EpicWin8 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

1. Introduction – EpicWin8's Commitment to Privacy

EpicWin8 is an online entertainment platform built specifically for Malaysian players, offering Live Casino, baccarat, slot games, table games, virtual sports, and Sports Betting covering the Malaysia Super League, EPL, BWF World Tour badminton, MPL Malaysia esports, and various other international leagues. In the course of providing these services, we collect and process various types of personal information from our members.

We understand how sensitive your personal and financial information is. The trust you place in EpicWin8 when registering an account and making a deposit is something we take seriously. Every data management decision at EpicWin8 is made with member privacy and security as the priority — above short-term commercial interests.

This Privacy Policy is designed to ensure you have a clear understanding of your rights and how we act as the custodian of your personal data. If at any time you have questions or concerns about your data privacy at EpicWin8, our Bahasa Malaysia-speaking support team is available to assist you via live chat or email at support@epicwin8.click.

2. Types of Personal Data Collected by EpicWin8

EpicWin8 collects various categories of data as you interact with our platform. Below is a detailed breakdown of the data collected, organized by source:

• EpicWin8 does not directly collect credit or debit card information. All payment data is handled by licensed third-party payment gateways.
• We do not collect biometric data such as fingerprints or facial recognition, except as part of an identity verification process required by regulatory obligations.
• Data you voluntarily share during interactions with EpicWin8 customer support is retained solely for reference and service improvement purposes.

3. How EpicWin8 Uses Your Personal Data

EpicWin8 uses collected personal data for the following purposes, each grounded in a valid legal basis:

• Account Management: Creating and managing your EpicWin8 account, verifying your identity, processing registration applications, and handling secure login.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and FPX CIMB Clicks, and handling withdrawal of winnings to your registered payment method.
• Service Provision: Enabling you to access and play all available games and categories on EpicWin8 — live casino, baccarat, slots, table games, virtual sports, and Sports Betting.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-account usage, money laundering, or unauthorized access to your EpicWin8 account.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may benefit from support or responsible gaming tools, in line with EpicWin8's commitment to player wellbeing.
• Platform Improvements: Analysing aggregated, anonymised usage data to better understand the needs of Malaysian players and continuously improve the overall EpicWin8 experience.
• Service Communications: Sending important notifications about your account, changes to terms of service, security updates, and other relevant technical information.
• Marketing (with Consent): Sending information about EpicWin8 promotions, bonuses, and the latest offers — but only to members who have consented to receive marketing communications. You may withdraw this consent at any time.

4. Data Sharing & Disclosure

EpicWin8 does not sell, rent, or trade our members' personal data to any third party for marketing or commercial purposes. Data disclosure only occurs in the following limited situations, all of which are based on legitimate operational requirements or legal obligations:

• Payment Service Providers: Data required to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and FPX CIMB Clicks is shared with the respective payment gateway strictly on a transaction-need basis.
• Game Providers: Game session information required for technical functionality is shared with licensed game providers such as Evolution Gaming, Pragmatic Play Live, and other partners bound by strict confidentiality agreements with EpicWin8.
• Regulatory Authorities: EpicWin8 will disclose data when required by a valid court order, a regulatory authority's request, or applicable anti-money laundering (AML) requirements within our operating jurisdiction.
• Technical Support Services: Third-party technical support providers assisting with EpicWin8 platform operations may have limited access to data strictly necessary for carrying out their technical functions, under the terms of strict confidentiality agreements.

5. EpicWin8 Data Security Measures

EpicWin8 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or accidental destruction:

• Data in transit is encrypted using TLS 1.3 with 256-bit SSL certificates — ensuring all communications between your device and EpicWin8 servers remain secure and cannot be intercepted.
• At-rest data encryption for all sensitive information stored in the EpicWin8 database, including passwords hashed using strong cryptographic algorithms.
• Role-based access control (RBAC) ensuring that only authorised personnel with a genuine operational need can access EpicWin8 members' personal data.
• Round-the-clock security monitoring by EpicWin8's cybersecurity team to detect and respond to any threats or suspicious activity in a timely manner.
• Periodic security audits conducted by independent third-party firms to assess infrastructure vulnerabilities and ensure compliance with current security standards.
• Two-factor authentication (2FA) is available for your EpicWin8 account as an added layer of security — we strongly encourage all members to enable it.

While EpicWin8 implements all reasonable security measures, no system can be guaranteed to be 100% secure against cyber threats. We encourage our players to play their part in keeping their accounts safe by using strong passwords, not sharing login credentials, and reporting any suspicious activity to us promptly.

6. Payment Processing Security

EpicWin8 understands that financial transaction security is one of the top concerns for Malaysian players when gaming online. We have taken a comprehensive approach to ensure that every ringgit you deposit and every winning you withdraw is handled safely and transparently.

• Deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and FPX CIMB Clicks are processed through third-party payment gateways that comply with the highest tier of PCI-DSS (Payment Card Industry Data Security Standard).
• EpicWin8 never stores your passwords, PINs, or authentication credentials for your e-wallets or online banking accounts in our systems. That information remains solely within the respective payment provider's platform.
• Every financial transaction on EpicWin8 is logged and recorded with a unique reference number that you can use should you need to raise an enquiry or dispute regarding that transaction.
• EpicWin8 policy requires withdrawals to be processed via the same method used for the original deposit, for verification and anti-money laundering purposes — for example, if you deposited via DuitNow, your withdrawal will be processed to the same DuitNow account.

7. EpicWin8 Cookie Policy

EpicWin8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the EpicWin8 website. The following are the types of cookies we use:

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the EpicWin8 platform and prevent you from logging in or completing transactions properly.

8. Data Retention Period

EpicWin8 retains your personal data only for as long as necessary for the stated purposes, or as required by applicable law. General data retention guidelines are as follows:

• Active account data: Retained for as long as your EpicWin8 account remains active. Upon account deletion at the member's request, personal data will be removed within 30 days, except for data that must be retained to meet legal obligations.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable anti-money laundering (AML) and tax legislation. This includes MYR deposit and withdrawal records.
• Support communication records: Retained for 3 years following the last interaction for reference, dispute resolution, and EpicWin8 service quality improvement purposes.
• Aggregated analytics data: Anonymised data may be retained for longer periods for EpicWin8 platform research and development purposes and cannot be linked back to any individual.
• Self-exclusion records: If you activate a self-exclusion through EpicWin8's responsible gaming programme, that exclusion record will be retained for a minimum of 5 years to ensure your decision is upheld.

9. Your Privacy Rights as an EpicWin8 Member

As an EpicWin8 member and an individual whose personal data we process, you have the following rights, which you may exercise at any time by contacting our support team:

10. Protection of Data Belonging to Minors

EpicWin8 is an adult entertainment platform strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under 18 years of age. If you discover that a child or minor has registered an EpicWin8 account using false information, please contact us immediately so we can take prompt action, including closing the account and deleting all associated data.

Parents and guardians are advised to use parental control software or screen time management features on shared devices to prevent unintended access by minors to the EpicWin8 platform or any other online gambling platform. EpicWin8 cooperates fully with parents who report such issues and will act promptly in all cases brought to our attention.

11. Cross-Border Data Transfers

In operating the EpicWin8 platform for Malaysian players, some personal data may be processed or stored on servers located outside Malaysia — specifically in connection with the cloud service providers and international game providers that EpicWin8 works with.

EpicWin8 ensures that any such data transfers are protected by appropriate safeguards, including standard data processing agreements that require recipients to maintain a level of protection consistent with our privacy policy. We only work with third parties we are confident meet stringent international data protection standards.

12. Amendments to EpicWin8's Privacy Policy

EpicWin8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to EpicWin8 services. The latest version of the Privacy Policy will always be available on this page with a clearly indicated update date.

For material amendments — meaning changes that significantly affect your privacy rights or how we use your data — EpicWin8 will send a notification to your registered email address and/or display a prominent notice within the platform. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of the EpicWin8 platform following the publication of any amendments to this Privacy Policy constitutes your acceptance of the updated version. If you do not agree with any amendments, you have the right to discontinue use of the platform and request account closure through EpicWin8 support channels.

13. Contact the EpicWin8 Privacy Team

If you have any questions, requests, or concerns regarding EpicWin8's Privacy Policy or how we handle your personal data, please reach out to us through any of the following channels. Our Bahasa Malaysia-speaking team is ready to assist you:

• Email: support@epicwin8.click — for formal privacy requests, please reach out with the subject line "Data Privacy Request"
• Live Chat: Available 24/7 within the EpicWin8 platform — for general privacy enquiries and immediate assistance
• WhatsApp: Number available within the platform after logging in — for brief account and privacy-related enquiries

EpicWin8 will respond to all data privacy requests within 30 calendar days of receipt. For more complex requests, we may require up to 60 days and will notify you if additional time is needed.