Privacy Policy eplay — Your Personal Data Protection

1 Introduction

Eplay ("we", "our platform") respects the privacy of every individual who uses our services. This Privacy Policy is established to ensure you fully understand how your personal data is managed transparently, securely, and responsibly.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in commercial transactions in Malaysia. Every process involving user data is designed to provide maximum protection while enabling us to deliver the best possible service.

We believe transparency is the foundation of trust. This document is therefore written in clear, plain language — not complex legal jargon — so you know exactly what happens with your information.

2 Personal Data We Collect

We only collect data necessary to provide and improve eplay's services to you. The following are the types of data we collect:

2.1 Data You Provide Directly

2.2 Data Collected Automatically

• IP address and approximate location information.
• Device type, operating system, and web browser version.
• Platform activity logs including pages visited and session duration.
• Gaming data including betting history and wins.
• Cookie information and device identifiers for security purposes.

3 How We Use Your Data

The personal data we collect is used solely for the following legitimate and stated purposes:

• Account Management: Create, verify, and manage your eplay account, including the required KYC process.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Customer Support: Provide technical support and resolve any issues or enquiries you submit.
• Platform Security: Detect and prevent fraud, money laundering, and any suspicious activity.
• Service Improvement: Analyse usage patterns to improve the user experience on the eplay platform.
• Important Communications: Send account-related notifications, security updates, and transaction information.
• Legal Compliance: Fulfil reporting obligations and compliance requirements with relevant regulatory bodies.

We will not use your data for any other purposes without first obtaining your explicit consent. If you do not wish to receive promotional communications, you may unsubscribe at any time via your account settings.

4 Sharing Data with Third Parties

Eplay does not sell or rent users' personal data to any third party. However, there are limited situations where we may need to share data to operate the platform:

4.1 Trusted Service Providers

We work with carefully selected third-party service providers for specific functions such as payment processing, identity verification, and technical infrastructure services. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

4.2 Legal Requirements

We may be required to disclose user data to government authorities or law enforcement bodies when mandated by Malaysian law, such as in cases of financial crime investigations or valid court orders.

5 Your Personal Data Security

Protecting your personal data is eplay's highest priority. We implement a range of technical and organisational security measures to ensure your data remains protected at all times:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Passwords are stored using strong hashing algorithms — we cannot view your password ourselves.
• Two-factor authentication (2FA) available for all user accounts.
• Continuous security threat monitoring 24 hours a day, 7 days a week.
• Regular security audits conducted by qualified independent parties.
• Strict access controls — only authorised staff may access user data.
• A comprehensive incident response plan to address any data breaches.

While we take all reasonable precautions, no security system is 100% foolproof. You also play an important role in keeping your account secure by using a strong password and not sharing your login credentials.

6 Cookies & Tracking Technologies

The eplay platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Preference Cookies: Save your preferences such as language and display settings for a smoother experience.
• Analytics Cookies: Helps us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and does not identify individuals.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the eplay platform.

7 Data Retention Period

We retain your personal data for as long as your account is active or as long as necessary to provide our services. Once an account is closed, we retain data according to the following periods:

• Financial Transaction Data: 7 years from the transaction date, in line with Malaysia's financial legal requirements.
• KYC & Identity Verification Data: 5 years after account closure or the date of last interaction.
• Activity Logs & Security: 2 years for audit and security investigation purposes.
• Customer Support Communications: 3 years to facilitate historical reference and dispute resolution.

8 Links to External Websites

The eplay platform may contain links to third-party websites or services in certain contexts, such as game providers or payment gateways. This Privacy Policy applies solely to the eplay platform and does not cover those external websites.

We encourage you to read the privacy policy of every website you visit. eplay is not responsible for the privacy practices or content of third-party websites that may be linked from our platform.

9 Changes to This Privacy Policy

Eplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements.

Any material changes will be communicated to users via in-platform notifications or their registered email address at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this document will be revised whenever changes are made.

Your continued use of the eplay platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

10 Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your personal data rights, please contact our Data Protection Officer through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the eplay platform
• Response Time: Data-related requests are processed within 14 business days

For more information about your rights and responsibilities, please visit the Frequently Asked Questions (FAQ) we or Responsible Gaming for additional guidance.