Privacy Policy
Last Updated: February 11, 2026
1. Introduction
EASTCASH LENDING CORPORATION ("EASTCASH", "we", "us", or "our"), operating under the trade name EastCash, is a duly registered corporation with the Securities and Exchange Commission (SEC Company Registration No. 2021060016536-20) and authorized to operate as a Lending Company under Certificate of Authority No. L-21-0010-95 pursuant to Republic Act No. 9474. Our principal office is located at 9059 Lower Ground Floor, Romehand Building, Centennial Road, Batong Dalig, Kawit, Cavite, Philippines.
We are committed to protecting the privacy and security of your personal information in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, its Implementing Rules and Regulations (IRR), and all relevant issuances of the National Privacy Commission (NPC).
This Privacy Policy explains how we collect, use, store, share, and protect your personal and sensitive personal information when you access or use our website, mobile application, and lending services (collectively, the "Services").
2. Information We Collect
We collect the following categories of personal information to process your loan application, verify your identity, assess creditworthiness, and provide our Services:
2.1 Personal Identification Information
| Data Type | Examples |
|---|---|
| Full Legal Name | First name, middle name, last name, suffix |
| Date of Birth | Month, day, year of birth |
| Contact Information | Mobile number (+63), email address |
| Residential Address | Complete home address including barangay, city, province |
| Government-Issued ID | Passport, UMID, Driver's License, PhilID, SSS ID |
2.2 Financial Information
Employment status, employer name and address, monthly income, source of income, existing financial obligations, bank account details, e-wallet information (GCash, Maya), and transaction history related to our Services.
2.3 Sensitive Personal Information
Photographs of your government-issued identification documents and selfie photographs for identity verification (KYC) purposes. These are collected with your explicit consent and are processed solely for identity verification and fraud prevention.
2.4 Technical and Device Information
IP address, device type and model, operating system, browser type and version, device identifiers (device fingerprint), screen resolution, language settings, access timestamps, and usage patterns. This information is collected automatically when you access our Services and is used for security, fraud prevention, and service improvement purposes.
3. Purpose of Collection and Use
We process your personal information for the following lawful purposes:
| Purpose | Legal Basis |
|---|---|
| Account registration and identity verification (KYC) | Consent, Contractual Necessity |
| Credit assessment and loan underwriting | Contractual Necessity, Legitimate Interest |
| Loan disbursement and repayment processing | Contractual Necessity |
| Fraud detection and prevention | Legitimate Interest, Legal Obligation |
| Compliance with regulatory requirements (BSP, SEC, AMLC) | Legal Obligation |
| Customer service and dispute resolution | Contractual Necessity, Legitimate Interest |
| Service improvement and analytics | Legitimate Interest |
4. Data Sharing and Disclosure
We do not sell your personal information to third parties. We may share your information only under the following circumstances:
Payment Service Providers: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), and partner banks for loan disbursement and repayment processing.
KYC and Identity Verification Partners: Third-party identity verification services to validate the authenticity of submitted identification documents.
Credit Information Corporation (CIC): As required under Republic Act No. 9510 (Credit Information System Act), we may submit and access credit data through the CIC.
Regulatory Authorities: The Securities and Exchange Commission (SEC), Bangko Sentral ng Pilipinas (BSP), Anti-Money Laundering Council (AMLC), National Privacy Commission (NPC), and other government agencies as required by law.
Legal Proceedings: When required by court order, subpoena, or other legal process, or to protect our rights, property, or safety.
5. Data Retention
We retain your personal information for the duration of your account's existence and for a period of five (5) years after the termination of your last transaction with us, or as required by applicable laws and regulations, whichever is longer. After the retention period, your personal data will be securely disposed of through deletion, anonymization, or destruction.
Certain records may be retained for longer periods as required by the Anti-Money Laundering Act (AMLA), the Securities Regulation Code, and other applicable Philippine laws.
6. Data Security
We implement appropriate organizational, physical, and technical security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
Encryption of data in transit (TLS/SSL) and at rest; access controls and authentication mechanisms; regular security assessments and vulnerability testing; employee training on data privacy and security; secure cloud infrastructure with industry-standard certifications; and incident response procedures for data breach management.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to take steps to protect your account credentials and report any suspicious activity immediately.
7. Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights:
Right to be Informed: You have the right to be informed of the collection and processing of your personal data, including the purpose, scope, and method of processing.
Right to Access: You have the right to reasonable access to your personal data that we hold, upon request.
Right to Object: You have the right to object to the processing of your personal data, including processing for direct marketing, automated processing, or profiling.
Right to Erasure or Blocking: You have the right to request the removal or blocking of your personal data from our systems, subject to legal and regulatory requirements.
Right to Rectification: You have the right to correct any inaccurate or incomplete personal data.
Right to Data Portability: You have the right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to File a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.
8. Cookies and Tracking Technologies
Our website and application use cookies and similar tracking technologies to enhance your browsing experience, analyze usage patterns, and improve our Services. Essential cookies are necessary for the operation of our platform (e.g., session management, authentication). Analytics cookies help us understand how visitors interact with our website. You may manage your cookie preferences through your browser settings; however, disabling essential cookies may affect the functionality of our Services.
9. Children's Privacy
Our Services are not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from minors. If we become aware that we have collected personal data from a person under 18, we will take immediate steps to delete such information from our systems.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, through in-app notifications or email. Your continued use of our Services after such changes constitutes your acceptance of the revised Privacy Policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:
EASTCASH LENDING CORPORATION
Data Protection Officer
9059 Lower Ground Floor, Romehand Building
Centennial Road, Batong Dalig, Kawit, Cavite, Philippines
Phone: +63 965 945 3599 / +63 912 167 7415
Email: [email protected]
SEC Company Registration No. 2021060016536-20 | Certificate of Authority No. L-21-0010-95
You may also file a complaint with the National Privacy Commission at https://www.privacy.gov.ph if you believe your data privacy rights have been violated.