easy86 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal data by easy86 ("easy86", "we", "us", or "our") in connection with the easy86 online casino and sports betting platform accessible at easy86.app and all associated subdomains and services (collectively, the "Platform").

easy86 acts as the data controller in respect of personal data collected through the Platform. This Policy applies to all registered members and unregistered visitors who access or browse the Platform. By accessing the Platform, creating an account, or otherwise interacting with easy86's services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside easy86's Terms & Conditions, available at /terms-conditions, and the Responsible Gaming Policy at /responsible-gaming. In the event of a conflict between this Policy and any other document, this Policy shall govern with respect to data protection matters.

2. Personal Data We Collect

easy86 collects personal data through several channels, including registration forms, account activity, payment processing, and platform usage. The categories of personal data we may collect include:

• Identity Data: Full legal name, date of birth, national identity card number or passport number (where required for age and identity verification).
• Contact Data: Email address, Malaysian mobile phone number, residential address.
• Account Data: Username, account preferences, security settings, self-exclusion status, and communication preferences.
• Financial Data: Deposit and withdrawal transaction records, payment method details (e.g., registered e-wallet identifiers, bank account references for Maybank, CIMB, Public Bank transfers), transaction amounts in MYR, and wallet balance history.
• Gaming Data: Betting history, game play logs, wager amounts, win/loss records, session duration, and responsible gaming tool usage.
• Technical Data: IP address, device type and operating system, browser type and version, screen resolution, time zone, and referral source.
• Usage Data: Pages visited, features accessed, navigation paths, and interaction logs within the Platform.
• Communications Data: Records of correspondence between you and easy86 customer support, including live chat transcripts and email communications.
• Verification Data: Copies of identity documents submitted during KYC (Know Your Customer) verification processes.

easy86 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) except where explicitly required by applicable regulatory obligations, in which case separate consent will be obtained.

3. How We Use Your Personal Data

easy86 uses the personal data it collects for the following purposes:

• To create and manage your easy86 account and verify your identity and eligibility to use the Platform.
• To process deposits and withdrawals, reconcile transactions, and maintain accurate financial records in MYR.
• To provide, maintain, and improve the Platform, including personalising your experience based on usage patterns.
• To detect, investigate, and prevent fraudulent activity, money laundering, underage access, and other prohibited conduct.
• To comply with applicable legal obligations, including regulatory reporting requirements under the licensing framework under which easy86 operates.
• To send transactional communications, including deposit confirmations, withdrawal notifications, and security alerts to your registered email address or mobile number.
• To administer promotions, bonuses, and loyalty programmes in accordance with their applicable terms.
• To enforce easy86's Terms & Conditions, including taking action in response to breaches.
• To support responsible gaming obligations, including monitoring for patterns of behaviour that may indicate problem gambling.
• To respond to customer support enquiries submitted via live chat or email.

easy86 does not use personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by applicable anti-money-laundering regulations.

4. Legal Basis for Processing

easy86 processes personal data on the following legal bases, as applicable:

• Contractual Necessity: Processing necessary to perform the contract between easy86 and you, including account management, payment processing, and the provision of gaming services.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing in pursuit of easy86's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which we have obtained your explicit consent, including the use of non-essential cookies and certain marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

easy86 does not sell, rent, or trade your personal data to third parties for their marketing purposes. We may disclose your personal data to third parties in the following limited circumstances:

• Service Providers: Third-party vendors who process data on our behalf under data processing agreements, including payment processors (e.g., Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank), identity verification services, fraud detection providers, and cloud infrastructure providers.
• Game Providers: Licensed game studios (such as Pragmatic Play, PG Soft, and Habanero) may receive the minimum data necessary to deliver their gaming services within the easy86 platform.
• Regulatory Authorities: Applicable licensing and regulatory bodies, law enforcement agencies, and financial intelligence units, where disclosure is required or permitted by law.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of easy86's business, personal data may be transferred to the relevant third party, subject to equivalent data protection obligations.

All third-party service providers are required to implement appropriate technical and organisational measures to protect the personal data they process on easy86's behalf.

6. Cookies & Tracking Technologies

easy86 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, authentication, and security features. These cannot be disabled.
• Functional Cookies: Enable personalisation features such as language preferences, remembered login details (where enabled by the member), and display settings.
• Analytical Cookies: Help us understand how members interact with the Platform, including which pages are visited most frequently and where users encounter difficulties. Data collected is aggregated and anonymised where possible.
• Security Cookies: Support fraud detection and prevention measures, including identifying suspicious login attempts from unrecognised devices or locations.

You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect your ability to use some features of the Platform. Continued use of the Platform following the display of a cookie notice constitutes acceptance of our cookie practices for strictly necessary and functional cookies.

7. Data Retention

easy86 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. Specific retention periods are as follows:

• Account data and identity verification records are retained for a minimum of five (5) years following account closure, in accordance with anti-money-laundering regulatory requirements.
• Transaction records (deposits and withdrawals) are retained for a minimum of seven (7) years for financial and regulatory compliance purposes.
• Gaming history logs are retained for a minimum of three (3) years from the date of each transaction.
• Customer support communications are retained for two (2) years from the date of the last interaction.
• Technical and usage data collected via cookies is retained for up to thirteen (13) months from collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Where data is required in connection with ongoing legal proceedings or regulatory investigations, retention will be extended until those matters are resolved.

8. Data Security

easy86 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the easy86 platform.
• Encryption at rest for sensitive personal and financial data stored on easy86 servers.
• Role-based access controls limiting internal staff access to personal data to those with a legitimate operational need.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Regular third-party security audits and penetration testing of the Platform infrastructure.
• Incident response procedures governing detection, containment, and notification in the event of a data security breach.

In the event of a personal data breach that poses a risk to your rights and freedoms, easy86 will notify affected members and, where required, applicable regulatory authorities, within the timeframes prescribed by law. You are encouraged to report any suspected security vulnerabilities or unauthorised access to your easy86 account to our support team immediately.

9. Your Data Protection Rights

Subject to applicable law, you may have the following rights in respect of your personal data held by easy86:

• Right of Access: You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Members may update certain account details directly through their account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to our legal obligations to retain data. Note that regulatory retention obligations may prevent immediate deletion of all data categories.
• Right to Restrict Processing: You may request that we limit our use of your personal data in certain circumstances, for example while a dispute about its accuracy is resolved.
• Right to Object: You may object to our processing of your personal data where that processing is based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or a contract and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact easy86 customer support via live chat or by email at [email protected] (plain text — not a clickable link). We will respond to verified requests within 30 days. In complex or multiple-request cases, the response period may be extended by a further 60 days, with notification to you within the initial 30-day period.

10. Minors

The easy86 platform is strictly restricted to persons aged 21 years and over. 21+ easy86 does not knowingly collect personal data from persons under the age of 21. If you believe that a minor has registered an account or submitted personal data to the Platform, please contact our support team immediately. Upon verification, we will take immediate steps to close the account and securely delete all associated personal data.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. easy86 fully supports these measures.

11. International Data Transfers

easy86 operates under internationally recognised gaming authority licensing, and the personal data we process may be stored and processed in jurisdictions outside Malaysia. Where personal data is transferred internationally, easy86 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to recipients in jurisdictions with an adequate level of data protection as recognised by applicable legal standards.
• Contractual data protection clauses requiring recipients to implement equivalent protections.
• Where required, additional technical measures to supplement contractual safeguards.

By using the easy86 platform, you acknowledge and consent to the international transfer of your personal data in accordance with this Policy.

12. Changes to This Privacy Policy

easy86 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. Material changes to this Policy will be communicated to registered members via the email address associated with their account and/or via a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the easy86 platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

13. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by easy86, please contact our support team:

• Live Chat: Available 24/7 via the platform — the fastest method to reach a member of the easy86 support team.
• Email: [email protected] (plain text — not a clickable link). We aim to acknowledge data-related enquiries within 48 hours.

If you are dissatisfied with our response to a data protection enquiry, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.