EzySpin is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains what information we collect, why it, how is used, who it may be shared with, and what rights you hold as a data subject. We encourage you to read this document fully before registering an account or submitting any personal information.
Six core principles govern how we treat your personal information. These are not aspirations — they are operating standards we hold ourselves accountable to every day.
We collect only the personal information that is strictly necessary for account registration, identity verification, payment processing, and legal compliance. We do not collect data "just in case" — every data point has a documented purpose.
All data in transit is protected by256-bit SSL/TLS encryption. Sensitive stored data — including identity documents and payment credentials — is encrypted at rest using industry-standard AES encryption protocols. Access is restricted on a strict need-to-know basis.
EzySpin does not sell, rent, or lease your personal data to third parties for marketing or commercial purposes. Your information is shared only with authorised partners necessary for platform operation — such as payment processors and KYC verification services — under strict data processing agreements.
You hold meaningful rights over your data: the right to access it, correct inaccuracies, request deletion, withdraw consent, and object to processing. EzySpin maintains a formal process for handling data subject requests and commits to responding within 30 calendar days.
Data is not kept indefinitely. We apply defined retention schedules to each category of personal information. Where there is no longer a legal, regulatory, or legitimate business reason to retain data, it is securely deleted or anonymised in line with our internal retention policy.
We write our privacy documentation in clear, accessible English. Where legal language is unavoidable, we supplement it with plain-text summaries. Malaysian players should understand — without neding a legal background — exactly how their data is used.
This Privacy Policy ("Policy") issued by EzySpin ("we", "us", "our") and applies to all personal data collected and processed in connection with your use of the EzySpin online casino and sports betting platform, accessible at https://ezyspin.cam, and any associated services, communications, or support channels.
EzySpin recognises that privacy is a fundamental right. We are committed to handling your personal data with the care, transparency, and security it deserves. This Policy is designed to inform you fully about our data practices so you can make an informed decision about whether to use our services.
By registering an account, accessing the Platform, or submitting personal information to EzySpin through any channel, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree to the practices described in this Policy, you should not use the Platform.
EzySpin reserves the right to update this Policy periodically. The date of the most recent revision is displayed at the top of this page. Material changes will be communicated to registered Members via on-platform notification or registered email address.
The following terms carry the meanings ascribed to them in this section throughout this Privacy Policy:
EzySpin collects personal data across several categories, each tied to a specific operational or legal purpose. The following table summarises the categories of data collected and the corresponding purpose for collection:
EzySpin collects personal data through the following channels:
The majority of personal data held by EzySpin is provided directly by Members — during account registration, KYC document submission, payment transactions, contact form completion, live chat interactions, and email correspondence with the support team.
Certain technical data is collected automatically when you access the Platform — including IP address, device identifiers, browser fingerprint, session duration, pages visited, and click-path data. This is collected via server logs, session cookies, and analytics scripts operating within the Platform environment.
EzySpin may, in limited circumstances, receive personal data from authorised third-party sources — including KYC verification providers used to cross-reference identity documents, payment processors confirming transaction details, and fraud detection services flaging suspicious activity patterns. Data received from third parties is handled with the same level of care as directly collected data.
EzySpin processes personal data only where a valid legal basis exists for doing so. The legal bases relied upon by EzySpin are as follows:
The primary legal basis for most data processing is the performance of the contract between EzySpin and a registered Member. This includes processing required to create and manage your account, process deposits and withdrawals, deliver gaming services, and administer bonuses and loyalty rewards.
EzySpin is required by applicable financial, anti-money laundering, and counter-terrorism financing regulations to collect, verify, and retain certain categories of personal data. KYC processing, transaction monitoring, and mandatory reporting obligations fall under this legal basis.
EzySpin processes certain data on the basis of legitimate business interests — including fraud detection and prevention, platform security monitoring, responsible gambling identification, and internal analytics used to improve the Member experience. Where legitimate interests are relied upon, EzySpin has conducted a balancing test and determined that processing does not unduly interfere with the rights and freedoms of the Data Subject.
Where EzySpin processes data for purposes that go beyond contractual, legal, or legitimate interest bases — such as the delivery of promotional communications and marketing materials — consent is obtained explicitly. Consent may be withdrawn at any time without prejudicing any processing already carried out. Withdrawal of consent can be effected via account settings or by contacting our support team.
EzySpin uses your personal data for the following purposes, each tied to one of the legal bases described in Section 5:
EzySpin does not sell, rent, or trade your personal data to any third party for commercial gain. Personal data is shared only in the following limited circumstances, each governed by formal data processing agreements or legal requirements:
EzySpin uses cloud hosting, database management, and content delivery services provided by reputable technology infrastructure vendors. These providers may process personal data as part of normal platform operations but are contractually bound to treat all data as confidential and to process it only on EzySpin's documented instructions.
Identity documents and verification data are processed by authorised KYC verification service providers engaged by EzySpin. These providers operate under strict data processing agreements and are prohibited from using Member data for any purpose beyond the verification service they are contracted to provide.
EzySpin uses cloud hosting, database management, and content delivery services provided by reputable technology infrastructure vendors. These providers may process personal data as part of normal platform operations but are contractually bound to treat all data as confidential and to process it only on EzySpin's documented instructions.
EzySpin may disclose personal data to competent regulatory bodies, law enforcement agencies, or financial intelligence units where required to do so by applicable law, court order, or regulatory direction. EzySpin will, where legally permissible, notify the affected Member of such disclosure.
EzySpin uses cookies and similar tracking technologies to operate the Platform, maintain session state, detect fraud, and gather aggregated usage analytics. The following cookie categories are used:
These cookies are essential for the Platform to function. They manage your login session, remember your authentication state across page loads, and maintain security token validation. These cookies cannot be disabled without materially impairing Platform functionality.
Functional cookies remember your preferences — including language selection (English, Bahasa Melayu, or Mandarin), preferred odds display format (decimal or fractional), and UI customisation settings — so that these do not need to be re-entered on every session.
Analytics cookies collect aggregated, anonymised data about how Members use the Platform — including pages visited, session duration, navigation paths, and error events. This data is used exclusively to improve Platform performance and user experience. No personally identifiable information is included in analytics data sets.
You can manage cookie preferences through your web browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling analytics cookies will not affect your ability to play or transact on EzySpin.
EzySpin retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:
Upon expiry of the applicable retention period, data is securely and irreversibly deleted or anonymised such that it can no longer be associated with any identifiable individual. Anonymised data may be retained indefinitely for statistical and research purposes.
EzySpin implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
As a Data Subject, you hold the following rights in respect of your personal data held by EzySpin. To exercise any of these rights, please contact EzySpin's support team with your request. We will respond within thirty (30) calendar days and may require identity verification before processing a request.
You have the right to request a copy of the personal data EzySpin holds about you, along with information about how that data is being processed. This is commonly referred to as a Subject Access Request (SAR).
If any personal data held by EzySpin is inaccurate or incomplete, you have the right to request its correction. EzySpin will action verified rectification requests within 30 calendar days.
You may request deletion of your personal data where it is no longer necessary for the original purpose, where consent is withdrawn, or where processing is unlawful. This right is subject to overiding legal retention obligations.
Where you contest the accuracy of data or have objected to its processing, you may request that EzySpin restrict processing while the matter is under review.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of your personal data for portability to another service provider.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where an objection to direct marketing is received, EzySpin will cease processing immediately.
EzySpin's services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data belonging to persons under the age of 21. Age verification is a mandatory component of our KYC process, and accounts found to be operated by individuals below the minimum age threshold are immediately suspended and all associated data is deleted.
Parents and guardians who have reason to believe that a minor in their household has accessed or registered on the Platform are encouraged to contact EzySpin's support team immediately at [email protected] (plain text — not a link). EzySpin will investigate the report promptly and take all necessary steps to remove the account and any associated data.
In order to operate the Platform and deliver services to Members across Malaysia and internationally, EzySpin may transfer personal data to Data Processors located in jurisdictions outside of Malaysia. Such transfers occur only where necessary for the delivery of contracted services and are subject to appropriate safeguards.
Where personal data is transferred to a third country, EzySpin ensures that equivalent data protection standards apply through one or more of the following mechanisms:
For further information about the specific third-country transfer safeguards in place, please contact EzySpin's support team.
EzySpin may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or regulatory requirements. The most recent revision date is displayed prominently at the top of this page.
Where changes are material — substantively affecting how your personal data is used, shared, or protected — EzySpin will provide advance notice of less than fourteen (14) calendar days prior to the changes taking effect. Notice will be provided via on-platform notification displayed upon login, and via email to your registered email address.
Your continued use of the Platform following the effective date of any policy amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you should cease using the Platform and contact our support team to request account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact EzySpin's support team using the details below. All contact information is provided as plain text only.
EzySpin's support team is available inEnglish, Bahasa Melayu, and Mandarin. For formal data subject requests (Subject Access Requests, deletion requests, portability requests), written communication in English is preferred to ensure accurate documentation and processing. Please include your full registered name and account email address in all privacy-related correspondence to enable efficient verification of your identity.
For additional information about your rights and responsibilities as an EzySpin Member, please refer to our Terms & Conditions and our Responsible Gambling page.
Our support team is ready to assist with any data-related query — from access requests to deletion — in English, Bahasa Melayu, or Mandarin. Reach us via live chat any time of day.
For players aged 21 and above only. Play responsibly. Visit our Responsible Gambling page for support resources.