Privacy Policy EZ888 — Platform Member Data Protection

EZ888 is an online entertainment platform operating exclusively for the Malaysia market. We understand that member trust is our most valuable asset, and that trust can only be maintained when we handle your personal information with full integrity, transparency, and responsibility.

This Privacy Policy provides a comprehensive overview of EZ888's data management practices — covering the types of information we collect, why we need it, how it is used, who may receive it, and the security measures we take to keep it protected.

This policy applies to all your interactions with EZ888, including:

• Use of the official website at ez888.win
• EZ888 mobile app on iOS and Android
• Communications via live chat, email and other support channels
• Any financial transaction carried out through the platform
• Participation in promotions, VIP programs, or special events

This policy forms part of the overall agreement between you and EZ888, and should be read together with Terms and Conditions and Responsible Gaming Policy us.

EZ888 collects various types of information depending on how you interact with the platform. All data collection is conducted transparently and only when there is a valid legal basis — whether based on your consent, contractual necessity, or applicable legal obligations.

Below is a summary table of the data we collect and the purpose of each collection:

Every piece of data we collect has a clear and legitimate purpose. EZ888 does not use your personal information beyond what is stated in this policy without obtaining fresh consent from you.

Specifically, your personal information is used for the following purposes:

• Account Management: Create, verify and maintain your member account, including the KYC process required before your first withdrawal
• Transaction Processing: Process all deposits and withdrawals accurately and securely via DuitNow, FPX and local e-wallets
• Platform Security: Detect and prevent fraud, money laundering, multiple account ownership and other security threats
• Service Communications: Send transaction notifications, account updates, security alerts and necessary service information
• Experience Personalization: Personalize game recommendations and promotional content based on your preferences and usage patterns
• Customer Support: Resolve complaints, respond to inquiries and improve service quality based on your feedback
• Legal Compliance: Meet reporting and record-keeping obligations in accordance with applicable legal requirements
• Platform Improvements: Analyze aggregated usage patterns to improve platform performance, interface and overall experience

For marketing communications such as promotional offers and bonus information, you may opt out at any time through your account settings or by contacting our support team. Opting out will not affect essential service communications related to your account.

EZ888 does not sell, rent, or disclose members' personal information to third parties for commercial marketing purposes. However, in the context of normal platform operations, there are certain situations where limited and controlled data sharing is necessary.

Parties that may receive limited access to your data:

• Payment Service Providers: Financial institutions, DuitNow, FPX, e-wallet operators and other payment processors required to complete your transactions
• Game Providers: Third-party game development companies that provide slots, betting, and other games on the EZ888 platform — only minimal technical data is shared
• IT Service Providers: Companies providing the server infrastructure, cloud services, and cybersecurity used to operate the platform
• Statutory Authorities: Regulatory bodies, law enforcement agencies, or courts when required by law or court order

All third-party service providers we engage are bound by strict data processing agreements, ensuring they handle your information to the same standard of protection we uphold. They are only permitted to use your data for the purposes specified in those agreements.

Protecting members' personal and financial information is EZ888's top priority. We continuously invest in the latest security infrastructure and apply a "security by design" principle across all aspects of platform development.

The security layers we use include:

• 256-bit SSL/TLS Encryption: All data communications between your device and EZ888's servers are transmitted through fully encrypted channels
• Hashed Password Storage: Member passwords are never stored in plain text — they go through a one-way hashing process that cannot be reversed
• Two-Factor Authentication (2FA): An additional security layer is available and recommended for all member accounts
• 24/7 Security Monitoring: Automated monitoring systems detect and alert on unusual activity in real time
• Internal Access Control: Only authorized staff with legitimate job requirements have access to member data, and all access is logged
• Regular Security Testing: Vulnerability assessments and penetration testing are conducted regularly by independent security experts
• Secure Data Backup: Data is regularly backed up to secure data centers to ensure service continuity.

While we take all reasonable steps to protect your data, no system is entirely immune to every cyber threat. In the rare event that a security breach is detected affecting members' personal data, EZ888 is committed to notifying affected members within 72 hours and taking immediate remedial action.

EZ888 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand aggregate platform usage patterns. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Save your personal settings such as language, theme and game preferences to provide a more comfortable experience
• Analytics Cookies: Collect statistical information about how members use the platform — this data is processed in aggregate and does not directly identify individuals
• Security Cookies: Help detect suspicious activity, unauthorized access attempts and potential fraud patterns

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect certain functions of the EZ888 platform. Our platform does not respond to "Do Not Track" signals from web browsers, as there is no consistent industry standard for such signals.

As a registered EZ888 member, you have certain rights over the personal information we hold about you. EZ888 is committed to respecting and facilitating the exercise of these rights in a timely, straightforward, and cost-free manner in most situations.

• Right of Access: You have the right to request a copy of all personal information we hold about you. Requests will be processed within 14 business days.
• Right to Rectification: If any of your information is inaccurate or outdated, you have the right to request an immediate correction
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data — subject to record-keeping obligations required by law.
• Right to Restrict Processing: You may request that we restrict how your data is used in certain situations, such as during a dispute about data accuracy.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, and we will comply without question.

To exercise any of the above rights, contact the EZ888 support team via email at [email protected] or via live chat on the platform. Please include sufficient identifying information so we can process your request securely.

EZ888 does not retain your personal information longer than necessary. Retention periods are determined based on operational requirements, legal obligations, and legitimate business interests.

• Active Account Data: Retained for the duration your account is active and for a defined period after account closure for audit purposes
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements
• Security Logs: Retained for 2 years for security incident investigation and fraud prevention purposes
• Support Communication Records: Retained for 3 years for reference and service improvement purposes
• Aggregate Analytics Data: Anonymized data may be retained indefinitely as it no longer contains personally identifiable information.

Once the retention period expires, your data will be securely deleted or anonymized in accordance with established data disposal procedures. This process runs automatically on a scheduled basis.

The EZ888 platform may contain references or links to websites of game providers or other partners. This Privacy Policy applies solely to the EZ888 platform and does not cover the privacy practices of those third-party websites.

EZ888 is not responsible for the privacy policies, content, or security practices of any third-party websites. We recommend reading the privacy policy of each website you visit separately before providing any personal information to them.

The presence of any links or references on the EZ888 platform does not imply that we endorse, support or guarantee the content, products or services offered by those websites.

The EZ888 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

All registration processes include strict age verification. Should we discover that a child's personal information has been collected inadvertently, we will immediately take the following steps:

• Suspend the account in question immediately
• Immediately delete all related personal information
• Contact identified parents or guardians where necessary
• Reporting to relevant authorities as required by law

If you as a parent or guardian believe your child has registered or provided personal information to EZ888, please contact our support team immediately via [email protected] and we will handle the matter with the highest priority.

EZ888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform service improvements. All amendments take effect immediately upon publication on our official website.

When significant changes are made, we will notify members through one or more of the following methods:

• In-platform notification upon next login
• Email notification to the address registered with your account
• A clear notification banner on the website's main page

The "Last Updated" date at the top of this document will be revised whenever amendments are made. We encourage you to review this Privacy Policy periodically. Continued use of the EZ888 platform after the effective date of any amendment constitutes your acceptance of the changes made.