introduction & Scope of This Policy

This Privacy Policy ("Policy") is issued by ernph ("we," "us," or "our"), the operator of the online gaming platform accessible at ernph.vip. This Policy describes how ernph collects, processes, stores, shares, and protects the personal data of individuals ("you," "Player," or "User") who access or use the ernph Platform and associated services.

This Policy applies to all personal data collected through the ernph.vip website, any mobile-optimised version of the Platform, and all communications between ernph and its registered Players, including email, live chat, and other support channels. It should be read together with the ernph Terms & Conditions and any additional terms applicable to specific services offered on the Platform.

ernph is committed to compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (and its implementing rules and regulations), as well as any other applicable data protection laws and regulations that govern the handling of personal information in the Philippine jurisdiction.

2Categories of Personal Data We Collect

ernph collects personal data that falls into the following categories, depending on the nature of your interaction with the Platform:

2.1 Identity & Registration Data

• Full legal name as it appears on your Philippine government-issued identification;
• Date of birth (used for age verification — must be 21 years or older);
• Gender (where voluntarily provided);
• Residential address, including city and region (e.g., Quezon City, Cebu City, Davao City);
• Nationality and citizenship status;
• Government-issued ID number and document type (e.g., PhilSys ID, UMID, driver's licence, passport).

2.2 Contact Data

• Email address (primary account contact and communication channel);
• Mobile phone number (used for account verification, two-factor authentication, and withdrawal OTPs).

2.3 Financial & Payment Data

• GCash registered mobile number and account name (where GCash is used for deposits or withdrawals);
• Maya account details (where Maya is used for transactions);
• Bank account number and bank name (for BPI, BDO, Metrobank, or other bank transfer transactions);
• Transaction history, including deposit amounts, withdrawal amounts, and dates;
• USDT wallet address (for cryptocurrency transactions where applicable).

2.4 Account & Gaming Activity Data

• Account username and encrypted password;
• Game session history, bet amounts, wager outcomes, and game preferences;
• Bonus and promotion claim records;
• Responsible gaming settings including deposit limits, session limits, and self-exclusion status;
• Support ticket history and live chat transcripts.

2.5 Technical & Device Data

• IP address at the time of login and during active sessions;
• Device type, operating system, and browser information;
• Mobile carrier information (Globe, Smart, DITO, etc.);
• Session timestamps and geographic location at the time of access (city-level, not GPS-level);
• Cookies and similar tracking technology data (see Section 9).

3How We Collect Your Personal Data

ernph collects personal data through the following means:

• Direct registration: Information you provide when creating your ernph Account, including your name, email, date of birth, and contact details;
• KYC verification submissions: Identity documents and selfie photographs submitted as part of the Know Your Customer (KYC) process;
• Payment transactions: Data processed when you make a deposit or request a withdrawal via GCash, Maya, bank transfer, or other payment channels;
• Platform usage: Data automatically generated by your interaction with the ernph Platform, including game play, navigation behaviour, and session activity;
• Customer support interactions: Information shared during live chat conversations, email correspondence, or formal complaints submitted to ernph;
• Cookies and tracking technologies: Technical data collected automatically through cookies, web beacons, and similar tools as described in Section 9 of this Policy;
• Third-party payment providers: Transaction confirmation data shared by GCash, Maya, BPI, BDO, Metrobank, and other payment processors when processing your transactions.

4How We Use Your Personal Data

ernph processes your personal data for the following purposes:

ernph will not use your personal data for any purpose that is incompatible with the purposes listed above without obtaining your prior consent or unless required to do so by applicable law.

5Legal Basis for Processing Personal Data

ernph processes your personal data on the following legal grounds, consistent with the Data Privacy Act of 2012 of the Philippines:

• Contractual necessity: Processing required to fulfil the contract between you and ernph — including operating your Account, processing payments, and delivering the gaming services you have agreed to use;
• Legal obligation: Processing necessary to comply with applicable Philippine law, including AML regulations, gaming regulatory requirements, tax obligations, and PAGCOR-related reporting duties;
• Legitimate interests: Processing undertaken for ernph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — where such interests are not overridden by your data privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — in particular for marketing communications and optional data uses. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6Sharing Your Personal Data

6.1 ernph Does Not Sell Your Data

ernph does not sell, rent, or commercially exploit your personal data to any third party for their independent marketing or commercial purposes. Your personal information is not a revenue stream at ernph.

6.2 Third Parties We Share Data With

ernph may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers — to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC service providers engaged by ernph to conduct identity document verification and face-matching during the verification process;
• Game providers: Software providers (such as JILI, PG Soft, Pragmatic Play, Evolution, and others) who supply the games you play on ernph — only the minimum data necessary for session management and fair play monitoring is shared;
• Regulatory authorities: Philippine government agencies, including PAGCOR and relevant financial intelligence units, where disclosure is required by law or regulatory obligation;
• Legal and compliance advisors: Lawyers, auditors, and compliance professionals engaged by ernph for legal, audit, or compliance purposes, subject to professional confidentiality obligations;
• Technology and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on ernph's behalf under strict data processing agreements.

7Data Retention

ernph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, audit, or reporting obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active Account and for a period of at least five (5) years following Account closure, consistent with Philippine AML and gaming regulatory record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable Philippine financial regulations;
• KYC identity documents: Retained for the duration of the Account and for five (5) years following Account closure or the last transaction, whichever is later;
• Customer support records: Retained for up to three (3) years from the date of the last interaction, unless a longer period is required due to an ongoing complaint or legal matter;
• Technical and device data: Retained for up to twelve (12) months in identifiable form, after which it may be anonymised and retained for statistical purposes;
• Marketing consent records: Retained for as long as you are subscribed and for one (1) year following unsubscription, to demonstrate your consent preferences.

Upon expiry of the applicable retention period, ernph will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

8Data Security Measures

ernph implements technical and organisational security measures appropriate to the risks associated with the processing of your personal data. These measures include, but are not limited to, the following:

• SSL/TLS encryption: All data transmitted between your device and the ernph Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The ernph.vip website is served exclusively over HTTPS;
• Password hashing: Account passwords are stored using one-way cryptographic hashing algorithms. ernph never stores passwords in plain text and cannot retrieve your password once set;
• Access controls: Access to personal data within ernph's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations;
• Two-factor authentication: ernph supports and encourages the use of two-factor authentication (2FA) for Player Accounts to prevent unauthorised access;
• Intrusion detection and monitoring: ernph's systems are monitored for unauthorised access attempts, anomalous activity, and potential security incidents on a continuous basis;
• Data minimisation: ernph collects and retains only the personal data that is necessary and proportionate for the specified processing purposes;
• Regular security reviews: ernph conducts periodic reviews of its data security practices and third-party data processors to ensure ongoing compliance with applicable standards.

9Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. ernph uses cookies and similar tracking technologies to operate the Platform, recognise returning Players, maintain session states, and analyse usage patterns to improve the service.

9.2 Types of Cookies Used by ernph

• Strictly necessary cookies: Required for the Platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality;
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how Players navigate and use the ernph Platform, helping us identify usability issues and improve the overall experience;
• Functional cookies: Store your preferences such as language settings, display options, and session duration choices to personalise your experience on ernph;
• Security cookies: Used to detect and prevent fraudulent login attempts, identify suspicious session activity, and protect Player Accounts from unauthorised access.

9.3 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to refuse, delete, or manage cookies. Please note that disabling strictly necessary cookies will prevent the ernph Platform from functioning correctly, and you will not be able to log in to your Account or play games if these cookies are blocked.

10Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines and ernph's data governance practices, you have the following rights with respect to your personal data held by ernph:

• Right to be informed: You have the right to be informed about how your personal data is being collected and processed — which is the primary purpose of this Privacy Policy;
• Right of access: You have the right to request a copy of the personal data ernph holds about you, and to receive information about how that data is being processed;
• Right to rectification: You have the right to request correction of inaccurate, incomplete, or outdated personal data held in your ernph Account;
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected and no legal retention obligation applies. Note that erasure requests may be declined where retention is required by law;
• Right to object: You have the right to object to specific types of processing, including direct marketing. Where processing is based on consent, you may withdraw that consent at any time;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another data controller;
• Right to complain: You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact ernph's data privacy team at [email protected]. ernph will respond to all valid data subject requests within thirty (30) calendar days of receipt.

11Children & Minors

The ernph Platform is strictly intended for individuals who are twenty-one (21) years of age or older, consistent with the minimum age for gambling participation under PAGCOR regulations in the Philippines. ernph does not knowingly collect personal data from persons under the age of 21.

If ernph becomes aware that personal data has been collected from a person under the age of 21 — whether through the registration process or subsequent KYC verification — the associated Account will be immediately suspended, all collected data reviewed, and data deletion procedures initiated in accordance with applicable law.

Parents and guardians are strongly encouraged to take appropriate measures to prevent minors in their households from accessing the ernph Platform or any other online gambling service. If you believe a minor has registered on ernph, please contact us immediately at [email protected].

12Third-Party Services & External Links

The ernph Platform may contain references to or integrations with third-party services, including payment providers such as GCash and Maya, game software providers, and identity verification platforms. These third-party services operate under their own privacy policies and data processing terms, which are independent of this Privacy Policy.

ernph is not responsible for the data privacy practices of any third-party service provider. Players are encouraged to review the privacy policies of third-party services they interact with, including GCash and Maya, before providing those services with personal information.

Where ernph engages third-party data processors to handle personal data on its behalf, such processors are required to enter into data processing agreements with ernph that obligate them to process personal data only in accordance with ernph's documented instructions and applicable Philippine data protection law.

13International Data Transfers

The ernph Platform and its associated systems may use infrastructure, service providers, or data processors located outside the Philippines. Where personal data is transferred to recipients in other countries, ernph will ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under the Data Privacy Act of 2012 of the Philippines.

Such safeguards may include contractual clauses, data processing agreements with equivalent data protection obligations, or transfers to jurisdictions recognised as providing an adequate level of data protection by the National Privacy Commission of the Philippines.

14Amendments to This Privacy Policy

ernph reserves the right to update, revise, or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or business operations. When material changes are made to this Policy, ernph will notify registered Players through one or more of the following channels: a notification displayed upon login to the ernph Platform, an email to your registered Account email address, or a prominent notice published at ernph.vip/privacy-policy.

Continued use of the ernph Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the changes. The effective date at the top of this Policy will always reflect when it was last updated. It is your responsibility to review this Policy periodically to remain informed about how ernph handles your personal data.

The most current version of the ernph Privacy Policy is always available at ernph.vip/privacy-policy.

15Contact & Data Privacy Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how ernph handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within your ernph Account dashboard — for general privacy questions and urgent data concerns;
• Email: [email protected] — for formal data subject access requests, rectification requests, erasure requests, and written complaints. Please include "Data Privacy Request" in your email subject line to ensure prompt routing to the appropriate team.

ernph will acknowledge receipt of formal privacy requests within five (5) business days and will respond substantively within thirty (30) calendar days. For complex requests that require additional processing time, ernph will notify you of the extended timeline and the reason for the delay.

If you are not satisfied with ernph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for the enforcement of the Data Privacy Act of 2012.