EZSpin Privacy Policy

1 Introduction

EZSpin (the "Company", "we", "us", or "our"), operator of the online gaming platform at ezspin.cam (the "Platform"), is committed to safeguarding the privacy and personal data of all individuals who interact with our services. This Privacy Policy (the "Policy") sets out in full how we collect, process, store, share, and protect personal information connection with the operation of the EZSpin Platform.

This Policy applies to all players who register an account, make a deposit, place a wager, contact our support team, or otherwise interact with any component of the EZSpin Platform, including Malaysian players and any other individuals whose data we process in connection with our operations.

By registering on or using the EZSpin Platform, you acknowledge that you have read, understood, and agree to the data processing practices described in this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your relationship with EZSpin.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information that identifies or can reasonably identify a living individual, including but not limited to: name, identification number (e.g., MyKad or passport number), contact details, financial information, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — EZSpin, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third party that processes personal data on behalf of EZSpin, under binding contractual obligations.
• "Consent" — freely given, specific, informed, and unambiguous indication by the Player that they agree to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer; the identity verification process conducted by EZSpin to confirm player eligibility and comply with anti-money-laundering obligations.
• "Cookie" — a small text file placed on your device by the Platform to facilitate browsing, personalisation, and analytics.

3 Personal Data We Collect

EZSpin collects personal data in the following categories depending on how you interact with the Platform:

3.1 Identity and Registration Data

• Full legal name and preferred display name;
• Date of birth (for age verification — 21+ requirement);
• Malaysian MyKad number, passport number, or equivalent government-issued identification number;
• Residential address (including Malaysian city and postcode);
• Nationality and country of residence.

3.2 Contact Data

• Email address;
• Mobile phone number;
• Preferred language and communication preferences.

3.3 Financial and Payment Data

• Deposit and withdrawal transaction records;
• Payment method information (e.g., registered e-wallet account name for Touch'n Go eWallet, Boost, or GrabPay; bank account details for Maybank, CIMB, Public Bank, Hong Leong, and FPX/DuitNow transfers; cryptocurrency wallet addresses for BTC, ETH, and USDT TRC20);
• Account balance history and transaction ledger.

3.4 Gaming and Betting Activity Data

• Wagers placed, game sessions, betting history, and winnings;
• Responsible gambling settings activated (deposit limits, session, self-exclusion);
• Bonus offers claimed and wagering progress.

3.5 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session duration, page views, and navigation paths within the Platform;
• Login timestamps and access logs.

3.6 Communications Data

• Records of live chat, email, and any other communications with EZSpin's support team;
• Survey responses and feedback submitted voluntarily.

4 How We Collect Your Data

EZSpin collects personal data through the following means:

• Directly from you: when you complete the registration form, undergo KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey;
• Automatically: through cookies, web beacons, server logs, and similar tracking technologies when you access or browse the Platform;
• From third parties: including payment service providers (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong), identity verification agencies, fraud prevention services, and analytics providers who supply us with data in accordance with their own privacy policies and applicable law;
• From public sources: including regulatory watchlists, sanctions databases, and publicly available information used for compliance and fraud prevention purposes.

5 Legal Basis for Processing

EZSpin processes your personal data on the following legal bases:

6 How We Use Your Personal Data

EZSpin uses the personal data we collect for the following purposes:

• To create, verify, and manage your player account on the EZSpin Platform;
• To process deposits and withdrawals through your nominated payment method, including Malaysian e-wallets (Touch 'n Go eWallet, Boost, GrabPay), bank transfers (Maybank, CIMB, Public Bank, Hong Leong via DuitNow/FPX), and cryptocurrency wallets;
• To verify your identity and age (21+) in accordance with KYC obligations and to comply with applicable anti-money-laundering regulations;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activity;
• To enforce our Terms & Conditions and manage bonus claims, wagering activity, and account restrictions;
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts;
• To send you promotional offers, bonuses, and marketing communications, where you have opted in to receive such communications;
• To operate our responsible gambling programme, including monitoring gaming behaviour and applying player-requested or Platform-initiated account restrictions;
• To improve the functionality, performance, and user experience of the EZSpin Platform;
• To respond to your customer support inquiries and resolve complaints;
• To fulfil our regulatory reporting obligations to licensing and governmental authorities.

7 Sharing & Disclosure of Your Data

EZSpin does not sell your personal data to third parties. We may, however, share your data in the following circumstances:

7.1 Payment Service Providers

We share transactional data with payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and their underlying banking partners (Maybank, CIMB, Public Bank, Hong Leong) to facilitate deposit and withdrawal processing. Cryptocurrency transactions involve blockchain-based wallet services. Each provider operates under their own privacy policy and is bound to process your data only as necessary to complete the transaction.

7.2 Identity Verification and Fraud Prevention

We share identity and document data with licensed KYC verification agencies to confirm your age (21+), identity, and residential address. We also use fraud detection services to screen transactions and activity for potential abuse.

7.3 Regulatory and Law Enforcement Authorities

EZSpin may be required to disclose personal data to regulatory bodies, licensing authorities, tax authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or regulatory direction. Such disclosures will be limited to what is strictly necessary.

7.4 Professional Advisers

We may share personal data with lawyers, auditors, accountants, and other professional advisers engaged by EZSpin, subject to professional confidentiality obligations.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of EZSpin's business assets, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection standards being maintained.

8 Cookies & Tracking Technologies

EZSpin uses cookies and similar tracking technologies to operate and improve the Platform. By accessing the Platform, you consent to the use of cookies in accordance with this section.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication, security tokens, and load balancing. Cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gambling limits.
• Analytics Cookies: Collect anonymised data about how Players navigate and use the Platform to help us improve its performance and usability.
• Marketing Cookies: Used only where you have provided explicit consent, to deliver relevant promotional content relating to EZSpin.

8.2 Managing Cookies

You may control and manage cookies through your browser settings. Disabling strictly necessary cookies may impair your ability to use the EZSpin Platform. Please refer to your browser's help documentation for instructions on managing cookie preferences.

9 Data Retention

EZSpin retains personal data for as long as necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce agreements. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents re-identification.

10 Data Security

EZSpin implements appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the EZSpin Platform;
• Encryption of sensitive data fields (including payment information and KYC documents) at rest;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data;
• Regular penetration testing and security vulnerability assessments by independent cybersecurity professionals;
• Two-factor authentication (2FA) options available to all Players for account access;
• Ongoing staff training on data protection obligations and incident response procedures.

While EZSpin takes robust measures to protect your data, no method of electronic transmission or storage is entirely risk-free. In the event of a data breach that is likely to result in significant risk to affected individuals, EZSpin will notify the relevant authorities and affected Players in accordance with applicable data breach notification requirements.

11 International Data Transfers

EZSpin's server infrastructure and data processing operations may be located in jurisdictions outside Malaysia, including the jurisdiction where EZSpin holds its gaming licence. Where personal data is transferred internationally, EZSpin ensures that equivalent data protection safeguards are in place through: contractual data processing agreements incorporating appropriate data transfer clauses; or transfer to jurisdictions that have been assessed as providing an adequate level of protection for personal data.

Payment data shared with Malaysian payment service providers (Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) remains subject to Malaysian data protection standards and the contractual terms governing those service relationships.

12 Your Data Protection Rights

Subject to applicable legal limitations, you have the following rights with respect to your personal data held by EZSpin: