ezspin4 Privacy Policy

1Introduction

This Privacy Policy ("Policy") is issued by ezspin4 ("ezspin4", "we", "us", or "our") and applies to all personal data collected from users of the ezspin4 platform accessible at ezspin4.co, including through any associated mobile browser interface.

ezspin4 operates as a data controller in respect of the personal data it collects directly from players. Where ezspin4 engages third-party service providers to process data on its behalf, those providers act as data processors under ezspin4's instructions and are bound by data protection obligations no less stringent than those described in this Policy.

This Policy should be read alongside ezspin4's Terms & Conditions, which are incorporated herein by reference. Terms defined in the Terms & Conditions carry the same meaning where used in this Policy. If you have questions about this Policy, please contact ezspin4 support as set out in Section 12 below.

2Data We Collect

2.1 Registration Data

When you create an ezspin4 account, we collect: full name, date of birth, email address, mobile telephone number, residential address, and the preferred currency (MYR). This data is required to create and maintain your account and verify your eligibility to use the platform.

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, ezspin4 is required under its international gaming licence to complete identity verification. This involves collecting: a copy of your Malaysian identity card (MyKad) or equivalent government-issued photo identification, and a selfie photograph taken at the time of submission. This data is used solely for identity verification and anti-money laundering compliance purposes.

2.3 Financial Data

ezspin4 collects data relating to deposits and withdrawals, including the payment method used (e.g. Touch n Go eWallet account reference, bank account name and last four digits), transaction amounts, and timestamps. ezspin4 does not store full payment card numbers. Payment processing is handled by third-party payment processors who operate under their own applicable data protection obligations.

2.4 Usage & Technical Data

ezspin4 automatically collects technical data when you use the platform, including: IP address, device type and operating system, browser type and version, session duration, pages visited, games played, betting history, and login timestamps. This data is used for security monitoring, fraud detection, platform performance improvement, and regulatory audit trail purposes.

2.5 Communications Data

If you contact ezspin4 via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and the resolution outcome. This data is used to maintain support quality and resolve disputes.

2.6 Data from Third Parties

In certain circumstances, ezspin4 may receive personal data about you from third parties — for example, from payment processors confirming transaction completion, from identity verification service providers returning KYC results, or from responsible gaming tools you have activated through third-party self-exclusion registries.

3How We Use Your Data

ezspin4 uses the personal data it collects for the following purposes:

• Account creation and management — to establish and administer your ezspin4 account, process deposits and withdrawals, and provide the products and services you have requested;
• Identity verification and fraud prevention — to verify your identity as required by our gaming licence, to detect and prevent fraudulent activity, money laundering, and multi-account violations;
• Customer support — to respond to your enquiries, process complaints, and administer dispute resolution;
• Regulatory compliance — to meet audit, record-keeping, and reporting obligations imposed by ezspin4's international gaming licence;
• Security and platform integrity — to monitor login activity, detect unauthorised access, and investigate suspicious betting patterns;
• Responsible gaming — to administer deposit limits, self-exclusion, and other player protection tools, and to identify players who may be displaying indicators of gambling-related harm;
• Marketing communications — to send promotional offers, bonus notifications, and platform updates, but only where you have provided explicit opt-in consent;
• Platform improvement — to analyse aggregate usage patterns and improve the ezspin4 user experience.

ezspin4 does not use your personal data for automated decision-making that produces significant legal effects, except where such processing is required for fraud detection or regulatory compliance purposes, in which case you retain the right to request human review of the relevant decision.

4Legal Basis for Processing

ezspin4 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our contractual obligations to you under the ezspin4 Terms & Conditions, including account management and payment processing;
• Legal obligation — processing required to comply with applicable regulatory requirements under ezspin4's international gaming licence, including KYC, AML, and audit obligations;
• Legitimate interests — processing carried out for ezspin4's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for marketing communications, where you have provided explicit opt-in consent and which you may withdraw at any time.

5Data Sharing & Third Parties

ezspin4 does not sell or rent your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors — to process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency payment rails;
• Identity verification providers — to conduct KYC checks required under our gaming licence, including document verification and liveness detection services;
• Game technology providers — certain game providers may receive pseudonymised player session data for the purpose of game round validation and RTP certification audits;
• Regulatory and law enforcement authorities — where ezspin4 is required by law, regulation, court order, or its licensing authority to disclose information;
• Anti-money laundering screening services — to screen player profiles against applicable international watchlists and politically exposed persons (PEP) databases as required by our licensing obligations.

All third-party data processors engaged by ezspin4 are contractually obligated to process personal data only on ezspin4's instructions and to maintain data security standards consistent with those described in this Policy.

6Cookies & Tracking Technologies

ezspin4 uses cookies and similar tracking technologies on the ezspin4.co platform. Cookies are small text files stored on your device that help us recognise returning users, maintain session state, and collect analytical data.

6.1 Essential Cookies

Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing platform functionality.

6.2 Analytics Cookies

Used to collect aggregated data about how players navigate the ezspin4 platform — which pages are visited, how long sessions last, and which features are used most. This data is used in aggregate and anonymised form to improve platform design and performance.

6.3 Preference Cookies

Used to remember your stated preferences, such as language settings and responsible gaming reminders. You may manage or delete preference cookies through your browser settings without affecting platform access.

You may configure your browser to reject non-essential cookies at any time. Note that doing so may affect the functionality of certain ezspin4 platform features.

7Data Security

ezspin4 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and ezspin4's servers;
• AES-256 encryption for sensitive personal and financial data stored at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments of the ezspin4 platform;
• Intrusion detection systems monitoring for unusual access patterns;
• Multi-factor authentication requirements for internal administrative access to player data systems.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ezspin4 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

8Data Retention

ezspin4 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods driven by regulatory requirements:

• Account registration data and KYC documentation: retained for a minimum of 5 years from account closure, as required by anti-money laundering obligations under ezspin4's international gaming licence;
• Transaction records: retained for a minimum of 5 years from the date of the transaction;
• Customer support communications: retained for 2 years from the date of the last communication in a given support thread;
• Marketing consent records: retained for the duration of your consent and for a further 2 years following withdrawal of consent for audit purposes.

Upon the expiry of applicable retention periods, personal data is securely deleted using industry-standard data destruction methods, or anonymised such that re-identification is not reasonably possible.

9Your Rights

Subject to applicable law and the limitations of ezspin4's regulatory obligations, you have the following rights in relation to your personal data held by ezspin4:

• Right of access — to request a copy of the personal data ezspin4 holds about you;
• Right of rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our regulatory retention obligations;
• Right to restrict processing — to request that ezspin4 limits the processing of your personal data in certain circumstances;
• Right to data portability — to receive a copy of personal data you have provided to ezspin4 in a structured, commonly used format;
• Right to object — to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent — to withdraw consent to marketing communications at any time via your account communication settings.

To exercise any of these rights, contact ezspin4 support at [email protected] with the subject line "Data Rights Request". ezspin4 will respond within 30 days of receiving a valid request.

10Children & Minors

The ezspin4 platform is strictly intended for persons aged 21 years or older. ezspin4 does not knowingly collect personal data from individuals under the age of 21. If ezspin4 becomes aware that personal data has been collected from an underage individual, that account will be suspended immediately, the data will be deleted to the extent not required for regulatory purposes, and any deposited funds will be returned to the originating payment method following identity verification.

If you believe that an underage individual has created an account on ezspin4, please contact support immediately at [email protected].

11Amendments to This Policy

ezspin4 reserves the right to amend this Privacy Policy at any time. Where a material change is made, ezspin4 will provide notice via a platform notification or email to your registered address at least 7 days prior to the amendment taking effect. The current version of this Policy, together with its effective date, is always available at ezspin4.co/privacy-policy. Continued use of the ezspin4 platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

12Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ezspin4, please contact our support team:

• Live Chat: Available 24/7 in-platform via the ezspin4 website
• Email: [email protected] (subject line: "Privacy Policy" or "Data Rights Request")

ezspin4 aims to respond to all data-related enquiries within 5 business days and to complete data rights requests within 30 calendar days of receipt.