Privacy Policy ekp8 — Personal Data Protection for Malaysia Members

This Privacy Policy is published by ekp8, an online entertainment platform operating under the domain ekp8.win. We understand that your trust is the foundation of the relationship we build together — and that trust begins with full transparency about how we handle your personal data.

This Privacy Policy applies to all users who visit, register, or use any services provided by ekp8, including the ekp8 web platform at ekp8.win, the ekp8 mobile app, and all official ekp8 communication channels. By using the ekp8 platform, you agree to the collection and use of information as described in this Privacy Policy.

Ekp8 collects your personal data in several different situations. Below is a comprehensive overview of the types of data we collect and the circumstances in which they are collected:

Ekp8 does not collect special category information such as health data, religious beliefs, political views or sexual orientation of members.

Ekp8 uses collected personal data solely for lawful, necessary and platform-relevant purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying and managing your ekp8 account, including handling registration, login and account recovery.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions securely and accurately.
• Identity Verification (KYC): Meeting anti-money laundering (AML) obligations and ensuring the ekp8 platform is free from misuse.
• Customer Support: Identifying you when you contact the ekp8 support team and providing accurate and effective assistance.
• Platform Security: Detecting and preventing fraud, hacking, system abuse and activities that violate ekp8's Terms and Conditions.
• Experience Personalisation: Personalising game recommendations, promotions and platform content based on your preferences and playing habits.
• Service Communications: Sending important notifications related to your account, transactions, security updates and policy changes.
• Legal Compliance: Complying with legal obligations, court orders or lawful law enforcement requests.

Ekp8 does not sell your personal data. However, in the course of operating the platform, ekp8 may share certain personal data with selected third parties in the following circumstances only:

• Payment Service Providers: Required financial information is shared with trusted payment processors to facilitate deposit and withdrawal transactions securely.
• KYC Service Providers: Identity verification documents are processed through a certified third-party KYC platform bound by a strict confidentiality agreement with ekp8.
• Game Software Providers: Minimal game session data is shared with game providers to ensure a smooth gaming experience and fair resolution of any disputes.
• Legal Authorities: ekp8 will disclose personal data to the relevant authorities when required by law, court order, or to assist in a legitimate criminal investigation.

All third parties that receive personal data of ekp8 members are bound by strict data processing agreements and are required to implement security measures equal to or exceeding ekp8's standards.

The ekp8 platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly and understand how members use our platform. The following are the types of cookies used by ekp8:

• Essential Cookies: Required for core platform functions such as login session management, security, and basic preference memory. The ekp8 platform cannot function properly without these cookies.
• Performance & Analytics Cookies: Helping ekp8 understand how members interact with the platform — most visited pages, session duration and navigation patterns — so we can continuously improve the user experience.
• Functional Cookies: Remembering your preferences such as display language, currency and other personal settings so you do not need to reconfigure them each time you log in.
• Marketing Cookies: Used to display promotions and offers relevant to your interests and gaming activity on the ekp8 platform. You may opt out of these cookies via your account settings.

You can manage and delete cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the ekp8 platform.

Ekp8 implements a comprehensive range of technical and organisational security measures to protect member personal data from unauthorised access, alteration, disclosure or destruction:

• Data Encryption in Transit: All communications between your device and ekp8 servers are encrypted using TLS 1.3 with regularly renewed 256-bit SSL certificates.
• Data Encryption at Rest: Sensitive member data, particularly financial information and KYC documents, is encrypted at rest using industry-standard encryption.
• Strict Access Control: Access to member data within ekp8's internal systems follows the principle of least privilege — each staff member can only access data necessary to carry out their specific duties.
• Two-Factor Authentication (2FA): All ekp8 admin accounts are protected by mandatory two-factor authentication. Members are also encouraged to enable 2FA in their account settings.
• Real-Time Threat Monitoring: ekp8 systems are continuously monitored to detect suspicious activity, intrusion attempts and other security anomalies.
• Regular Security Audits: ekp8 conducts regular security audits and penetration testing to identify and address any vulnerabilities in our systems.

As an ekp8 member, you have the following privacy rights regarding your personal data held by us:

To exercise any of the above rights, please contact the ekp8 support team via live chat. ekp8 will process your request within 30 business days.

The ekp8 platform is exclusively for individuals aged 18 and above. ekp8 does not intentionally collect, process, or store personal data of individuals under the age of 18.

If ekp8 discovers that personal data of a minor has been collected without the knowledge or consent of a parent or legal guardian, ekp8 will take immediate steps to delete that data and close the relevant account.

In the course of operating an integrated platform, ekp8 member personal data may be processed or stored on servers located outside Malaysia. Such data transfers are only made to:

• Countries with data protection standards equivalent to or higher than Malaysia.
• Third parties bound by comprehensive data processing agreements containing standard data protection clauses.
• Service providers that have obtained internationally recognised data security certifications.

Ekp8 ensures that all cross-border data transfers are carried out with adequate safeguards to keep your personal data protected in accordance with the standards of this Privacy Policy.

Ekp8 retains member personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. In general:

• Active Account Data: Retained for the duration of your active ekp8 account and for a reasonable period after account closure for dispute resolution purposes.
• Financial Transaction Records: Retained for a minimum of 7 years to comply with financial reporting and anti-money laundering requirements.
• KYC Documents: Retained for the duration of the active account and for 5 years after account closure in accordance with AML compliance requirements.
• Security & Technical Logs: Retained for 12 to 24 months for security investigation and technical troubleshooting purposes.
• Customer Support Records: Retained for 3 years to allow reference to interaction history and service improvement.

Once the relevant retention period has ended, your personal data will be securely deleted or anonymised so it can no longer be associated with you.

Ekp8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or changes to the services we offer.

For material amendments — that is, changes that significantly affect how we process your personal data — ekp8 will:

• Displaying a clear notice on the ekp8 platform homepage for at least 14 days before the amendment takes effect.
• Sending a notification to your registered email address informing you of key changes that have been made.
• Updating the "Last Updated" date at the top of this Privacy Policy.

Continued use of the ekp8 platform after an amendment takes effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your ekp8 account and request deletion of your personal data.

If you have any questions, concerns or complaints regarding ekp8's Privacy Policy or how we handle your personal data, we welcome your feedback. There are several ways to reach the ekp8 privacy team:

• Live Chat: The fastest way — use the live chat button on the ekp8 platform to reach our support team, available 24/7.
• Email: Send your privacy enquiry to [email protected] with the subject line "Privacy Inquiry".

Ekp8 is committed to responding to all privacy-related inquiries within 3 working days and resolve data rights requests within 30 business days of receipt.