Your Data, Your Rights: echo33 is committed to protecting the privacy and security of all users on our platform. This policy is written in plain, accessible English so you know exactly what data we hold and why.
1 Introduction
echo33 ("we," "us," or "our") operates the online gaming platform accessible at echo33.net (the "Platform"). We are committed to protecting the personal information of all users ("you" or "your") who access or use our Platform.
This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, the circumstances under which we may share it with third parties, and the rights you have in relation to your personal data. This policy applies to all users of the echo33 Platform, including registered account holders and visitors who browse the Platform without registering.
By accessing or using the echo33 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the Platform. This Privacy Policy should be read together with our Terms & Conditions.
2 Personal Data We Collect
echo33 collects the following categories of personal data from users of the Platform:
Identity & Contact Data:
- Full legal name, date of birth, and gender;
- Email address and mobile phone number;
- Residential address (city, province, postal code);
- Government-issued identification documents (e.g., Philippine passport, SSS ID, driver's licence, PhilSys national ID) — collected for age and identity verification purposes.
Financial Data:
- GCash or PayMaya account details (mobile number linked to the account);
- Bank account details (bank name, account number) for withdrawal processing;
- Transaction history, including deposit amounts, withdrawal amounts, and dates;
- Debit card details where applicable (card number is tokenised and never stored in plain text).
Gaming & Behavioural Data:
- Game history, bet amounts, win/loss records, and session durations;
- Bonus and promotion usage history;
- Responsible gaming settings (deposit limits, self-exclusion status).
Technical Data:
- IP address, device type, operating system, and browser type;
- Login timestamps and session activity logs;
- Cookies and similar tracking technologies (see Section 7).
Communications Data:
- Records of your communications with echo33 customer support, including live chat transcripts and email correspondence.
3 How We Collect Your Data
echo33 collects personal data through the following means:
- Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, or contacting customer support;
- Automated collection: Technical data collected automatically when you access the Platform, including through cookies, log files, and analytics tools;
- Third-party sources: Identity verification data from third-party KYC (Know Your Customer) service providers; fraud detection data from anti-fraud partners; payment data from GCash, PayMaya, and banking partners.
KYC Verification: As required under Philippine anti-money laundering regulations, echo33 is obligated to verify the identity of all users before processing withdrawals. This process involves the collection and verification of government-issued identification documents.
4 How We Use Your Personal Data
echo33 uses your personal data for the following purposes:
- Account management: To create, maintain, and manage your echo33 account, including processing deposits and withdrawals;
- Identity & age verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with Philippine regulations;
- Service delivery: To provide access to games, promotions, and other Platform features;
- Customer support: To respond to your enquiries, complaints, and support requests;
- Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
- Responsible gaming: To monitor gaming behaviour and enforce responsible gaming tools such as deposit limits and self-exclusion;
- Legal compliance: To comply with applicable Philippine laws and regulations, including PAGCOR requirements and anti-money laundering obligations;
- Marketing communications: To send you promotional offers and updates, where you have consented to receive such communications. You may opt out at any time;
- Platform improvement: To analyse usage patterns and improve the functionality and user experience of the Platform.
5 Legal Basis for Processing
echo33 processes your personal data on the following legal bases under the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations:
- Contractual necessity: Processing required to perform our contract with you (i.e., to operate your account and provide gaming services);
- Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions and anti-money laundering regulations;
- Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement, where such interests are not overridden by your rights;
- Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting echo33 support.
6 Data Sharing & Disclosure
echo33 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment processors: GCash, PayMaya, and banking partners, for the purpose of processing deposits and withdrawals;
- KYC & identity verification providers: Third-party services used to verify your identity and age in compliance with regulatory requirements;
- Fraud prevention partners: Services used to detect and prevent fraudulent activity on the Platform;
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where required by law or court order;
- IT & infrastructure providers: Cloud hosting and data storage providers who process data on our behalf under strict data processing agreements;
- Professional advisers: Lawyers, auditors, and accountants, where necessary for legal or compliance purposes.
All third-party service providers who process personal data on behalf of echo33 are required to implement appropriate technical and organisational security measures and to process data only in accordance with echo33's instructions.
No Data Sales: echo33 will never sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes.
7 Cookies & Tracking Technologies
echo33 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse how the Platform is used.
We use the following types of cookies:
- Essential cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled;
- Functional cookies: Used to remember your preferences, such as language settings and login status;
- Analytics cookies: Used to collect anonymised data about how users interact with the Platform, helping us improve its performance and usability;
- Marketing cookies: Used to deliver relevant promotional content, where you have consented to receive marketing communications.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.
8 Data Retention
echo33 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
Specifically:
- Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering regulations;
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
- KYC documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later;
- Customer support records: Retained for three (3) years from the date of the last interaction;
- Marketing data: Retained until you withdraw your consent or request deletion.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.
9 Data Security
echo33 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the Platform;
- Encryption of sensitive data at rest, including financial information and identity documents;
- Multi-factor authentication options for account access;
- Regular security audits and penetration testing;
- Strict access controls limiting employee access to personal data on a need-to-know basis;
- Staff training on data protection and information security best practices.
While echo33 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, echo33 will notify you and the National Privacy Commission (NPC) in accordance with the requirements of the Data Privacy Act of 2012.
Your Responsibility: You are responsible for keeping your echo33 login credentials confidential. Do not share your password with anyone. If you suspect unauthorised access to your account, contact echo33 support immediately.
10 Your Rights
Under the Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to your personal data held by echo33:
- Right to be informed: You have the right to be informed of how your personal data is being collected and processed;
- Right of access: You have the right to request a copy of the personal data echo33 holds about you;
- Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data;
- Right to erasure: You have the right to request deletion of your personal data, subject to our legal retention obligations;
- Right to object: You have the right to object to the processing of your personal data for direct marketing purposes;
- Right to data portability: You have the right to receive your personal data in a structured, commonly used format;
- Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.
To exercise any of these rights, please contact echo33's Data Protection Officer using the contact details in Section 13. We will respond to all verified requests within thirty (30) days.
11 Children's Privacy
21+ Only: The echo33 Platform is strictly for users aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has registered on the echo33 Platform, please contact us immediately at the details provided in Section 13 so that we can take appropriate action.
12 Changes to This Privacy Policy
echo33 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page. Where required by applicable law, we will provide advance notice of material changes via email or an in-platform notification.
Your continued use of the echo33 Platform following the posting of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.
13 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact echo33's Data Protection Officer:
- Email: [email protected]
- Support Email: [email protected]
- Live Chat: Available 24/7 via the echo33 Platform
- Response Time: We aim to respond to all data-related requests within 30 days
Email addresses above are displayed as plain text for informational purposes only and are not clickable links.