eplay88 Privacy Policy — how we protect your personal data

Introduction and Scope

This Privacy Policy describes how eplay88 collects, processes, stores, shares, and protects the personal data of individuals who register, access, or otherwise interact with our Services. It applies to data collected through the eplay88 website, account portal, customer support channels, and any other interaction with our platform.

eplay88 is committed to handling personal data responsibly and in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Players accessing our Services from Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other locations across Malaysia are entitled to the protections described in this Policy.

By registering for an eplay88 account, making a deposit in MYR, placing a wager, or contacting our support team, you acknowledge that you have read and understood how your personal data will be handled in accordance with this Policy.

Data We Collect

eplay88 collects personal data in the following categories, depending on how you interact with our Services:

2.1 Registration and Identity Data

When you create an eplay88 account, we collect your full legal name, date of birth, residential address in Malaysia, mobile number, email address, username, and password (stored as an irreversible cryptographic hash). This data is necessary to create and administer your account and to verify your identity.

2.2 Identity Verification (KYC) Data

To comply with our anti-fraud and verification obligations, we may collect and process copies of your Malaysian government-issued identity document (such as a MyKad, passport, or driving licence), proof of residential address (such as a utility bill or bank statement issued within the last three months), and a selfie or liveness verification image. Source-of-funds information may also be requested for certain transactions.

2.3 Financial and Transaction Data

We collect records of deposits, withdrawals, bonuses, wager activity, and account balance history. This includes data associated with payment methods such as Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and supported digital assets. We do not store full card numbers or complete digital asset wallet credentials where such storage is not necessary for transaction completion.

2.4 Usage and Technical Data

eplay88 automatically collects device type, browser version, operating system, IP address, approximate geolocation derived from network data, session duration, pages visited, games launched, and interaction patterns. This information supports security monitoring, fraud detection, performance optimisation, and responsible gambling analysis.

2.5 Communications Data

When you contact eplay88 support by live chat, email, or other supported channel, we retain a record of the communication for service continuity, quality review, dispute resolution, and regulatory purposes.

How and Why We Process Your Data

eplay88 processes personal data only where a lawful basis applies. The primary purposes and corresponding bases are set out below.

• Account administration and service delivery — to register, maintain, and provide access to your eplay88 account, process MYR deposits and withdrawals, settle wagers, and deliver customer support. This processing is necessary to perform our agreement with you.
• Identity verification and fraud prevention — to conduct KYC checks, verify age and identity, detect and investigate suspicious activity, protect account security, and comply with applicable anti-money laundering requirements. This processing is based on legal obligation and legitimate interest.
• Payment processing — to facilitate transactions through verified Malaysian payment providers including e-wallets, FPX, bank transfers, and digital assets. Payment processors receive only the data required to complete each transaction.
• Responsible gambling — to monitor account activity for signs of problematic behaviour, apply player-requested deposit limits, cooling-off periods, or self-exclusion settings, and fulfil our duty of care obligations. This processing is based on legal obligation and legitimate interest in player welfare.
• Security and technical operations — to maintain the integrity and availability of our platform, prevent unauthorised access, detect software faults, and address cyber security incidents. Based on legitimate interest.
• Communications and service updates — to send transactional messages about your account, payment confirmation, verification status, or service changes. These communications are necessary for account administration and are not marketing.
• Marketing (with consent) — where you have provided consent, to send promotional communications about eplay88 offers, bonuses, and sports betting updates. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing and Third-Party Processors

eplay88 does not sell personal data to any third party. We may share data with carefully selected processors who assist in operating our Services, each of whom is bound by contractual obligations of confidentiality and data protection. Categories of recipients include:

• Payment service providers — e-wallet operators, banks participating in FPX and DuitNow, and digital asset processors require transaction data to complete deposit and withdrawal instructions.
• Identity verification services — specialist KYC and anti-fraud providers may process identity documents and biometric checks on our behalf under strict data handling agreements.
• IT infrastructure and hosting providers — data storage, server management, and cybersecurity services operate under contractual and, where applicable, statutory obligations.
• Regulatory and legal authorities — eplay88 may disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable Malaysian or international law, court order, or to protect the rights, safety, and interests of our platform or players.

Where data is transferred to processors located outside Malaysia, eplay88 applies contractual safeguards consistent with the requirements of the PDPA and relevant guidelines issued by the Personal Data Protection Commissioner.

Cookies and Similar Technologies

eplay88 uses cookies, session tokens, and similar client-side technologies to maintain your logged-in session, remember account preferences, analyse platform usage, and support security controls. These technologies do not execute harmful code and are not used to track browsing activity outside the eplay88 platform.

Strictly necessary cookies are required for core platform functions such as authentication and session continuity. They cannot be disabled without significantly impairing account access. Analytical cookies help us understand how players navigate the platform so that we can improve the experience. Where marketing cookies are used, they operate only within the eplay88 environment and subject to your consent preferences.

You can manage cookie settings through your browser controls. Note that disabling strictly necessary cookies may prevent proper account login or transactional functions.

Data Retention

eplay88 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer period is required or permitted by applicable law. The main retention considerations are:

• Active accounts — account, transaction, and communication data is retained for the duration of the account relationship and for a defined period thereafter to manage post-closure requests, disputes, and regulatory requirements.
• KYC and identity documents — retained for a period consistent with applicable anti-money laundering legislation and internal security standards, which may extend beyond account closure.
• Marketing preferences — consent records and marketing communication logs are retained for as long as is necessary to demonstrate compliance with consent obligations.
• Security logs — technical logs used for fraud and security monitoring are retained for defined short-term rolling periods, after which they are anonymised or deleted.

When data is no longer required, eplay88 deletes, anonymises, or pseudonymises it using secure methods. Players may enquire about specific retention periods by contacting us at the address stated in the Contact section of this Policy.

Security Measures

eplay88 implements a range of administrative, technical, and organisational measures to protect personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive data categories, including identity documents and financial records.
• Role-based access controls so that staff access only the data required for their specific responsibilities.
• Regular security assessments and penetration testing of our platform infrastructure.
• Two-factor authentication options for player account access.
• Incident response procedures for identifying, containing, and responding to data security events.

No transmission over the internet is entirely risk-free. Players are responsible for maintaining the security of their own devices, choosing strong unique passwords, signing out of shared devices, and not disclosing passwords or one-time verification codes to any person, including eplay88 staff.

Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 of Malaysia, and to the extent applicable, players hold the following rights in relation to their personal data. eplay88 will respond to valid requests within a reasonable period and without undue charge for standard submissions.

To exercise any of the above rights, please contact eplay88 support with a clear description of your request, your registered username or email address, and sufficient detail to locate the relevant records. We may ask you to verify your identity before fulfilling a request.

Minors and Age Restriction

eplay88 is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is conducted as part of the KYC process, and accounts found to belong to players under 21 will be suspended and the data handled in accordance with applicable legal requirements.

If you are a parent or guardian and believe that a minor has submitted personal data to eplay88, please contact us immediately at the address in the Contact section below. We will take prompt action to review and, where appropriate, delete the relevant data.

Third-Party Services and Links

eplay88 may reference or connect to third-party payment platforms such as Touch 'n Go eWallet, GrabPay, Boost, Maybank, CIMB, Public Bank, DuitNow, and FPX in the course of processing transactions. These services operate under their own privacy policies, and eplay88 is not responsible for the data practices of those external platforms once a transaction is redirected to a third-party environment.

Players are encouraged to review the privacy documentation of any payment service or external provider they use in connection with their eplay88 account.

Changes to This Privacy Policy

eplay88 may update this Privacy Policy to reflect changes in our Services, payment integrations, data handling practices, legal obligations, or the requirements of the Personal Data Protection Commissioner of Malaysia. The effective date at the top of this document will be revised accordingly.

Material changes that affect how your personal data is processed will be communicated through a notice within the platform or by email to your registered address before they take effect. Continued use of eplay88 following notification constitutes acceptance of the revised Policy. If you do not accept the updated terms, please discontinue use of our Services and request account closure.