EZ88 Privacy Policy – Personal Data Protection for Malaysia Members

EZ88 takes your privacy seriously. This policy clearly explains how we collect, use and protect your personal data in accordance with Malaysian law.

Last updated: 1 January 2026

Summary Privacy Commitment EZ88

Six core principles that underpin how ez88 handles your personal data

256-bit SSL Encryption

All data transmitted between your device and ez88's servers is protected by 256-bit SSL encryption — the same standard used by financial institutions and banks in Malaysia.

No Sale of Personal Data

EZ88 has never and will never sell, rent, or lease members' personal data to any third party for marketing or commercial purposes.

Malaysia PDPA Compliance

All of ez88's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing personal data in Malaysia.

Full Member Control

You have the right to access, correct, transfer or request deletion of your personal data at any time by contacting the ez88 team.

Data Minimisation

Ez88 only collects data that is genuinely necessary to deliver our services — we do not collect irrelevant or excessive information from members.

Data Breach Notification

In the event of any security breach involving member data, ez88 is committed to notifying affected members within 72 hours of detecting the incident.

Why Your Data Safe with EZ88

Concrete steps we take to safeguard the privacy and security of every member's personal data

ENCRYPTION
End-to-End Encryption

Every bit of data transmitted between your browser and ez88's servers is encrypted using the latest TLS 1.3 protocol with AES-256 encryption. Data stored in our databases is also encrypted at rest — not just in transit.

RESTRICTED ACCESS
Restricted Data Access to Authorised Personnel Only

Only ez88 staff who require data access to perform their duties are granted permission, and only to data relevant to their specific functions. All access is logged and monitored automatically by our internal security systems.

MONITORING
24/7 Security Monitoring

Ez88's security systems monitor all suspicious activity relating to member data around the clock. Our intrusion detection system (IDS) and intrusion prevention system (IPS) actively monitor all inbound and outbound traffic to and from our servers.

VERIFICATION
Two-Factor Authentication for Accounts

Ez88 offers two-factor authentication (2FA) for all member accounts. Once enabled, logging in from a new device requires additional verification via SMS OTP sent to your registered Malaysian mobile number — an extra layer of protection for your data and funds.

AUDIT
Periodic Independent Security Audits

Ez88's data handling systems and practices are periodically audited by qualified independent cybersecurity firms. Audit findings are used for continuous improvement — not merely for compliance documentation purposes.

PDPA
Full Compliance with Malaysia's PDPA 2010

Ez88's Data Protection Officer ensures all data handling practices comply with Malaysia's PDPA. This Policy is reviewed every 12 months, or more frequently whenever relevant legislation changes.

This Policy is effective from 1 January 2026

1Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how the ez88 platform, operating at ez88.run, collects, uses, stores, discloses and protects your personal data. This Policy applies to all registered ez88 members, website visitors and any individuals who interact with our platform.

Ez88 is fully committed to protecting the privacy of Malaysian users in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related legislation. By using the ez88 platform, registering an account, or submitting any personal data to us, you are deemed to have read, understood and agreed to this Privacy Policy.

This Privacy Policy forms part of the overall agreement between you and ez88, together with Terms & Conditions and Responsible Gaming Policy. Please read all three documents to fully understand your rights and responsibilities as an ez88 member.

If you disagree with any part of this Policy, please discontinue use of the ez88 platform. Privacy-related inquiries may be directed to ez88's Data Protection Officer by email at support@ez88.run at any time.

2Types of Personal Data We Collect

Ez88 collects personal data in three primary ways: data you provide directly during registration or use of the platform, data collected automatically while you use the platform, and data received from authorised third parties.

Data Category Specific Data Types Collection Method
Personal Identity Full name, date of birth, IC/passport number Account registration & verification
Contact Information Malaysian phone number, email address Registration form
Financial Data Payment method details, transaction history Deposit & withdrawal processing
Game Data Betting history, VIP points, account balance Automated gaming activity
Technical Data IP address, device type, browser, OS Automatic server logs
Usage Data Pages visited, session duration, clicks Automated platform analytics
Ez88 will never ask for your full credit card number or bank account details directly. All financial transactions are processed through the secure interfaces of licensed third-party payment providers — Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, and others.

3Purpose of Data Collection & Processing

Ez88 collects and processes your personal data solely for legitimate purposes necessary to deliver the platform's services. We do not process data for any other purpose without obtaining your additional consent.

  • Creating and managing ez88 member accounts, including identity verification as required by law
  • Processing deposits and withdrawals via your chosen Malaysian payment method
  • To provide access to all games and services within the ez88 platform
  • Manages the VIP Rewards programme, including points calculation, tier upgrades, and membership benefits
  • Delivering important service communications including transaction confirmations, security notifications, and account information
  • To detect and prevent fraud, money laundering and platform abuse
  • Meeting applicable legal and regulatory compliance obligations
  • Improving user experience through analysis of anonymised usage data
  • To send marketing communications about ez88 promotions and offers — only to members who have consented to receive such communications
You may opt out of ez88 marketing communications at any time through the communication preferences in your account, or by clicking the "unsubscribe" link in any marketing email you receive from us. Opting out of marketing does not affect essential service communications related to your account.

4Third-Party Data Sharing & Disclosure

Ez88 does not sell, rent or trade members' personal data to any third party. However, in certain limited situations, ez88 may share personal data with trusted third parties for the following purposes:

  • Payment providers: Payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay and Malaysian banks receive the information necessary to process your financial transactions
  • Technology providers: Technical partners who provide platform infrastructure, hosting and technical support services — subject to strict confidentiality agreements
  • Authority: Ez88 will disclose data to Malaysian authorities or law enforcement agencies when required to do so by law or court order
  • Fraud prevention: Required data sharing with licensed identity verification and fraud prevention service providers to protect the platform and its members

All third parties who receive personal data of ez88 members are bound by data protection agreements requiring them to uphold security standards equivalent to or exceeding those of ez88. ez88 is not responsible for the privacy practices of third parties unrelated to ez88's services.

Cross-border data transfers (data sent to servers outside Malaysia) are carried out only where the recipient country provides an equivalent level of data protection, or where appropriate safeguards have been put in place prior to the transfer.

5Data Security Measures

Ez88 implements a range of technical, organisational, and physical measures to protect members' personal data from unauthorised access, alteration, disclosure, or destruction.

  • TLS 1.3 encryption with AES-256 for all data in transit between your browser and ez88's servers
  • Database encryption for sensitive data stored within ez88's systems
  • Role-based access control (RBAC) ensures staff can only access the data they need
  • Two-factor authentication for all ez88 staff accounts with access to member data
  • 24/7 security monitoring with intrusion detection and prevention systems
  • Regular data backups with disaster recovery procedures that are tested on a periodic basis
  • Penetration testing by independent cybersecurity experts at least once a year
  • Mandatory security awareness training for all ez88 staff who handle personal data
While ez88 takes all reasonable steps to protect your data, no security system is completely impenetrable. You are also responsible for safeguarding your ez88 account credentials by using a strong password and not sharing your account information with anyone.

6Cookies, Tracking Technologies & Analytics

The ez88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how members use the platform.

  • Essential cookies: Required for core platform functionality, including login session management and security — cannot be disabled
  • Preference cookies: Saves your preferences such as language and display settings for a smoother experience on return visits
  • Analytics cookies: To help ez88 understand how members use the platform — data is collected in aggregate and anonymised form
  • Security cookies: Used to detect suspicious activity, failed login attempts, and other security threats

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the ez88 platform, including the ability to log in or make transactions. Ez88 does not use third-party cookies for advertising purposes.

7Personal Data Retention Period

Ez88 retains your personal data only for as long as necessary for the purpose it was collected, or as required under applicable Malaysian law. Once the retention period expires, your data will be securely deleted or permanently anonymised.

Data Type Retention Period Justification
Active account data For the duration of active membership Required for continued service
Financial transaction records 7 years from the transaction date Malaysian legal requirements (AMLA)
Security & audit logs 2 years from the date of creation Security & compliance investigations
Closed account data 5 years after account closure Legal compliance & dispute resolution
Support correspondence 3 years from the date of last interaction Service references & quality control

Once the specified retention period has ended, your data will be processed for secure deletion using methods that prevent data recovery, such as multi-pass data overwriting for digital storage media.

8Your Rights under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data processed by ez88:

  • Right of access: Request a copy of the personal data we hold about you in a readable format
  • Right to rectification: Requesting corrections to inaccurate or incomplete personal data — you can also update most of this information yourself through your account settings
  • Right to restriction of processing: In certain circumstances, to request that we restrict the processing of your personal data
  • Right to object: Object to the processing of your personal data for direct marketing purposes — takes effect immediately and requires no justification
  • Right to erasure: Where applicable, to request the deletion of your personal data — subject to any legal retention obligations still in force
  • Right to data portability: Receive your personal data in a structured, machine-readable format for transfer to another service provider

To exercise any of the above rights, submit a written request to ez88's Data Protection Officer at support@ez88.run with the email subject "Personal Data Rights Request". Ez88 will respond within 21 working days. Ez88 reserves the right to verify your identity before processing any data access or deletion request.

Complaints to the Personal Data Protection Commissioner

If you are not satisfied with ez88's response to your privacy request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia. Ez88 will cooperate fully with any investigation carried out by the relevant authorities.

9Protection of Children's Data

The ez88 platform is not intended for individuals under the age of 18. Ez88 does not knowingly collect personal data from children or minors below the stipulated age.

If ez88 discovers that personal data belonging to a child has been collected without our knowledge, that data will be deleted immediately and the account in question will be closed. If you believe your child or a minor has provided personal data to ez88, please contact us immediately at support@ez88.run.

Parents and guardians are responsible for monitoring their children's internet usage. ez88 recommends the use of parental control software to prevent unauthorised access to gaming platforms by minors and teenagers.

10Amendments to the Privacy Policy

Ez88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes to our practices, legal requirements or service improvements. Members will be notified of any material amendments via:

  • In-platform notifications on the ez88 platform upon login
  • Notification emails sent to the member's registered email address
  • Updates the "Last Updated" date displayed at the top of this Policy

Continued use of the ez88 platform after an amended Privacy Policy takes effect constitutes your acceptance of the updated version. If you do not agree with the changes, please stop using the platform and contact ez88 to close your account before the amendment comes into effect.

The latest version of this Privacy Policy is always available at ez88.run/privacy-policy. Ez88 recommends reviewing this Policy periodically to stay informed about how we handle your personal data.

11Contact the EZ88 Data Protection Officer

For any enquiries, concerns or requests relating to this Privacy Policy or the handling of your personal data by ez88, please contact our Data Protection Officer through the following channels:

  • Email: support@ez88.run (Subject: "Privacy Inquiry / Privacy Policy")
  • Live Chat: Available 24/7 within the ez88 platform — select the "Privacy & Data" category
  • Response time: Privacy enquiries answered within 3 to 5 working days

EZ88 takes every privacy-related inquiry seriously and is committed to providing timely, clear, and helpful responses to all questions received. Please do not hesitate to contact us if any aspect of this Privacy Policy requires further clarification.

Your Rights as a Data Subjects at EZ88

Malaysia's PDPA grants you the following rights — and ez88 is committed to honouring each one of them

Right of Access

Request a complete copy of all personal data ez88 holds about you in a readable format. Processed within 21 working days.

Right to Rectification

Request corrections to any inaccurate personal data. Most information can be updated directly through your ez88 account settings.

Right to Erasure

Where eligible, request the deletion of your personal data — subject to any legal retention obligations currently in force in Malaysia.

Right to Object

Object to the processing of your data for direct marketing purposes — effective immediately upon receipt of your request, with no justification required on your part.

Data Portability Rights

Receive your personal data in a structured, machine-readable format (JSON or CSV) for your own use or to transfer to another service provider.

Right to Restriction of Processing

In certain circumstances provided for under the PDPA, you may request that ez88 temporarily restrict or suspend the processing of your personal data.

Flow Personal Data at EZ88

Understand how your data moves through the ez88 system — from the point of collection through to storage and, ultimately, secure deletion.

Data Category Legend
MANDATORY Required for core services
OPTIONAL Optional, enhances experience
AUTO Collected automatically by the system
Account Registration Data MANDATORY

Your full name, Malaysian phone number, email address, and chosen password at registration. Used to establish your unique ez88 account identity and enable secure login.

Payment & Transaction Data MANDATORY

Registered payment method details (Touch 'n Go, GrabPay, DuitNow, Maybank2u, CIMB Clicks, etc.) and transaction history. Used to process deposits, withdrawals and account holder verification.

Game Activity Data AUTO

Betting history across all ez88 games — blackjack, roulette, baccarat, slots, lottery, and e-sports. Used for VIP points calculation, weekly rebates, and suspicious activity monitoring.

Device Technical Data AUTO

IP address, device type, operating system and browser used when accessing ez88. Used for account security, suspicious login detection and platform optimisation for Malaysian devices.

Identity Verification Information OPTIONAL

Identity documents (IC or passport) may be requested for identity verification on withdrawals above certain thresholds, or where additional verification is required under Malaysian law.

Method Malaysian Payments Secure

All ez88 payment methods use secure encryption — your financial data is protected at every stage of the transaction

Touch 'n Go eWallet GrabPay Boost ShopeePay DuitNow FPX Online Banking Maybank2u CIMB Clicks

All transactions secured with 256-bit SSL • No full card data stored • PCI DSS compliant

Questions FAQ — EZ88 Privacy Policy

The most frequently asked questions about privacy and data protection at ez88

Absolutely not. ez88 has never and will never sell, rent or trade members' personal data to any third party for marketing or commercial purposes. Your data is shared only in very limited situations — such as with Malaysian payment providers (Touch 'n Go, GrabPay, DuitNow, etc.) to process your transactions, or with authorities when required under Malaysian law. All technical partners involved are bound by strict confidentiality agreements. If you receive marketing emails from another party claiming to have obtained your data from ez88, this is false — please report it to us immediately.

To request access to or deletion of your personal data at ez88, send an email to support@ez88.run with the subject line "Personal Data Rights Request" and specify the type of request (access, correction, deletion or data portability). ez88 will verify your identity before processing your request — this is to protect you from unauthorised requests by third parties. An initial response will be provided within 3 to 5 business days, with full processing completed within 21 business days as required under Malaysia's PDPA. Please note that deletion requests may not be fully fulfilled where a legal data retention obligation remains in effect.

When you close your ez88 account, your personal data is not deleted immediately due to legal compliance requirements. Financial transaction records must be retained for 7 years in accordance with Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA). General account data will be kept for 5 years after account closure for the purpose of resolving any disputes that may arise. Once the mandatory retention period has elapsed, all your data will be securely deleted using irreversible deletion methods. You may request a summary of the data that will be retained after account closure by contacting support@ez88.run.

If ez88 detects or confirms that a data breach involving members' personal information has occurred, we will take immediate action in accordance with our established incident response protocol. The first step is to contain and control the breach to prevent any further exposure. Within 72 hours of confirming the breach, ez88 is committed to notifying affected members via their registered email address regarding the type of data that may have been exposed, the actions already taken, and the steps you can take to protect yourself. Ez88 will also notify the Personal Data Protection Commissioner of Malaysia as required under the PDPA. We recommend enabling two-factor authentication (2FA) on your ez88 account as an additional layer of protection against any unauthorised access.

Your Data Is Safe with EZ88 — Register & Play with Confidence

Join over 100,000 Malaysian members who trust ez88 — an online casino platform with PDPA data protection, 256-bit SSL encryption and full Bahasa Malaysia support.

Bahasa Melayu