Eplay88 Privacy Policy – Malaysian Player Data Protection

Eplay88 collects personal data from Malaysian players through several different channels. Below are the types of data we collect and the reasons for collecting them:

Account Registration Data:

• Full name as stated on your official identification document.
• An active Malaysian mobile number.
• A valid email address.
• Date of birth (to verify the minimum age requirement of 18 years).
• Account passwords are stored in hashed form — eplay88 does not store passwords in plain text.

Identity Verification (KYC) Data:

• Malaysian MyKad number or passport number.
• MyKad photo (front and back) or passport bio-data page.
• Selfie with MyKad for liveness verification (required in certain cases involving large withdrawals).
• Proof of current address (utility bill, bank statement) for additional verification if required.

Financial & Transaction Data:

• E-Wallet account information (Touch 'n Go, GrabPay, Boost, ShopeePay) used for deposits and withdrawals.
• Malaysian bank account details (for withdrawals via FPX, DuitNow or bank transfer).
• Records of all deposits, withdrawals, and transactions on the eplay88 platform.

Platform Usage Data:

• Gaming records and betting history on the eplay88 platform.
• IP address and device information (device type, operating system, browser type).
• Login session data including date, time, and session duration.
• Platform interaction data including clicks, navigation paths, and time spent on each section.

Eplay88 does not collect sensitive data such as health information, political views, religious beliefs, or biometric information, except in the context of the KYC liveness check mentioned above.

Eplay88 uses the personal data it collects solely for legitimate purposes that have been disclosed to you. The following are the primary purposes for which data is used:

• Account management: To create, verify, and manage your eplay88 account, including the login process and account security.
• Financial processing: To securely and accurately process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX.
• Legal compliance: To meet legal requirements related to Anti-Money Laundering (AML), Know Your Customer (KYC), and applicable gambling platform regulations.
• Customer support: To enable the eplay88 support team to effectively assist you in resolving any account, transaction, or game-related issues.
• Platform security: To detect and prevent fraud, unauthorised access, system exploitation and other malicious activities that could compromise the integrity of the eplay88 platform.
• Service improvement: To analyse how players use the eplay88 platform for the purpose of improving the user experience, adding new games that players want, and optimising platform performance.
• Service communications: To send you important notifications related to your account, such as deposit confirmations, withdrawal approvals, or account security alerts.
• Marketing (with consent): To send you promotional information, bonuses, and exclusive eplay88 offers — only where you have given explicit consent to receive marketing communications.

Eplay88 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent. If you no longer wish to receive marketing communications, you can unsubscribe at any time via the "unsubscribe" link in any marketing email or through your eplay88 account settings.

Eplay88 does not sell, rent, or disclose players' personal data to any third party for their own marketing purposes. However, there are limited situations where we may need to share certain data with trusted third parties for service operational purposes:

• Payment Providers: Required transaction information is shared with Malaysian payment service providers (Touch 'n Go, GrabPay, DuitNow, FPX network, Boost, ShopeePay) solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict financial industry data security standards.
• Game Providers: Your username and account ID (not your full personal identification details) are shared with eplay88's game software providers to enable access to their games. These providers do not receive your financial information or full identity details.
• Identity Verification Services: For the KYC process, identity documents may be processed by a third-party identity verification service that has signed a confidentiality and data protection agreement with eplay88.
• Legal Authorities: eplay88 will disclose personal data to the relevant authorities where required by law, court order, or a valid official investigation request. In such cases, we will notify the affected player if permitted to do so by law.

All third parties that receive data from eplay88 are required to comply with data protection standards equal to or exceeding eplay88's own. We conduct periodic due diligence reviews on all our third-party partners to ensure ongoing compliance with data privacy requirements.

Eplay88 invests seriously in data security infrastructure to ensure the personal and financial information of Malaysian players is protected to the highest standard. The technical security measures we have implemented include:

• 256-bit SSL/TLS Encryption for all communications between your browser or app and eplay88's servers — data cannot be intercepted while in transit.
• At-rest data encryption for all personal and financial data stored in eplay88's databases — data remains unreadable even if someone gains physical access to the storage.
• Two-factor authentication (2FA) is available for all player accounts — we strongly encourage you to enable this feature for an additional layer of protection.
• 24/7 threat monitoring — eplay88's automated systems continuously monitor for suspicious activity and will trigger an immediate alert upon detection of any anomaly.
• Penetration testing periodically by independent third-party security experts to identify and patch any system vulnerabilities before they can be exploited.
• Tiered access controls — eplay88 staff can only access data relevant to their specific role. Administrative access is protected by additional authentication layers.

While eplay88 takes all reasonable steps to protect your data, no digital system can guarantee 100% absolute security against every type of threat. We ask for your cooperation in keeping your own account secure — particularly by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

Eplay88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core eplay88 platform functions — login, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how you use the eplay88 platform — pages visited, time spent, and any errors encountered. This data helps us improve platform performance.
• Functional Cookies: Saves your preferences such as language, display settings and favourite games to deliver a more personalised experience every time you return to eplay88.
• Analytics Cookies: Used to understand platform usage patterns at an aggregate level (not at the individual level) for product improvement and server capacity management.

You can manage cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of some parts of the eplay88 platform. For more details on how we use cookies, please contact eplay88 support via Live Chat or email at support@eplay88.click.

As an eplay88 player, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of all personal data we hold about you. eplay88 will provide the data in a readable format within 14 business days of receiving your request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Corrections will be carried out within 7 business days.
• Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances — for example, if the data is no longer needed for the purpose for which it was originally collected. However, there are cases where eplay88 is required to retain data for a specified period to fulfil legal obligations, such as financial record-keeping.
• Right to Restriction: You may request that eplay88 restrict the processing of your data in certain circumstances — for example, while a dispute regarding data accuracy is ongoing.
• Right to Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider should you choose to do so.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. eplay88 will cease using your data for such purposes immediately.

To exercise any of the rights above, please submit a written request to eplay88's privacy team by email at support@eplay88.click with the subject line "Data Privacy Rights Request". Please include your full name and registered email address for identity verification. eplay88 will respond to all requests within 14 business days at no charge.

Eplay88 retains players' personal data for as long as necessary for the purpose it was collected and to comply with applicable legal requirements. Our data retention policy is as follows:

• Active account data: Retained for as long as the player's account remains active on eplay88.
• Closed account data: After an account is closed, basic personal data (name, email, phone number) is retained for 7 years to meet legal requirements relating to Malaysian financial records and AML compliance.
• Financial transaction records: Retained for a minimum of 7 years in line with financial reporting and AML compliance requirements.
• KYC Documents: Retained for the duration of the active account period and 7 years after account closure, in accordance with legal requirements.
• Access and session logs: Retained for 12 months for security purposes and incident investigation in the event of an incident.
• Support communication data: Retained for 3 years from the date of last interaction.

Once the applicable retention period has expired, eplay88 will securely delete or anonymise your data using industry-recognised data deletion methods. Anonymised data — data that can no longer be linked back to a specific individual — may be retained for longer periods for aggregate analytics purposes.

The eplay88 platform is intended for adult players aged 18 and above only. eplay88 does not knowingly collect personal data from individuals under the age of 18.

All registrants are required to confirm that they are at least 18 years of age during the registration process. Our KYC identity verification process is designed to detect and reject registrations by underage individuals. Should eplay88 discover that personal data belonging to anyone under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes your child under the age of 18 has registered an account on eplay88 without your consent, please contact us immediately by email at support@eplay88.click. eplay88 will investigate and take appropriate action within 48 hours.

Eplay88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. We are committed to being transparent about any such changes.

When significant changes are made to this Privacy Policy, eplay88 will:

• Sending email notifications to all active registered players at least 7 days before the changes take effect.
• Displaying a prominent notice on the eplay88 homepage and Privacy Policy page.
• Updating the "Last Updated" date at the top of this document.

For minor clarificatory or technical changes, we may simply display a notice within the platform without sending a separate email notification. We encourage all players to review this Privacy Policy page periodically. Continued use of the eplay88 platform after any changes take effect will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns or requests regarding eplay88's Privacy Policy or how we handle your personal data, we strongly encourage you to reach out to us through the following channels:

• Data Privacy Email: support@eplay88.click (subject: "Data Privacy Enquiry")
• Live Chat: Available 24/7 directly within the eplay88 platform — for immediate enquiries.

Eplay88's data privacy team will respond to all privacy-related enquiries within 2 business days and all data rights requests within 14 working days. We do not charge any fee to process requests relating to your data privacy rights.