Privacy Policy ezpin – Personal Data Protection for Malaysian Members

This Privacy Policy is published by ezpin and applies to all individuals who access or use our platform, including the official website, mobile app, and all related services. It clearly explains how we handle your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

Ezpin is committed to managing your personal data in a transparent, responsible, and secure manner. We only collect information that is genuinely necessary to provide our services, and we will not use it beyond the purposes stated in this document without first obtaining your consent.

By registering or using any ezpin service, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please contact our support team for further discussion before continuing to use the platform.

To provide a secure, personalised, and efficient platform experience, ezpin collects several categories of information from members. All data collection is carried out lawfully, transparently, and limited strictly to what is genuinely necessary.

We never collect sensitive information such as political views, religious beliefs, health status, or biometric data, except in extraordinary circumstances required by law and with your prior written consent.

Ezpin uses collected personal data solely for legitimate purposes directly related to the provision of our platform services. The following are the primary purposes for which that data is used:

• Creating and managing your member account, including identity verification through the KYC process required by financial authorities.
• Processing deposits and withdrawals securely through approved payment gateways, including FPX, Touch 'n Go, GrabPay, and Boost.
• Sending important account notices such as login confirmations, suspicious activity alerts, and terms of service updates.
• Maintaining platform integrity through active detection and prevention of fraud, money laundering, and bonus abuse.
• Personalizing your gaming experience based on your preferences and activity history, so that recommendations provided are more relevant to you.
• Complying with applicable legal and regulatory obligations, including the retention of transaction records for periods prescribed by law.
• Analyzing platform usage patterns in aggregate and anonymized form for service improvement and new feature development purposes.
• Sending you promotional information and special offers, provided you have not opted out of receiving such marketing communications.

Ezpin does not sell, rent, or trade members' personal information to any third party for marketing or commercial purposes. However, there are limited situations where we need to share certain information with specific parties for legitimate operational purposes:

• Payment Service Providers: Required transaction information is shared with approved payment processors such as FPX and eWallet providers, solely to complete your financial transactions.
• Identity Verification Providers: Required KYC data is shared with approved third-party identity verification service providers and is subject to strict confidentiality agreements.
• Cloud Infrastructure Providers: Data is stored on secure cloud servers under legally binding data protection agreements.
• Legal Authorities: We will disclose required information to government authorities, law enforcement, or regulatory bodies when mandated by a court order or applicable law.
• Business Transfer: In the event of a merger, acquisition, or sale of ezpin assets, member information may be transferred to the successor entity; however, members will be notified in advance.

The security of your personal and financial data is ezpin's top priority. We continuously invest in cutting-edge security infrastructure to ensure your information is always protected against unauthorized access, breaches, or misuse.

• All data transmitted between your device and ezpin's servers is protected by Transport Layer Security (TLS) version 1.3 encryption — the same standard used by leading banking institutions in Malaysia.
• Sensitive data stored in our databases, including payment information and KYC documents, is encrypted using AES-256 — one of the strongest encryption standards currently available.
• Two-factor authentication (2FA) is available for all member accounts and is strongly recommended to be enabled for an additional layer of protection.
• Round-the-clock security monitoring is carried out by our cybersecurity team using sophisticated automated threat detection systems.
• Penetration testing is conducted regularly by specially appointed independent parties to identify and address potential system vulnerabilities.
• Access to members' personal data within ezpin's internal systems is restricted to staff who genuinely require it and is subject to strict access control procedures.

Ezpin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website, helping us recognise you on subsequent visits and deliver a more personalised experience.

• Essential Cookies: Required for core platform functions such as login session management, security, and language preferences — cannot be disabled.
• Preference Cookies: Storing your preferences such as display settings and favorite game selections for a more convenient user experience.
• Analytics Cookies: Helping us understand how visitors interact with our platform for improvement purposes — data is collected anonymously and in aggregate form.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure that only you can access your account.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect platform functionality and security. For more information on managing cookies, refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ezpin's internal policies, you have important rights regarding your personal data. We fully respect these rights and provide straightforward channels for you to exercise them:

• Right of Access: You may request a copy of the personal information we hold about you at any time through our customer support channels.
• Right to Rectification: If the information we hold is inaccurate or outdated, you have the right to request an immediate correction at no charge.
• Right to Object: You may object to the processing of your data for direct marketing purposes, and we will honour that request within 5 working days.
• Right to Erasure: Under certain circumstances permitted by law, you may request the deletion of your personal data — each request will be assessed on a case-by-case basis.
• Right to Restriction: You may request that we restrict the processing of your data while a dispute or review is in progress.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another platform if required.

Ezpin retains your personal data for as long as necessary to fulfil the original purpose of collection and to comply with applicable legal obligations. Retention periods vary by data type:

• Active account data is retained for the duration your account is active and for up to 7 years after account closure, to meet financial record-keeping and legal requirements.
• Financial transaction records are retained for a minimum of 7 years in accordance with anti-money laundering legal requirements in force in Malaysia.
• KYC documents are retained for the period stipulated by regulatory authorities, typically between 5 and 7 years from the date of verification.
• Security logs and technical data are retained for 12 months for fraud detection and security incident investigation purposes.
• Non-personal analytics cookie data is retained for a maximum of 13 months before being automatically deleted or anonymised.
• Upon expiry of the retention period, data will be securely deleted using industry-standard deletion methods, ensuring it cannot be recovered.

Ezpin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Whenever we make significant changes, you will be notified via your registered email or a prominent notice on our website at least 14 days before the changes take effect.

The "Last Updated" date shown at the top of this document is refreshed whenever changes are made to this policy. We encourage you to review this page periodically so you stay informed about how we protect your information. Continued use of the ezpin platform after a change notice is considered acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding how ezpin handles your personal data, our data protection team is ready to assist. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

• Send privacy-related emails to our team at [email protected] — please include "Privacy Inquiry" in the subject line for faster handling
• Use the 24/7 Live Chat available on the ezpin platform for urgent enquiries about your privacy and account security.
• We aim to provide an initial response within 24 hours and a full resolution within 7 business days for all privacy-related inquiries.
• If you are unsatisfied with our response, you have the right to refer your complaint to the Department of Personal Data Protection (JPDP) Malaysia, the statutory regulatory body for PDPA-related matters.