Evotaya Privacy Policy

Evotaya is committed to protecting the privacy and personal data of all players and visitors to the Platform. We recognise that when you share your personal information with us, you are placing trust in Evotaya to handle it responsibly, securely, and in accordance with applicable law.

This Policy applies to all personal data collected through the Evotaya website, mobile platform, and any related services. It covers data collected directly from you during registration and gameplay, as well as data collected automatically through your use of the Platform.

Evotaya processes personal data in compliance with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and its implementing rules and regulations, as administered by the National Privacy Commission (NPC). Where applicable, Evotaya also observes internationally recognised data protection principles.

Evotaya collects personal data from you in the following ways and categories:

2.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address, email address, mobile number, and username, collected when you create an Evotaya Account.
• Identity Verification (KYC) Data: Government-issued identification documents (such as a Philippine National ID, passport, or driver's licence), proof of address, and proof of payment method ownership, collected as part of our Know Your Customer process.
• Financial Data: Payment method details, transaction history, deposit and withdrawal records. Note that Evotaya does not store full card numbers or full bank account details — these are handled by our regulated payment processors.
• Communications Data: Records of your correspondence with our support team, including live chat transcripts, emails, and any feedback or complaints you submit.
• Responsible Gaming Data: Information you provide when setting deposit limits, activating self-exclusion, or engaging with our responsible gaming tools.

2.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, device type, operating system, and screen resolution.
• Usage Data: Pages visited, games played, session duration, wagering history, login timestamps, and navigation patterns within the Platform.
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 7 of this Policy.

2.3 Data from Third Parties

• Payment Processors: Transaction confirmation and fraud screening data from GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment providers.
• Identity Verification Providers: Results of automated identity and age verification checks conducted by third-party KYC service providers.
• Fraud Prevention Services: Risk scoring and fraud indicator data from third-party fraud detection partners.

Evotaya uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your Evotaya Account, including verifying your identity and age (21+), processing deposits and withdrawals, and providing customer support.
• Service Delivery: To provide you with access to the games, promotions, and features available on the Evotaya Platform, and to personalise your gaming experience.
• Legal and Regulatory Compliance: To fulfil our obligations under Philippine law, including anti-money laundering (AML) requirements, KYC obligations, and reporting duties to relevant regulatory authorities such as PAGCOR and the NPC.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling and to administer responsible gaming tools including deposit limits, session reminders, and self-exclusion.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about Evotaya, where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse usage data and player feedback in order to improve the functionality, performance, and content of the Evotaya Platform.
• Dispute Resolution: To investigate and resolve complaints, disputes, and legal claims involving your Account or transactions.

Evotaya processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual Necessity: Processing is necessary to perform our contract with you — that is, to provide the Evotaya gaming services you have registered for, including Account management, payment processing, and customer support.
• Legal Obligation: Processing is required to comply with our legal and regulatory obligations, including AML compliance, KYC verification, age verification, and reporting to PAGCOR and other competent authorities.
• Legitimate Interests: Processing is necessary for Evotaya's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Evotaya does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, for the purpose of processing deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by Evotaya to verify player identities and comply with regulatory requirements.
• Fraud Prevention Partners: Third-party fraud detection and risk management services that assist Evotaya in identifying and preventing fraudulent activity on the Platform.
• Regulatory and Law Enforcement Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), law enforcement agencies, and other competent authorities, where disclosure is required by law or court order.
• Technology and Infrastructure Providers: Cloud hosting, data storage, and IT service providers who process data on Evotaya's behalf under strict data processing agreements.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by Evotaya in connection with the operation of the Platform, subject to professional confidentiality obligations.

Evotaya retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required under Philippine AML regulations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a specific legal obligation or ongoing investigation.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which your data will be suppressed from marketing lists.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with Evotaya's data disposal procedures.

Evotaya uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the Platform, analyse usage patterns, and support our security and fraud prevention measures. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as Account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the Platform, such as which pages are visited most frequently and whether error messages are received. This data helps Evotaya improve the Platform's performance and user experience.
• Functional Cookies: These cookies allow the Platform to remember your preferences, such as your preferred language, display settings, and responsible gaming configurations, to provide a more personalised experience.
• Marketing and Targeting Cookies: These cookies are used to deliver relevant promotional content and offers to you based on your interests and activity on the Platform. They are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Evotaya Platform. For strictly necessary cookies, no consent is required as they are essential to the operation of the service.

Under the Data Privacy Act of 2012 of the Philippines and applicable regulations, you have the following rights in relation to your personal data held by Evotaya:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as set out in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data Evotaya holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by Evotaya. You may update certain Account details directly through your Account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to Evotaya's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on Evotaya's legitimate interests.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: If you believe that Evotaya has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Evotaya takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the Evotaya Platform is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Access to personal data is restricted to authorised Evotaya personnel and service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Secure Data Storage: Personal data is stored on secure servers with appropriate physical and logical access controls. Sensitive data such as passwords is stored in hashed form and is never stored in plain text.
• Regular Security Audits: Evotaya conducts regular security assessments and vulnerability testing to identify and address potential weaknesses in our systems.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, Evotaya will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

While Evotaya takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your Account credentials and should notify us immediately if you suspect any unauthorised access to your Account.

Evotaya employs age verification measures during the registration process and through ongoing KYC checks to prevent underage individuals from accessing the Platform. If you are a parent or guardian and believe that a minor has registered an Account on Evotaya, please contact our support team immediately so that we can investigate and take appropriate action.

The Evotaya Platform may contain references to third-party services, such as payment providers and game software suppliers. These third parties operate their own websites and services, which are governed by their own privacy policies. Evotaya is not responsible for the privacy practices or content of any third-party services.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Evotaya Platform, particularly your chosen payment provider (such as GCash or PayMaya), as their data handling practices may differ from ours.

Evotaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The date of the most recent revision is displayed at the top of this page.

Where changes are material, Evotaya will endeavour to notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the Evotaya Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes.

If you do not agree with any changes to this Privacy Policy, you should cease using the Platform and may request the closure of your Account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Evotaya, please contact our Data Protection Officer (DPO). We are committed to addressing all privacy-related enquiries promptly and transparently.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. Information about the NPC and how to file a complaint is available through official Philippine government channels.