ek8plus Privacy Policy

2. Personal Data We Collect

ek8plus collects personal data that is necessary for the lawful provision of our services, compliance with regulatory obligations, and improvement of the player experience. The categories of personal data we collect include:

2.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document number;
• Contact Data: Email address, phone number, and residential address;
• Account Data: Username, password (stored in hashed, non-recoverable format), account preferences, and communication preferences;
• Financial Data: Payment method details (e.g., Touch n Go eWallet account reference, Maybank or CIMB account details for withdrawal verification), transaction history, and deposit and withdrawal records;
• Verification Data: Copies of government-issued photo identification and proof of address documents submitted during KYC verification;
• Support Data: Content of communications you send to ek8plus via live chat, email, or any other support channel.

2.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, device type, operating system, screen resolution, and unique device identifiers;
• Usage Data: Pages visited, games played, betting activity, session duration, click patterns, and navigation paths within the Platform;
• Cookie Data: Data collected via cookies and similar tracking technologies as described in Section 6 of this Policy;
• Location Data: General geographic location inferred from your IP address for compliance and fraud prevention purposes.

2.3 Data From Third Parties

ek8plus may receive personal data about you from third-party sources, including identity verification service providers, payment processors, fraud detection agencies, and publicly available sources, where such data is necessary to verify your identity, prevent fraud, or comply with AML obligations.

3. How We Use Your Personal Data

ek8plus processes personal data for specific, legitimate purposes directly related to the provision of our services. The table below summarises our key processing activities:

ek8plus does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by AML or fraud prevention obligations and subject to appropriate safeguards.

4. Legal Basis for Processing

ek8plus processes personal data on the following legal bases:

• Performance of a Contract: Processing necessary to create and manage your ek8plus account, process transactions, and deliver the services you have requested;
• Legal Obligation: Processing required to comply with applicable AML laws, KYC regulations, licensing conditions, and tax reporting obligations under our international gaming authority framework;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of our services, where such interests are not overridden by your rights and freedoms;
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting our support team.

5. Data Sharing & Disclosure

ek8plus does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Service Providers: Third-party vendors engaged to provide services on our behalf, including payment processors (Touch n Go, Boost, GrabPay, Maybank, CIMB), identity verification providers, cloud infrastructure providers, and customer support platform operators. These providers are bound by contractual data protection obligations;
• Game Providers: Certified game studios (including Pragmatic Play, PG Soft, and others) that supply games accessible through the ek8plus Platform. Data shared is limited to that required for game delivery and session management;
• Regulatory Authorities: Government bodies, law enforcement agencies, and our licensing authority, where disclosure is required by law, court order, or our licensing obligations;
• Fraud & AML Agencies: Industry fraud prevention and AML intelligence services, where sharing is necessary to prevent financial crime or protect ek8plus and its players;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ek8plus's business, your personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

6. Cookies & Tracking Technologies

ek8plus uses cookies and similar technologies (including web beacons and local storage) to operate and improve the Platform. Cookies are small data files stored on your device when you visit ek8plus.org. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management, security, and login cookies. You cannot opt out of these without ceasing to use the Platform;
• Performance & Analytics Cookies: Used to understand how players navigate and interact with the Platform, enabling us to identify and fix issues and improve the user experience;
• Functional Cookies: Used to remember your preferences, such as language settings and previously played games;
• Marketing Cookies: Used to deliver relevant promotional content based on your usage patterns, where you have consented. You may manage your cookie preferences via your browser settings.

You can control and delete cookies through your browser settings at any time. Please note that disabling non-essential cookies may affect certain features of the ek8plus Platform.

7. Data Retention

ek8plus retains personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with ek8plus plus a further period as required by our licensing obligations;
• Financial & Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable AML and financial record-keeping obligations;
• KYC Documentation: Retained for a minimum of five (5) years from the end of the customer relationship or as required by applicable law;
• Support & Communications Data: Retained for a period of two (2) years from the date of the interaction, unless a longer period is required for dispute resolution;
• Marketing Data: Retained until you withdraw consent or for a period of two (2) years from your last interaction with ek8plus marketing communications, whichever is earlier.

Upon expiry of the applicable retention period, ek8plus will securely delete or anonymise your personal data in accordance with our data disposal procedures.

8. Data Security

ek8plus implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 128-bit SSL/TLS encryption for all data transmitted between your device and the ek8plus Platform;
• Encryption of sensitive data fields (including passwords and payment details) at rest using industry-standard algorithms;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Continuous security monitoring and intrusion detection systems;
• Regular security assessments and penetration testing by independent security professionals;
• Incident response procedures for the identification, containment, and notification of personal data breaches.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you have reason to believe that your ek8plus account or personal data has been compromised, please contact our support team immediately.

9. Your Data Protection Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by ek8plus:

To exercise any of the above rights, please contact our support team via live chat (9AM–1AM MYT) or by email. ek8plus will respond to valid requests within thirty (30) days. We may require verification of your identity before processing a rights request.

10. Children's Privacy

The ek8plus Platform is strictly intended for adults aged 21 years and above. ek8plus does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under 21 has registered an account with ek8plus, please contact our support team immediately at [email protected]. We take underage gambling prevention seriously and will act promptly on any such report.

11. International Data Transfers

ek8plus operates under international gaming authority licensing and may process or transfer your personal data to countries outside of Malaysia. Where such transfers occur, ek8plus ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections afforded under applicable Malaysian data protection law. Such safeguards may include standard contractual clauses, data processing agreements with service providers, and transfers to jurisdictions recognised as providing adequate data protection.

Details of international transfer arrangements applicable to your data are available upon request by contacting our support team.

12. Changes to This Policy

ek8plus reserves the right to modify, update, or replace this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material, ek8plus will provide notice to registered players via email to their registered address or via an in-Platform notification prior to the changes taking effect.

Your continued use of the ek8plus Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by ek8plus, please contact our Data Protection team:

For responsible gaming enquiries or to request account self-exclusion, please also contact our support team via live chat. Responsible gaming requests are handled with complete confidentiality.