Privacy Policy EpicWin — Data Protection & Privacy for Malaysian Players

EpicWin is an online betting platform offering entertainment services that include Malaysia Super League and EPL football betting, slots, live casino, baccarat, lottery, and a wide range of other options for players in Malaysia. In operating these services, we collect and process certain personal data belonging to our members.

This Privacy Policy applies to all users accessing the EpicWin website at epicwin.im, including visitors without an account, registered members, and anyone who interacts with our platform on any device — whether a desktop, laptop, smartphone, or tablet.

This Policy does not apply to third-party websites that may be linked from the EpicWin platform. We recommend reading those websites' privacy policies separately, as EpicWin is not responsible for their privacy practices.

EpicWin collects various types of information from our members. Below is a full breakdown of the information we collect, organised by category:

EpicWin never collect sensitive information such as biometric data, medical information, or religious/political beliefs unless required by law or a relevant authority.

EpicWin uses the personal data collected solely for legitimate and necessary purposes in order to provide the best betting experience to players in Malaysia. The key purposes for which data is used are as follows:

• Account Management: Registering and maintaining your member account, processing login requests, sending important account-related notifications, and enabling access to all features on the EpicWin platform.
• Financial Transaction Processing: Processing deposits via FPX, DuitNow, Touch 'n Go, GrabPay, Boost, and ShopeePay, as well as processing withdrawals to your Malaysian bank account within the stipulated timeframe.
• Identity Verification (KYC): Verifying your identity in accordance with Malaysia's anti-money laundering and financial fraud prevention compliance requirements.
• Platform Security: Detecting and preventing fraudulent activity, multi-account usage, bonus abuse, and any cybersecurity threats that could compromise the platform or other members.
• Service Communications: Sending notifications about promotions, bonuses, Privacy Policy changes, terms and conditions updates, and other important information relating to your EpicWin account.
• Service Improvement: Analysing usage patterns in aggregate (not at the individual level) to enhance the user experience, improve the platform interface, and develop new features relevant to Malaysian players.
• Responsible Betting: Monitoring betting patterns to identify signs of problem gambling and offering appropriate responsible gambling tools to members who may need support.
• Legal Compliance: Complying with directives from Malaysian government authorities, courts, or law enforcement agencies when required by law.

EpicWin does not use your data to make automated decisions that materially affect your rights without appropriate human oversight. Any decision that significantly impacts your account — such as account closure or fund freezing — involves a review by the EpicWin management team.

EpicWin does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where EpicWin needs to share your data with specific parties:

• Payment Service Providers: Minimal transaction information is shared with authorised payment providers — including FPX processors, DuitNow gateways, and eWallet platforms — solely to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Software Providers: Third-party slots, live casino, and baccarat game providers offering games on the EpicWin platform may receive the session data required to run those games. They do not receive your full personal identity information.
• Cloud & IT Service Providers: Technology infrastructure providers that host and maintain the EpicWin platform have limited access to data strictly as required for technical operations.
• Legal Authorities: EpicWin will disclose personal data to the police, courts, or Malaysian government agencies where required by a valid court order, warrant, or legal obligation.
• KYC Service Providers: Third-party identity verification companies that assist EpicWin in validating the authenticity of identity documents during the registration process and periodic KYC reviews.

EpicWin continuously invests in the latest security technologies and processes to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and EpicWin's servers is encrypted using the same 256-bit SSL/TLS encryption standard adopted by major banking institutions in Malaysia.
• Two-Factor Authentication (2FA): EpicWin offers two-factor authentication via SMS OTP or an authenticator app to protect your account from unauthorised access, even if your password is compromised.
• 24/7 Security Monitoring: Automated security monitoring systems operate around the clock to detect suspicious activity, repeated failed login attempts, and unusual transaction patterns.
• Data-at-Rest Encryption: Sensitive data stored in EpicWin's databases is also encrypted to ensure protection even in the event of an unforeseen security breach.
• Internal Access Controls: Access to members' personal data within EpicWin is restricted to staff who genuinely require it for their work, and all access is logged and audited on a regular basis.
• Regular Penetration Testing: EpicWin conducts regular security penetration testing by independent cybersecurity experts to identify and address any system vulnerabilities before they can be exploited.

EpicWin uses a range of technologies to enhance the user experience and analyse how the platform is used. Below is an explanation of these technologies:

• Essential Cookies: Required for core platform operations such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helping EpicWin understand how players interact with the platform — which pages are visited most, how long sessions last, and where players encounter issues. This data is collected in aggregate and does not identify individuals.
• Functional Cookies: Saving your preferences such as display language, set betting limits, and layout settings so you don't have to reconfigure them each time you log in.
• Performance Cookies: Helping EpicWin identify technical issues, slow page load times, and other performance problems that affect your gaming experience.

You can manage your cookie settings through your web browser. Most modern browsers, including Google Chrome, Mozilla Firefox, Safari, and Microsoft Edge, allow you to view, delete, or block cookies. Please refer to the "Settings" or "Privacy" section of your browser for more information.

Please note that disabling certain cookies may affect the functionality of the EpicWin platform. For example, disabling session cookies may require you to log in again each time you access the platform.

As an EpicWin member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act (PDPA) and the international data protection principles we follow. Your key rights are outlined below:

EpicWin retains your personal data only for as long as necessary for the purposes described in this Privacy Policy or as required under Malaysian law. The following is a general guide to our data retention periods:

• Active Account Data: Personal data of active members is retained for the duration of the active account period and for a specified period after account closure for legal compliance purposes.
• Financial Records & Transactions: Deposit, withdrawal, and betting history records are retained for a minimum of 7 years in accordance with Malaysia's tax and anti-money laundering legal requirements.
• Communication Logs: Customer support chat logs and email correspondence are retained for 2 years for reference and service improvement purposes.
• Technical Data (Access Logs): System access logs and IP addresses are retained for 12 months for security purposes and cybersecurity incident investigations.
• KYC Documents: Copies of identity documents are retained for 5 years after account closure, in accordance with Anti-Money Laundering (AML) compliance requirements.

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised in a form that can no longer identify you as an individual. EpicWin employs certified, secure data deletion procedures to ensure that deleted data cannot be recovered.

EpicWin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to the services we offer Malaysian players.

When we make material changes to this Privacy Policy, we will:

1. Updating the "Last Updated" date at the top of this page.
2. Sending email notifications to all registered EpicWin members before changes take effect.
3. Displaying a prominent notice on the EpicWin platform's main page for a minimum of 14 days.
4. For significant changes, we may seek your explicit consent before those changes apply to the processing of your data.

Your continued use of the EpicWin platform after an updated Privacy Policy is published and notice has been given constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of your data rights and protections.

If you have any questions, concerns, or complaints regarding EpicWin's Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer through the following channels:

• Privacy Email: support@epicwin.im (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week on the EpicWin platform.
• Response Time: We are committed to responding to all privacy enquiries within 3 business days.

If you are not satisfied with EpicWin's response to your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia or the relevant data protection authority in your jurisdiction.

EpicWin is committed to resolving every privacy complaint fairly, transparently, and in a timely manner. Your privacy and trust are the foundation of the relationship between EpicWin and every Malaysian player who relies on our platform for their online betting entertainment.