Security at ECP
Security is part of the architecture and operation of Easy Cash Poker. This page presents the principles adopted without exposing details that could reduce the platform's own protection.
Last updated: September 14, 2026.This version was translated with the assistance of artificial intelligence. In case of any discrepancy, the original Brazilian Portuguese version shall prevail.
1. Access control
ECP uses authentication mechanisms, user sessions, roles and permissions to limit access to features and information available in each context.
User organizations should grant only the access required by each team member and revoke credentials that are no longer used.
2. Communication protection
Communication with ECP services uses secure transport protocols when provided by the platform infrastructure and its service providers.
3. Infrastructure and data
ECP uses specialized providers for components such as applications, databases, authentication, storage and communications.
Technical and organizational controls are reviewed as the product evolves, taking risks, data sensitivity and operational capacity into account.
4. Logging and investigation
Technical and security events may be logged for diagnostics, abuse prevention, incident investigation and protection of the platform and its users.
5. Updates and fixes
ECP may apply updates, fixes and infrastructure changes to reduce vulnerabilities, preserve compatibility and maintain service stability.
6. Devices and offline use
Local or offline features may store data on the device used by the user. The security of this information also depends on protection of the device itself.
We recommend screen locks, an updated operating system, individual passwords and restricted physical access to computers, phones and other equipment used with ECP.
7. Shared responsibility
No technical control replaces good user practices. Passwords should not be shared, devices should not be left unlocked and former team members' access should be revoked.
8. Incidents
Suspected unauthorized access, credential leaks or other incidents should be reported as soon as identified to allow analysis and containment.
When an incident involves personal data and creates legal reporting obligations, the measures applicable to the specific case will be adopted.
9. Responsible vulnerability disclosure
If you identify a possible vulnerability, do not attempt to access third-party data, alter information, interrupt services or increase the impact of the issue.
Send the description to the support address, including only the information needed to reproduce and understand the problem.
10. Limitations
No internet-connected system can guarantee zero risk. ECP's goal is to reduce risks through controls compatible with the nature of the service and improve them continuously as the platform evolves.