Ekplus8 Privacy Policy – Personal Data Protection for Malaysian Members

Ekplus8 collects various categories of personal data from members depending on how you interact with our platform. The following are the types of data we may collect:

You are not required to provide all requested data, but failing to do so — particularly for KYC verification — may affect ekplus8's ability to provide certain services to you. ekplus8 also collects information you voluntarily share when contacting our support team, completing feedback forms, or participating in promotional activities.

Ekplus8 uses members' personal data only for lawful, necessary, and relevant purposes in connection with the provision of our services. The following are the primary purposes for which personal data is used at ekplus8:

• Account Management: Creating, verifying, and managing your ekplus8 account, including the KYC process required to maintain platform security.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and manages withdrawal of winnings to registered payment methods.
• Service Provision: Gives you access to all ekplus8 games, including slots, Live Casino, Sports Betting (Malaysia Super League football, EPL, BWF badminton), poker, and e-sports.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, unauthorised access, and violations of ekplus8's Terms & Conditions.
• Customer Support: Providing effective technical assistance and customer support services in Bahasa Melayu, available 24/7.
• Marketing Communications: Sending information about ekplus8 promotions, bonuses, and special offers — only to members who have given their consent.
• Analytics & Improvement: Analysing usage patterns to improve your gaming experience, the platform interface, and the overall quality of ekplus8's services.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.

Ekplus8 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. That said, in the course of operating our business, ekplus8 may share data with certain parties in limited and controlled circumstances:

• Service Providers: Companies that assist ekplus8 in running its operations, such as payment service providers (FPX, e-wallet gateways), gaming technology providers (Pragmatic Play, PG Soft), and data analytics firms. All such providers are bound by strict data protection agreements.
• Legal Authorities: ekplus8 will disclose personal data to government authorities, courts, or law enforcement agencies when required by a court order, regulatory directive, or valid legal obligation in Malaysia.
• Fraud Prevention: ekplus8 may share information with industry partners for the purposes of fraud prevention, anti-money laundering, and platform abuse prevention, to the extent permitted by law.
• Business Transfers: In the event of an ekplus8 merger, acquisition, or asset sale, member personal data may be transferred to the receiving entity, subject to the same data protection requirements.

Ekplus8 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures implemented by ekplus8 include:

• 256-bit SSL Encryption: All communications between your device and ekplus8's servers are secured with industry-standard 256-bit SSL encryption, ensuring data cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive data stored in the ekplus8 database — including financial information and personal identification details — is encrypted at rest using industry-recognised encryption algorithms.
• Internal Access Control: Access to ekplus8 members' personal data within internal systems is role-based (role-based access control). Only authorised staff with a legitimate business need may access member data, and all access is logged and monitored.
• Two-Factor Authentication: ekplus8's internal systems require two-factor authentication (2FA) for all staff access to member data, adding an extra layer of security.
• 24/7 Monitoring: ekplus8's IT security team continuously monitors systems to detect and respond to any threats or suspicious activity.
• Regular Security Testing: ekplus8 conducts regular penetration testing and security audits by independent specialists to identify and address any system vulnerabilities.

While ekplus8 takes all reasonable steps to protect your data, no security system can guarantee 100% protection under all circumstances. You are also responsible for keeping your ekplus8 account password secure and for not sharing your login credentials with anyone.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by ekplus8. All requests relating to these rights can be submitted to us at support@ekplus8.click:

Ekplus8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit ekplus8.click. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are essential for the basic functioning of the ekplus8 platform, such as maintaining your login session and securing transactions. They cannot be disabled.
• Performance Cookies: These cookies allow ekplus8 to analyse how members use our platform — such as which pages are visited most frequently and how long members spend playing. This information is used to improve our services overall.
• Functional Cookies: These cookies save your preferences — such as language, favourite game type, and display settings — to provide a more personalised experience on ekplus8.
• Marketing Cookies: These cookies are used to show you more relevant ekplus8 promotions and advertisements based on your interests and gaming activity on the platform.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the ekplus8 platform and your gaming experience. For more information on managing cookies in common browsers such as Chrome, Firefox, or Safari, please refer to the relevant browser's help documentation.

Ekplus8 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or for the duration required under applicable law. The following are general data retention guidelines at ekplus8:

• Active Account Data: For as long as your account remains active and you continue using ekplus8's services. For inactive accounts, please refer to ekplus8's Terms & Conditions for details on the inactive account policy.
• Financial Transaction Records: A minimum of seven (7) years from the date of the transaction, in line with Malaysia's anti-money laundering (AML) legislation and financial reporting requirements.
• KYC & Identity Verification Records: A minimum of five (5) years after account closure or the end of the business relationship, subject to applicable regulatory requirements.
• Support Communication Log: Two (2) years from the date of the last interaction, for reference purposes and the resolution of any disputes that may arise.
• Technical Data & Server Logs: Ninety (90) days for standard access logs, and up to one (1) year for security logs related to investigated incidents.

Ekplus8 has appointed a Data Protection Officer responsible for ensuring full compliance with Malaysia's PDPA 2010 and this Privacy Policy. If you have any questions, concerns, or complaints regarding your privacy and personal data protection at ekplus8, please contact our Privacy Officer through the following channels:

Ekplus8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or the services we offer. When a significant change occurs, ekplus8 will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to members via their registered email or through in-platform ekplus8 notifications
• For material changes to how we process your data, we will seek your consent again where required

Continued use of the ekplus8 platform after any changes to the Privacy Policy take effect will be considered acceptance of the updated version. We encourage you to review this page periodically to stay informed of how ekplus8 protects your personal data.