Your Privacy Matters to ez338

ez338 operates the online casino and sportsbook platform accessible at https://ez338.pro (the "Platform"), serving players primarily located in Indonesia who prefer to engage with an English-language international gaming brand.

For the purposes of this Privacy Policy, "ez338", "we", "us", and "our" refer to the operator of the Platform. "You" and "your" refer to any individual who visits, registers on, or otherwise uses the Platform.

This Privacy Policy applies to all personal data collected through:

• The ez338 website at https://ez338.pro and all associated pages
• The ez338 mobile-optimised interface
• Email, live chat, and other communication channels used in connection with the Platform
• Any third-party services integrated into the Platform, such as payment processors and game studios, where personal data is routed through ez338

This policy does not apply to third-party websites linked from the Platform or to the privacy practices of payment providers, e-wallet services, or game content studios operating their own independent data environments. We encourage you to review the privacy policies of any third party with whom you share personal data directly.

ez338 collects personal data through several channels and for different purposes. The categories of data we collect are set out in the table below:

We collect only the minimum data necessary to deliver our services safely and in compliance with our operational obligations. We do not purchase personal data from data brokers or compile profiles from social media platforms without your explicit consent.

We use the personal data we collect for the following specific and legitimate purposes:

1. Account Management: To create, maintain, and administer your ez338 Member Account, including processing deposits and withdrawals in IDR via local Indonesian banks and e-wallets.
2. Identity Verification (KYC): To verify your identity and age (21+) in line with our responsible gaming obligations and to prevent fraud, money laundering, and underage gambling.
3. Service Delivery: To provide access to all Platform products including the sportsbook, live casino (featuring studios such as Evolution Gaming and Pragmatic Play Live), slot games (featuring providers including Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe), and togel (Indonesia's traditional numbers lottery) markets.
4. Transaction Processing: To process and record all financial transactions, including deposits, withdrawals, bonus awards, and wagering activity.
5. Fraud Prevention and Security: To detect and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as described in our Terms & Conditions.
6. Customer Support: To respond to your enquiries, complaints, and support requests via live chat and email, and to maintain records of those interactions for quality assurance and dispute resolution.
7. Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviours and to apply self-exclusion, deposit limit, or cooling-off controls at your request or where required by our responsible gaming policy.
8. Marketing Communications (with consent): To send you promotional offers, bonus alerts, and news about new games and events — such as BRI Liga 1 specials, Idul Fitri bonus campaigns, or new slot releases — where you have given explicit consent to receive such communications.
9. Platform Improvement: To analyse aggregate, anonymised usage data in order to improve the Platform's performance, user experience, and product range.
10. Legal Compliance: To meet legal and regulatory obligations, respond to lawful requests from authorities, and enforce our Terms & Conditions.

ez338 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contract Performance: Processing your registration data, financial data, and KYC documents is necessary to enter into and perform the contract with you (your Member Account agreement and our Terms & Conditions). Without this data, we cannot provide you with a functional account.
• Legitimate Interests: We process Technical Data and Usage Data to protect the Platform against fraud, ensure network and information security, and improve our services. We have assessed that these interests are not overridden by your privacy rights in the context of an online gaming platform where security and fraud prevention are essential operational requirements.
• Legal Obligation: We process Identity Data and Financial Data to comply with our anti-money laundering (AML) obligations, respond to lawful requests from law enforcement or regulatory authorities, and maintain required financial records.
• Consent: We process Marketing Preference Data and send promotional communications only where you have provided clear, affirmative consent during registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

Where we rely on legitimate interests as the legal basis for processing, you have the right to object to that processing. See Section 9 for details on how to exercise your rights.

ez338 does not sell, rent, or trade your personal data to third-party marketers. We share your personal data only in the following limited and necessary circumstances:

• Payment Processors and E-Wallet Providers: We share the financial data required to process your deposit or withdrawal with the relevant payment partner — such as BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja. Each of these providers operates under its own privacy policy and data-protection obligations.
• KYC and Identity Verification Providers: We may engage a third-party KYC service to cross-check identity documents. These providers are contractually bound to process your data solely for verification purposes and to delete it following completion of the verification task.
• Fraud Prevention and Security Services: We share Technical Data and Usage Data with fraud-detection platform partners to identify and prevent multi-accounting, bot activity, and other prohibited conduct. These services do not use your data for any purpose other than fraud prevention on behalf of ez338.
• Game Content Studios: Where you play games hosted by a third-party studio (e.g., Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft), a session token and anonymised player ID are passed to that studio to facilitate gameplay. No directly identifiable personal data (name, email, bank details) is shared with game studios.
• Customer Support Tools: We use a live-chat platform to manage support interactions. Chat transcripts are stored within that tool's environment under a data-processing agreement with ez338.
• Legal and Regulatory Disclosure: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a lawful court order, or in connection with an investigation into fraud, money laundering, or other financial crime. We will notify you of such a disclosure unless prohibited from doing so by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ez338's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and of any resulting changes to this Privacy Policy.

ez338 uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to operate the Platform effectively and to improve your experience. The categories of cookies we use are:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and ensure security tokens are valid. They cannot be disabled without breaking core functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred game lobby view, last visited game category, and notification settings — so you do not need to reconfigure them on each visit.
• Analytics Cookies: We use aggregated, anonymised analytics to understand how Members navigate the Platform, which pages attract the most engagement, and where technical issues are occurring. This data is used exclusively for Platform improvement and is not linked to your individual identity.
• Security Cookies: These cookies help us detect suspicious login patterns, unusual geographic access, and other security indicators. They are a core part of our fraud-prevention infrastructure.

ez338 does not use third-party advertising cookies or cross-site tracking cookies. We do not participate in real-time bidding (RTB) advertising networks or share cookie data with ad-tech platforms.

By continuing to use the Platform after being presented with our cookie notice, you consent to the use of the cookie categories described above. You may withdraw consent for non-essential cookies at any time by adjusting your browser settings.

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain an active Member Account, and to comply with our legal obligations. The key retention periods are:

• Active Account Data: Retained for the full duration of your membership and for a minimum of five (5) years following Account closure or the last transaction on the Account, whichever is later. This reflects standard financial record-keeping requirements.
• KYC and Verification Documents: Retained for a minimum of five (5) years from the date of verification or Account closure, as required by anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Support Interaction Records: Retained for three (3) years from the date of the interaction, or longer if the interaction is connected to an ongoing dispute or compliance matter.
• Technical and Usage Data (server logs): Retained for a rolling period of twelve (12) months, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for two (2) years following withdrawal of consent, to demonstrate compliance in the event of a complaint.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate statistical analysis.

ez338 implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using industry-standard TLS protocols. Our SSL certificate is maintained and renewed continuously.
• Encrypted Data at Rest: Sensitive fields — including passwords, KYC document files, and financial account identifiers — are encrypted at rest in our database using AES-256 encryption.
• Access Controls: Access to Member personal data within ez338's systems is restricted to authorised personnel on a strict need-to-know basis. All staff access to Member data is logged and audited.
• Two-Factor Authentication (2FA): 2FA is available to all Members and is strongly recommended. Internal staff systems require 2FA as a mandatory security control.
• Regular Security Audits: ez338 conducts periodic internal security reviews and engages independent security professionals to assess our infrastructure for vulnerabilities.
• DDoS Protection: Our network infrastructure includes distributed denial-of-service (DDoS) mitigation to maintain Platform availability and protect against traffic-based attacks.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and freedoms, ez338 will notify affected Members and relevant authorities within seventy-two (72) hours of becoming aware of the breach, to the extent required by applicable law.

As a data subject, you have the following rights in relation to the personal data ez338 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered email address and a description of your request.

We will respond to all data rights requests within ten (10) business days. Where a request is particularly complex, we may extend this period by a further ten (10) business days and will inform you of the extension.

We may ask you to verify your identity before processing a data rights request, to ensure we do not disclose or delete data in response to a fraudulent request.

The ez338 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. This age threshold applies across all of Indonesia, including users in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and all other regions.

If we discover or are notified that a Member is under the age of 21, we will:

1. Immediately suspend the Account
2. Void any bonus funds and winnings derived from promotional play
3. Return any genuine real-money deposits to their originating payment source where feasible
4. Permanently delete the personal data of the underage individual from our systems within thirty (30) days, except where retention is required by law

If you are a parent or guardian and believe your child has accessed the ez338 Platform and provided personal data, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act promptly on all reports.

ez338 is an internationally operated platform. Your personal data may be stored or processed on servers located outside Indonesia in order to deliver our services. This includes data processing by our game content providers, KYC verification partners, and infrastructure providers, whose servers may be located in jurisdictions such as Malta, the Isle of Man, Gibraltar, the Philippines, or Singapore.

Where personal data is transferred internationally, ez338 ensures that appropriate safeguards are in place, which may include:

• Contractual data-processing agreements that require the recipient to maintain data protection standards equivalent to those described in this policy
• Transfers to jurisdictions recognised as providing an adequate level of data protection
• Standard contractual clauses or equivalent mechanisms approved by relevant data protection authorities

By using the ez338 Platform and accepting this Privacy Policy, you acknowledge and consent to your personal data being transferred internationally in the circumstances described above. If you have concerns about a specific international transfer, please contact us at [email protected].

ez338 reserves the right to update, amend, or replace this Privacy Policy at any time. We will publish the revised policy on this page with an updated "Last updated" date at the top. Where changes are material — for example, a new category of data collected, a new third-party sharing arrangement, or a significant change in retention periods — we will notify active Members by email or via an in-account notification.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and may request Account closure by contacting [email protected].

We recommend reviewing this Privacy Policy periodically to stay informed of how we protect your data. The most current version will always be accessible at https://ez338.pro/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ez338 handles your personal data, please reach out through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" to ensure your message is routed to the relevant team.
• Live Chat: Available 24/7 via the chat widget on the Platform. Our support agents are available in English and Bahasa Indonesia. Target response time is under two (2) minutes during peak hours.
• Response Time: All privacy-related written enquiries are acknowledged within two (2) business days and fully responded to within ten (10) business days. Complex data rights requests may take up to twenty (20) business days.
• Service Hours Reference: All stated response times are measured in business days in WIB (Western Indonesia Time, UTC+7), which covers Jakarta, Surabaya, Medan, Bandung, and the Sumatra and Java regions.