Privacy Policy — ezi188

1 Definitions

In this Privacy Policy, the following terms carry the meanings assigned below unless context requires otherwise:

• "ezi188", "we", "us", or "our" refers to the entity operating the ezi188 online betting and casino platform at https://ezi188.app.
• "Platform" means the ezi188 website, mobile interface, games, sportsbook, live casino, payment systems, and all associated digital services.
• "Member" or "you" means any individual who has registered an account on the Platform or who otherwise interacts with the Platform in a way that results in personal data being processed by ezi188.
• "Personal Data" means any information that, alone or in combination with other information, can be used to identify a natural person — including name, date of birth, national identity number, address, email address, phone number, IP address, and device identifier.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, erasure, and destruction.
• "KYC" means Know Your Customer — the identity and document verification process required to confirm a Member's eligibility and identity.
• "Third Party" means any entity other than ezi188 and the Member, including game studios, payment processors, fraud prevention providers, and analytics partners.
• "Cookies" means small text files stored on a Member's device by the Platform for the purposes of session management, preference storage, and analytics.

2 Data Controller

ezi188 acts as the data controller for Personal Data collected through the Platform. As data controller, ezi188 determines the purposes and means of Processing Personal Data and is responsible for ensuring that Processing is conducted lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable data protection standards.

3 Data We Collect

ezi188 collects Personal Data and non-personal technical data across several categories. The specific data collected depends on how you interact with the Platform:

3.1 Registration Data

When you create an ezi188 account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth
• Residential address (including city and province within Indonesia)
• Email address
• Mobile telephone number
• Username and (hashed) password
• Preferred payment method type

3.2 KYC and Identity Verification Data

To comply with our identity verification obligations, we may collect:

• Copies of government-issued photo identification (e.g., Indonesian KTP or valid passport)
• Proof of address documentation (e.g., bank statement, utility bill)
• Selfie photographs submitted as part of liveness verification
• National identity number (NIK) as it appears on the submitted KTP
• Payment method ownership documentation (e.g., bank account statement for BCA, BRI, BNI, or Mandiri accounts)

3.3 Financial Transaction Data

For every deposit and withdrawal processed through the Platform, we collect:

• Transaction amount (in Indonesian Rupiah, IDR)
• Payment method type and provider (e.g., BRI, OVO, DANA, GoPay)
• Transaction reference numbers and timestamps
• Bank account number or e-wallet identifier associated with the transaction (partially masked in display; full value stored in encrypted form)

3.4 Betting and Gaming Activity Data

We collect a complete record of your activity on the Platform, including:

• Bets placed, bet amounts, selected markets, and outcomes
• Game sessions — titles played, duration, stakes, wins, and losses
• Bonus activations, wagering progress, and bonus settlement records
• Promotions viewed, opted into, or claimed

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address
• Device type, operating system, and version
• Browser type and version
• Session identifiers and authentication tokens
• Pages visited, click-path data, and session duration
• Geolocation data derived from IP address (city-level only )
• Referral source (the URL or channel from which you arrived at the Platform)

3.6 Communications Data

If you contact ezi188 via Live Support chat or email, we retain records of those communications, including the content of messages, timestamps, and the support agent who handled your case. This data is used for quality assurance, dispute resolution, and regulatory compliance purposes.

4 How We Collect Data

ezi188 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, place a bet, contact Live Support, or respond to a survey or promotion.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you browse or interact with the Platform. See Section 8 for full details on cookies.
• From third-party service providers — including our payment processors (who confirm transaction status), identity verification partners (who validate KYC documents), and fraud detection providers (who flag anomalous account behavior).
• From publicly available sources — where ezi188 is permitted by applicable law to supplement account data with publicly available information for fraud prevention or eligibility checking purposes.

5 Legal Basis for Processing

ezi188 processes Personal Data on the following legal bases:

6 How We Use Your Data

ezi188 uses the Personal Data we collect for the following specific purposes:

6.1 Platform Operations

• Creating, maintaining, and managing your ezi188 account.
• Authenticating your identity each time you access the Platform.
• Processing deposits and withdrawals via your nominated Indonesian bank account or e-wallet (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja).
• Settling bets, distributing winnings, applying bonuses, and maintaining an accurate account balance ledger.
• Providing customer support and resolving disputes or complaints.

6.2 Compliance and Security

• Conducting KYC verification to confirm eligibility (age 21+, identity, and address).
• Monitoring account and transaction activity for signs of fraud, money laundering, bonus abuse, or prohibited conduct as defined in our Terms & Conditions.
• Maintaining records required under our international gaming license and applicable AML obligations.
• Responding to lawful requests from regulatory bodies or law enforcement agencies.

6.3 Responsible Gaming

• Monitoring betting and gaming patterns for indicators of problem gambling behavior.
• Administering responsible gaming tools you have activated — including deposit limits, self-exclusion periods, session time reminders, and reality checks.
• Contacting you proactively if our monitoring systems flag your account for responsible gaming intervention.

6.4 Marketing and Promotions

• Sending promotional communications about ezi188 bonuses, seasonal campaigns (including Ramadhan reload offers and Idul Fitri promotions), new game launches, and sportsbook events — only where you have provided explicit consent.
• Personalizing the promotions and game recommendations shown to you within the Platform based on your activity history.

6.5 Platform Improvement

• Analyzing aggregated and anonymized usage data to understand which features, games, and markets are most popular among our Indonesian player base.
• Testing new features and interfaces using A/B testing methodologies.
• Diagnosing and resolving technical issues, latency problems, or payment processing failures.

7 Data Sharing & Disclosure

ezi188 does not sell your Personal Data to any third party. We share Personal Data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

7.1 Payment Processors

To process deposits and withdrawals, we share relevant transaction data (including your name, account number, and transaction amount in IDR) with our authorized payment processing partners, including Indonesian bank transfer intermediaries and e-wallet providers such as OVO, DANA, and GoPay. These partners are contractually bound to process your data only for the purpose of executing the specific transaction.

7.2 Identity Verification Partners

KYC document data — including copies of your KTP or passport and selfie images — is transmitted to our licensed identity verification partner for automated and manual document validation. This partner operates under a strict data processing agreement and does not retain your identity documents beyond the period required to complete verification.

7.3 Game Studio Providers

When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, a session token and anonymized player identifier are transmitted to the relevant studio's game server to initiate and manage your game session. Full Personal Data (name, address, payment details) is not transmitted to game studios.

7.4 Fraud Prevention and Security Providers

We share IP address, device fingerprint, and behavioral data with specialized fraud prevention and cybersecurity providers to detect and prevent unauthorized account access, multi-accounting, and financial fraud. These providers process data solely in accordance with our instructions and applicable data protection requirements.

7.5 Legal and Regulatory Disclosure

ezi188 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or a binding order from a competent authority. Where permitted by law, we will notify the affected Member of such a disclosure request before complying.

8 Cookies & Tracking Technologies

ezi188 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyze usage patterns. The categories of cookies we deploy are described below:

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from using core Platform features, including logging in, placing bets, and processing payments. ezi188 does not deploy third-party advertising cookies or retargeting pixels.

9 Data Retention

ezi188 retains Personal Data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the lifetime of the active account, plus a minimum of five years following account closure, to meet AML record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Betting and gaming activity logs: Retained for a minimum of three years from the date of each recorded activity.
• Customer support communications: Retained for a minimum of two years from the date of the last message in each support case.
• Marketing consent records: Retained for the duration of your consent, plus one year following withdrawal of consent, to document compliance.
• Technical and device data (server logs): Retained for a maximum of 12 months on a rolling basis, unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with ezi188's internal data lifecycle management procedures.

10 Data Security

ezi188 implements a layered set of technical and organizational security measures to protect Personal Data against unauthorized access, loss, alteration, or disclosure. Key measures include:

• TLS/SSL Encryption: All data transmitted between your device and the ezi188 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• At-Rest Encryption: Sensitive data fields — including payment account numbers, national identity numbers, and KYC document files — are encrypted at rest using AES-256 encryption.
• Password Security: Member passwords are stored only as salted cryptographic hashes; ezi188 staff cannot retrieve your plaintext password. If you forget your password, a secure reset flow is required.
• Access Controls: Access to Member Personal Data is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to background checks, confidentiality agreements, and regular security training.
• Intrusion Detection: The Platform is monitored continuously for unauthorized access attempts, unusual traffic patterns, and security anomalies by our dedicated security operations team.
• Regular Security Audits: ezi188 conducts periodic penetration testing and vulnerability assessments of the Platform infrastructure.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a Personal Data breach that poses a material risk to affected Members, ezi188 will notify affected individuals and relevant authorities in accordance with applicable breach notification obligations, without undue delay.

11 Your Data Rights

As a Member of the ezi188 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] (plain text — not a clickable link) with your full name, registered email address, and a description of your request.

11.1 Right of Access

You have the right to request a copy of the Personal Data ezi188 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the Third Parties with whom it has been shared. We will provide this information within 30 days of a verified request.

11.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request its correction. Minor account details (such as your contact phone number) may be updated directly from Account Settings. Corrections to identity data (name, date of birth) require supporting documentation and are processed by our KYC team.

11.3 Right to Erasure

You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where processing is unlawful. Note that we are not able to delete data we are legally required to retain — for example, KYC records and financial transaction data subject to AML retention obligations — and we will inform you of any such restrictions when responding to an erasure request.

11.4 Right to Restrict Processing

You may request that ezi188 restrict the Processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to Processing based on legitimate interests and that objection is under review.

11.5 Right to Data Portability

Where Processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive a structured, commonly used, and machine-readable copy of your Personal Data. We will provide this in CSV or JSON format upon verified request.

11.6 Right to Object

You have the right to object at any time to the Processing of your Personal Data for direct marketing purposes. You may also object to Processing based on ezi188's legitimate interests, in which case we will cease Processing unless we can demonstrate compelling legitimate grounds that override your interests. To unsubscribe from marketing communications, use the unsubscribe link in any marketing email or contact Live Support.

11.7 Right to Withdraw Consent

Where Processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of Processing carried out before withdrawal. Withdrawal of consent for marketing communications does not affect your ability to continue using the Platform.

12 Minors & Age Restriction

Age verification is a mandatory step in the KYC process. Where ezi188 discovers, following account registration, that a Member is under 21 years of age, the account will be immediately suspended, all pending transactions will be reversed, and any funds in the account will be returned to the originating payment method after deducting any winnings derived from play (which will be forfeited). The Personal Data of the underage individual will be retained only for the period necessary to complete the reversal process and document the incident for compliance purposes, after which it will be securely deleted.

Parents and guardians who believe a minor has registered an account on the ezi188 Platform should contact us immediately at [email protected] (plain text — not a clickable link) so we can investigate and take appropriate action without delay.

13 Third-Party Services

The ezi188 Platform integrates with a number of third-party service providers to deliver its full range of features. Each third-party provider is selected based on their data security credentials and operates under a contractual data processing agreement with ezi188. Key third-party service categories and their data handling roles include:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft — receive anonymized session tokens to manage game delivery and RNG certification.
• Payment Processors: Intermediary services facilitating IDR bank transfers and e-wallet transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja — receive transaction-specific financial data required to execute the payment.
• KYC and Identity Verification: Licensed document verification partner — receives KTP/passport images and selfie photographs solely for the purpose of identity validation.
• Fraud Prevention: Cybersecurity and fraud intelligence provider — receives anonymized device and behavioral data to detect and block suspicious account activity.
• Infrastructure and Hosting: Cloud hosting and content delivery network providers — store and transmit Platform data under enterprise-grade security and confidentiality agreements.

ezi188 does not link to or embed third-party websites or services that would independently collect your Personal Data without your knowledge. Any third-party integration visible within the Platform operates under contractual constraints that limit its use of your data to the specific service it provides to ezi188.

14 International Data Transfers

ezi188 is an internationally operated platform. As a result, Personal Data collected from Members in Indonesia may be transferred to, stored, and processed in countries outside Indonesia, including the jurisdiction in which ezi188's data center infrastructure and third-party service providers are located.

Where Personal Data is transferred internationally, ezi188 takes the following steps to ensure an adequate level of protection:

• Requiring all third-party recipients of Personal Data to execute a data processing agreement incorporating data protection obligations consistent with internationally recognized standards.
• Selecting infrastructure and service providers who operate under recognized certifications such as ISO/IEC 27001 (information security management) or equivalent.
• Applying contractual safeguards that prohibit recipients from using transferred Personal Data for any purpose other than the contracted service.

By using the ezi188 Platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described above.

15 Amendments to This Policy

ezi188 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. Material changes will be communicated to registered Members via the email address on record and/or a prominent notice on the Platform at least 7 days before the revised policy takes effect, except where immediate changes are required by law.

The version of this Privacy Policy displaying the most recent "Last Updated" date at the top of this page is the version currently in force. We encourage you to review this page periodically. Continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

16 Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 11, or want to raise a concern about how ezi188 has handled your Personal Data, please contact our data team using the details below:

Our 24/7 Indonesian-speaking Live Support team is available directly on the Platform for general account queries. For formal data protection requests — access, rectification, erasure, portability, or objection — we recommend submitting by email so that we can track and respond within the required 30-day window.

We take all privacy complaints seriously and will acknowledge your enquiry within 5 business days (WIB) of receipt. If you are dissatisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.