EZWin Privacy
Policy

1. Introduction

EZWin ("we", "us", "our", "the Platform") is an online gaming and sports-betting service operated for players in Malaysia and selected international markets. We are committed to protecting the privacy of every individual who uses our Platform, whether through a desktop browser, mobile browser, or any other authorised interface.

This Privacy Policy ("Policy") describes how EZWin collects, uses, stores, shares, and safeguards personal information in connection with the operation of our Platform. It applies to all registered users ("Players"), visitors who browse the Platform without registering, and any other individuals who interact with EZWin's services.

This Policy is designed to comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection frameworks. By using EZWin, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

2. Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can identify a living natural person, directly or indirectly, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Subject" means the individual to whom Personal Data relates — in most cases, the registered Player.
• "Data Controller" means EZWin, as the entity that determines the purposes and means of processing Personal Data.
• "Third-Party Processor" means an external organisation that processes Personal Data on EZWin's behalf under a contractual data-processing agreement.
• "KYC" means Know Your Customer — EZWin's identity and age-verification process.
• "PDPA" means the Personal Data Protection Act 2010 (Malaysia).
• "Cookies" means small text files stored on a user's device by a web browser to retain state information between visits.

3. Data We Collect

EZWin collects only the minimum Personal Data necessary to provide a safe, compliant, and enjoyable gaming experience. The categories of data we collect include:

3.1 Identity & Contact Data

Collected at registration and during KYC verification:

3.2 Financial & Transaction Data

Collected when you make deposits or withdrawals:

EZWin does not store full credit or debit card numbers. Card payments are processed by PCI-DSS-certified third-party payment gateways. Malaysian e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay) are stored only in tokenised form.

3.3 Gameplay & Wagering Data

3.4 Technical & Device Data

3.5 Communications Data

Records of your interactions with EZWin's customer support team — including live chat transcripts, email correspondence, and WhatsApp message content where you have contacted us — are retained for quality assurance and dispute-resolution purposes.

4. How Data Is Collected

EZWin collects Personal Data through the following channels:

• Direct registration: When you create an account on the Platform.
• KYC submission: When you upload identity documents for age and identity verification.
• Payment processing: When you initiate a deposit or withdrawal via any supported Malaysian payment method.
• Platform usage: Automatically, through cookies, server logs, and analytics tools as you browse and interact with the Platform.
• Customer support interactions: When you contact us via live chat, email, or WhatsApp.
• Third-party verification services: When identity verification providers return results of document checks to EZWin.

5. Purpose & Legal Basis for Processing

EZWin processes Personal Data only where there is a lawful basis for doing so. The table below sets out the primary purposes and the corresponding legal basis under applicable data protection law:

6. Data Sharing & Disclosure

6.1 EZWin does not sell, rent, or commercially license your Personal Data to any third party under any circumstances.

6.2 We may share limited Personal Data with the following categories of third-party recipients, strictly on a need-to-know basis and under binding data-processing agreements:

• Payment processors: Malaysian e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong, and others), DuitNow, and international card schemes — to process your financial transactions.
• KYC and identity-verification providers: Third-party services that assist EZWin in verifying the authenticity of government-issued identity documents.
• Fraud detection and cybersecurity providers: Services that help EZWin identify and prevent fraudulent activity, bot usage, and account compromise.
• Game studio technology partners: To the minimum extent necessary to resolve technical disputes regarding game outcomes or session integrity.
• Regulatory authorities and law enforcement: Where EZWin is legally required to disclose information by court order, regulatory direction, or applicable anti-money-laundering legislation.
• Professional advisers: Lawyers, auditors, and accountants bound by confidentiality obligations, where necessary for EZWin's compliance and governance functions.

7. Data Retention

7.1 EZWin retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Malaysian law and international regulatory standards:

• KYC identity documents: Minimum 6 years from account closure.
• Transaction records (deposits, withdrawals, wager history): Minimum 6 years from the date of each transaction.
• Customer support communications: 3 years from the date of the interaction.
• Marketing preferences and consent records: Until withdrawal of consent plus 2 years for audit purposes.
• Platform access logs (IP, device, session): 12 months on active rolling basis.

7.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with EZWin's data disposal procedures. Anonymised aggregate data (e.g., aggregate wagering statistics with no individual identifiers) may be retained indefinitely for analytical purposes.

8. Security Measures

EZWin implements a layered security architecture to protect Personal Data against unauthorised access, accidental loss, alteration, or disclosure:

• Encryption at rest: All stored Personal Data and financial records are encrypted using AES-256.
• Encryption in transit: All data transmitted between your device and EZWin's servers is protected by TLS 1.3.
• Access controls: Internal access to Personal Data is restricted to authorised personnel on a strict need-to-know basis, enforced by role-based access controls (RBAC) and multi-factor authentication (MFA).
• Audit logging: All internal access events involving Personal Data are logged and subject to periodic review.
• Vulnerability management: EZWin conducts regular penetration testing and vulnerability assessments of its infrastructure.
• Incident response: EZWin maintains a documented data-breach response procedure. In the event of a breach involving your Personal Data, we will notify affected individuals and relevant authorities in accordance with applicable law.

While EZWin takes all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely immune from risk. Players are responsible for maintaining the confidentiality of their own login credentials and should report any suspected unauthorised access to our support team immediately.

9. Cookies & Tracking Technologies

9.1 EZWin uses cookies and similar tracking technologies to operate the Platform efficiently and to improve the user experience. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language selection, display settings, and responsible gambling tool configurations.
• Analytics cookies: Collect anonymised or pseudonymised data about how users navigate the Platform, enabling EZWin to identify and resolve usability issues.
• Fraud detection cookies: Used alongside device fingerprinting to detect multi-accounting, bot activity, and other Prohibited Conduct as defined in EZWin's Terms and Conditions.

9.2 You may manage your cookie preferences through your browser settings. Disabling cookies other than strictly necessary ones may limit certain features of the Platform but will not prevent you from accessing core gaming functions.

9.3 EZWin does not use third-party advertising or retargeting cookies that would share your browsing behaviour across unrelated websites.

10. Third-Party Services

10.1 The EZWin Platform integrates with third-party service providers — including payment gateways, game studios, and security infrastructure providers — each of whom operates under their own privacy practices. EZWin requires all third-party processors to sign data-processing agreements that meet the standards of applicable data protection law and prohibit further unauthorised disclosure of Personal Data.

10.2 EZWin is not responsible for the privacy practices of third-party websites that may be referenced in our content. This Policy applies solely to data processed by or on behalf of EZWin in connection with the Platform.

11. Minors & Age Restriction

EZWin is strictly a 21+ platform. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. If EZWin discovers that Personal Data has been submitted by a person under 21, the associated account will be immediately suspended, the data deleted, and any funds returned in accordance with our Terms and Conditions.

Parents or guardians who believe a minor has created an EZWin account should contact our support team immediately. EZWin will prioritise all such reports and act within 48 hours of receipt.

12. Your Data Rights

Under the PDPA (Malaysia) and applicable data protection principles, you have the following rights with respect to your Personal Data held by EZWin:

• Right of Access: Request a copy of all Personal Data EZWin holds about you. Standard requests are fulfilled within 21 business days at no charge.
• Right to Correction: Request correction of any inaccurate or incomplete Personal Data. EZWin will acknowledge correction requests within 5 business days.
• Right to Limit Processing: Request that EZWin restrict processing of your Personal Data in certain circumstances — for example, where you dispute the accuracy of data we hold.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Deletion: Request deletion of your Personal Data, subject to our legal retention obligations. Certain data — particularly KYC records and transaction logs — must be retained for a minimum period under applicable law and cannot be deleted on request during that period.
• Right to Complain: If you believe EZWin has mishandled your Personal Data, you may raise a formal complaint with EZWin's Data Protection contact (see Section 15) or with the relevant national data protection authority.

To exercise any of these rights, contact EZWin's support team via live chat (available 24/7) or by emailing us at the address provided in Section 15 of this Policy. We may request identity verification before actioning certain requests to protect against unauthorised data access.

13. Cross-Border Data Transfers

13.1 In certain operational contexts — such as the use of third-party KYC providers, game studio technology partners, or cloud infrastructure — your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia.

13.2 Where such transfers occur, EZWin ensures that appropriate safeguards are in place, including standard contractual clauses, data-processing agreements requiring the receiving party to maintain protections equivalent to Malaysian PDPA standards, or transfers to jurisdictions that provide an adequate level of data protection as recognised by the Malaysian Personal Data Protection Commissioner.

14. Policy Amendments

14.1 EZWin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our Platform's functionality. Material changes will be communicated to registered Players via email to the address on file, with a minimum of 14 days' advance notice before changes take effect.

14.2 Continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. The current version of this Policy, identified by the Last Updated date at the top of the page, is always available at this URL.

15. Contact Us

For any privacy-related enquiries, requests to exercise your data rights, or formal data-protection complaints, please contact EZWin's Data Protection team:

• Live Chat: Available 24/7 directly on the Platform — average response 3–5 minutes. Support available in English, Bahasa Melayu, and Mandarin Chinese.
• Email (plain text — not a link): [email protected]

When submitting a data rights request, please include your registered email address, a brief description of your request, and (where applicable) a means by which we can verify your identity. EZWin serves players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations in Malaysia. All data rights requests are handled with equal priority regardless of location.