Version: 1.8
Date of Last Update: March 14, 2025
INTRODUCTION
EZ Sweeps, Inc. (referred to herein as “we,” “us,” or “our”), which operates https://www.ezsweeps247.com (the “Platform”), is committed to respecting and safeguarding user personal data worldwide, including individuals in the European Union (EU) or European Economic Area (EEA). This GDPR Policy explains how we meet the requirements of the EU General Data Protection Regulation (GDPR) while also complying with relevant California privacy laws (e.g., CCPA/CPRA).
1. SCOPE AND RELATION TO OTHER POLICIES
1.1. Who Is Covered
This Policy applies to any user of the EZ Sweeps Platform physically located in the EU/EEA (“EU Data Subjects”) whose personal data we process.
1.2. Supplement to Main Privacy Policy
This GDPR Policy supplements our principal Privacy Policy. If a provision here conflicts with our main Privacy Policy regarding EU Data Subjects’ data, this Policy takes precedence for those individuals.
1.3. Alignment with California Law
While the GDPR primarily governs EU/EEA residents, we also maintain consistent data protection practices aligned with California legislation, including the California Consumer Privacy Act (CCPA) and its amendments (CPRA). California residents can review our separate CCPA Notice for further rights and disclosures.
2. DATA CONTROLLER INFORMATION
For GDPR compliance purposes, EZ Sweeps, Inc. serves as the Data Controller for the personal data of EU Data Subjects. Our contact details appear in Section 10 below.
3. PERSONAL DATA WE PROCESS
We gather, utilize, and store certain personal data necessary to provide our social gaming and sweepstakes services. Such data may include:
Identifiers: Name, email address, date of birth, account login credentials
Contact & Registration Details: Mailing address, phone number, user account specifics
KYC/Verification Info: Official IDs, proof of residence, or other documentation mandated for KYC checks under AML/BSA
Technical/Usage Data: IP addresses, device IDs, browser types, gameplay logs, cookies, and usage metrics
Payment-Related Info: Limited payment data (e.g., partial credit card details) if you purchase Gold Coins or need eligibility checks for Promotional Play
4. LEGAL BASES FOR PROCESSING
In accordance with GDPR, our personal data processing requires a valid legal basis. Our primary bases are:
Performance of Contract: Managing user accounts, providing Games (including awarding Prizes), and responding to inquiries.
Legal Obligations: Performing KYC, AML checks, or other compliance measures (e.g., Bank Secrecy Act or EU anti-fraud rules, plus California data protection standards).
Legitimate Interests: Fraud detection, platform security, analytics, and user-experience improvements, provided these interests do not override fundamental user rights.
Consent: Where necessary (e.g., certain marketing or non-essential cookies). Consent may be revoked at any time.
5. HOW WE USE YOUR DATA
We utilize collected personal data to:
Provide/Operate Our Services: Set up accounts, oversee Social and Promotional gameplay, track or fulfill sweepstakes prizes.
Compliance & Verification: Conduct identity verification, AML reviews, Source of Funds checks, and comply with official or regulatory requests.
Customer Support & Communications: Convey updates, new features, transaction confirmations, or vital security notices.
Analytics & Improvements: Enhance platform functionalities, detect unconventional usage, and optimize performance.
Legal Protections: Enforce our Terms, protect the Company’s legal interests, or meet lawful demands (e.g., subpoenas, court orders).
6. DATA SHARING & TRANSFERS
6.1. Third-Party Recipients
We may share personal data with:
Service Providers: Payment processors, KYC/hosting/analytics partners.
Regulatory Bodies: When mandated by law or legal process.
Affiliates or Business Partners: For genuine business or promotional activities, upheld by confidentiality.
Merger/Acquisition: In case of restructuring or asset transfers, data may be relocated under confidentiality terms.
6.2. International Transfers
Your personal data may be saved in the United States or other nations outside the EU/EEA. We rely on secure transfer mechanisms (e.g., Standard Contractual Clauses (SCCs)) or other valid GDPR-compliant solutions.
6.3. No Sale of Data
EZ Sweeps does not sell personal data. We only transfer data as necessary for service delivery or legal obligations.
7. YOUR GDPR RIGHTS
As an EU Data Subject, you enjoy several rights related to personal data, subject to legal exceptions:
Right to Access: Obtain copies of your personal data in our possession.
Right to Rectification: Fix any inaccuracies or incomplete data.
Right to Erasure (“Right to be Forgotten”): Request deletion where permissible.
Right to Restriction: Limit data processing under specific conditions.
Right to Data Portability: Acquire your data in a structured, machine-readable format and forward it to another controller.
Right to Object: Challenge data processing based on our legitimate interests or for direct marketing.
Right to Withdraw Consent: Revoke consent when it’s the basis for processing.
Automated Decision-Making: Avoid certain decisions made solely through automated processing that critically affect you.
How to Exercise: Email [email protected]. We may require proof of identity to proceed.
8. DATA RETENTION & SECURITY
8.1. Retention Period
We retain personal data as long as needed for the stated purposes, to comply with AML/BSA recordkeeping, settle disputes, or maintain our legal protections.
8.2. Security Measures
We use widespread security measures (e.g., TLS/SSL, firewalls, role-based access) to guard personal data from intrusion, modification, or misuse. While we strive for strong protection, no method is entirely foolproof.
9. RELATIONSHIP TO CALIFORNIA LAW
9.1. Cross-Compliance
While the GDPR applies to EU/EEA data subjects, we likewise align certain privacy practices with California law (e.g., CCPA/CPRA) to provide cohesive privacy protections where feasible.
9.2. No Discrimination
Consistent with GDPR fairness and California non-discrimination principles, we do not reduce service quality if you invoke your data rights, except if legally essential or for compliance reasons.
10. CONTACT & COMPLAINTS
10.1. Questions or Concerns
For questions about this GDPR Policy or our data policies, contact:
EZ Sweeps, Inc.
500 Shatto Pl, Suite 420
Los Angeles, CA 90020
Email: [email protected]
Phone: (213) 263-9898
10.2. Supervisory Authority
EU Data Subjects may file complaints with their local Data Protection Authority (DPA) if they suspect non-compliance with GDPR.
11. UPDATES TO THIS POLICY
We may adjust this GDPR Policy from time to time to mirror evolving data practices or legal requirements. The Date of Last Update denotes when we last changed it. Any significant modifications will be publicized via email or a prominent site notice. Continuing to use the Platform after changes implies acceptance of the revised policy.
End of GDPR Policy
(© 2025 EZ Sweeps, Inc. All rights reserved.)
