PDPA 2010 Data Protection

EzSpin Privacy Policy – Malaysia Personal Data Protection

EzSpin takes your privacy very seriously. This policy clearly and transparently explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
Applicable in Malaysia
Bahasa Melayu (ms-MY)
256-bit SSL
PDPA 2010 Compliance

How EzSpin Protects Your Data

Six core principles that underpin how EzSpin handles personal data.

Bank-Level Encryption

All data transmitted between your device and EzSpin's servers is protected by 256-bit SSL encryption – the same standard used by leading Malaysian financial institutions such as Maybank and CIMB.

Strict Access Controls

Only EzSpin staff with specific authorisation may access your personal data, and solely for legitimate operational purposes. All access is logged and periodically audited to ensure there is no misuse.

No Data Selling

EzSpin has never sold, rented, or transferred your personal data to third-party advertisers for marketing purposes, and never will — without your explicit and express consent.

PDPA 2010 Compliance

All of EzSpin's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010. We continuously update our internal procedures to keep pace with the latest regulatory developments.

Your Rights & Controls

You have the full right to access, correct, or request the deletion of your personal data held by EzSpin at any time. This can be done through your account settings or by contacting our team.

Immediate Breach Notification

In the event of any data security incident involving your information, ezspin is committed to notifying you within 72 hours in accordance with our established incident response procedures.

Important: By using the EzSpin website or app, you agree to this Privacy Policy. Please read this document carefully in its entirety. If you have any questions, contact us at privacy@ezspin.biz.

1. Introduction & Scope of the Privacy Policy

The basis and purpose of this document

EzSpin (website: ezspin.biz, hereinafter referred to as "EzSpin", "we", or "the Platform") is an online entertainment platform operating in Malaysia. This Privacy Policy sets out in detail how EzSpin collects, processes, stores, uses, and protects the personal information you share with us when using EzSpin's services.

We recognise that privacy is a fundamental right of every individual. EzSpin's commitment to data protection goes beyond legal obligation — it is a core value that guides how we build trust with every member in Malaysia.

This Privacy Policy applies to all users of the ezspin.biz website, the EzSpin mobile app (iOS and Android), and all related services offered by EzSpin. This Policy should be read together with Terms & Conditions EzSpin.

This policy is provided in Bahasa Melayu in line with EzSpin's commitment to transparency for all Malaysian members. EzSpin is in full compliance with the Personal Data Protection Act 2010 (PDPA) and all applicable regulations in Malaysia.

2. Types of Personal Data We Collect

Information we hold about you

EzSpin collects various categories of personal data based on operational and legal requirements. Below is a summary of the data we may collect:

Data Category Sample Information Requirements
Identity Data Full name, identity card number, date of birth Mandatory (KYC)
Contact Data Phone number, email address, residential address Mandatory
Financial Data Bank account number, transaction records, deposit/withdrawal history Mandatory (AML)
Technical Data IP address, device type, web browser, general location Automatic
Game Data Game history, bets placed, winnings, losses Operations
Preference Data Language preference, account settings, promotional preferences Optional

We only collect data that is strictly necessary for the stated purposes. EzSpin does not collect sensitive data such as health information, political affiliations, or religious beliefs unless required by law.

3. How We Collect Your Data

Data collection methods used by EzSpin

EzSpin collects your personal data through several different methods:

3.1 Data You Provide Directly
  • When registering a new EzSpin account
  • When making a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, or other Malaysian payment methods
  • When contacting our customer support team
  • When filling in a preference or feedback form
  • During the identity verification (KYC) process
3.2 Automatically Collected Data
  • Server logs recording activity on the EzSpin platform
  • Cookies and similar tracking technologies
  • Your device and web browser information
  • General location data based on IP address (we do not track your precise location)
3.3 Data from Third-Party Sources
  • Recognised identity verification providers for the KYC process
  • Authorised payment processors to verify transactions
  • Fraud prevention agencies for security purposes

4. How We Use Your Data

The purposes for which EzSpin processes your personal data

EzSpin uses your personal data solely for legitimate, stated purposes. The key purposes are as follows:

  • Account Management: Creating, maintaining, and managing your EzSpin account, including the login process and two-factor security verification.
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, and others, as well as handling withdrawals to your Malaysian bank account or digital wallet.
  • KYC/AML Compliance: Verifying your identity and fulfilling legal requirements related to anti-money laundering in compliance with Malaysian legislation.
  • Customer Support: Handling enquiries, complaints, and support requests submitted via live chat, email, or other channels.
  • Platform Security: Detecting and preventing fraud, unauthorised access, and use of the platform in violation of EzSpin's Terms & Conditions.
  • Experience Personalisation: Delivering content, promotions, and game recommendations tailored to your preferences, such as baccarat, slots, Malaysia Super League football, or Sports Betting.
  • Marketing Communications: Sending EzSpin promotional information and bonuses via email or SMS – you may unsubscribe at any time.
  • Platform Improvements: Analysing usage patterns to improve EzSpin's services, interface, and overall experience.

EzSpin will not use your data for any purpose not stated in this Privacy Policy without obtaining your prior consent.

5. Sharing Data with Third Parties

Who may access your data and why

EzSpin does not sell your personal data. However, in certain limited circumstances, we may share your data with trusted third parties for legitimate operational purposes:

  • Payment Processors: Malaysian payment service providers such as Touch 'n Go, GrabPay, and banks participating in FPX, to process your financial transactions.
  • IT Service Providers: Companies providing the technical infrastructure, hosting, and cybersecurity services that support EzSpin's operations.
  • Game Providers: Third-party game providers that supply casino games, slots, and sports betting on the EzSpin platform – only data necessary for game operations is shared.
  • Regulatory Authority: When required by Malaysian law, court order, or at the request of a competent authority.
  • Anti-Fraud Agencies: For identity verification and fraud prevention purposes only.

Our Commitment: All third parties that receive your data from EzSpin are bound by strict confidentiality agreements and are permitted to use that data only for the specified purposes.

6. Data Security at EzSpin

Technical and operational measures to safeguard your data

EzSpin continually invests in the latest security technologies and procedures to ensure your personal data remains protected at all times. The security measures we have in place include:

  • 256-bit SSL/TLS data encryption for all communications between your browser and EzSpin servers
  • Sensitive data within the database is encrypted using industry-standard encryption algorithms
  • Two-factor authentication (2FA) for all internal-level access and as an option for member account access
  • 24/7 system monitoring by EzSpin's cybersecurity team
  • Regular independent penetration testing
  • Role-based access control (RBAC) to ensure staff only access data necessary for their assigned tasks
  • Real-time anomaly monitoring and intrusion detection systems

While we take all reasonable steps to protect your data, no system in the world is entirely risk-free. We encourage you to do your part in keeping your account secure by using a strong password and never sharing your login credentials.

7. Data Retention Period

How long EzSpin retains your information

EzSpin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet applicable legal requirements. General retention period guidelines are as follows:

  • Active account data: For the duration your account remains active and for 5 years following account closure for legal compliance purposes.
  • Financial transaction records: A minimum of 7 years, in line with Malaysia's AML legal requirements and financial regulations.
  • Customer support communication logs: 3 years from the date of last interaction.
  • Technical data and server logs: 90 days to 1 year depending on the log type.
  • Marketing data and preferences: Until you withdraw your consent or close your account.

When data is no longer needed and there is no legal obligation to retain it, EzSpin will securely delete or anonymise it using industry-recognised methods.

8. Your Personal Data Rights

The controls you have over your data at EzSpin

Under Malaysia's Personal Data Protection Act 2010, you have the following rights, which you may exercise at any time:

Right of Access

Request a copy of all personal data EzSpin holds about you, delivered in a readable format.

Right to Rectification

Requesting correction of inaccurate or incomplete data via your profile settings or by contacting us.

Right to Erasure

Requesting deletion of your data is subject to applicable legal retention obligations.

Right to Restrict Processing

Requesting EzSpin to limit the use of your data in certain situations permitted by law.

Right to Object

Object to the processing of your data for direct marketing purposes – you may unsubscribe at any time.

Right to Data Portability

Receive your data in a commonly used, structured format for portability purposes upon request.

To exercise any of the above rights, please contact us at privacy@ezspin.biz or via ezspin live chat. We will process your request within 21 business days in accordance with the requirements of PDPA 2010.

9. Cookies & Tracking Technologies

How EzSpin uses cookies on our website

EzSpin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help the website function more effectively.

Types of Cookies We Use:
  • Strictly Necessary Cookies: Required for core EzSpin platform functions such as login session verification and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymised information about how you use EzSpin to help us improve and optimise the platform.
  • Functional Cookies: Saving your preferences such as language selection and display settings for a more personalised experience.
  • Marketing Cookies: Used to display relevant EzSpin promotions. You may decline these cookies without affecting the core functionality of the platform.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality and your experience on the EzSpin platform.

10. Third-Party Links & Services

Our responsibility regarding third-party content

The ezspin platform may contain links or integrations with third-party services such as game providers and payment processors. ezspin is not responsible for the privacy policies or data security practices of any third parties that are not under our direct control.

When you use payment services such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or make transfers via DuitNow or FPX (Maybank2u, CIMB Clicks), you are also subject to the privacy policies of those respective providers. We encourage you to read the privacy policy of each service provider you use.

11. Children's Privacy

Protection of underage users

EzSpin is a platform strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that we have collected data from an underage user, we will take immediate action to delete that data and close the account in question. Parents or guardians who suspect their child has registered on EzSpin are urged to contact us immediately at privacy@ezspin.biz.

If you discover that a minor is using the EzSpin platform, please report it to us immediately. We take child protection extremely seriously.

12. Amendments to the Privacy Policy

How we handle changes to this policy

EzSpin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, current legal requirements, or changes to the services we offer.

Any material changes to this Privacy Policy will be communicated to you via:

  • In-platform notifications on EzSpin upon login
  • Email to the address registered to your account
  • A prominent notice on the EzSpin website homepage

Your continued use of EzSpin's services after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. The date of the most recent update is always displayed at the top of this document.

Version 3.1 – Updated 1 January 2026

13. Contact EzSpin's Privacy Officer

How to contact us regarding privacy and data

If you have any questions or concerns, or wish to exercise your privacy rights, please contact EzSpin's Data Privacy Officer through the following channels:

  • Privacy Email: privacy@ezspin.biz (dedicated to privacy and data-related enquiries)
  • General Support Email: support@ezspin.biz
  • Live Chat: Available 24/7 on the EzSpin platform – for urgent privacy enquiries

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or deletion requests, processing may take up to 21 business days in accordance with Malaysia's PDPA 2010 requirements.

Complaints to the Relevant Authority: If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) or the relevant regulatory authority.

Your Data Is Safe With Us

Register with EzSpin Confidently – Your Privacy is Protected

Join over 500,000 Malaysian members who trust EzSpin. Enjoy the best games backed by robust security and data privacy protection.

PDPA 2010 Compliance 256-bit SSL No Data Selling 24/7 Privacy Support
Bahasa Melayu