Privacy Policy

ez8 ("we", "us", "our", or "the Company") operates the online gaming platform accessible at https://ez8.cam. We are committed to protecting the privacy and security of all personal data entrusted to us by our players and website visitors.

This Privacy Policy sets out in detail: the categories of personal data we collect, the purposes for which that data is processed, the legal basis upon which processing takes place, the parties with whom data may be shared, and the rights you hold as a data subject. It applies to all personal data collected through the ez8 platform, its customer support channels, and any other direct interaction you have with ez8.

By creating an account on ez8, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. Where processing is based on consent, you retain the right to withdraw that consent at any time, as described in Section 11.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Subject" means the individual to whom Personal Data relates — in this context, primarily the registered Account holder or website visitor.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, ez8.
• "Third Party" means any person or entity other than ez8 and the Data Subject.
• "KYC" means Know Your Customer — the identity verification process required to comply with anti-money laundering and responsible gambling obligations.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.
• "Platform" means the ez8 website, mobile interface, and all associated services accessible at https://ez8.cam.

ez8 collects the following categories of personal data, limited to what is necessary for the stated processing purposes:

• Identity Data: Full legal name, date of birth, Malaysian MyKad number or passport number, nationality, and photographic identification documents submitted during KYC verification.
• Contact Data: Email address, Malaysian mobile number, and residential address.
• Financial Data: Bank account numbers, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), FPX transaction references, DuitNow transfer records, USDT wallet addresses, deposit and withdrawal histories, and balance records.
• Location Data: Country of access as determined by IP address. We do not collect precise GPS location data.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and session identifiers.
• Usage Data: Game play history, bet records, session durations, pages visited, features used, and responsible gambling tool interactions.
• Communications Data: Records of live chat interactions, email correspondence, and support tickets submitted to ez8.

ez8 collects personal data through the following channels:

• Account Registration: When you create an Account on ez8, you provide Identity Data, Contact Data, and authentication credentials directly through the registration form.
• KYC Verification: When completing identity verification, you submit copies of government-issued identification documents (Malaysian MyKad, passport, or other acceptable documents).
• Deposits and Withdrawals: When you initiate a financial transaction via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, bank transfer, or USDT TRC20, Financial Data is generated and recorded.
• Platform Interactions: Usage Data is collected automatically as you navigate the Platform, play games, place bets, and interact with features such as responsible gambling tools.
• Customer Support: When you contact our live chat or email support team, the content of those communications is recorded and stored.
• Cookies and Similar Technologies: Technical Data is collected automatically via cookies and similar tracking technologies as described in Section 10.

The following table summarises the primary purposes for which ez8 processes personal data, and the category of data involved in each:

ez8 processes your personal data one or more of the following legal bases, depending on the purpose and nature of each processing activity:

• Contractual Necessity: Processing required to perform our obligations under the agreement between ez8 and you as a registered player — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering obligations, KYC requirements, record-keeping duties, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out in pursuit of ez8's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Where you have provided explicit consent to a specific processing activity, such as receipt of marketing communications. Consent may be withdrawn at any time.

ez8 does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors: Malaysian payment service providers including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and banking partners (Maybank, CIMB, Public Bank, Hong Leong, RHB) for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: KYC and identity verification service providers engaged to assist with document checking and age verification.
• IT Infrastructure & Security Providers: Cloud hosting, data storage, cybersecurity, and platform monitoring service providers who process data on our behalf under contractual data processing agreements.
• Fraud Prevention & AML Screening: Third-party providers used for transaction monitoring, sanctions screening, and fraud detection.
• Regulatory Authorities: Competent regulatory, law enforcement, and judicial authorities, where disclosure is required by applicable law, court order, or regulatory directive.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by ez8 in connection with our business operations.

All third-party service providers who receive personal data are required to process it solely in accordance with our instructions and are prohibited from using it for their own independent purposes.

In some circumstances, personal data processed by ez8 may be transferred to or accessed from locations outside Malaysia in connection with the services provided by our technology and infrastructure partners. Where such transfers occur, ez8 takes steps to ensure that appropriate contractual and technical safeguards are in place to protect the security of your data during and after the transfer.

We do not transfer personal data to third parties in jurisdictions that do not provide an adequate level of data protection without first implementing appropriate protective measures, such as contractual data processing clauses binding the recipient to equivalent data protection standards.

ez8 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any legal obligations requiring longer retention. The following indicative retention periods apply:

• Active Account Data: Retained for the duration of your Account relationship with ez8, plus a minimum of five (5) years following Account closure to comply with anti-money laundering record-keeping obligations.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for a minimum of three (3) years from the date of the last interaction.
• Technical and Usage Data (Logs): Retained for up to twelve (12) months from the date of collection, unless retention is required for fraud investigation or legal proceedings.
• Marketing Consent Records: Retained for the period of your consent, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with industry-standard data destruction practices.

ez8 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you across sessions, maintain your login state, and understand how the Platform is being used.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable personalised features such as language preferences, remembered login details, and game lobby settings.
• Analytics Cookies: Help us understand how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. Data collected is aggregated and anonymised where possible.
• Security Cookies: Used for fraud detection, bot prevention, and session integrity checks.

As a data subject, you hold the following rights in respect of your personal data held by ez8. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within a reasonable timeframe and at no charge, unless requests are manifestly unfounded or excessive.

ez8 implements a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard SSL/TLS protocols — consistent with the security standard used by Malaysia's leading online banking platforms including Maybank2u and CIMB Clicks.
• Encryption at Rest: Sensitive data stored on our servers, including identification documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Role-based access controls restrict access to personal data to authorised personnel only. All access to sensitive data is logged and subject to periodic audit.
• Two-Factor Authentication: Two-factor authentication is required for administrative access to systems containing personal data.
• Penetration Testing: Regular penetration testing and vulnerability assessments are conducted to identify and remediate security weaknesses.
• Incident Response: ez8 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to individuals, affected data subjects will be notified in accordance with applicable legal obligations.

While we employ robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately of any suspected unauthorised access to your Account.

The ez8 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process.

If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated Account. Any deposits made will be refunded in accordance with our responsible gambling obligations.

If you have reason to believe that a person under the age of 21 has registered an Account on ez8, please contact our support team immediately using the contact details in Section 15.

ez8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where amendments are material, we will notify active Account holders via a prominent notice on the Platform or by email to the registered address, with a minimum of 14 days' advance notice before the revised policy takes effect.

Minor amendments — such as typographical corrections, clarifications that do not alter the substance of our data processing activities, or changes required to comply with updated regulatory guidance — may take effect immediately without advance notice.

The "Last Updated" date at the top of this policy indicates when the most recent review was completed. We encourage you to review this page periodically. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised policy.

For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data by ez8, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the Platform. Our support team can handle data access requests, correction requests, and marketing opt-out requests in real time.
• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: Please use the subject line "Data Privacy Request — [Your Registered Username]" so that our team can route your enquiry to the appropriate handler promptly.

We aim to acknowledge all privacy-related requests within 2 business days and to provide a substantive response within 14 business days. Complex requests — such as full data access requests — may require additional time, in which case we will notify you of the expected response timeline.