Privacy Policy ezspin1 – Malaysia User Data Protection

This Privacy Policy is issued by ezspin1 ("we", "Platform") and applies to all users who register, access, or use the ezspin1 platform services through the official website ezspin1.onl or our mobile app.

As an online entertainment platform operating in Malaysia, ezspin1 is committed to full compliance with the Personal Data Protection Act 2010 (PDPA), the Data Protection Principles set by the Personal Data Protection Commissioner of Malaysia, and all relevant international security standards.

We only collect data that is genuinely necessary to provide you with the best service. No data is sold to third parties for commercial purposes without your explicit consent.

Ezspin1 collects your personal data through several channels — directly when you register and use the platform, and automatically as you browse our platform. Below are the categories of data we collect:

We do not collect sensitive data such as medical information, religious beliefs, or political views unless specifically stated and you have given explicit consent.

The personal data we collect is used for the following purposes, in accordance with the principles of lawful and limited use under PDPA 2010:

• Service Provision: Enabling you to register, log in, make deposits, play, and withdraw funds through the ezspin1 platform.
• Identity Verification (KYC): Ensuring all users meet the age and identity eligibility requirements prescribed by law.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, and platform abuse.
• Service Communications: Sending important notifications related to your account, transactions, promotions, and platform updates.
• Platform Improvements: Analyzing usage patterns to improve overall functionality, performance, and user experience.
• Legal Compliance: Meeting reporting obligations to relevant authorities in accordance with applicable laws.
• Responsible Gaming: Identifying usage patterns that may indicate problem gambling and providing appropriate support.

Ezspin1 does not disclose your personal data to third parties except in the following circumstances:

• Trusted Service Providers: Third parties that assist us in operating the platform, such as payment gateway providers, cloud service providers, and KYC verification companies. All third parties are bound by strict confidentiality agreements and are only granted access to the data necessary to perform their designated tasks.
• Legal Requirement: When required by court order, government authority directive, or legal obligations such as anti-money laundering compliance reporting (AML/CFT).
• Rights Protection: If disclosure is required to protect the rights, property, or safety of ezspin1, other users, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the business assets, subject to notification to affected users.

Ezspin1 never sells, rents, or trades users' personal data to any party for marketing or commercial purposes.

Ezspin1 continuously invests in robust security infrastructure to ensure your data is always protected from unauthorized access, modification, or disclosure. Our key security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and ezspin1 servers is protected by industry-grade encryption.
• Encryption of Stored Data: Sensitive data such as financial information and KYC documents are stored in encrypted format on secure servers.
• Strict Access Control: Only authorised personnel may access user data, and all such access is continuously audited and monitored.
• 24/7 Monitoring: A real-time threat detection system monitors for suspicious activity around the clock.
• Regular Security Testing: Security audits and penetration testing are conducted on a regular basis by qualified independent parties.
• PCI DSS Compliance: Payment data processing complies with the Payment Card Industry Data Security Standard (PCI DSS).

Ezspin1 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Functional Cookies: Remembering your preferences and settings such as language and display format to provide a more personalized experience.
• Analytics Cookies: Helping us understand how users interact with the platform so we can improve our services.
• Performance Cookies: Collecting information on the platform's technical performance to identify and resolve issues more quickly.

You can manage your cookie settings through your web browser at any time. However, blocking certain cookies may affect the functionality of some areas of the ezspin1 platform.

Ezspin1 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active Account Data: Retained for the duration of your active account and for 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of the active account plus 5 years after account closure.
• Log & Security Data: Retained for 12 to 36 months depending on operational and security requirements.
• Analytics Cookie Data: Deleted after the session ends or within a maximum period of 13 months.

When data is no longer needed, ezspin1 will delete or anonymize it in a secure and irreversible manner.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by ezspin1:

Know Your Customer (KYC) is a mandatory requirement under Malaysia's financial laws to prevent money laundering, terrorism financing, and identity fraud. ezspin1 enforces a rigorous KYC process for all users.

Documents that may be requested during the KYC process include:

• Malaysian Identity Card (MyKad) — front and back
• Valid passport (for non-citizens)
• Proof of current address (utility bill, bank statement, or official letter dated within 3 months)
• A selfie holding your identity document (in certain cases)

All submitted KYC documents are handled with the highest level of confidentiality. They are accessible only by a specially trained verification team and are protected by encryption during both transmission and storage.

Ezspin1 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. Any material amendments will be communicated to users via in-app notification or email at least 14 days before they take effect.

Your continued use of the ezspin1 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how we handle your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy, please contact the ezspin1 Privacy Officer:

• Email: [email protected]
• Live Chat: Available on the ezspin1 app, 24 hours a day
• Response Time: Within 3 working days for general enquiries; 21 working days for data rights requests