EzySpin Privacy Policy – Player Data Protection in Malaysia

1. Introduction

EzySpin ("we", "platform") is an online entertainment platform operating in Malaysia, offering slots, Live Casino, Sports Betting, poker, lottery, and progressive jackpots to over 200,000 registered players. We understand that player trust is EzySpin's most valuable asset.

This Privacy Policy is drawn up in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data protection. It applies to all players who register, browse, or use any services provided by EzySpin through our official website, mobile app, or any other official channels.

As the data controller, EzySpin is responsible for ensuring that all personal information you provide to us is processed lawfully, fairly, and transparently in accordance with applicable laws in Malaysia.

2. Personal Data We Collect

EzySpin collects various types of personal data depending on how you interact with our platform. Below is a full list of the data categories we may collect:

3. How We Collect Data

EzySpin collects your personal information through several different channels:

• Account Registration: When you register a new account with EzySpin, you will be required to complete a registration form with basic details such as your name, email address, and phone number.
• KYC Process: During the identity verification process, you may be asked to submit identification documents for review by our team.
• Financial Transactions: Financial information is collected automatically whenever you make a deposit via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), or submit a withdrawal request.
• Platform Usage: Technical and behavioural data is collected automatically via cookies, tracking pixels, and similar technologies when you browse or play on EzySpin.
• Communications: When you contact customer support via live chat, email, or WhatsApp, we retain a record of those conversations for quality and security purposes.
• Promotions & Draws: If you participate in any EzySpin promotions, contests, or VIP reward programmes, additional information may be collected.

4. Purposes for Using Personal Data

EzySpin uses your personal data solely for the following legitimate and stated purposes:

EzySpin will not use your personal data for any purpose beyond those listed above without first obtaining your consent.

5. Sharing of Personal Information

EzySpin does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, we may share your personal data in the following limited circumstances:

• Trusted Service Providers: Payment gateway providers (FPX, DuitNow), gaming software providers, analytics platforms, and cloud service providers we use to operate EzySpin. All such parties are bound by strict confidentiality agreements.
• Regulatory Bodies & Law Enforcement: When required by Malaysian law, court order, or official request from a legitimate enforcement agency such as PDRM or Bank Negara Malaysia.
• Fraud Prevention: With partners who assist us in detecting and preventing fraud, money laundering, and other illegal activities involving the EzySpin platform.
• Business Transfer: Should EzySpin be involved in a merger, acquisition, or asset sale, player data may be transferred as part of that transaction. You will be notified before any such transfer takes place.

6. Data Security

EzySpin implements robust technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and EzySpin's servers is protected by industry-standard encryption protocols.
• Infrastructure Security: EzySpin's servers are protected by multi-layered firewalls, an intrusion detection system (IDS) and 24/7 monitoring.
• Password Protection: Player passwords are stored in hashed form using strong cryptographic algorithms. No EzySpin staff member can view your password in its original form.
• Access Control: Only authorised EzySpin staff with a legitimate business need may access player personal data. All access is logged and audited on a regular basis.
• PCI-DSS Compliance: EzySpin's payment information processing complies with PCI-DSS security standards. We do not store bank card numbers directly on our servers.
• Regular Security Audits: EzySpin conducts regular penetration testing and vulnerability assessments to ensure the security of our platform.

While EzySpin takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. In the event of a material data breach, we will notify you and the relevant authorities within the timeframe required by law.

7. Data Retention Period

EzySpin retains your personal data only for as long as necessary for the stated purposes or as required under applicable Malaysian law:

• Active Account Data: Retained for as long as your account is active and for a period of 5 years after account closure, in line with Malaysia's AML/KYC compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• Support Communication Logs: Retained for 2 years from the date of last interaction for quality control and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications from EzySpin.
• Technical Data & Logs: Retained for 12 months for security purposes and technical troubleshooting.

Once the applicable retention period has expired, EzySpin will securely delete or anonymise your personal data so that it can no longer be linked to your identity.

8. Cookies & Tracking Technologies

EzySpin uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic and ensure platform security. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings at any time. However, removing essential cookies may affect certain functions of the EzySpin platform. For more information on managing cookies in popular browsers, please refer to your browser's official documentation.

9. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by EzySpin:

10. Child Protection

EzySpin strictly prohibits individuals under the age of 18 registering for or using our platform. We do not knowingly collect personal data from individuals under the age of 18.

If you believe your child or any individual under the age of 18 has provided personal data to EzySpin without appropriate consent, please contact us immediately at support@ezyspin.com. We will investigate and delete the data within a reasonable timeframe.

EzySpin employs multiple mechanisms — including date-of-birth verification, KYC checks, and behavioural analysis — to detect and prevent underage registrations. Parents and guardians are encouraged to use parental control software to restrict children's access to online gambling sites.

11. Amendments to This Privacy Policy

EzySpin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features.

When material amendments are made, EzySpin will:

• Publishing the latest version on this page with an updated revision date.
• Sending notifications via your registered email or in-app notifications on EzySpin.
• In the event of significant changes, re-requesting your consent before continuing to process your data.

Your continued use of the EzySpin platform following the publication of any amendments to this Privacy Policy constitutes your acceptance of the revised terms. It is your responsibility to review this page periodically.

12. Contact Us

If you have any questions, concerns or complaints regarding EzySpin's Privacy Policy or how we handle your personal data, please contact our Privacy Officer:

• Privacy Email: privacy@ezyspin.com
• General Support Email: support@ezyspin.com
• Live Chat: Available directly on the EzySpin website and app (24/7)
• WhatsApp: Number available after logging in to your account

We are committed to resolving any privacy-related complaints within 14 working days. If you are not satisfied with our response, you have the right to escalate the complaint to Department of Personal Data Protection Malaysia under the Ministry of Digital.

For enquiries related to responsible gaming, visit the Responsible Gaming us. For all other general enquiries, see FAQ us.