Privacy Policy — ezy88

1. Introduction

ezy88 operates an online sports betting, live casino, slot gaming, and togel (Indonesia's traditional numbers lottery) platform primarily serving players based in Indonesia. In the course of providing these Services, ezy88 collects and processes personal data about its Members. This Policy sets out our data practices in a transparent, accessible manner consistent with internationally recognised data protection principles.

This Policy should be read together with the ezy88 Terms & Conditions, which constitute the overarching contractual framework governing your use of the Platform. Where any conflict arises between this Policy and the Terms & Conditions in respect of data-related matters, this Policy shall prevail.

ezy88 processes personal data in accordance with applicable international data protection standards, including principles analogous to those found in the General Data Protection Regulation (GDPR) and Indonesia's Government Regulation No. 71 of 2019 on Electronic Systems and Transactions (PP 71/2019), as applicable and to the extent relevant to our operations.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means ezy88, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of ezy88 under a contractual agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data.
• "KYC" means Know Your Customer — the identity verification process applied to Members of the Platform.
• "Cookie" means a small data file placed on your device by a website to store information about your session or preferences.
• "Services" means all betting, gaming, customer support, promotional, and account management functions offered by ezy88.

3. Data We Collect

ezy88 collects the following categories of Personal Data:

3.1 Identity & Contact Data

• Full legal name (as it appears on your Indonesian national identity card / KTP or passport)
• Date of birth
• Residential address in Indonesia (including province, city, and postal code)
• Email address
• Mobile phone number registered in Indonesia
• Photographic identification (KTP, passport, or equivalent government-issued document)

3.2 Financial Data

• Bank account details (account holder name, bank name, account number — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal transaction history
• Source-of-funds declarations where required for AML compliance

3.3 Account & Gaming Data

• Account username and encrypted password
• Betting history, game session logs, win/loss records, and wager amounts
• Bonus claims, promotional participation history
• Responsible gaming settings (deposit limits, self-exclusion status, cooling-off periods)

3.4 Technical & Usage Data

• IP address and approximate geolocation (city/province level)
• Device type, operating system, browser type and version
• Pages visited, features accessed, session duration, and click-path data
• Referral source (how you arrived at the Platform)

3.5 Communications Data

• Records of live chat conversations, email correspondence, and WhatsApp message content submitted to the support team
• Survey responses and voluntary feedback submitted by Members

4. How We Collect Data

ezy88 collects Personal Data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automatically — through cookies, web beacons, and server-side logging when you access or navigate the Platform.
• From third-party providers — including KYC verification services, payment processors (banks and e-wallet operators), fraud detection services, and game content providers who may share technical identifiers with ezy88 in the normal course of delivering their services.

5. Purposes of Processing

ezy88 processes your Personal Data for the following purposes:

6. Legal Basis for Processing

ezy88 relies on the following legal bases for processing your Personal Data:

• Contract performance — Processing necessary to register your Account, deliver Services, and process financial transactions.
• Legal obligation — Processing required to comply with AML regulations, KYC obligations, and requests from competent regulatory authorities.
• Legitimate interests — Processing for fraud prevention, platform security, abuse detection, and improving our Services, where such interests are not overridden by your fundamental rights.
• Consent — Marketing communications and optional analytics tracking. You may withdraw consent at any time by contacting [email protected] or adjusting your Account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Disclosure

7.1 ezy88 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data only in the following circumstances:

• Service providers and Data Processors — KYC verification platforms, payment processors (Indonesian banks and e-wallet providers), cloud hosting and infrastructure providers, and fraud-detection services. All Data Processors are bound by contractual data processing agreements that prohibit them from using your data for their own purposes.
• Game content providers — Providers such as Pragmatic Play, Evolution Gaming, Microgaming, and others may receive a session token or player identifier for the purpose of delivering game content. These providers do not receive your full identity data.
• Regulatory and law enforcement authorities — Where required by applicable law, court order, or binding regulatory direction, ezy88 may disclose Personal Data to competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Business transfers — In the event of a merger, acquisition, or sale of all or substantially all assets of ezy88, Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the successor entity.

7.2 ezy88 does not transfer Personal Data to any third party for marketing or advertising purposes without your explicit, separately obtained consent.

8. Data Retention

8.1 ezy88 retains Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law.

8.2 As a general guide, ezy88 applies the following retention periods:

• Account and KYC data — Retained for the duration of Account activity plus a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements.
• Transaction and gaming records — Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications — Retained for three (3) years from the date of the last communication.
• Technical and usage data (logs) — Retained for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing consent records — Retained until consent is withdrawn, plus six (6) months thereafter.

8.3 Following expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised.

9. Security Measures

ezy88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the Platform.
• Two-factor authentication (2FA) available for all Member Accounts.
• Encrypted storage for sensitive fields including passwords (hashed using industry-standard algorithms), bank account numbers, and identity document references.
• Role-based access controls (RBAC) — Staff access to Personal Data is restricted on a strict need-to-know basis.
• Regular security audits and penetration testing conducted by independent third parties.
• Intrusion detection systems (IDS) monitoring for anomalous access patterns in real time.

10. Cookies & Tracking Technologies

10.1 ezy88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how Members navigate the site. The following categories of cookies are used:

• Strictly necessary cookies — Required for core Platform functionality (session management, login state, security tokens). These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies — Store your preferences such as language settings and display options to personalise your experience.
• Analytics cookies — Collect aggregated, anonymised data about how Members navigate the Platform, enabling us to identify and resolve usability issues. These are activated only with your consent.
• Marketing cookies — Used only where you have provided explicit consent to receive personalised promotional communications.

10.2 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform but may affect certain personalisation features.

10.3 ezy88 does not deploy third-party advertising trackers, social media pixel tags, or cross-site tracking technologies that share your browsing behaviour with unaffiliated advertisers.

11. Your Rights

Subject to applicable law, you hold the following rights in respect of your Personal Data held by ezy88. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

Response timeframe: ezy88 will acknowledge your request within 72 hours and provide a substantive response within 30 days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days and will notify you accordingly.

12. Minors

12.1 The ezy88 Platform is strictly intended for persons aged 21 and above. We do not knowingly collect or process Personal Data from individuals under the age of 21.

12.2 If we become aware that Personal Data has been collected from a person under 21, that Account will be immediately suspended, all associated data will be deleted, and any funds deposited will be handled in accordance with our Terms & Conditions and applicable law.

12.3 If you are a parent or guardian and believe your child has registered on ezy88 without your knowledge, please contact us immediately at [email protected].

13. International Transfers

13.1 ezy88 operates on internationally hosted infrastructure. This means that your Personal Data may be stored on or transferred to servers located outside Indonesia. Where such transfers occur, ezy88 ensures that adequate safeguards are in place, including contractual data protection clauses with the relevant hosting and infrastructure providers.

13.2 ezy88 does not transfer Personal Data to jurisdictions that do not provide a standard of data protection broadly equivalent to that applicable in Indonesia, except where required by law or with your explicit consent.

14. Amendments to This Policy

14.1 ezy88 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Members via the email address on file at least fourteen (14) days before the effective date of the change.

14.2 The current version of this Policy is always accessible at https://ezy88.cam/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision took effect.

14.3 Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact ezy88 using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Query" or "Data Rights Request"
• Live Chat: Available 24/7 via the ezy88 Platform
• Response Time: Initial acknowledgement within 72 hours; full response within 30 days

If you are dissatisfied with ezy88's response to a data-related complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.