echo33 Privacy Policy

01 Introduction

echo33 ("echo33," "we," "us," "our") operates the online gaming platform accessible at echo33.app. We are committed to protecting the privacy and personal data of all users ("Player," "User," "you") who access or use the echo33 platform.

This Privacy Policy describes how echo33 collects, uses, stores, shares, and protects your personal information in connection with your use of the echo33 platform, including all games, payment services, customer support interactions, and promotional activities offered through echo33.

This Privacy Policy is governed by the applicable data privacy laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By registering for or using the echo33 platform, you consent to the data practices described in this Privacy Policy.

This Privacy Policy should be read alongside echo33's Terms & Conditions and Responsible Gaming Policy.

02 Data We Collect

echo33 collects the following categories of personal data from players:

03 How We Collect Data

echo33 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the echo33 platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud signals from payment processors such as GCash and PayMaya; publicly available information used for AML screening.

04 How We Use Your Data

echo33 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your echo33 account; verifying your identity and age (21+ requirement); processing login and authentication.
• Payment processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods; detecting and preventing fraudulent transactions.
• Platform operation: Delivering games, processing wagers, calculating and crediting winnings, managing bonuses and promotions.
• Legal and regulatory compliance: Meeting obligations under Philippine gaming regulations, the Data Privacy Act of 2012, and anti-money laundering (AML) laws; responding to lawful requests from regulatory authorities.
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behavior; enforcing deposit limits, self-exclusion requests, and cooling-off periods.
• Customer support: Responding to inquiries, resolving disputes, and improving the quality of our support services.
• Marketing and communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analyzing usage patterns to improve platform performance, game selection, and user experience.

05 Legal Basis for Processing

echo33 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and echo33 — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including gaming regulations, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

echo33 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. echo33 may share your personal data with the following categories of recipients:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your transactions.
• KYC and identity verification providers: Third-party services used to verify your identity and age as required by Philippine regulations.
• Game providers: Licensed third-party game studios and live dealer operators who supply games available on the echo33 platform. These providers may receive limited technical data necessary to deliver their games.
• Regulatory and law enforcement authorities: Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), and law enforcement agencies, where disclosure is required by law or court order.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on echo33's behalf under strict data processing agreements.

07 Cookies & Tracking Technologies

echo33 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies used include:

• Essential cookies: Required for the platform to function, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to understand how players interact with the echo33 platform, which pages are visited most frequently, and where technical issues occur. This data is aggregated and anonymized.
• Preference cookies: Used to remember your settings and preferences, such as language and display options.
• Marketing cookies: Used to deliver relevant promotional content to players who have opted in to marketing communications. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect your ability to use certain features of the echo33 platform.

08 Data Retention

echo33 retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following retention periods:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable regulatory requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing data: Retained until you withdraw your consent to receive marketing communications or request deletion, whichever occurs first.

When personal data is no longer required, echo33 will securely delete or anonymize it in accordance with applicable data protection standards.

09 Data Security

echo33 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the echo33 platform.
• Encrypted storage of sensitive personal and financial data at rest.
• Multi-factor authentication (MFA) options for player accounts to prevent unauthorized access.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Access controls limiting employee access to personal data on a strict need-to-know basis.
• Incident response procedures to detect, contain, and notify affected players of any data breach in accordance with the Data Privacy Act of 2012.

10 Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by echo33:

• Right to be informed: The right to know what personal data echo33 collects about you and how it is used — as described in this Privacy Policy.
• Right of access: The right to request a copy of the personal data echo33 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to echo33's legal obligations to retain certain data under Philippine regulations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact echo33's Data Protection Officer at [email protected]. echo33 will respond to all verified requests within thirty (30) days.

11 Children's Privacy

The echo33 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. echo33 does not knowingly collect personal data from individuals under the age of 21.

If echo33 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all funds will be frozen pending investigation, and the personal data will be deleted in accordance with applicable law. If you believe a minor has registered on the echo33 platform, please contact us immediately at [email protected].

12 Third-Party Links

The echo33 platform may contain references to third-party payment providers and game studios. echo33 is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of echo33.

echo33 does not control and is not responsible for the content, privacy policies, or practices of any third-party websites or services that may be linked from the echo33 platform.

13 Changes to This Policy

echo33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, echo33 will notify registered players via the email address associated with their account or through a prominent notice on the platform.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. Your continued use of the echo33 platform following any update constitutes your acceptance of the revised Privacy Policy.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or echo33's data practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.