Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how ezebet ("we", "us", "our", "the Platform") collects, processes, stores, shares, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the services available at ezebet.buzz, including our online casino, sports betting, live dealer, and all associated features.

ezebet is committed to responsible data stewardship in accordance with internationally recognised data protection principles, including the principles of purpose limitation, data minimisation, storage limitation, integrity, confidentiality, and accountability. We take our obligations regarding the personal data of our players — including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia — with the utmost seriousness.

By registering an account or using any service on ezebet, you acknowledge that you have read and understood this Policy. If you do not agree to the terms of this Policy, you must not register an account or provide any personal data to ezebet.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly, including but not limited to name, email address, telephone number, identification document number, IP address, and payment details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means ezebet, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of ezebet under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and document verification process required before withdrawal of funds or in response to risk-based triggers.
• "Cookies" means small text files placed on a Player's device by the Platform for the purposes described in Section 7 of this Policy.

Personal Data We Collect

ezebet collects personal data from you in three principal ways: data you provide directly, data generated automatically through your use of the Platform, and data we receive from trusted third-party service providers.

3.1 Data You Provide Directly

• Full legal name, date of birth, and residential address (required at registration and KYC).
• Email address and contact telephone number.
• Username and hashed password credential.
• Government-issued identification documents (MyKad, passport, or driving licence) submitted for KYC verification.
• Payment and banking details, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency wallet addresses (BTC, ETH, USDT).
• Communications submitted to our support team via live chat or email, including support requests and formal complaints.
• Responsible gambling self-assessment responses and limit-setting preferences.

3.2 Data Collected Automatically

• IP address, device type, operating system, and browser type.
• Session timestamps, page navigation data, and feature interaction logs.
• Betting and gaming history, including wager amounts, game choices, and transaction records.
• Deposit and withdrawal transaction metadata (amounts, timestamps, payment method used).
• Cookie identifiers and session tokens (see Section 7).

3.3 Data Received from Third Parties

• Identity verification results from KYC service providers.
• Fraud and risk scoring data from anti-fraud service providers.
• Payment confirmation data from payment processors and financial institutions.
• Publicly available information relevant to anti-money laundering (AML) screening.

Purpose of Data Processing

ezebet processes personal data for the following defined purposes:

Legal Basis for Processing

ezebet processes personal data on the basis of one or more of the following recognised legal grounds:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered Player — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, identity verification requirements, and record-keeping obligations under our international gaming licence.
• Legitimate Interests: Processing carried out for ezebet's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and product improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your explicit, freely given consent — primarily in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third Parties

ezebet does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: Financial institutions and payment service providers (including e-wallet operators such as Touch 'n Go, Boost, and GrabPay, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong Bank) receive transaction data necessary to process deposits and withdrawals on your behalf.
• KYC & Identity Verification Providers: Specialist third-party KYC service providers receive identity document data for the purpose of verifying your eligibility to use the Platform.
• Fraud Prevention & AML Services: Risk management and anti-money laundering service providers may receive transaction and behavioural data for the purpose of fraud detection and regulatory compliance.
• Game Software Providers: Third-party game providers whose games are hosted on our platform may receive anonymised session and wagering data for the purpose of game operation and technical support.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, licensing authorities, or courts of competent jurisdiction where required to do so by law or by order.
• IT & Infrastructure Service Providers: Cloud hosting, security monitoring, and technical support providers may process personal data on our behalf, subject to strict contractual data processing agreements.

Cookies & Tracking Technologies

ezebet uses cookies and similar tracking technologies to operate the Platform, maintain session integrity, and improve the Player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in during an active session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and deposit method. These enhance convenience but are not essential to core functionality.
• Analytics Cookies: Collect anonymised data about how Players navigate and use the Platform, enabling us to identify technical issues and improve overall user experience.
• Security & Fraud Prevention Cookies: Help detect suspicious behaviour, bot activity, and account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair functionality on the Platform. ezebet does not use third-party advertising cookies or tracking pixels for the purpose of serving targeted advertisements on external platforms.

Data Retention

ezebet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. Specific retention periods are as follows:

• Account Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with standard AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, as required under applicable international anti-money laundering standards.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction for audit and compliance purposes.
• Customer Support Communications: Retained for three (3) years from the date of the final communication, unless the matter relates to a formal dispute in which case records are retained until the dispute is fully resolved.
• Marketing Consent Records: Retained for the duration of the consent and for one (1) year thereafter as evidence of the consent having been obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

Security Measures

ezebet implements a multi-layered set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security: All data in transit between your device and our servers is encrypted using 256-bit SSL/TLS encryption.
• Data Encryption at Rest: Sensitive personal data, including identity documents and payment details, are stored in encrypted form using strong encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised ezebet personnel on a strict need-to-know basis. Access is logged and monitored.
• Two-Factor Authentication: ezebet supports 2FA for Player accounts and enforces 2FA for all internal staff access to systems containing personal data.
• Regular Security Audits: The Platform undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: ezebet maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, you will be notified without undue delay.

Your Data Rights

As a data subject whose personal information is processed by ezebet, you hold the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will respond to verified access requests within 30 days of receipt.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data held about you. Updates to contact information can also be made directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that erasure requests may be declined where retention is required by law (e.g., AML record-keeping obligations).
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is contested.
• Right to Data Portability: Where processing is based on your consent or a contractual relationship, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where it is carried out on the basis of our legitimate interests. You may also object to processing for direct marketing purposes at any time, with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our Data Privacy team at [email protected] with the subject line "Data Privacy Request". We will acknowledge your request within 48 hours and provide a substantive response within 30 days.

Minors & Age Restrictions

ezebet strictly prohibits the use of its Platform by individuals under the age of 21. We do not knowingly collect or process the personal data of minors. Account registration requires confirmation of age, and mandatory KYC verification is enforced to prevent underage access to real-money gaming and betting services.

If ezebet becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, that account will be suspended immediately, all associated personal data will be deleted, and any funds on account will be returned to the originating payment method following investigation.

If you are a parent or guardian and believe a minor has registered an account on ezebet, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

International Data Transfers

In the course of providing our services, personal data may be transferred to and processed in jurisdictions outside of Malaysia by our third-party service providers, including payment processors, KYC verification providers, and cloud infrastructure operators.

Where such international transfers take place, ezebet ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that impose obligations on recipient organisations equivalent to those described in this Policy. ezebet will not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate compensating safeguards.

Amendments to This Policy

ezebet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we offer. The "Last Updated" date at the top of this Policy will be revised whenever material changes are made.

Where changes are material — meaning they significantly affect how we collect or use your personal data — we will notify you by email to your registered address before those changes take effect. We will also display a prominent notice on the Platform for a reasonable period following material updates.

Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of those changes. If you do not agree to the revised Policy, you must cease using ezebet and may request account closure in accordance with our Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ezebet processes your personal data, please contact us using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.