ezi88 Privacy Policy

ezi88 ("we", "us", "our") operates the online gaming platform accessible at https://ezi88.bio and all associated subdomains (the "Platform"). This Privacy Policy applies to all individuals who register as Members, visit the Platform, or interact with ezi88 in any capacity.

ezi88 is committed to handling your personal data responsibly and transparently. This policy has been drafted to meet internationally recognised data privacy standards, including principles consistent with the General Data Protection Regulation (GDPR) as a global benchmark, adapted for the context of our operations serving players principally based in Indonesia.

By registering an Account on the ezi88 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not register an Account or use the Platform.

This Privacy Policy should be read in conjunction with the ezi88 Terms & Conditions, which govern the overall contractual relationship between you and ezi88.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, or deletion.
• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, ezi88's operating entity.
• "Processor" means any third party that processes personal data on behalf of ezi88 pursuant to a data processing agreement.
• "Member" means any natural person who has successfully registered an Account on the ezi88 Platform.
• "KYC" (Know Your Customer) refers to the identity and age verification process conducted by ezi88 as part of its compliance obligations.
• "Cookies" means small data files placed on your device by the ezi88 Platform for functional, analytical, or preference-retention purposes.
• "Sensitive Data" means a subset of personal data that warrants additional protection, including identity document numbers, financial account details, and any data that could be used to perpetrate identity fraud.

ezi88 collects the following categories of personal data. We collect only what is genuinely necessary for the purposes described in Clause 6.

3.1 Registration Data

When you create an ezi88 Account, we collect:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (for age verification — 21+ strictly enforced).
• Residential address, including city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta) and postal code.
• Email address and mobile phone number.
• Chosen username and a hashed (never plain-text) version of your password.
• Preferred currency (Indonesian Rupiah — IDR / Rp).

3.2 Identity Verification (KYC) Data

To comply with international anti-money-laundering (AML) standards and to verify that you are at least 21 years of age, ezi88 may request:

• A copy of a valid government-issued photo ID — such as an Indonesian National Identity Card (KTP) or passport.
• A recent bank statement or e-wallet screenshot (from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja) confirming that the payment method is registered in your own name.
• In certain circumstances, a selfie photograph alongside your identity document, to confirm that the document belongs to the Account holder.

3.3 Financial Transaction Data

• Deposit amounts, dates, times, and originating payment method references.
• Withdrawal requests, amounts, destination payment method references, and processing status.
• Bonus credit and wagering activity records.
• Account balance history.

3.4 Gaming Activity Data

• Game session logs, including game title, stake, outcome, and timestamp.
• Sportsbook bet records, including market, selection, odds, stake, and settlement result.
• Responsible gaming tool settings (deposit limits, self-exclusion periods, session reminders).

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session start and end times.
• Platform feature usage logs (pages visited, buttons clicked, errors encountered).

3.6 Communications Data

• Records of live chat, email, and any other support interactions between you and the ezi88 support team.
• Responses to any surveys, promotions, or feedback requests you choose to participate in.

ezi88 collects personal data through the following channels:

• Directly from you — when you register an Account, complete the KYC process, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, server logs, and similar technologies when you visit or interact with the Platform (see Clause 10 for the full cookie policy).
• From third-party payment processors — Indonesian bank networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) transmit transaction confirmation data to ezi88's payment gateway to enable deposit crediting and withdrawal processing.
• From identity verification service providers — third-party KYC providers that ezi88 engages to conduct document authenticity checks and biometric verification may share verification results (pass/fail status and flagged anomalies) with ezi88.
• From fraud detection and AML screening services — ezi88 uses third-party risk-screening tools that may cross-reference submitted data against watchlists and sanctions databases.

ezi88 processes your personal data on the following legal bases:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

ezi88 uses the personal data we collect exclusively for the following purposes:

• Account administration: Creating and maintaining your ezi88 Account, processing login authentication, and managing Account settings including responsible gaming tool preferences.
• Identity and age verification: Confirming that you are at least 21 years of age and that the identity and payment methods associated with your Account belong to you.
• Transaction processing: Crediting deposits to your Account balance and processing withdrawal requests to the Indonesian bank account or e-wallet registered in your name.
• Fraud and money-laundering prevention: Monitoring transaction patterns for indicators of financial crime, bonus abuse, multi-accounting, or other conduct prohibited under the Terms & Conditions and applicable international AML standards.
• Customer support: Responding to enquiries, investigating complaints, processing responsible gaming requests (self-exclusion, deposit limit changes), and resolving disputes.
• Regulatory compliance: Maintaining transaction and identity records for the retention periods required by ezi88's licensing jurisdiction and applicable international compliance frameworks.
• Platform security: Detecting and preventing unauthorised access to Accounts, identifying and blocking malicious automated traffic, and investigating suspected security incidents.
• Service improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve the user interface, and prioritise product development decisions.
• Promotional communications: Sending you bonus offers, seasonal promotions (Idul Fitri, Imlek, Indonesian Independence Day, Ramadhan cashback events, and similar), and product updates — but only if you have opted in to marketing communications during registration or subsequently via your Account settings. You may opt out at any time.

ezi88 does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

• Payment processors and banking partners: Transaction data (name, amount, bank reference) is shared with the relevant Indonesian bank network or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit or withdrawal.
• KYC and identity verification providers: Identity documents and biometric data submitted during the KYC process are shared with contracted third-party identity verification service providers under strict data processing agreements that prohibit any use of your data beyond the verification service.
• AML and fraud screening services: Limited identification data may be submitted to sanctions screening and fraud intelligence databases as required by ezi88's AML compliance programme.
• Game content suppliers: When you play games provided by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), your username, Account ID, and session token are shared with the relevant supplier to initialise and operate your game session. These suppliers are contractually prohibited from using your data for any other purpose.
• Regulatory and law enforcement authorities: Where ezi88 is subject to a valid legal obligation, court order, or regulatory direction requiring disclosure, we will comply. We will notify you of any such disclosure where we are legally permitted to do so.
• Corporate successors: In the event of a merger, acquisition, or sale of substantially all of ezi88's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

ezi88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or ezi88's licensing obligations.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised such that it can no longer be attributed to any individual.

ezi88 applies technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security architecture includes, but is not limited to:

• 256-bit SSL/TLS encryption across all data in transit between your device and the ezi88 Platform.
• AES-256 encryption at rest for all sensitive personal data and financial records stored on ezi88 servers.
• Password hashing using industry-standard bcrypt with a high work factor — we never store your password in plain text.
• Two-factor authentication (2FA) via SMS OTP for Account logins, with an option for authenticator-app-based 2FA for Members who prefer it.
• Role-based access controls (RBAC) — ezi88 staff can access personal data only to the extent strictly necessary for their job function. All data access is logged and subject to periodic audit.
• Intrusion detection and DDoS mitigation systems monitoring the Platform perimeter 24/7.
• Regular penetration testing by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Secure data centre facilities with physical access controls, CCTV monitoring, and environmental protections for the servers on which ezi88 data is hosted.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ezi88 will notify affected Members and relevant authorities in accordance with applicable breach notification requirements as promptly as practicable.

ezi88 uses cookies and similar tracking technologies on the Platform. The following table describes the categories of cookies we deploy:

ezi88 does not deploy third-party advertising or retargeting cookies. We do not use cookies to build profiles of your browsing behaviour across external websites.

You may manage functional and analytics cookies through your Account settings panel. Note that disabling functional cookies may affect your experience on the Platform. Strictly necessary and fraud-prevention cookies cannot be disabled without impairing Platform security and your Account protection.

As a data subject, you have the following rights in relation to the personal data ezi88 holds about you. To exercise any of these rights, please contact ezi88 support via live chat or email (see Clause 14). We will respond to all valid requests within 30 calendar days.

• Right of Access: You may request a copy of the personal data ezi88 holds about you, together with information about how it is being used and shared.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that we correct or update it. For KYC data, updated documentary evidence will be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that this right is subject to any mandatory retention obligations — we cannot delete financial transaction records that we are legally required to retain. Where full deletion is not possible, we will anonymise the data.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is resolved.
• Right to Data Portability: You may request a copy of the personal data you provided to ezi88 in a structured, machine-readable format (e.g., JSON or CSV) for transfer to another service provider.
• Right to Object: You may object to processing based on ezi88's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes (including profiling for marketing). Objecting to marketing will result in immediate removal from all promotional communications.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your Account settings or by contacting support.

The ezi88 Platform is strictly for adults aged 21 and over. ezi88 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and ezi88 reserves the right to request documentary proof of age at any stage of the Account lifecycle.

If ezi88 discovers or is notified that an Account is held by a person under 21 years of age, we will immediately suspend the Account, conduct a full review, and permanently close it if the age restriction violation is confirmed. Any balance associated with such an Account will be handled in accordance with ezi88's underage gambling policy, which includes returning deposits where no wagering has occurred.

If you believe that a minor has registered an Account on the ezi88 Platform, please contact our support team immediately via live chat so we can investigate and take appropriate action. 21+ only. No exceptions.

ezi88 reviews this Privacy Policy at least annually and whenever a material change to our data processing activities occurs. When we make a significant change to this policy, we will notify Members via a prominent notice on the Platform homepage and, where the change affects rights or obligations materially, by email to the registered address on file.

The "Last updated" date at the top of this page reflects the date of the most recent review. Continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should cease using the Platform and may request Account closure.

Minor editorial changes (correcting typographical errors, clarifying existing practices without substantive change) may be made without notification, though the "Last updated" date will reflect such revisions.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a data privacy concern, please contact the ezi88 Data Privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget on the ezi88 Platform. Indonesian-speaking support agents are on duty at all hours. For privacy-related requests, ask the agent to escalate your query to the Data Privacy team.
• Email: [email protected] — please include "Privacy Request" in the subject line and describe your request clearly. Allow up to 5 business days for a substantive written response to complex privacy requests.

We will verify your identity before actioning any data subject request to ensure that personal data is not disclosed to or acted upon at the direction of an unauthorised third party.