Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by ek8plus ("we", "us", "our", "the Platform") and applies to all users ("you", "the User", "the Player") who access or interact with the ek8plus website and any associated digital services (collectively, "the Service").

ek8plus is committed to protecting the privacy and security of the personal data entrusted to us by our players. This Policy sets out in clear and transparent terms what personal data we collect, the purposes for which we process it, the legal basis on which we rely to do so, how long we retain it, who we share it with, and what rights you hold in respect of your data.

This Policy is to be read in conjunction with the ek8plus Terms & Conditions and Responsible Gambling Policy, both of which form part of the complete agreement governing your use of the Service. By using ek8plus, you confirm your acceptance of this Policy.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means ek8plus, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third-party organisation that processes Personal Data on behalf of ek8plus in accordance with our written instructions.
• "KYC Data" means identity documents and associated personal information submitted by a Player for the purposes of identity verification, including government-issued identification, proof of address, and photographic selfies.
• "Cookies" means small data files stored on your device by the ek8plus Platform for session management and analytics purposes.
• "PDPA" refers to the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions in Malaysia.

3 Data We Collect

ek8plus collects the categories of personal data outlined in the table below. We collect only what is necessary for the purposes stated and do not engage in excessive or speculative data collection.

4 How We Collect Your Data

ek8plus collects personal data through the following channels and methods:

5 Data Processing & Purpose

ek8plus processes your personal data only for specific, legitimate purposes. We do not process data in a manner incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are as follows:

• Account Management: Creating, maintaining, and administering your ek8plus account, including authentication and access control.
• Identity Verification (KYC): Confirming your identity, age (21+ requirement), and residential details to comply with applicable anti-money laundering and anti-fraud obligations.
• Payment Processing: Facilitating deposits and withdrawals in MYR through your chosen payment channel, including reconciling transactions and handling disputes.
• Service Delivery: Enabling your participation in casino games, live dealer tables, sports betting, and all other features of the Platform.
• Customer Support: Responding to your enquiries, resolving complaints, and providing technical assistance via live chat and email.
• Legal & Regulatory Compliance: Meeting our obligations under applicable law, including anti-money laundering regulations, responsible gambling requirements, and any lawful requests from regulatory or law enforcement authorities.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, and other security incidents.
• Platform Improvement: Analysing usage patterns and technical performance data to improve the quality, reliability, and user experience of the Platform.
• Responsible Gambling: Monitoring player activity to identify indicators of problem gambling and to administer responsible gambling tools including deposit limits, session timers, and self-exclusion.
• Marketing Communications: Sending you promotional offers, bonus announcements, and Platform updates where you have provided your consent to receive such communications.

6 Legal Basis for Processing

ek8plus processes your personal data on the basis of one or more of the following lawful grounds, consistent with applicable data protection legislation including the Malaysian Personal Data Protection Act 2010 (PDPA):

• Contractual Necessity: Processing required to perform the contract between you and ek8plus — including account registration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with our legal obligations, including KYC and anti-money laundering requirements imposed by applicable law.
• Legitimate Interests: Processing undertaken to pursue ek8plus's legitimate business interests, such as fraud prevention, platform security, and responsible gambling monitoring, where these are not overridden by your fundamental rights and freedoms.
• Consent: Processing undertaken on the basis of your freely given, specific, informed, and unambiguous consent — in particular, for the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

7 Data Sharing & Disclosure

ek8plus does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

8 Data Retention

ek8plus retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations, whichever is longer.

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five years following account closure, consistent with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of submission, or such longer period as may be required by applicable law.
• Transaction Records: Retained for a minimum of seven years from the date of each transaction for financial compliance and audit purposes.
• Support and Communication Logs: Retained for a minimum of three years from the date of the interaction, used for training, dispute resolution, and quality assurance.
• Marketing Preferences: Retained until you withdraw your consent or close your account, whichever is earlier.
• Technical and Usage Data: Typically retained in anonymised or aggregated form for up to 24 months for platform performance analysis.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual.

9 Data Security

ek8plus implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the Platform.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls limiting internal access to personal data to authorised personnel on a strict need-to-know basis.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Regular internal security reviews and vulnerability assessments of Platform infrastructure.
• Incident response procedures for the detection, containment, and notification of data breaches in accordance with applicable legal requirements.

While ek8plus takes security seriously and implements industry-standard measures, no system or transmission of data over the internet is entirely immune from risk. You share some responsibility for your own security — please use a strong, unique password for your ek8plus account and do not share your credentials with any third party.

10 Cookies & Tracking Technologies

ek8plus uses cookies and similar technologies on the Platform. These are small data files stored on your device that help us operate and improve the Service. We do not use third-party advertising cookies or cross-site behavioural tracking technologies.

11 Your Rights

Subject to applicable data protection law, including the Malaysian PDPA, you hold the following rights in respect of your personal data held by ek8plus. To exercise any of these rights, please contact us via the details in Section 15.

We will respond to all valid data rights requests within 30 days of receipt. We may request proof of identity before fulfilling a data access or deletion request to protect against fraudulent claims. Some rights are subject to legal limitations — for example, we cannot delete data we are legally required to retain for anti-money laundering compliance purposes.

12 Minors & Age Policy

ek8plus is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. The Platform enforces a mandatory age verification (21+) check as part of the account registration and KYC process for all Players.

If we become aware that personal data has been inadvertently collected from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has accessed the Platform, please notify us immediately at [email protected].

13 International Data Transfers

In the course of operating the Platform and engaging service providers, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, ek8plus ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Malaysian PDPA and applicable international data protection standards.

Safeguards employed for international transfers include contractual data processing agreements with receiving parties, and in some cases, the use of standard contractual clauses or equivalent recognised mechanisms.

14 Changes to This Policy

ek8plus reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the functionality of the Platform. When material changes are made, we will update the "Effective Date" at the top of this page and, where reasonably practicable, provide notice to registered Players via email or an in-platform notification.

We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of the updated version. If you do not accept the revised Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

15 Contact Us

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact the ek8plus Data Protection team through the following channels:

For concerns relating to platform rules and account conduct, refer to the ek8plus Terms & Conditions. For responsible gambling tools and support, please visit our Responsible Gambling page.