Privacy Policy eplay — Malaysia Member Data Protection

Eplay ("we", "Platform") respects the privacy of every member and visitor using the website eplay.fun. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information.

By accessing or using the eplay platform, you agree to the terms of this Privacy Policy. This Policy should be read together with Terms & Conditions which together form the entire agreement between you and eplay.

If you do not agree with any part of this Privacy Policy, please discontinue use of the eplay platform. Privacy-related enquiries may be submitted to our team via the contact details provided in Section 13.

Eplay collects various types of information as you interact with our platform. The following are the main categories of data we process:

We only collect information that is strictly necessary for the stated purposes. You are not required to provide all information, but choosing not to may limit certain features available to you on the eplay platform.

The information we collect is used solely for lawful and defined purposes. eplay uses your data for the following:

• Account Management: Creating and maintaining your account, processing registration, and verifying your identity through the KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions carried out on our platform safely and efficiently.
• Service Delivery: Enabling you to access all games, promotions, and platform features offered by eplay.
• Security & Fraud: Detecting, preventing, and investigating fraudulent activity, money laundering, or any security breaches that may occur.
• Legal Compliance: Fulfilling legal and regulatory obligations imposed on the operation of online gaming platforms.
• Service Improvement: Analysing usage patterns to improve user experience, platform performance, and gaming offerings.
• Communication: Sending important account notifications, security updates, and — with your consent — relevant promotional information.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support when needed.

Every processing of personal data carried out by eplay has a valid legal basis in accordance with Malaysia's PDPA 2010. The following are the bases we apply depending on the processing context:

• Consent: You have given explicit consent for data processing for specific purposes, such as receiving marketing communications. You may withdraw this consent at any time.
• Contract Performance: Processing is necessary to perform the contract between you and eplay, including the delivery of gaming services and payment processing.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC and AML (Anti-Money Laundering) requirements.
• Legitimate Interest: Processing is necessary for the legitimate interests of eplay or a third party, such as detecting and preventing fraud, provided those interests do not override your fundamental rights.

If you wish to know the specific legal basis used for processing a particular category of data, you may contact our Privacy Officer using the details in Section 13.

Eplay does not sell your personal data. However, in certain situations, we may need to share information with the following parties:

• Service Providers: Third-party companies that assist us in operating the platform, including payment providers, game providers, and cloud services. All providers are required to comply with strict privacy standards through written agreements.
• Regulatory Authority: Government agencies, regulatory bodies, or law enforcement authorities when required to do so by law or court order.
• Business Partners: In certain cases where you have given explicit consent, or where such sharing is necessary to deliver the service you have requested.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred — but with equivalent or stronger privacy protections in place.

Eplay invests seriously in security infrastructure to protect your personal data from unauthorised access, loss, destruction, or disclosure. The technical and organisational measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Password storage using bcrypt hashing algorithm, which is irreversible and cannot be decrypted.
• Use of firewalls and intrusion detection systems to continuously monitor network traffic.
• Role-based access control (RBAC) ensuring staff can only access data required for their specific duties.
• Regular security audits and penetration testing by independent third parties.
• Encrypted data backups stored in secure locations for disaster recovery purposes.
• Mandatory security awareness training for all staff who handle personal data.

While eplay takes all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach affecting your rights, we will notify you and the relevant authorities within the timeframe required by law.

Eplay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, security, and navigation. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how visitors interact with the platform by collecting anonymised data for analytics and service improvement purposes.
• Functional Cookies: Saving your preferences such as language, theme, and display settings to deliver a more personalised experience.
• Marketing Cookies: Used — only with your consent — to display relevant ads and measure the effectiveness of our marketing campaigns.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect your ability to fully access features on the eplay platform.

As a data subject, you hold important rights under Malaysia's PDPA 2010 regarding your personal data held by eplay. These rights include:

To exercise any of the above rights, please contact our Privacy Officer as stated in Section 13. eplay will respond to your request within 21 business days. In complex cases, this period may be extended with prior notice to you.

In operating the eplay platform, your personal data may be processed or stored on servers located outside Malaysia. This occurs when we use cloud services or international technical providers based in other countries.

• Eplay ensures that any international data transfers are carried out with adequate protections in line with the requirements of PDPA 2010.
• We only engage vendors operating in countries with data protection standards equivalent to or stricter than those in Malaysia.
• Legally binding data processing agreements are required of all vendors who receive our members' personal data.
• Primary data storage is located in the Asia-Pacific region to ensure optimal platform performance for users in Malaysia.

If you would like more information about the protection mechanisms used in international data transfers, please contact us using the details in Section 13.

The eplay platform is restricted to individuals aged 18 and above. eplay does not accept registrations from anyone under the age of 18, and we do not knowingly collect personal data from children.

Eplay's comprehensive KYC process helps ensure that only age-eligible individuals can complete registration and access the platform's services.

The eplay platform may contain links to third-party websites or services in certain contexts, such as payment providers or gaming platforms. eplay is not responsible for the privacy practices of those websites.

• Each third-party website has its own privacy policy that is independent of eplay's control.
• We encourage you to read the privacy policy of any third-party website you visit through our platform.
• The inclusion of links to third-party websites does not imply that eplay endorses or validates the content or privacy practices of those sites.

Eplay reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or new platform features.

• The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy.
• For significant amendments, eplay will notify members via their registered email or in-platform notifications.
• Your continued use of the eplay platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.
• It is your responsibility to review this page periodically to stay informed of any updates.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how eplay handles your personal data, please contact our Privacy Officer:

• Privacy Email: [email protected]
• Customer Service: Available 24 hours a day, 7 days a week via our platform.
• Response Time: We will respond to all privacy-related inquiries within 21 business days.

You may also report any data protection concerns to Malaysia's Department of Personal Data Protection (JPDP) if you believe your rights have been violated and eplay has failed to resolve your complaint satisfactorily.