Privacy Policy

This Privacy Policy ("Policy") explains how EpicWin88 ("Company", "Platform", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://epicwin88.cam, collects, processes, stores, shares, and protects the personal data of individuals who visit, register on, or interact with our platform ("you", "Player", "User").

EpicWin88 is committed to handling your personal data responsibly, lawfully, and transparently. This Policy is intended to give you a clear and honest picture of our data practices so that you can make informed decisions about your engagement with our services.

By accessing our platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the platform and contact our support team to close your account.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that can be used to identify you directly or indirectly, including but not limited to your name, email address, Malaysian IC number, postal address, telephone number, financial account details, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means EpicWin88, which determines the purposes and means by which your personal data is processed.
• "Data Processor" means any third-party service provider that processes personal data on EpicWin88's behalf, pursuant to a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a specified purpose.
• "KYC" means the Know Your Customer identity verification process required under our regulatory obligations prior to the processing of withdrawal requests.
• "PDPA" means the Malaysian Personal Data Protection Act 2010, which governs the processing of personal data in commercial transactions within Malaysia.

EpicWin88 collects personal data through several channels, including account registration, platform usage, payment processing, customer support interactions, and KYC verification. The categories of data we collect are set out in the table below.

EpicWin88 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to register and maintain your account, process your deposits and withdrawals via Maybank, CIMB, DuitNow, FPX, and other accepted Malaysian payment methods, and to deliver the gaming and sports betting services you have requested.
• Legal Obligation: Processing is required to comply with our regulatory obligations, including KYC and anti-money laundering (AML) requirements imposed by our gaming licence, and obligations under the Malaysian Personal Data Protection Act 2010.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and improving the quality of our services — provided these interests are not overridden by your fundamental rights.
• Consent: Where we rely on consent as the legal basis (for example, for marketing communications), we will obtain your explicit agreement before processing. You may withdraw consent at any time by contacting our support team or updating your communication preferences in your account settings.

EpicWin88 uses the personal data we collect for the following specific purposes:

• Account Administration: Creating, maintaining, and managing your registered account, including storing your preferences, game history, VIP tier status, and communication settings.
• Payment Processing: Processing your deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method, including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) prior to processing your first withdrawal, as required by our gaming licence obligations.
• Fraud Prevention & Security: Monitoring transactions and account activity to detect and prevent fraud, money laundering, unauthorised access, and other prohibited activities.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance through our multilingual support channels (English, Bahasa Melayu, Mandarin).
• Responsible Gambling: Monitoring patterns of play to identify potential problem gambling behaviour and, where appropriate, applying responsible gambling interventions such as deposit limit suggestions or self-exclusion prompts.
• Legal Compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory authorities, and maintaining records as required by our gaming licence.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, features, and user experience of the EpicWin88 platform.
• Marketing Communications: Where you have opted in, sending you promotional information about bonuses, tournaments, and new game launches. You may opt out at any time.

EpicWin88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited circumstances:

6.1 Service Providers. We engage carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment processors, identity verification providers, cloud infrastructure providers, and customer support platform operators. All processors are contractually obligated to process data only for the specified purpose and to maintain appropriate security standards.

6.2 Gaming Software Providers. The game content available on EpicWin88 is supplied by third-party game providers. Certain technical session data may be shared with these providers to facilitate game delivery and to enable progressive jackpot systems. No directly identifying personal data is shared beyond what is technically necessary.

6.3 Regulatory & Law Enforcement Authorities. We may disclose your personal data to regulatory bodies, law enforcement agencies, tax authorities, or courts where required to do so by applicable law or by a lawful order. EpicWin88 will, where legally permitted, notify you of such disclosure.

6.4 AML & Fraud Prevention Agencies. In accordance with our anti-money laundering obligations, we may share information with relevant financial intelligence units or industry fraud prevention databases where we have reasonable grounds to suspect illegal activity.

6.5 Business Transfers. In the event of a merger, acquisition, or sale of assets involving EpicWin88, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy. We will notify registered players of any material change in data controller as a result of such a transaction.

EpicWin88 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate and improve our platform. A cookie is a small text file placed on your device when you visit our website.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These maintain your login session, remember your language preferences, and keep your account secure. These cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences, such as your selected game categories, deposit method, or display settings, to personalise your experience across sessions.
• Performance & Analytics Cookies: Collect anonymised information about how players use our platform — which pages are most visited, which games are most played, and where errors occur — so we can improve the service. This data is not linked to any individual's identity.
• Security Cookies: Support our fraud detection and account protection systems by identifying unusual patterns in session behaviour.

You can manage or delete cookies through your browser settings at any time. However, disabling strictly necessary cookies will prevent you from accessing your account and using our services. For most cookies, you can control your preferences through your browser's privacy settings.

EpicWin88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. Our general data retention schedule is as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

EpicWin88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption. Our platform enforces HTTPS across all pages and endpoints.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, financial records, and KYC materials — is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data within EpicWin88 is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review. Multi-factor authentication is required for all administrative systems.
• Intrusion Detection & Monitoring: Our security operations team continuously monitors platform activity for signs of intrusion, anomalous behaviour, and potential data breaches using automated and manual tools.
• Vendor Security Standards: Third-party service providers who process personal data on our behalf are required to demonstrate compliance with recognised information security standards as a condition of engagement.
• Data Breach Response: EpicWin88 maintains a documented incident response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players and relevant authorities in accordance with applicable legal requirements.

While we maintain robust technical safeguards, no system is completely immune from risk. You play an important role in your own account security — please use a strong, unique password, enable two-factor authentication where available, and never share your login credentials with anyone.

As a registered player and data subject, you hold a number of rights in relation to your personal data. EpicWin88 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include:

To exercise any of the above rights, please contact our Data Protection team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and endeavour to complete it within 30 calendar days. In complex cases, we may require up to 60 days, in which case we will inform you of the extension.

Please note that some rights are subject to limitations where EpicWin88 has overriding legal obligations — for example, we are required to retain financial transaction records and KYC documentation for specified periods regardless of deletion requests.

EpicWin88 is strictly an adult platform. Access to and use of our services is prohibited for any individual under the age of 21 years. We do not knowingly collect personal data from individuals below this minimum age threshold.

All accounts are subject to age verification as part of the KYC process. Where we become aware that an individual under 21 has registered an account or provided personal data, we will take the following steps:

• Immediately suspend and close the account.
• Refund any deposits made to the account via the original payment method.
• Permanently delete all personal data associated with the underage account from our systems, except where retention is required to document the breach.

Parents and guardians are encouraged to make use of internet parental control tools to prevent minors from accessing online gambling platforms. If you believe a minor has registered on EpicWin88, please contact our support team immediately.

The EpicWin88 platform may contain references to or integrations with third-party services including payment gateways (Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX, etc.), game content providers, and analytics tools. These third-party services have their own privacy policies and data practices which are independent of EpicWin88.

EpicWin88 is not responsible for the data practices of third-party service providers, and we encourage you to review the relevant privacy policies of any third party whose services you interact with through our platform. When you initiate a payment via a Malaysian bank or e-wallet, your interaction with that payment provider is governed by the provider's own terms and privacy policies.

Where we integrate third-party analytics services, we configure those services to anonymise or pseudonymise data wherever technically possible to minimise the amount of directly identifying personal data shared with those providers.

As an internationally licensed gaming platform, EpicWin88 may process and store personal data in countries outside of Malaysia. When personal data is transferred to a country that does not have an equivalent level of data protection to that provided under the Malaysian PDPA 2010, we will take appropriate safeguards to ensure your data remains protected.

Such safeguards may include entering into standard contractual clauses with data recipients, ensuring that the recipient is subject to binding corporate rules, or relying on adequacy decisions where applicable. In all cases, cross-border transfers will be carried out only where a legal basis exists and appropriate safeguards are in place.

EpicWin88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, we will provide registered players with advance notice by email or via a prominent notification on the platform, at least fourteen (14) days before the changes take effect.

The "Last Updated" date displayed at the top of this page indicates when this Policy was most recently revised. We recommend reviewing this Policy periodically to stay informed of how we handle your personal data.

Your continued use of the EpicWin88 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the amended Policy, please close your account and cease use of the platform before the changes take effect.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your personal data has been handled, please contact our team using the details below. We take all privacy enquiries seriously and aim to respond within 5 business days.

When submitting a data rights request or privacy complaint, please include your registered account username, the email address associated with your account, and a clear description of your request or concern. This will allow us to locate your records and respond efficiently.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction.