Secure Data Handling
ep88 uses industry-standard encryption and access controls to protect personal and financial data held on our systems. Sensitive records are retained only as long as operationally or legally required.
Data & Privacy
ep88 Privacy Policy
This Privacy Policy explains how ep88 collects, uses, stores and protects the personal data of users who access our platform. We are committed to handling your information with care, transparency and proportionality, in a manner consistent with good data-handling practice and the reasonable expectations of our Malaysian users.
Last reviewed: January 2026No Unauthorised Sharing
Your personal data is not sold to third parties. ep88 shares information only with verified service providers, payment processors and regulatory or law enforcement authorities as required by applicable obligations.
Your Data, Your Rights
Account Holders may request access to, correction of, or deletion of personal data held by ep88 through the channels set out in this Policy, subject to applicable legal and operational retention requirements.
Introduction
This Privacy Policy (the "Policy") describes how ep88 (referred to herein as "ep88", "we", "us" or "our") collects, processes, stores discloses and protects the personal data of individuals who access or use the ep88 platform, including its website, mobile-optimised interfaces and all associated services.
By registering an account, making a deposit or otherwise using any ep88 service, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described. If you do not agree to any part of this Policy, you should discontinue use of ep88 services and close your account in accordance with the Terms and Conditions.
This Policy should be read alongside the ep88 Terms and Conditions and the Responsible Gambling guidelines, both of which form part of the overall framework governing your relationship with ep88. Where this Policy conflicts with any other document, this Policy shall prevail with respect to personal data matters.
ep88 does not claim that this Policy satisfies the requirements of any specific Malaysian statute. Users in Malaysia are responsible for assessing the applicability of local data protection frameworks to their individual circumstances.
Definitions
The following terms carry the meanings set out below wherever they appear in this Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or can reasonably identify a living individual, including name, identification number, date of birth, address, email address, payment details and device identifiers. |
| Processing | Any operation performed on Personal Data, including collection, storage, organisation, adaptation, retrieval, use, disclosure, erasure and destruction. |
| Data Controller | The entity that determines the purposes and means of Processing Personal Data. For users of ep88, the Data Controller is the operator of the ep88 platform. |
| Data Subject | The identified or identifiable natural person to whom Personal Data relates. In this context, the Data Subject is the Account Holder or platform user. |
| KYC | Know Your Customer — the identity and address verification process conducted by ep88 for account security, fraud prevention and regulatory compliance purposes. |
| Third-Party Processor | Any external organisation that processes Personal Data on behalf of ep88 under a contractual arrangement, including payment providers, identity verification services and IT infrastructure operators. |
Data We Collect
ep88 collects Personal Data through several channels, including direct input during account registration, the KYC verification process, payment transactions, platform usage and communications with our support team. The categories of data collected are set out below:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad or passport number | Account registration, age and identity verification, KYC compliance |
| Contact Data | Email address, registered residential address (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) | Account communications, transaction notifications, support responses |
| Financial Data | Payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, BTC, USDT), transaction reference, deposit and withdrawal history | Payment processing, fraud detection, withdrawal verification |
| Technical Data | IP address, device type, browser version, operating system, session duration, login timestamps | Security monitoring, fraud prevention, platform performance |
| Gaming Activity | Game rounds played, bet amounts, wagering history, bonus usage, deposit and withdrawal patterns | Account administration, responsible gambling monitoring, bonus eligibility |
| Communications Data | Live chat transcripts, support email content, any documentation submitted to the ep88 support team | Support resolution, dispute investigation, quality assurance |
Sensitive Data: ep88 does not seek to collect sensitive personal data such as health information, ethnic or racial origin or political opinions unless specifically required under applicable regulatory or responsible gambling obligations (for example, to support a self-exclusion request or to verify a vulnerability concern).
Data Processing
ep88 processes Personal Data for the purposes identified at the point of collection. The primary purposes for which your data is processed are as follows:
- Account administration: Processing registration details, managing login credentials, verifying identity and address documentation, and maintaining account records throughout the account lifecycle.
- Payment processing: Facilitating deposits and withdrawal requests, reconciling transactions, verifying payment method ownership and complying with anti-money laundering checks applicable to financial transactions.
- Platform security: Detecting and preventing fraudulent activity, unauthorised account access, duplicate account registration and any other conduct that may constitute abuse of the ep88 platform.
- Responsible gambling: Monitoring gaming activity patterns to identify potential indicators of problem gambling, administering self-exclusion requests, enforcing cooling-off periods and maintaining deposit limit records.
- Customer support: Responding to account enquiries, investigating complaints, resolving disputes and maintaining a communication record for quality and audit purposes.
- Marketing and communications: Sending eligible Account Holders information about applicable promotions, platform updates and responsible gambling reminders, subject to applicable consent and opt-out provisions.
- Legal and regulatory compliance: Retaining records as required under applicable financial crime prevention frameworks, responding to lawful requests from competent authorities and fulfilling contractual obligations to licensed game providers.
Legal Basis for Processing
ep88 relies on the following legal bases when processing Personal Data:
- Contractual necessity: Processing required to fulfil our obligations to you as an Account Holder, including account management, payment processing, KYC verification and support services.
- Legitimate interests: Processing carried out to pursue ep88's legitimate business interests, including security monitoring, fraud prevention, platform improvement and responsible gambling oversight, provided those interests are not overridden by your fundamental rights.
- Legal obligation: Processing necessary to comply with applicable regulatory, financial crime prevention and law enforcement requirements, including the retention of transaction records.
- Consent: Processing for marketing communications and certain optional personalisation features, where ep88 has obtained your prior informed consent. You may withdraw consent at any time by contacting support or through available account settings.
Withdrawing Consent: Withdrawal of consent for marketing communications will not affect the lawfulness of any processing that took place prior to withdrawal, nor will it affect processing carried out on other legal bases such as contractual necessity or legitimate interests.
Data Sharing
ep88 does not sell Personal Data to any third party. We may share Personal Data with the following categories of recipient, strictly to the extent necessary for the purposes described in this Policy:
- Payment service providers: Including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank and cryptocurrency processing services, solely to facilitate deposit and withdrawal transactions.
- Identity verification services: Third-party KYC and anti-fraud providers that assist ep88 in verifying identity documentation and detecting suspicious account behaviour.
- Game content providers: Licensed game studios and live dealer operators whose software and streaming services are made available through the ep88 platform, where minimal technical data is shared to enable game session functionality.
- IT and hosting providers: Cloud infrastructure, data hosting and security vendors who process data on behalf of ep88 under contractual data-processing agreements and are bound by confidentiality obligations.
- Legal and regulatory authorities: Competent law enforcement bodies, financial intelligence units and regulatory authorities where ep88 is required by law to disclose information or respond to a lawful production order.
- Professional advisors: Lawyers, auditors and compliance consultants engaged by ep88 who are bound by professional confidentiality obligations.
Any Third-Party Processor engaged by ep88 is required to process Personal Data only in accordance with ep88's instructions, to maintain appropriate technical and organisational security measures, and to refrain from using Personal Data for any independent purpose.
Data Retention
ep88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The general retention principles applied by ep88 are as follows:
- Active accounts: Personal Data is retained for the duration of the account relationship and for a minimum period following account closure, typically not less than five years, to satisfy anti-money laundering record-keeping requirements.
- Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a period consistent with applicable financial reporting and regulatory obligations.
- KYC documents: Identity and address verification documents submitted during the KYC process are retained for the period required to fulfil compliance obligations. Copies of documents are held securely and access is restricted to authorised personnel.
- Support communications: Live chat transcripts and support email records are retained to support dispute resolution, quality assurance and ongoing compliance monitoring, and are deleted when no longer required for these purposes.
- Self-exclusion records: Records of self-exclusion requests and responsible gambling interventions are retained for the duration of the exclusion period and for a reasonable period thereafter to prevent inadvertent re-admission to the platform.
Where Personal Data is no longer required for any legitimate purpose and no legal retention obligation applies, ep88 will arrange for its secure deletion or anonymisation in accordance with our internal data lifecycle procedures.
Cookies & Tracking Technologies
The ep88 platform uses cookies and similar tracking technologies to support platform functionality, maintain session state, monitor security and understand usage patterns. The main categories of cookies in use are described below:
Most modern browsers allow you to view, manage and delete cookies through the browser settings menu. However, disabling strictly necessary cookies will prevent normal platform operation. ep88 does not use cookies to collect Personal Data for sale to third parties or for behavioural advertising purposes unrelated to the platform.
User Rights
Subject to applicable limitations and legal obligations, Account Holders have the following rights in respect of their Personal Data held by ep88:
Right of Access
You may request a copy of the Personal Data ep88 holds about you. ep88 will respond within a reasonable timeframe and may require identity verification before releasing data.
Right of Rectification
You may request correction of inaccurate or incomplete Personal Data. Certain changes may require supporting documentation, particularly where the affected data is used for KYC or fraud prevention.
Right of Erasure
You may request deletion of Personal Data where it is no longer needed for a legitimate purpose. This right does not override legal or regulatory retention obligations, and ep88 will advise where a request cannot be fulfilled in full.
Right to Restrict Processing
You may request that ep88 restrict the processing of your Personal Data in certain circumstances, such as where you contest its accuracy or object to processing based on legitimate interests.
Right to Object
You may object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ep88's assessment of overiding grounds.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of marketing consent can be made through account settings or by contacting support.
To exercise any of the above rights, please contact the ep88 support team using the channels described in Section 13 of this Policy. Requests will be assessed and responded to within a reasonable period. ep88 may decline requests that are manifestly unfounded, disproportionate, or contrary to applicable legal obligations.
Data Security
ep88 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:
- Encrypted transmission of data between your device and the ep88 platform using transport layer security protocols.
- Access controls restricting Personal Data to authorised ep88 personnel and Third-Party Processors who require it to perform their functions.
- Regular review of internal data handling procedures and security configurations.
- Monitoring systems designed to detect anomalous access patterns, suspicious transactions and potential data security incidents.
- Contractual security obligations imposed on all Third-Party Processors engaged by ep88.
Notwithstanding these measures, no internet-based platform can guarantee absolute security. ep88 strongly encourages Account Holders to protect their own credentials, use strong unique passwords, enable any available two-factor authentication and report any suspected unauthorised account activity to support without delay.
Important: ep88 support agents will never ask you to disclose your full password, one-time pascode or complete payment card number through any channel. If you receive such a request from someone claiming to represent ep88, do not comply and report the interaction immediately.
Minors
ep88 services are strictly intended for adults aged21 and above. ep88 does not knowingly collect Personal Data from individuals under the age of 21. If ep88 becomes aware that an account has been registered by a minor, or that a minor has provided Personal Data through any ep88 channel, the relevant account will be closed immediately, the associated balance will be voided, and the Personal Data in question will be deleted as soon as reasonably practicable.
If you have reason to believe that a person under the age of 21 has registered an ep88 account or submitted personal information through the platform, please contact ep88 support without delay so that the matter can be investigated and resolved in accordance with this Policy and the applicable age restriction rules.
Policy Amendments
ep88 reserves the right to amend, revise or supplement this Privacy Policy at any time to reflect changes in applicable data handling practices, legal or regulatory obligations, platform features or operational circumstances. The date of the most recent review is displayed prominently at the top of this page.
Material changes to this Policy will be communicated to Account Holders through in-platform notices, email notification or both. Continued use of the ep88 platform following notification of a Policy amendment constitutes acceptance of the updated terms. If you object to any change, you should contact support and, where appropriate, request closure of your account in accordance with the ep88 Terms and Conditions.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about the handling of your Personal Data, please contact ep88 through the following channels:
- Support Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available24 hours a day, 7 days a week through the ep88 platform
- Response Time: General queries via live chat receive an initial response within 3–5 minutes; formal data subject requests may require additional time for identity verification and case review
When submitting a data subject rights request, please provide your registered email address and a brief description of your request. ep88 may need to verify your identity before processing access, rectification or erasure requests.
For responsible gambling concerns, self-exclusion requests or deposit limit adjustments, please visit the ep88 Responsible Gambling page. These requests are handled with strict confidentiality and will not affect the processing of any other Personal Data rights requests submitted concurrently.
Explore ep88
Return to the ep88 homepage
Visit the ep88 homepage for Malaysia-focused information on casino games, sports betting, payment methods and responsible play — all written in clear English for adults aged 21 and above.
Visit Homepage