easy13 Privacy Policy

1. Who We Are

easy13 operates the online gaming platform accessible at easy13.app and is the data controller in respect of personal data collected through the platform. easy13 is committed to processing personal data in accordance with applicable data protection legislation and international best practices for online gaming operators.

If you have any questions about how easy13 handles your personal data, please contact us using the details provided in Section 13 of this Policy.

2. Data We Collect

easy13 collects the following categories of personal data from Members and platform visitors:

2.1 Registration Data

• Full legal name as it appears on official identity documents;
• Date of birth (for age verification — all Members must be 21 or older);
• Email address and chosen username;
• Residential address and country of residence;
• Mobile phone number.

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (MyKad, passport);
• Proof of address documentation (utility bill, bank statement);
• Source of funds documentation where required by applicable regulations.

2.3 Financial Data

• Payment method details used for deposits and withdrawals (e.g., partial e-wallet identifiers, bank account details);
• Transaction history including deposit amounts, withdrawal requests and bonus credits;
• Processed payment confirmations from payment processors (Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank).

2.4 Gaming & Behavioural Data

• Betting and gaming activity history — games played, wagers placed, outcomes;
• Login timestamps, session durations and device information;
• IP address and approximate geolocation at login;
• Browser type, operating system and device identifiers.

2.5 Communications Data

• Records of live chat, email and support ticket communications between you and easy13.

3. How We Use Your Data

easy13 uses the personal data described in Section 2 for the following purposes:

• Account creation and management: To register your easy13 account, verify your identity and maintain your Member profile;
• Age verification: To confirm that you are 21 years of age or older before granting access to real-money gaming services;
• Transaction processing: To process deposits and withdrawals in MYR via your chosen payment method;
• Service delivery: To provide access to easy13's casino, slots, sportsbook, football betting and esports betting products;
• Regulatory compliance: To fulfil Anti-Money Laundering (AML), Know Your Customer (KYC) and responsible gaming obligations under applicable international gaming authority requirements;
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, unauthorised account access and abuse of the easy13 platform;
• Customer support: To respond to enquiries, resolve disputes and provide assistance to easy13 Members;
• Responsible gaming: To monitor gaming patterns and provide responsible gaming interventions where appropriate;
• Marketing communications: To send promotional offers, bonus notifications and platform updates to Members who have not opted out (see Section 9 for opt-out rights);
• Platform improvement: To analyse usage patterns and improve the easy13 platform's performance, user experience and product offering.

4. Legal Basis for Processing

easy13 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the Member agreement between you and easy13, including account management, transaction processing and service delivery;
• Legal obligation: Processing required to comply with applicable AML, KYC, responsible gaming and data retention obligations imposed by relevant international gaming and data protection regulations;
• Legitimate interests: Processing for fraud prevention, security monitoring and platform analytics, where easy13's legitimate interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications, where your consent has been obtained at registration or thereafter. You may withdraw consent at any time as described in Section 9.

5. Data Sharing & Disclosure

easy13 does not sell, rent or trade your personal data. We may share your personal data with the following categories of third parties in the circumstances described:

• Payment processors: Payment service providers (such as Touch 'n Go eWallet, Boost, Maybank, CIMB and Public Bank) receive necessary transaction data to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC and age verification service providers who assist easy13 in confirming the identity and eligibility of Members;
• Gaming software providers: Game content providers and platform technology vendors who require access to limited session data to deliver games and resolve technical disputes;
• Regulatory and law enforcement authorities: easy13 may disclose personal data to competent authorities where required by law, court order or in connection with the investigation of financial crime, fraud or other unlawful activity;
• Responsible gaming organisations: In circumstances where a Member's gaming behaviour triggers a responsible gaming intervention, easy13 may share limited data with licensed responsible gaming support services;
• Business successors: In the event of a merger, acquisition or sale of the easy13 business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party service providers engaged by easy13 are required to handle personal data in accordance with applicable data protection standards and are prohibited from using Member data for their own purposes.

6. Cookies & Tracking Technologies

The easy13 platform uses cookies and similar tracking technologies for the following purposes:

• Strictly necessary cookies: Required for session management, login authentication and platform security. These cannot be disabled without impairing platform functionality;
• Functional cookies: Remember your language preferences, account settings and game lobby configurations;
• Analytics cookies: Help easy13 understand how Members use the platform so we can improve performance and user experience. Analytics data is aggregated and does not identify you personally;
• Marketing cookies: Used to deliver relevant promotional communications within the easy13 platform. You may opt out of marketing cookies through your browser settings.

You can manage or delete cookies at any time through your browser's settings. Disabling strictly necessary cookies may affect your ability to log in or use certain features of the easy13 platform.

7. Data Retention

easy13 retains personal data for the following periods:

• Account data: Retained for the duration of your easy13 membership and for a minimum of 5 years following account closure, in accordance with AML and gaming regulatory requirements;
• Transaction records: Retained for a minimum of 5 years from the date of the transaction;
• KYC documentation: Retained for the period required by applicable AML regulations, typically 5 years from the end of the business relationship;
• Communications records: Customer support communications are retained for up to 3 years from the date of the communication;
• Marketing consent records: Retained for as long as necessary to demonstrate compliance with consent obligations.

Following the applicable retention period, easy13 will securely delete or anonymise personal data in accordance with its data destruction procedures.

8. Data Security

easy13 implements technical and organisational security measures proportionate to the risk of processing Member personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the easy13 servers;
• Encrypted storage of passwords using industry-standard salted hashing algorithms — easy13 never stores passwords in plain text;
• Role-based access controls ensuring that easy13 employees can only access personal data necessary for their job function;
• Regular security audits and penetration testing of the easy13 platform;
• Two-factor authentication (2FA) options for Member accounts and mandatory 2FA for administrative access;
• Automated intrusion detection systems monitoring the easy13 platform around the clock.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your rights and freedoms, easy13 will notify affected Members and relevant authorities as required by applicable law.

9. Your Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data easy13 holds about you:

• Right of access: You may request a copy of the personal data easy13 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to easy13's legal retention obligations;
• Right to restriction: You may request that easy13 restrict its processing of your personal data in certain circumstances;
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact easy13 via the support channels described in Section 13. easy13 will respond to valid requests within 30 days. We may need to verify your identity before processing certain requests.

10. Children's Privacy

The easy13 platform is strictly restricted to individuals who are 21 years of age or older. easy13 does not knowingly collect or process personal data relating to individuals under the age of 21. If easy13 becomes aware that it has inadvertently collected data from a person under 21, that data will be deleted and the associated account closed immediately.

If you believe that easy13 has collected data from an individual under 21, please notify us immediately using the contact details in Section 13.

11. International Data Transfers

easy13 operates servers and engages service providers that may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide equivalent data protection standards, easy13 will implement appropriate safeguards — such as standard contractual clauses or data processing agreements — to protect your personal data in accordance with applicable requirements.

By using the easy13 platform, you acknowledge that your personal data may be processed in jurisdictions outside your country of residence, including in connection with the provision of gaming software, payment processing and identity verification services.

12. Changes to This Policy

easy13 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable regulations or platform functionality. The "Last Updated" date at the top of this Policy reflects the most recent revision. Where changes are material, easy13 will notify active Members via the platform or registered email address.

Continued use of the easy13 platform following publication of a revised Privacy Policy constitutes acceptance of the revised terms. Members who do not accept the revised Policy should cease using easy13 and contact support to arrange account closure.

13. Contact Us

For any privacy-related queries, data subject access requests or complaints regarding easy13's handling of your personal data, please contact our Data Protection team:

Email: [email protected] (plain text — not a clickable link)

Alternatively, use the live chat function within the easy13 platform. Our support team operates 24 hours a day, 7 days a week on GMT+8 (Malaysia Standard Time). We aim to acknowledge all privacy-related enquiries within 2 business days and resolve them within 30 calendar days.

If you are not satisfied with easy13's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.