Privacy Policy eplay — Data Protection & Personal Information

SECTION 01
Introduction & Scope of This Policy

Eplay is committed to protecting the privacy and security of every user's personal information on our platform at eplay.vin. This Privacy Policy is drafted to ensure you fully understand how we handle your data — from initial collection through to final deletion.

This policy applies to all users who access the eplay.vin website, the eplay mobile app, and any services or products provided by eplay. By using any of our services, you agree to the terms set out in this Privacy Policy.

Eplay is fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia. We take this responsibility seriously and continuously strive to ensure our data handling practices are transparent, accountable, and respectful of your rights as a user.

• This policy applies to all registered users and unregistered visitors.
• Any changes to this policy will be communicated via email or in-app notification.
• If you disagree with any part of this policy, please stop using our platform and contact support to close your account.

SECTION 02
Types of Data We Collect

Eplay only collects data that is strictly necessary to provide a safe, fair, and high-quality service. We do not collect excessive or irrelevant information. Below is a summary of the types of data we collect and the purpose of collection:

All data is collected through lawful means — either directly from you during registration and use, or automatically via standard browsing technologies such as cookies and server logs.

SECTION 03
How We Use Your Data

Every piece of data we collect is used for a clear and transparent purpose. eplay does not use your data for purposes unrelated to delivering our services. Here is how we use the information you provide to us:

• Account Management: Creating, verifying, and maintaining your account securely. This includes the KYC process required for legal compliance.
• Transaction processing: Ensuring all deposits and withdrawals are processed quickly, accurately, and securely to the correct payment method.
• Platform security: Detecting and preventing fraudulent activity, money laundering, hacking, and platform abuse continuously 24 hours a day.
• Customer support: Providing relevant and personalized assistance when you contact our support team.
• Service communications: Sending important account notifications such as transaction confirmations, security alerts, and terms updates.
• Marketing (with consent): Sending information about promotions, bonuses, and special offers only to users who have given explicit consent.
• Product Enhancement: Analyzing usage patterns in aggregate and anonymized form to improve the user experience on our platform.
• Legal compliance: Meeting reporting and compliance obligations to the relevant authorities in accordance with Malaysian law.

SECTION 04
Data Sharing & Disclosure

Eplay does not share your personal information with third parties except in the circumstances clearly outlined below. Any data sharing is carried out only when strictly necessary and is subject to rigorous confidentiality agreements.

Third parties that may receive your data:

• Payment gateway providers: FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay — only receive data necessary to process your financial transactions.
• Identity verification providers: Approved third-party KYC providers to verify your identity documents for anti-money laundering (AML) compliance purposes.
• Cloud service providers: Cloud storage and computing infrastructure that meets the highest international security standards.
• Legal authorities: Government agencies or law enforcement bodies when required to do so by law, court order, or valid legal process.
• Professional advisors: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations.

We do not share data with:

• Advertisers or third-party marketing networks for targeted advertising purposes.
• Data brokers or analytics companies for the purpose of data resale.
• Any party that has no legitimate need and is not listed in this policy.

SECTION 05
Security & Data Protection

Eplay continually invests in the latest cybersecurity infrastructure to ensure your personal data is protected at all times. We employ a layered security approach — meaning even if one layer of defence is compromised, multiple additional layers continue to protect your data.

Technical security measures we implement:

• SSL/TLS 256-bit Encryption: All data transmitted between your device and our servers is encrypted using military-grade encryption technology. No one can read your data in transit.
• Encryption of stored data: Sensitive information such as passwords and bank account numbers is stored in encrypted form in our database — even eplay employees cannot read this information.
• Two-factor authentication (2FA): An additional security layer that users can activate to protect their account from unauthorized access.
• 24/7 security monitoring: Intrusion detection (IDS) and intrusion prevention (IPS) systems operating around the clock to detect suspicious activity.
• Regular security audits: Penetration testing and independent security audits are conducted regularly by qualified third-party cybersecurity firms.
• Internal access controls: Only staff with a legitimate business need may access user data, and all such access is logged and monitored.

SECTION 06
Cookies, Tracking Technologies & Analytics

Eplay uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and detect security threats. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management, form security, and language preferences. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting information on how users interact with our platform — most visited pages, time spent, and errors encountered — to help us improve our services.
• Functional Cookies: Remembering your preferences such as language, display settings, and login information (if you choose to be remembered) for a more convenient returning experience.
• Security Cookies: Used to detect and prevent fraudulent activity, ensuring that a single session is only used by one device at a time.

You can manage your cookie settings through your browser settings at any time. However, disabling essential cookies may disrupt the functionality of the eplay platform. Visit your browser's documentation for detailed guidance on managing cookies.

SECTION 07
User Rights Under the PDPA

As a registered eplay platform user in Malaysia, you have certain rights under the Personal Data Protection Act 2010 (PDPA). eplay fully respects these rights and provides straightforward mechanisms for you to exercise them.

SECTION 08
Data Retention Period

Eplay retains your personal data only for as long as necessary to fulfill the original purpose of collection or to comply with applicable legal requirements. Retention periods vary depending on the type of data and relevant legal obligations.

• Active account data: Retained for the duration your account is active and for 7 years after account closure to meet Malaysia's financial legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with the Companies Act 2016 and anti-money laundering requirements (AMLA 2001).
• KYC documents: Retained for 5 years after the termination of the business relationship, or longer if required by law.
• Security logs and communications: Retained for 2 years for security incident investigation and dispute resolution purposes.
• Marketing data: Retained until you withdraw marketing consent, after which this data will be deleted within 30 days.
• Customer support records: Retained for 3 years for quality control and historical reference purposes.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered — or anonymised if we need to retain statistical or aggregate records.

SECTION 09
Changes to This Privacy Policy

Eplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. We are committed to keeping you informed of any significant changes.

• The "Updated" date at the top of this page will always reflect the effective date of the current Privacy Policy.
• For significant changes that affect your rights, we will send a notification to your registered email at least 14 days before the changes take effect.
• For minor changes such as language clarifications or formatting updates, a notice on this website is sufficient.
• Continued use of the eplay platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.
• Previous versions of the Privacy Policy are available upon request — contact our support team if you need an older version for reference.

SECTION 10
Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how eplay handles your personal data, our Data Protection Officer (DPO) team is always ready to assist you.

We understand that privacy is a deeply personal matter. That's why we prioritize every privacy-related inquiry and strive to provide a clear, satisfactory response in the shortest time possible.

• Privacy Email: [email protected] (please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 directly within the eplay platform — the fastest way to get an immediate response
• Response time: General enquiries — within 48 hours; PDPA rights requests — within 21 working days