Privacy Policy EasyWin – Your Personal Data Security Is Our Priority

EasyWin collects your personal information through several channels as you interact with our platform. We only collect data that is strictly necessary to provide you with a safe and comprehensive service. The following are the categories of data we collect:

EasyWin does not collect sensitive data such as health information, racial background, or religious beliefs unless you voluntarily provide such information when contacting our support team.

All financial data relating to transactions on the EasyWin platform is in Malaysian Ringgit (RM) only. Supported payment methods include Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks.

EasyWin uses your personal data based on the principle of limited use – meaning your data is only used for the stated purposes that are directly related to delivering our platform's services. The key purposes for which your data is used are as follows:

• Account Management: Creating, verifying, and managing your EasyWin account, including the KYC process to ensure platform security.
• Transaction Processing: To securely and accurately process your deposits (via TnG, DuitNow, GrabPay, and others) and withdraw your winnings in MYR.
• Service Improvements: Analysing usage patterns on the EasyWin platform — such as the most popular slots, Live Casino games, and sports — to improve the overall user experience.
• Security & Fraud Prevention: Identifying and preventing fraud, money laundering, and platform abuse.
• Service Communications: To send important notices regarding your account, transactions, security updates, and policy changes.
• Customer Support: To help you resolve any technical issues, transaction queries, or general enquiries related to the EasyWin platform.
• Legal Compliance: To fulfil legal obligations under Malaysia's PDPA, anti-money laundering (AML) laws, and other applicable regulatory requirements.

EasyWin does not sell or share your personal data for commercial purposes. However, in certain circumstances, we may need to share your data with selected third parties for the purposes of operating our services:

• Payment Providers: Transaction information is shared with legitimate payment processors such as Touch 'n Go, DuitNow, GrabPay, and associated banks (Maybank, CIMB) solely for the purpose of processing your financial transactions.
• Game Providers: Anonymised game usage statistics are shared with game providers such as Pragmatic Play, PG Soft, and Evolution Gaming for technical and compliance purposes.
• Identity Verification Services: Identity information is shared with licensed KYC service providers to verify your identity for security and legal compliance purposes.
• Statutory Authorities: EasyWin will disclose personal data to Malaysian authorities (such as the PDRM or Inland Revenue Board) when required by court order or legal obligation.

• Cross-Border Data Transfers: Where personal data needs to be transferred outside Malaysia for technical operational purposes, EasyWin ensures that the receiving party upholds data protection standards equivalent to Malaysia's PDPA.
• Business Acquisition: In the event of a company merger or acquisition, user data may be transferred to the new entity, provided that the same privacy protections are maintained and members are notified in advance.

EasyWin continuously invests in security infrastructure to ensure your personal data is always protected against cyber threats and unauthorised access. Key security measures we have implemented include:

• Transit & At-Rest Encryption: Data transmitted between your device and EasyWin's servers is protected with 256-bit SSL/TLS. Data stored in our databases is also encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): EasyWin provides and encourages the use of 2FA on all accounts as an additional layer of protection against unauthorised access.
• 24/7 Security Monitoring: EasyWin's cybersecurity team monitors the platform around the clock to identify and respond to any threats or suspicious activity.
• Internal Access Controls: The principle of least privilege is applied – each EasyWin staff member only has access to the data necessary to carry out their specific role.
• Regular Security Audits: EasyWin conducts regular internal security audits and independent penetration testing to identify and address system vulnerabilities.

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by EasyWin:

To exercise any of the rights listed above, please contact the EasyWin privacy team at privacy@easywin.im. We will verify your identity and process your request within 14 working days. For complex cases, we may require up to 30 days and will keep you informed of progress throughout the process.

EasyWin uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the EasyWin platform. EasyWin does not use third-party cookies for advertising purposes unrelated to our platform.

EasyWin retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. Our data retention policy is as follows:

• Active Account Data: Retained for as long as your account remains active and the service is required.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Companies Act and Malaysian tax law requirements.
• Security Logs: Retained for 2 years for security investigation purposes if required.
• Customer Support Data: Retained for 3 years after the last interaction for ongoing support reference.
• Marketing Data: Deleted within 30 days of your consent withdrawal.

Once the retention period expires, EasyWin will securely delete or anonymise your personal data so that it can no longer be associated with you. You may request early deletion of your personal data, subject to any applicable legal retention obligations.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how EasyWin handles your personal data, please do not hesitate to contact us. We truly welcome your feedback, as it helps us improve the privacy practices of the EasyWin platform.

We will respond to all privacy enquiries within 3 working days. For formal requests under the PDPA such as data access or deletion, processing time is up to 14 working days. If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.