EP12 Privacy Policy – Full Personal Data Protection Commitment for Malaysian Casino Players

1 Introduction – EP12's Commitment to Your Privacy

EP12 takes the responsibility of protecting our members' privacy with the utmost seriousness. We understand that when you register an account, make a deposit via Touch 'n Go eWallet, DuitNow, or FPX, and play your favourite games on our platform – you are entrusting us with deeply personal information. That trust is something we honour and safeguard wholeheartedly.

This Privacy Policy is written in plain, straightforward language – not confusing legal jargon – because we believe every ep12 player in Malaysia deserves to know exactly what happens to their data. No hidden terms, no flowery language concealing true intent. What you read here is what we practise.

This policy applies to all personal information collected through the ep12 website, mobile app, and all other communication channels, including customer support live chat, email, and any forms you complete when transacting with ep12.

2 Types of Personal Data We Collect

EP12 only collects data that is strictly necessary to deliver quality, secure services in line with regulatory requirements. Below are the categories of data we collect, along with the purpose of each:

Registration & Identity Data:

• Full name as stated on your Malaysian identity card (MyKad) or passport.
• National identity card or passport number (for KYC identity verification purposes).
• Date of birth – to verify that you meet the minimum age requirement of 21 years old.
• Email address – for account communications, transaction notifications, and promotional offers (subject to your preferences).
• Phone number – for two-factor authentication (2FA) and customer support communications.
• Username and password encrypted using a secure hashing algorithm.

Financial & Transaction Data:

• Digital wallet account information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) – account numbers only, not passwords.
• Malaysian bank account number for withdrawals via DuitNow or FPX (Maybank2u, CIMB Clicks).
• History of deposit and withdrawal transactions in MYR.
• Betting records and gaming activity for regulatory compliance purposes.

Technical & Usage Data:

• IP address and location information (state/city) for security and regional verification purposes.
• Browser type, operating system, and device type used to access ep12.
• Session activity logs, including login times, logout times, and pages visited.
• Cookie data and similar tracking technologies — see Section 8 for full details.

3 How We Use Your Personal Data

EP12 uses your personal data only for legitimate and necessary purposes. We never use your data for anything outside the scope of the services you use. Below is the full list of purposes for which ep12 uses your data:

• Account management: Creating, verifying, and maintaining your ep12 account securely.
• Transaction processing: Processing your deposits and withdrawals in MYR via your chosen payment method.
• Identity verification (KYC): Comply with legal requirements for anti-money laundering and age verification.
• Platform security: Detecting and preventing fraud, unauthorised access, and account misuse.
• Customer support: Providing effective and relevant assistance whenever you contact the ep12 support team.
• Experience personalisation: Tailoring game recommendations and promotional offers based on your playing preferences.
• Service communications: Sending important notifications relating to your account, transactions, and policy changes.
• Regulatory compliance: Meet reporting obligations to the relevant Malaysian authorities.
• Platform improvements: Analysing usage patterns on an aggregate basis (without identifying individuals) to improve ep12's services.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.

4 Data Sharing & Disclosure

EP12 does not sell, rent, or trade your personal data to any third party for their marketing purposes. This is an absolute commitment we have never wavered on. However, in certain limited situations, ep12 may need to share some of your data with the following parties:

• Payment service providers: Payment gateway and digital wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) that process your financial transactions. They receive only the minimum data necessary to complete those transactions.
• Game software providers: Companies that provide slots, Live Casino, and card games on the ep12 platform may receive gameplay data that does not personally identify you.
• Technology service providers: Server hosting companies, cybersecurity services, and analytics platforms that support ep12's operations — all bound by strict confidentiality agreements.
• Malaysian authorities: When required by Malaysian law — including directives from Bank Negara Malaysia, the police, or a court of competent jurisdiction — ep12 complies fully with all legal orders.
• Fraud prevention body: In cases of suspected financial fraud or money laundering, ep12 reserves the right to share relevant information with the appropriate authorities in Malaysia.

5 EP12 Data Security Measures

EP12 continuously invests in the latest cybersecurity infrastructure to ensure your personal and financial data remains at all times under optimal protection. The security layers we employ include:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and ep12's servers are encrypted to the highest industry standards – the same level used by Malaysia's leading banks.
• Static data encryption: Sensitive information stored in ep12's database — including passwords (stored as irreversible hashes) and financial details — is encrypted separately.
• Two-factor authentication (2FA): EP12 offers and actively encourages the use of 2FA via SMS or an authenticator app, adding an extra layer of protection to your account.
• 24/7 security monitoring: ep12's automated monitoring system continuously scans for cyber threats, suspicious login attempts, and unusual activity on any account.
• Regular penetration testing: EP12 conducts regular security audits carried out by independent security experts to identify and remediate any vulnerabilities before they can be exploited.
• Internal access controls: ep12 staff are granted access only to the data necessary for their respective roles, with a full audit trail maintained for every instance of access.
• Secure data backup: Your data is regularly backed up to separate server locations to ensure service continuity in the event of a technical emergency.

6 Data Retention Period

EP12 does not retain your personal data for longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active account data: Retained for as long as your account remains active on the ep12 platform. You may request account closure at any time.
• Financial transaction records: Retained for a minimum of seven (7) years following the transaction, in compliance with Malaysian legal requirements including the Income Tax Act and the Anti-Money Laundering Act.
• Identity verification data (KYC): Retained for five (5) years after account closure or the end of the business relationship, in line with regulatory compliance requirements.
• Customer support communication logs: Retained for two (2) years for reference and service improvement purposes.
• Technical data and access logs: Retained for one (1) year for security and fraud detection purposes.
• Marketing data (where applicable): Retained until you withdraw consent for marketing communications.

Once the retention period has ended, your data will be securely deleted or fully anonymised so that it can no longer be identified.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and the privacy policy of ep12, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of all personal data that ep12 holds about you, at any time.
• Right to Rectification: If any data we hold is inaccurate or out of date, you may request that we correct it.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data – subject to data retention requirements stipulated under Malaysian law.
• Right to Restrict Processing: You may request that ep12 restrict how we use your data in certain circumstances.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing that has already taken place.

To exercise any of the above rights, please contact the ep12 customer support team ep12 via live chat or email at [email protected]. We will process your request within 30 days of receipt.

8 Cookie Policy & Tracking Technologies

EP12 uses cookies and similar technologies to enhance the user experience, ensure platform security, and understand how members interact with our website. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect some features of the platform ep12. Essential cookies cannot be disabled as they are critical to the security and core functionality of the platform.

9 Children's Privacy & Protection of Minors

Platform ep12 is intended solely for adults aged 21 and above. We do not knowingly collect or process personal data of individuals under the age of 21.

If you are a parent or guardian concerned that your child or ward who is underage has accessed the platform ep12, please contact our support team immediately. We will take prompt action to close the account, delete all associated data, and refund any deposits made – provided that sufficient verification can be furnished.

10 Cross-Border Data Transfers

In the course of its operations, ep12 may need to transfer your personal data to servers or service providers operating outside Malaysia. This occurs primarily in the context of data hosting at international data centres and the use of globally recognised software services.

Any such data transfer is carried out in strict compliance with data protection standards:

• All data transfers are protected with encryption that meets Malaysian industry standards.
• Recipients of data outside Malaysia are required to uphold data protection standards no less stringent than those set out under Malaysia's Personal Data Protection Act 2010.
• Comprehensive data processing agreements are signed with all parties involved in cross-border data transfers.
• EP12 only engages international service providers that hold recognised data security certifications such as ISO 27001 or equivalent.

11 Amendments to This Privacy Policy

EP12 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service enhancements. When significant changes are made, we will:

• Displaying a clear notice on the ep12 platform homepage for at least 14 days prior to the changes taking effect.
• Sending email or SMS notifications to all registered ep12 members regarding material changes that affect their rights or privacy.
• Updating the "Last Updated" date at the top of this document to reflect the most recent revision date.
• Maintaining an archive of previous versions of the Privacy Policy for members who require reference.

Continued use of the platform ep12 after any changes to the Privacy Policy take effect will be considered your acceptance of the updated version. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 7.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how ep12 handles your personal data, we strongly encourage you to reach out to us directly. Our dedicated team will provide a thorough and satisfactory response.

• Live Chat: The fastest way to reach us – ep12's support team is available 24/7 in Bahasa Malaysia directly through the platform.
• Privacy Email: [email protected] – for written enquiries requiring a detailed response or official documentation.

We are committed to responding to all privacy-related enquiries within 3 working days from the date of receipt. For cases requiring more in-depth investigation, we will keep you updated on the progress within 7 days and provide a full response within 30 days.