This document explains how ekplus8 collects, uses, stores, and protects the personal data of all members in Malaysia. This policy complies with the Malaysian Personal Data Protection Act 2010 (PDPA). By using the ekplus8 platform, you agree to the privacy policy set out here.
Six core principles that shape how ekplus8 handles every Malaysian member's personal data with the utmost integrity.
All personal data and financial information shared with ekplus8 is protected using 256-bit SSL encryption — the same standard used by Maybank, CIMB, and Malaysia's major banks. Every connection to the ekplus8 platform is secure and fully end-to-end encrypted.
Ekplus8 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) in all aspects of data handling. The seven data protection principles established under the PDPA — including the General Principle, Notice & Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle — form the core guidelines of our operations.
Ekplus8 does not sell, rent, or share members' personal data with any third party for marketing or commercial purposes without your explicit consent. Your data is shared only with parties required to operate the platform — such as payment providers TNG and DuitNow — and only to the minimum extent necessary.
Every ekplus8 member has the right to access, correct, or request the deletion of their personal data at any time. You may submit such requests via ekplus8's official email, and we are committed to processing them within the timeframes stipulated under the Malaysian PDPA 2010.
Ekplus8 retains your personal data only for as long as necessary for its stated purpose or as required by Malaysian law. Accounts that have been inactive for three years will be reviewed, and any data no longer needed will be securely disposed of in accordance with established procedures.
In the event of a data security breach that may affect your personal information, ekplus8 is committed to notifying affected members within 72 hours of detecting the incident, in line with international best practices in data protection.
This Privacy Policy describes ekplus8's privacy practices and applies to all members using the ekplus8 platform in Malaysia. By registering an account or continuing to use the platform, you confirm that you have read and understood this policy. ekplus8 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of personal data processing.
Ekplus8 collects various types of personal data from members during the registration process, platform usage, and interactions with our team. This data collection is necessary to provide a service that functions properly, remains secure, and meets applicable legal requirements.
Data collected during registration:
Data collected during platform use:
Note: ekplus8 does not collect credit card details or bank account numbers directly. All financial transactions are processed through third-party payment providers that comply with PCI DSS security standards — meaning ekplus8 never stores or sees your card or bank account number at any point.
The personal data we collect is used solely for lawful purposes directly related to the provision of ekplus8 services. Below is a summary table outlining each data use purpose and its justification:
| Purpose of Use | Type of Data Used | Requirements |
|---|---|---|
| Account management & identity verification | Name, phone number, email, KYC | Mandatory |
| MYR deposit & withdrawal processing | Transaction data, payment methods | Mandatory |
| Provision of betting & gaming services | Betting history, session data | Mandatory |
| Fraud detection & platform security | IP address, device data, activity patterns | Mandatory |
| Customer support & dispute resolution | Communication data, transaction records | Mandatory |
| Legal compliance & AML | Identity, financial data, KYC | Mandatory (legal requirement) |
| Ekplus8 promotional notifications & offers | Email, phone number | Optional (unsubscribe anytime) |
| Platform improvement & analytics | Anonymised usage data | Optional (anonymised data) |
Ekplus8 will not use your personal data for any purpose other than those stated above without first obtaining your explicit consent. If we wish to use your data for a new purpose, we will inform you and seek your agreement before doing so.
Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), ekplus8 processes your personal data on the following legal bases, depending on the type of processing involved:
Ekplus8 does not sell members' personal data to any third party. However, in the course of operating the platform, there are situations where we may need to share your personal data with certain parties on a limited and strictly necessary basis:
All third parties that receive personal data of ekplus8 members are required to protect that data to a standard no less than ekplus8's own, and to use it solely for the specified purpose.
Ekplus8 continually invests in data security infrastructure to protect the personal information of all Malaysian members. The technical and organisational security measures we have in place include:
Please note: Data security is a shared responsibility. Make sure your ekplus8 account password is strong and unique, never share it with anyone, and enable 2FA for added protection. If you suspect your account has been compromised, contact ekplus8 immediately at support@ekplus8.wine.
Ekplus8 retains your personal data only for as long as necessary for the stated purpose or as required under Malaysian law. Our data retention policy is as follows:
Once the retention period expires, data is disposed of securely and irreversibly — either through secure digital deletion or appropriate physical destruction methods, depending on the storage media involved.
Under the Malaysian Personal Data Protection Act 2010, every ekplus8 member has the following rights regarding their personal data. ekplus8 is committed to respecting and facilitating the exercise of these rights:
You have the right to request a copy of the personal data ekplus8 holds about you. Data access requests will be processed within 21 working days in accordance with the PDPA 2010.
If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. We will update your data within a reasonable timeframe upon receiving your request.
For processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting your other ekplus8 services.
In certain circumstances, you have the right to object to how ekplus8 processes your personal data — particularly for direct marketing purposes or processing based on legitimate interests.
Under certain circumstances permitted by the PDPA 2010, you may request the deletion of your personal data. This right is subject to ekplus8's legal obligations to retain certain records.
If you are dissatisfied with how ekplus8 handles your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, appointed under PDPA 2010.
To submit any request relating to the rights above, please send an email to support@ekplus8.wine with the subject line "Personal Data Rights Request" along with your full name and ekplus8 account number. We will process your request within the timeframe stipulated by PDPA 2010.
Ekplus8 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how our platform is used. We use several types of cookies:
You can manage or disable non-essential cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality and security of the ekplus8 platform.
Ekplus8 is a platform restricted to users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. Should ekplus8 discover that a minor's personal data has been collected without our knowledge — for example, through a fraudulent registration with a false age — we will take immediate steps to delete that data and close the account in question.
Parents and guardians who discover that their child under the age of 18 has registered an ekplus8 account are requested to contact us immediately at support@ekplus8.wine so that appropriate action can be taken as quickly as possible. ekplus8 regards the protection of minors as an absolute priority that cannot be compromised.
In certain operational situations, personal data of ekplus8 members may need to be transferred to servers or systems located outside Malaysia — for example, when using cloud infrastructure services or third-party services whose primary servers are based in other countries.
Ekplus8 ensures that any cross-border data transfers are carried out in compliance with Section 129 of the Malaysia Personal Data Protection Act 2010 (PDPA), which governs the transfer of personal data outside the country. We only transfer data to countries or parties that provide a level of data protection equivalent to or greater than that required under Malaysian law.
Your protection: Although your data may be processed by technical infrastructure outside Malaysia, your privacy rights under Malaysia's PDPA 2010 remain fully applicable. ekplus8 is responsible for ensuring that all parties processing your data on our behalf adhere to the required protection standards.
Ekplus8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. We will notify members of any material changes via:
Continued use of the ekplus8 platform after the effective date of any changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the changes made, please stop using the platform and contact us to close your account.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how ekplus8 handles your personal data, please contact ekplus8's Data Protection Officer (DPO) through the following channels:
If you are dissatisfied with ekplus8's response to your privacy complaint after going through our internal channels, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, appointed under PDPA 2010 and operating under the Ministry of Communications Malaysia.
In today's digital world, trust is the most valuable currency — especially in the online betting and gaming industry, where members entrust a platform not only with their money but also with sensitive personal information. ekplus8 fully understands the weight of this responsibility and has never taken it lightly. Every decision we make regarding data handling — from system design to internal staff policies — is grounded in one simple principle: our members' personal data is a trust that must be safeguarded to the highest standard.
The first step that ekplus8 taken to protect the privacy of Malaysian members, starting from the technical design of the platform itself. The concept of "privacy by design" — embedding privacy protections directly into the system architecture from the earliest stages of development — is an approach we hold firmly. This means data protection is not something added as an afterthought once the system is built, but a core part of every technical design decision made by the ekplus8 engineering team.
Full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) is a legal obligation for ekplus8, but we see it as far more than a compliance obligation. The PDPA 2010 sets out seven principles governing how personal data is handled in Malaysia — and each of these principles reflects the values we uphold as a company: fairness, transparency, lawful purpose, data minimisation, accuracy, limited retention, and adequate security. We conduct internal PDPA compliance audits quarterly and commission independent external audits annually.
One of the most important aspects of privacy for members ekplus8 is the security of financial transactions. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, you may wonder just how safe your payment information really is. The answer: very safe. ekplus8 uses a tokenisation model, meaning we never store your card number or bank account number directly in our systems. All sensitive payment information is handled exclusively by payment providers that comply with PCI DSS Level 1 — the most stringent data security standard in the payment card industry.
Staff training programmes are another key component of our approach to privacy ekplus8 that may not be visible to members but make a significant impact in day-to-day operations. All ekplus8 staff with access to member data undergo comprehensive data protection training during onboarding and annual refresher courses. They are bound by strict confidentiality agreements and subject to serious disciplinary action in the event of any internal privacy policy breach. A culture of respect for member privacy is not simply a top-down directive — it is a value upheld by every individual on the ekplus8 team.
Data breaches are among the most serious concerns in the technology industry today, and ekplus8 takes these threats extremely seriously. We have a detailed incident response plan that will be activated immediately should any security breach occur where member data is suspected to have been compromised. Within 72 hours of the incident being detected, affected members will be contacted with information about what occurred, what data may have been affected, and the steps they should take to protect themselves. This is a commitment we uphold even though no Malaysian law currently mandates notification within that specific timeframe.
Finally, ekplus8 believes that good privacy is privacy that empowers members — not one that merely buries information in lengthy legal documents. That is why we strive to present this Privacy Policy in clear, straightforward language that is relevant to the real experience of Malaysian members using our platform. If any part of this policy is unclear or you have unanswered questions, please do not hesitate to contact us — the ekplus8 team is always here to help.
Answers to the most frequently asked questions from Malaysian members regarding ekplus8 privacy and data protection.
🔒 Your Data Is Safe with ekplus8
Register now and enjoy a safe, fair, and privacy-conscious sports betting, poker, and casino experience — built for Malaysian players.
18+ only. Please gamble responsibly. Responsible Gambling