Privacy Policy epire88 – Personal Data Protection for Malaysian Players

Epire88 ("we", "Platform" or "Company") takes seriously our responsibility to protect the privacy and personal data of every user on our platform. This Privacy Policy explains our practices regarding the collection, use, disclosure and protection of your personal information when you use the epire88.win website, the epire88 mobile app or any other services we offer.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects our commitment to handling your data in a transparent, fair, and responsible manner. "Personal data" in this document refers to any information that can be used to identify you directly or indirectly.

This policy applies to all epire88 platform users regardless of access method — whether via web browser, Android app, iOS app, or any other device.

Epire88 collects various types of personal data depending on your interactions with our platform. Below is a summary of the data categories we collect:

We only collect data necessary for the purposes stated in this policy. We do not collect sensitive data categories such as medical information, religious beliefs, or political affiliations.

Epire88 uses your personal data for the following purposes, all of which are based on lawful grounds under Malaysia's PDPA:

• Account Management: Create, verify and maintain your player account securely, including the KYC process to confirm your identity.
• Transaction Processing: Process deposits, withdrawals and any other financial transactions you make on the platform efficiently and securely.
• Service Delivery: Provide access to all games, promotions and features on the epire88 platform that you use.
• Security & Fraud Prevention: Detect, investigate and prevent any fraudulent activity, money laundering or security breaches.
• Customer Support: Respond to enquiries, resolve complaints and provide technical support to you.
• Legal Compliance: Fulfil legal and regulatory obligations applicable to our platform's operations.
• Platform Improvements: Analyse usage patterns (in aggregated and anonymised form) to improve the user experience.
• Service Communications: Send you important notifications related to your account, security or changes to our terms.

Epire88 does not sell your personal data. However, we may share your data with selected third parties in the following circumstances:

• Payment Processors: The payment service providers we use (such as banks and e-wallet processors) receive the information necessary to process your financial transactions. All our payment processors are bound by strict confidentiality agreements.
• KYC Service Providers: We use accredited third-party services to verify player identities. Data shared is limited to what is required for the verification process only.
• Game Providers: Some basic information (such as anonymised player IDs) may be shared with game providers for the purposes of game operation and technical resolution.
• Legal Authorities: epire88 will disclose personal data to the relevant authorities when required by law, court order or official investigation.
• Analytics Services: We use third-party analytics tools that process usage data in aggregated and anonymised form for platform improvement purposes only.

All third parties that receive your data are required to comply with security standards equal to or higher than those we set ourselves. We do not permit third parties to use your data for their own marketing purposes.

Epire88 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or accidental disclosure.

The technical security measures we implement include:

• 256-bit SSL encryption for all data communications between client and server.
• Password storage in hashed form using the latest algorithms (bcrypt).
• Multi-layered firewall and intrusion detection system.
• Two-factor authentication (2FA) available for all accounts.
• Real-time account activity monitoring to detect suspicious patterns.
• Regular data backups to a secure, separate location.

Retention Period: epire88 retains your personal data for as long as your account is active and for any additional period required by applicable law — typically between 5 and 7 years after account closure for financial records, in line with Malaysia's legal requirements.

Once the retention period expires, your data will be securely deleted or converted into anonymised form that cannot be identified.

Epire88 uses cookies and similar tracking technologies to enhance the user experience and analyse the performance of our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are essential to platform operation.
• Preference Cookies: Save your preferences such as language, display settings and game choices for a smoother return experience.
• Analytics Cookies: Helps us understand how players interact with the platform for improvement purposes. Data collected is aggregated and anonymised.
• Security Cookies: Used to detect and prevent fraudulent activity and to protect the integrity of user sessions.

You can manage cookies through your browser settings. However, disabling essential cookies may affect platform functionality and your gaming experience. For more information on managing cookies on your device, please refer to your browser's documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by epire88:

To exercise any of the rights above, contact our privacy team via live chat or support email. We will respond to valid requests within 30 business days. We may need to verify your identity before processing your request.

The epire88 platform is intended exclusively for adult users aged 18 and above. We do not knowingly collect, store or process personal data from individuals under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Age verification is part of our KYC procedures.

If you are a parent or guardian and believe your child has registered an account on the epire88 platform, please contact our support team immediately so we can take appropriate action.

In operating the epire88 platform, some of your personal data may be transferred to or stored on servers located outside Malaysia. This occurs when we use services from international technology providers such as cloud server infrastructure or global payment processors.

Epire88 ensures that all cross-border data transfers are carried out in compliance with Malaysia's PDPA requirements. This means the recipient country or party must offer an equivalent or higher level of data protection, or we must obtain your consent beforehand.

All agreements with overseas service providers include data protection clauses binding them to handle your data to the standards we set, no less than what is required under Malaysian law.

Epire88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology used, legal requirements or other operational reasons.

When material changes are made to this policy, we will notify you via:

• In-platform notification upon your next login.
• Email to your registered address if the changes are significant.
• Update the "Updated" date at the top of this document.

Continued use of the epire88 platform after changes are published constitutes your acceptance of the updated policy. If you disagree with any changes, you have the right to close your account and request deletion of your data in accordance with the procedures set out.

If you have any questions, concerns, or complaints regarding how epire88 handles your personal data, we encourage you to contact us directly:

• Live Chat: The fastest way — available 24/7 directly within the epire88 platform via the chat icon at the corner of your screen.
• Privacy Email: [email protected] (please copy this address into your email client — it is not clickable to prevent your email app from opening automatically).

We are committed to responding to all privacy-related inquiries within 14 business days. For more complex requests such as full data access or deletion requests, our response period is up to 30 business days as provided under Malaysia's PDPA.

You may also refer to FAQ page us for answers to frequently asked questions about privacy and account security, or visit our Responsible Gaming page for information on how to manage your gaming experience.