Privacy Policy

This Privacy Policy ("Policy") is issued by evocasino ("evocasino," "we," "us," or "our") and applies to all personal information collected through the evocasino website at https://evocasino.vip, its associated mobile-optimized interface, and all related services, features, and communications (collectively, the "Platform").

This Policy is designed to inform you — our players and visitors based primarily in the Philippines — about how we handle your personal data in a manner that is transparent, lawful, and consistent with your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC).

By accessing or using the evocasino Platform, registering an account, or providing us with any personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

evocasino collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Residential address (including barangay, city/municipality, province)
• Email address
• Mobile number
• Username and encrypted password
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS card, PRC ID, voter's ID)
• Proof of address documents (e.g., utility bills, bank statements issued within the last three months)
• Selfie or facial image for liveness verification, where required
• Source of funds documentation, where required for AML compliance

2.3 Financial and Transaction Data

• GCash account number or registered mobile number
• PayMaya / Maya account details
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) for withdrawal processing
• Deposit and withdrawal history, including amounts in Philippine Peso (PHP / ₱), timestamps, and transaction reference numbers
• Bonus and promotional credit history

2.4 Gameplay and Activity Data

• Game session history, including games played, wager amounts, wins, and losses
• Responsible gaming settings and self-exclusion records
• Bonus and promotion participation history
• Customer support interaction records

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Session timestamps and duration
• Cookie identifiers and similar tracking data (see Section 7)
• Referral source (how you arrived at the evocasino Platform)

evocasino collects personal data through the following channels:

3.1 Directly from You. When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings, you provide personal data directly to us.

3.2 Automatically Through Platform Use. When you access and use the evocasino Platform, we automatically collect technical and device data through cookies, web beacons, server logs, and similar technologies. This data is collected regardless of whether you are a registered player or an anonymous visitor.

3.3 From Third-Party Service Providers. We may receive personal data about you from third-party identity verification providers, payment processors (such as GCash, PayMaya, and Philippine banking partners), fraud detection services, and analytics providers. Data received from third parties is handled in accordance with this Policy.

3.4 From Regulatory Authorities. In certain circumstances, we may receive information about you from PAGCOR, the AMLC, or other Philippine regulatory bodies in connection with our compliance obligations.

evocasino processes your personal data only for specific, legitimate purposes. The table below summarizes the primary purposes for which we use your data:

evocasino will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

Under the Philippine Data Privacy Act, evocasino processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your player account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with our legal obligations under Philippine law, including the Anti-Money Laundering Act (RA 9160), PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for our legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending you promotional communications or using non-essential cookies — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

evocasino does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances:

6.1 Service Providers (Data Processors). We engage trusted third-party service providers who process personal data on our behalf and under our instructions. These include:

• KYC and identity verification providers
• Payment processors and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank)
• Cloud hosting and data storage providers
• Fraud detection and cybersecurity service providers
• Customer support platform providers
• Analytics and platform performance monitoring providers

All service providers are contractually bound to process your data only as instructed by evocasino and to maintain appropriate security measures.

6.2 Regulatory and Law Enforcement Authorities. We are required by Philippine law to share certain data with:

• PAGCOR — for gaming regulatory compliance and reporting
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under RA 9160
• National Privacy Commission (NPC) — in the event of a personal data breach or upon lawful request
• Philippine law enforcement agencies — pursuant to a valid court order or lawful legal process

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of evocasino's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms before your data is subject to a different privacy policy.

evocasino uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the evocasino Platform, including your ability to log in and access your account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

evocasino does not use third-party advertising cookies or cross-site tracking technologies for behavioral advertising purposes.

evocasino retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, as required by the AMLC.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant support interaction.
• Technical and Device Data: Retained for up to twelve (12) months from the date of collection, unless required for longer retention in connection with a fraud investigation or legal proceeding.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents reconstruction of the original data.

evocasino implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the evocasino Platform is encrypted using TLS 1.2 or higher (HTTPS).
• Encryption at Rest: Sensitive personal data stored on our servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized evocasino personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Password Security: Player passwords are stored as salted cryptographic hashes. evocasino staff cannot view your password in plain text.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for player accounts and require it for all administrative access to systems containing personal data.
• Regular Security Audits: Our Platform and infrastructure undergo regular security assessments, penetration testing, and vulnerability scanning by qualified security professionals.
• Staff Training: All evocasino personnel who handle personal data receive regular data privacy and security training.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by evocasino:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right to Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AMLC regulations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe evocasino has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to all valid requests within fifteen (15) business days. In complex cases, we may extend this period by a further fifteen (15) business days, in which case we will notify you of the extension and the reason for it.

The evocasino Platform is strictly intended for individuals who are 21 years of age or older, in accordance with the minimum legal age for casino-style gambling in the Philippines as prescribed under applicable PAGCOR regulations.

evocasino does not knowingly collect personal data from individuals under the age of 21. If we discover or have reasonable grounds to believe that a registered player is under 21 years of age, we will immediately suspend the account, forfeit any associated balances and winnings, and delete the personal data of the underage individual to the extent permitted by our legal obligations.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to evocasino, please contact our Data Protection Officer immediately using the contact details in Section 14. We will take prompt action to investigate and, where confirmed, delete the relevant data.

evocasino primarily stores and processes personal data within the Philippines. However, certain service providers we engage — such as cloud infrastructure providers and cybersecurity vendors — may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, evocasino ensures that such transfers are made only to countries or organizations that provide an adequate level of data protection, or that appropriate safeguards are in place, such as contractual data processing agreements that incorporate the standard data protection clauses recognized by the NPC.

evocasino will not transfer your personal data to a foreign country or international organization unless we have taken all reasonable steps to ensure that your data will be afforded the same level of protection it receives under Philippine law.

evocasino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the evocasino Platform informing players of the change.
• Where practicable, send an email notification to registered players at the email address on file.

Your continued use of the evocasino Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any changes to this Policy, you should stop using the Platform and may request account closure in accordance with our Terms and Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how evocasino is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by evocasino, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing evocasino's compliance with the Philippine Data Privacy Act and is your primary point of contact for all data privacy matters.

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act.