Privacy Policy ekplus8 – Personal Data Protection for Malaysia Players

This Privacy Policy explains how ekplus8 ("we", "the platform") collects, uses, discloses, and protects your personal information when you use the website, mobile app, and all services provided by ekplus8.

By using the ekplus8 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

Ekplus8 collects your personal data through several means — directly when you register or interact with the platform, and automatically through industry-standard tracking technologies.

Data You Provide Directly

• During Registration: Full name, date of birth, identification card or passport number, email address, phone number, and your chosen username.
• During KYC Verification: A copy of your identity document, proof of address such as a utility bill or bank statement, and a selfie photo if requested.
• During Transactions: Bank account or e-wallet details you use for deposits and withdrawals.
• When Contacting Support: Information you share during live chat sessions, email, or any communication with our team.

Automatically Collected Data

• IP address and approximate location information based on IP.
• The type and version of web browser used.
• Device information including operating system and device model.
• Activity logs including pages visited, session duration, and actions taken within the platform.
• Gaming data including betting history and game results.

Ekplus8 only uses your personal data for legitimate and necessary purposes. We do not process your data beyond what is required for the following purposes:

• Account Management: Creating and maintaining your account, verifying identity, and managing login.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions.
• Service Provision: Enables access to all games and features on the ekplus8 platform.
• Security & Fraud Prevention: Detecting and preventing any suspicious activity or fraud.
• Legal Compliance: Fulfilling legal obligations including AML and KYC requirements.
• Customer Support: Responding to enquiries and resolving issues you have reported.
• Platform Enhancement: Analysing usage patterns to improve the user experience.
• Marketing Communications (with consent): Sending promotional information and exclusive offers if you have given your consent.

Ekplus8 processes your personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the context of processing, the bases we rely on are:

• Consent: For marketing communications and non-essential cookies. You may withdraw your consent at any time.
• Contract Performance: To process transactions and manage your account as part of the service agreement.
• Legitimate Interest: To prevent fraud, enhance security, and improve the platform.
• Legal Obligation: To comply with KYC, AML, and other applicable legal requirements.

Ekplus8 does not sell, lease, or distribute your personal data to third parties for their own marketing purposes. We only share data in limited and controlled circumstances as follows:

Trusted Service Providers

We work with third-party service providers that help us operate the platform, including payment processors, cloud service providers, and analytics platforms. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

Legal Requirements

Ekplus8 may disclose your personal data if required by law, court order, or competent authorities in Malaysia. We will endeavour to notify you of such disclosures unless prohibited by law.

Ekplus8 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, subject to legal obligations that require longer retention periods.

• Active Account Data: Retained for as long as your account is active and for a reasonable period after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• KYC Documents: Retained for the period required by AML obligations, typically 5–7 years after account closure.
• Communication Logs: Retained for 2 years for dispute resolution and support purposes.
• Analytics Data: Anonymised data is retained for a longer period for platform improvement purposes.

Once the retention period expires or you request deletion, your data will be securely deleted or anonymised.

Ekplus8 implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

• Data in transit is encrypted using TLS 1.3, and data at rest is encrypted using AES-256.
• Intrusion detection systems (IDS) and next-generation firewalls that monitor traffic 24/7.
• Role-based access controls ensuring staff only access data required for their specific duties.
• Regular security audits by independent experts to identify and address vulnerabilities.
• A clear incident response procedure to address any data breaches promptly.
• Mandatory security training for all staff who handle user data.

Ekplus8 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login and session security. Cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve the experience.
• Functional Cookies: Remembering your preferences and settings such as language and display options.
• Analytics Cookies: Helps us understand usage patterns in aggregate and anonymised form.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the ekplus8 platform.

In the course of platform operations, your data may be processed or stored on servers located outside Malaysia. When this occurs, ekplus8 ensures that equivalent or greater protection is applied to your data compared to the standards set by the Malaysia PDPA.

Steps we take to protect international data transfers include using standard data processing agreements, ensuring data recipients comply with established security standards, and only transferring data to countries with adequate data protection levels.

The ekplus8 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we discover or are made aware that personal data of a child has been collected without proper verification, we will take immediate steps to delete that data and close the associated account. Parents or guardians who have reason to believe their child has registered on ekplus8 are encouraged to contact us immediately.

Ekplus8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other reasons. When significant changes are made, we will:

• Displaying a clear notice on the ekplus8 platform at least 14 days before changes take effect.
• Sending a notification to your registered email address (if the changes are material).
• Updating the "Last Updated" date at the top of this document.

Continued use of the ekplus8 platform after the effective date of any changes constitutes acceptance of the amended Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you are welcome to contact the ekplus8 privacy team.

Our customer support team is available 24/7 via in-platform live chat to assist with any privacy-related enquiries. We are committed to responding within 14 business days for any formal data requests.