ezy88 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" — the ezy88 website at https://ezy88.org, including all subpages, account dashboards, game lobbies, and sportsbook interfaces operated under the ezy88 brand.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, whether directly (e.g., full name, national ID number) or indirectly (e.g., device fingerprint, IP address combined with account activity).
• "Member" / "You" / "User" — any individual who has registered an account on the ezy88 Platform or who accesses the Platform as a guest visitor.
• "ezy88" / "We" / "Us" / "The Company" — the entity responsible for operating the ezy88 Platform and acting as the data controller for Personal Data processed under this policy.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "KYC" — Know Your Customer; the identity and age-verification process required before a Member's first withdrawal is processed.
• "Cookies" — small data files stored on your device by the ezy88 Platform to enable session management, analytics, and preference retention.
• "Third-Party Service Provider" — an external entity engaged by ezy88 to perform specific data-processing tasks on its behalf (e.g., payment processors, KYC verification vendors, cloud infrastructure providers).

This Privacy Policy applies to all Personal Data collected by ezy88 through the Platform, whether submitted voluntarily by a Member (such as during account registration or KYC) or collected automatically during your use of the Platform (such as through cookies and server logs).

ezy88 acts as the data controller for all Personal Data processed under this policy. This means ezy88 determines the purposes for which your data is collected and the means by which it is processed. Where ezy88 engages Third-Party Service Providers to process data on its behalf, those providers act as data processors under contractual agreements that bind them to ezy88's data protection standards.

This policy is specifically relevant to users accessing the Platform from Indonesia — including players in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and all other regions of the archipelago. Indonesian players are subject to both this policy and any applicable provisions of Indonesian data protection law (Undang-Undang Perlindungan Data Pribadi, UU PDP).

ezy88 collects Personal Data in the following categories, depending on how you interact with the Platform:

ezy88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes (beyond the standard KTP/passport photo used for KYC), or data relating to criminal convictions beyond what is required by anti-money-laundering obligations.

ezy88 collects Personal Data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technologies: Technical and Usage Data collected automatically when you visit the Platform, including cookies, web beacons, server logs, and pixel tags. This data is collected regardless of whether you are logged in to an account.
• Payment Processors: Financial transaction data relayed to ezy88 by our payment partners when you initiate a deposit or withdrawal via a local Indonesian bank or e-wallet. ezy88 receives confirmation data but does not store full bank account credentials on its own servers.
• KYC Verification Vendors: Identity data returned by our third-party KYC providers following document verification checks. These vendors verify document authenticity and return a pass/fail result along with the verified identity attributes.
• Publicly Available Sources: In limited circumstances related to fraud prevention or regulatory compliance, ezy88 may cross-reference information against publicly available databases or sanctions lists.

ezy88 processes your Personal Data on the following legal bases, depending on the purpose of processing:

• Performance of a Contract: Processing your registration data, financial data, and transaction history is necessary to provide the gaming and betting services you have signed up for under the ezy88 Terms & Conditions.
• Legal Obligation: KYC verification, anti-money-laundering (AML) screening, and fraud-prevention checks are required by applicable laws and by the conditions of ezy88's operating licence. ezy88 cannot operate lawfully without processing this data.
• Legitimate Interests: Technical Data and Usage Data are processed to maintain platform security, detect and prevent fraud, improve platform performance, and conduct aggregated analytics. These interests do not override your fundamental privacy rights.
• Consent: Marketing communications and optional analytics cookies are processed only where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

ezy88 uses the Personal Data it collects for the following specific purposes:

1. Account Management: Creating, maintaining, and securing your ezy88 account, processing login sessions, and managing account settings and preferences.
2. Transaction Processing: Executing deposits and withdrawals via your nominated payment method — including local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) — and maintaining accurate balance records.
3. Identity Verification: Confirming that you meet ezy88's eligibility requirements, including the minimum age of 21, and verifying ownership of your payment method during KYC.
4. Fraud & AML Compliance: Detecting, investigating, and reporting suspicious activity, transaction anomalies, and potential money-laundering patterns in accordance with applicable regulatory obligations.
5. Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance via live chat and email.
6. Platform Improvement: Analysing aggregated, anonymised usage patterns to improve game selection, navigation, payment flows, and overall platform performance.
7. Responsible Gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour and, where appropriate, proactively engaging the Member with responsible gaming resources or tools.
8. Marketing (with Consent): Sending promotional offers, bonus notifications, and event-based communications — such as Idul Fitri promotions, Indonesian Independence Day specials, or Ramadhan-season bonuses — to Members who have opted in to marketing communications. You can unsubscribe at any time.
9. Security Monitoring: Logging Technical Data to detect unauthorised access attempts, enforce session limits, and protect the integrity of the Platform and all Member accounts.

ezy88 does not use your Personal Data for any automated decision-making that produces legal or similarly significant effects, except where required by AML law (e.g., automated sanctions screening). Where automated processing is used in a legally significant context, you have the right to request human review of the decision.

ezy88 does not sell your Personal Data to any third party. Data is shared only in the limited circumstances described below, and always subject to contractual data-protection obligations:

All third parties with whom ezy88 shares Personal Data are required to implement appropriate technical and organisational security measures and are prohibited from using the data for any purpose beyond the specific task for which it was shared.

ezy88 uses cookies and similar client-side storage technologies to operate the Platform effectively and improve the user experience. The following categories of cookies are in use:

You can manage your cookie preferences through your browser settings at any time. Please note that disabling Strictly Necessary cookies will prevent the Platform from functioning correctly and you will be unable to log in or play games. Disabling analytics cookies has no impact on Platform functionality.

ezy88 does not use cookies to serve targeted advertising on third-party websites, build cross-site behavioural profiles, or share your browsing data with advertising networks.

ezy88 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the lifetime of your active account, and for a minimum of five (5) years following account closure, in order to comply with anti-money-laundering, fraud-prevention, and gaming-licence audit requirements.
• Financial & Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations.
• KYC Verification Documents: Retained for the minimum period required by our licensing authority, typically five (5) years from the date of verification or from the date of account closure, whichever is later.
• Technical & Usage Data (Server Logs): Typically retained for twelve (12) months on active servers, then archived for up to thirty-six (36) months for security audit purposes.
• Support Communications: Live chat and email records are retained for twenty-four (24) months from the date of the interaction, unless the communication is relevant to an ongoing dispute or compliance matter.
• Marketing Preferences: Retained indefinitely as a record of your opt-in or opt-out status, unless you request deletion of your account in its entirety.

Once a retention period has expired and there is no legal basis for continued storage, ezy88 will securely delete or irreversibly anonymise your Personal Data. Anonymised data — from which no individual can reasonably be identified — may be retained indefinitely for aggregated statistical purposes.

As a Member of ezy88, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us using the details in Clause 15. ezy88 will respond to all verified data requests within 30 days:

Please note that some rights are subject to statutory limitations. For example, ezy88 cannot delete financial transaction records that it is legally required to retain for AML compliance purposes, even where a deletion request is submitted. In such cases, ezy88 will explain the applicable legal basis for retaining the data.

ezy88 employs a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ezy88 servers is encrypted in transit using industry-standard TLS 1.2 or higher. This applies to all Platform pages, including the login interface, deposit flows, and account management areas.
• Encrypted Data Storage: Sensitive Personal Data — including identity documents and financial records — is stored in encrypted form using AES-256 encryption at rest. Encryption keys are stored separately from the data they protect.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Internal staff with access to Member data are subject to confidentiality obligations and undergo regular security training.
• Intrusion Detection: ezy88's infrastructure is monitored around the clock by automated intrusion detection and anomaly-alerting systems. Suspicious access patterns trigger immediate security reviews.
• Vulnerability Management: The Platform undergoes regular security assessments, including penetration testing by independent security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a Personal Data breach that poses a risk to affected Members, ezy88 will notify impacted individuals within a commercially reasonable timeframe and take all necessary steps to contain, investigate, and remediate the incident.

While ezy88 applies rigorous security standards, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your login credentials and for immediately reporting any suspected unauthorised account access to our support team.

If ezy88 discovers that Personal Data has been submitted by a user who is under 21 years of age — whether during account registration, KYC, or at any other point — the following steps will be taken without delay:

1. The associated account will be immediately suspended and then permanently closed.
2. All Personal Data collected in connection with the account will be securely deleted, subject to any mandatory retention obligations under AML law.
3. Any funds deposited to the account will be returned to the original payment method after identity verification of the payment method owner.
4. If the submission involved deliberate falsification of age, ezy88 reserves the right to report the matter to relevant authorities.

If you are a parent or guardian and believe a minor under your care has registered an account on ezy88, please contact our support team immediately at the address in Clause 15. We will investigate and act promptly.

The ezy88 Platform may, from time to time, contain references to game studio brands (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft) or payment providers in an informational context. These references do not constitute active hyperlinks to third-party websites; all navigation on the ezy88 Platform remains within the ezy88 domain.

ezy88 is not responsible for the privacy practices of third-party entities whose names may appear in content on the Platform. If you independently visit the websites of any payment provider, game studio, or sports league referenced on this Platform, please review their own privacy policies before submitting any personal information.

ezy88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. When material changes are made, ezy88 will:

• Update the "Last Updated" date displayed at the top of this page.
• Post a prominent notice on the Platform homepage for a reasonable period following the change.
• Where practicable and where the change materially affects how your data is used, notify active Members via the contact method registered on their account.

Your continued use of the ezy88 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and request account closure via our support team. Requests to close your account do not affect ezy88's right to retain data for the minimum periods required under applicable law.

For any questions about this Privacy Policy, to exercise your data rights under Clause 10, or to report a suspected data protection concern, please contact the ezy88 data protection team through the following channels:

When submitting a data rights request, please include your registered email address and a clear description of the right you wish to exercise or the concern you wish to raise. For security purposes, ezy88 may request additional identity verification before processing requests that involve sensitive account information.

ezy88 treats all data-related correspondence with strict confidentiality. Your request and any Personal Data submitted in connection with it will be used solely to process your request and will not be used for any other purpose.