Privacy Policy EpicWin138 – Personal Data Protection for Malaysian Members

1. Introduction

EpicWin138 (operating under the domain https://epicwin138.online) is fully committed to protecting the privacy and personal data security of every member. We understand that your trust in our platform depends greatly on how we handle the information you share with us.

This Privacy Policy is written in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international industry standards. It clearly explains what types of data we collect from you, why we need it, how it is used, who it is shared with (if anyone), how long we retain it, and what rights you have in relation to that data.

This document applies to all personal information collected through the platform EpicWin138 — including the website, mobile app, live chat, email, and any other communication channels we operate. This policy is updated from time to time, and the latest revision date is displayed at the top of this page.

2. Personal Data We Collect

EpicWin138 collects various types of information from members and visitors to our platform. Below is an overview of the data categories we collect:

3. How We Collect Your Personal Data

EpicWin138 collects your personal information through the following methods:

• During account registration — you provide information such as your name, email address, phone number, and date of birth when registering as an EpicWin138 member for the first time.
• While using the platform — your activity on the EpicWin138 platform, including games played, bets placed (football, badminton, slots, Live Casino, poker), and page navigation, is recorded automatically.
• When making financial transactions — when you deposit or withdraw funds using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks, information related to those transactions is recorded for accounting and security purposes.
• During the KYC process — where identity verification is required, you may be asked to upload verification documents such as a copy of your MyKad or proof of address.
• Via cookies and tracking technologies — the EpicWin138 website uses cookies and similar technologies to collect technical data about how you use our platform. See Section 7 for more details.
• Through communications with the support team — when you contact the EpicWin138 support team via live chat, email, or WhatsApp, those conversations are recorded for quality assurance and dispute resolution purposes.
• From third-party sources — in limited circumstances, EpicWin138 may receive information about you from authorised third-party service providers, such as payment processors, for verification and fraud prevention purposes.

4. Purposes for Using Your Personal Data

EpicWin138 uses your personal data solely for lawful and agreed purposes. The following are the primary purposes for which your data is used:

• Account management: Creating and maintaining your member account, verifying your identity, processing account requests, and providing access to all EpicWin138 services.
• Transaction processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) via your chosen local payment methods, maintaining accurate transaction records, and resolving any financial disputes.
• Service delivery: Enables you to play all games offered on EpicWin138 — from slots and jackpots to Live Casino, Malaysia Super League and EPL football betting, badminton, e-sports, and poker.
• Security and fraud prevention: Detecting and preventing unauthorised access, fraud, money laundering, and any other illegal activity involving our platform.
• Legal compliance: To fulfil our obligations under applicable Malaysian law, including the PDPA 2010, and to respond to lawful requests for information from authorised authorities.
• Responsible gambling: Monitoring member activity patterns to identify signs of problem gambling and providing appropriate support to members who need assistance.
• Platform improvements: Analysing aggregated, anonymised usage data to understand how members use the EpicWin138 platform and continuously improve the user experience.
• Service communications: Sending important notifications related to your account, security updates, changes to terms, and transaction information via email or SMS.
• Marketing (with your consent): Sending information about EpicWin138 promotions, bonuses, and special offers to members who have consented to receive marketing communications. You may withdraw this consent at any time.

5. Sharing Personal Data with Third Parties

EpicWin138 does not sell or disclose your personal data to third parties for their own marketing or commercial purposes. However, there are limited circumstances in which we may share your data with the following parties for legitimate purposes:

• Payment service providers: Malaysian local payment processors that handle your deposit and withdrawal transactions need to receive sufficient information to complete those transactions. This includes processors for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. All processors are bound by strict confidentiality agreements and data security standards.
• Game providers: Licensed game software providers such as Evolution Gaming, Pragmatic Play, and Microgaming may receive limited information necessary to provide and authenticate your gaming session. This data is restricted to unique session identifiers and does not include any directly identifiable personal information.
• Law enforcement authorities: EpicWin138 will disclose personal information to the police, courts, or relevant regulatory bodies when required by Malaysian law or a valid judicial order. Such disclosures are made only to the extent necessary to fulfil our legal obligations.
• Fraud prevention services: We may share information with authorised third-party identity verification and fraud prevention providers to help detect and prevent fraudulent activity.
• Business transfer: In the event of a merger, acquisition, or sale of assets involving EpicWin138, members' personal data may be transferred as part of those assets, subject to appropriate notice to members and continued privacy protections.

In all cases where EpicWin138 shares personal data with third parties, we ensure that a written agreement is in place binding those parties to handle your data in accordance with data protection standards equivalent to or exceeding our own.

6. Data Security Measures

EpicWin138 invests seriously in technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Key security practices we maintain include:

• Data encryption in transit: All communications between your device and EpicWin138's servers are protected with 256-bit TLS/SSL encryption, ensuring that data cannot be intercepted in transit over the internet.
• Data encryption at rest: Sensitive data stored in our databases — including passwords (stored as one-way hashes using the bcrypt algorithm) and payment information — is encrypted using industry-standard encryption protocols.
• Strict access controls: Only EpicWin138 staff with a legitimate business need are permitted to access member personal data, and such access is limited to the minimum scope required to carry out their duties.
• Two-factor authentication (2FA): EpicWin138's internal systems require 2FA for all staff access to databases containing members' personal information. Members are also encouraged to enable 2FA on their own accounts.
• Regular security audits: Independent cybersecurity firms conduct regular vulnerability assessments and penetration testing on EpicWin138's infrastructure to identify and address any weaknesses before they can be exploited.
• Incident response plan: EpicWin138 has a documented incident response procedure to address any potential data breach — including notification procedures for affected members and relevant authorities within the timeframes required by law.

7. Cookies and Tracking Technologies

The EpicWin138 platform uses cookies and similar tracking technologies to enhance the user experience and collect analytical information about how the platform is used. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Strictly necessary cookies: These cookies are essential for the core functionality of the EpicWin138 platform — including login session authentication, security, and basic account preferences. Without them, the platform cannot function properly and they cannot be disabled.
• Functional cookies: Helps the platform remember your preferences — such as language, display settings, and game preferences — to deliver a more personalised experience.
• Analytics cookies: Used to understand how members use the EpicWin138 platform — which pages are visited most frequently, how long sessions last, and where traffic originates. This data is used in aggregated, anonymised form to improve the platform.
• Security cookies: Helps identify and prevent fraudulent activity, bot attacks, and unauthorised access to member accounts.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality and security of the EpicWin138 platform. Note: EpicWin138 does not use third-party cookies for targeted advertising purposes.

8. Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and EpicWin138's own policies, you have the following rights with respect to your personal data:

• Right of access: You have the right to request access to the personal data we hold about you at any time. We will provide a copy of the relevant information within 21 calendar days of receiving a valid request.
• Right to rectification: If you find that personal data EpicWin138 holds about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Some information can be updated directly through your account settings, while other changes may require assistance from our support team.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data when it is no longer needed for the original purpose for which it was collected and there is no legal basis requiring continued retention. Such requests will be assessed on a case-by-case basis.
• Right to restriction of processing: In certain circumstances, you may request that EpicWin138 restrict how we process your data while a dispute or investigation is ongoing.
• Data portability: You have the right to receive a copy of your personal data in a structured, machine-readable format, which you may transfer to another data controller upon request.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. We will honour that objection immediately.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing that took place prior to withdrawal.

To exercise any of the rights above, please contact our support team EpicWin138 via email at support@epicwin138.online, stating the type of request and providing sufficient information for us to verify your identity. We will process your request within the timeframe prescribed by law.

9. Children's Privacy

EpicWin138 strictly prohibits use of the platform by individuals under the age of 18. Our platform is not designed for or directed at children, and we do not knowingly collect personal data from them.

All new account applicants go through an age verification process. Should EpicWin138 discover that we have collected data from an individual under 18 years of age without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

10. Cross-Border Data Transfers

As an online platform, some of the technical service providers EpicWin138 uses may store or process data on servers located outside Malaysia. This includes cloud infrastructure and international game service providers.

In all cases of cross-border data transfers, EpicWin138 ensuring that protection equivalent to or exceeding Malaysia's PDPA standards is in place through mechanisms such as binding data processing agreements, standard contractual clauses, or confirmation that the recipient country has adequate data protection laws. We do not transfer members' personal data to jurisdictions that do not provide an adequate level of protection without appropriate safeguards.

11. Data Retention Period

EpicWin138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. Our general data retention guidelines are as follows:

• Active account data: Retained for the duration of your membership with EpicWin138 and for the required period following account closure to fulfil our legal obligations.
• Financial transaction records: Retained for a minimum of 7 years following a transaction, in accordance with Malaysia's tax and anti-money laundering legal requirements.
• Support communication records: Retained for 2 years after resolution of the related case.
• Security log data: Retained for 12 months for security investigation and fraud detection purposes.
• KYC documents: Retained for a minimum of 5 years after account closure in accordance with applicable legal requirements.
• Anonymised analytics data: May be retained indefinitely as this data cannot be linked back to any specific individual.

When your personal data is no longer needed and there is no legal basis for continued retention, EpicWin138 will delete or anonymise that data using safe and appropriate methods.

12. Amendments to This Privacy Policy

EpicWin138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. Each update will be displayed with a new "Last Updated" date at the top of this page.

For material amendments that significantly affect how we handle your personal data, we will endeavour to provide appropriate notice via the email address registered to your account, or through a prominent in-platform notification, before the changes take effect. Your continued use of EpicWin138 after the effective date of such amendments will be considered acceptance of the updated policy.

13. Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how EpicWin138 handles your personal data, please reach out to us through the following channels:

• Privacy email: support@epicwin138.online (please state "Privacy Enquiry" in the subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the EpicWin138 platform
• WhatsApp: Number available in your account settings

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data deletion or data portability, processing may take longer, but we will keep you informed of the progress.

This Privacy Policy is a living document — we are continually working to improve it in line with industry best practices to protect every member's privacy EpicWin138 that we value.