Privacy Policy

Last updated: 25 July 2026

This Privacy Policy explains how ESONSHOP (Registration No: PLACEHOLDER — client DTI/SEC registration number), operating Esonshop at esonshopph.com ("we", "us", "our"), collects, uses, discloses, stores, and protects your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, Philippines) ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). By using the Service, you consent to the practices described here.

1. Personal Data We Collect

We collect only what we need to operate the Service:

  • Account data: username, email address, and password (stored only as a secure hash by our authentication provider).
  • Order data: game User ID (UID) and server, product ordered, contact phone number, and order email.
  • Payment & wallet data: Eson Coins balance and ledger, top-up records, and — for manual or oversea top-ups — the payment proof you upload.
  • Verification data: identity documents you provide only if KYC is requested for a large or suspicious transaction (Terms section 4).
  • Technical data: IP address, device and browser information, and request logs collected automatically for security and fraud prevention.

2. How We Use Your Data

We process your personal data to create and manage your account; process and deliver orders; operate the Eson Coins wallet and verify manual top-ups; provide customer support; detect and prevent fraud, chargeback abuse, and money laundering; comply with legal and accounting obligations; and improve the Service. We do not use your data for unrelated purposes.

3. Legal Basis & Consent

We process your data on the lawful bases recognised by the DPA: your consent (given when you use the Service), the performance of our contract with you (fulfilling your orders), and our compliance with Philippine law. You may withdraw consent at any time (section 8), though this may prevent us from providing the Service.

4. Disclosure to Third Parties

We do not sell your personal data. We disclose only what is necessary to:

  • Fulfilment suppliers: your game UID and server are transmitted to the upstream supplier that fulfils your order so the top-up reaches your account.
  • Payment & verification providers: payment and anti-fraud processors used at checkout.
  • Infrastructure providers: our hosting, database, storage, and security (bot-protection) providers, acting as our data processors.
  • Authorities: government or law-enforcement bodies where disclosure is required by law.

5. Cross-Border Transfer

Because some fulfilment suppliers operate outside the Philippines, the limited order data needed to deliver your top-up (your game UID and server) may be processed in other countries in Southeast Asia. We share only the minimum data required for fulfilment and take reasonable steps, consistent with the DPA, to ensure it is handled with a comparable level of protection.

6. Storage & Security

Data is stored on managed infrastructure with encryption in transit and access controls, including row-level security that restricts who can read each record. Manual top-up proofs are held in a private, access-restricted store. Order references shown publicly (for example on the Track Order page) are partially masked so personal details are not exposed.

7. Data Retention

We keep transaction and account records for as long as needed to provide the Service and to meet accounting, tax, and legal obligations under Philippine law. When data is no longer required, it is securely deleted or anonymised.

8. Your Rights as a Data Subject

Subject to the DPA, you have the right to be informed about how your data is processed; to access your personal data; to object to processing; to request correction of inaccurate data; to request erasure or blocking of data that is unlawfully processed; to data portability; and to be indemnified for damages caused by unlawful processing. You may also lodge a complaint with the National Privacy Commission. To exercise any of these rights, contact us using the details in section 12. We may need to verify your identity before acting on a request.

9. Cookies

We use essential cookies for authentication and session management, and a security cookie or challenge (bot protection) to guard against automated abuse. We do not set third-party advertising or tracking cookies without your consent.

10. Children

The Service is not directed at children under 18. If you are under 18, use the Service only with the consent and supervision of a parent or guardian. We do not knowingly collect data from children without such consent.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above reflects the current version, and continued use of the Service after an update means you accept the revised policy.

12. Contact Us

For any privacy request or question, contact our data-protection point of contact:

Legal Entity:
ESONSHOP (Reg. No. PLACEHOLDER — client DTI/SEC registration number)
Headquarters:
PLACEHOLDER — registered business address, Philippines
WhatsApp:
+6300000000