Important Note: By using the ekplus8 platform, you agree to the collection and use of data as described in this Privacy Policy. Please read it carefully before registering an account.
Privacy is more than a policy on paper — it is part of how we build a trusted platform for every member in Malaysia.
End-to-End Data Encryption
All data transmitted between your device and ekplus8 servers is protected by 256-bit SSL encryption. This means sensitive information such as your login details and financial transactions cannot be intercepted by third parties.
Data Controls in Your Hands
You have the full right to access, correct, or request deletion of your personal data at any time. This can be done easily through your account panel or by contacting our support team directly.
No Sale of Data to Third Parties
Ekplus8 will not sell, rent, or share your personal data with advertisers or third-party companies for marketing purposes without your explicit consent. Your data belongs to you.
Secure Data Storage
All member data is stored on servers protected by strict access controls, 24-hour monitoring, and regular backups. Only authorized personnel may access personal data within the scope of their specific duties.
Malaysia PDPA Compliance
Ekplus8 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that every data management process adheres to the principles set out under local law.
Flexible Communication Options
You can manage your communication preferences at any time — whether you wish to receive promotional emails, system notifications, or platform updates. Unsubscribing takes just one click with no hassle.
Content
1 Information We Collect
Ekplus8 collects your personal information only when it is necessary to provide platform services, meet legal requirements, or improve user experience. We do not collect data that is excessive or irrelevant to our operational purposes.
The types of information we may collect include:
| Data Category | Data Examples | Primary Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, identity card number | KYC & account verification |
| Contact Information | Email address, phone number, residential address | Communication & support |
| Financial Information | Bank account number, account holder name | Deposit & withdrawal processing |
| Technical Data | IP address, device type, web browser, operating system | Security & fraud detection |
| Usage Data | Gaming history, transaction records, activity logs | Account monitoring & reporting |
| Communication Data | Live chat records, support emails, complaints | Complaint management & improvement |
Data is collected through several channels: registration forms, the KYC process, platform usage activity, communications with our support team, and cookie technology while you browse our website.
2 How We Use Your Data
Every piece of data we collect is used for a clear and lawful purpose. ekplus8 will not use your data for any undisclosed purpose without prior notice and consent.
The primary purposes for which data is used are as follows:
- Account management: Create, verify and maintain your account while keeping it secure at all times.
- Financial transaction processing: Manage deposits, withdrawals and transaction records accurately and securely.
- Legal compliance (KYC/AML): Meet legal requirements related to identity verification and anti-money laundering.
- Platform security: Detect and prevent fraudulent activity, hacking or account misuse.
- Service improvement: Analyse usage patterns to improve platform functionality, interface and overall user experience.
- Service communications: Send important notifications regarding your account, transactions, relevant promotions and platform updates.
- Complaint resolution: Investigate and resolve disputes or complaints raised by members accurately and fairly.
- Responsible gaming: Identify potentially harmful gaming patterns and take appropriate protective action.
ekplus8 does not use your data to make automated decisions that could materially affect your rights without appropriate human review.
3 Legal Basis for Data Processing
Ekplus8 processes your personal data on one or more valid legal bases. This ensures that every data processing activity has a solid and transparent justification:
- Contract performance: Processing required to fulfill the service agreement between you and ekplus8 — including account management and transaction processing.
- Legal obligation: Compliance with requirements under the PDPA 2010, anti-money laundering laws and applicable financial regulations.
- Legitimate interest: Processing for platform security, fraud prevention and service improvement purposes, where these interests do not override your privacy rights.
- Consent: For optional marketing communications and non-essential cookies, we rely on the explicit consent you have provided. You may withdraw this consent at any time.
4 Information Sharing and Disclosure
Ekplus8 does not sell your personal data. However, under certain circumstances, we may share data with the following parties for legitimate and limited purposes:
- Payment service providers: Information required to process your deposit and withdrawal transactions via FPX, DuitNow and other payment methods we support.
- Technical service providers: Companies that help us operate the platform, such as cloud services, hosting, and cybersecurity solutions — all bound by strict data protection agreements.
- Regulatory authority: When required by law or court order, we will disclose the necessary information to the relevant government agencies or regulatory bodies.
- Gaming service providers: Gaming software providers may receive the minimum technical data required to ensure games function correctly and fairly.
Our Guarantee: All third parties that receive your data are required to sign a data protection agreement and may only use that data for the specified purpose. ekplus8 remains accountable for the security of your data even while it is being processed by third parties.
5 Data Security Measures
We continuously invest in security infrastructure to ensure your data is always protected at the highest level. The technical and organisational measures we implement include:
- 256-bit SSL Encryption for all data transmissions between user devices and our servers.
- Two-factor authentication (2FA) as an additional security layer for account login.
- 24/7 Monitoring by our cybersecurity team to detect suspicious activity in real time.
- Tiered access control — only authorized personnel may access specific data in accordance with their role requirements.
- Regular security audits by independent third parties to ensure our systems remain up to date and free from vulnerabilities.
- Encrypted password storage using irreversible hashing algorithms.
In the event of a data breach that may affect you, ekplus8 is committed to notifying you within the timeframe required by applicable law and taking immediate remedial action.
6 Data Retention Period
Ekplus8 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by law. The following are our data retention guidelines:
| Data Type | Retention Period | Justification |
|---|---|---|
| Active account information | Throughout the active account period | Continuous service operations |
| Financial transaction records | 7 years after transaction | Financial legal requirements |
| KYC Documents | 5 years after account closure | AML/KYC compliance |
| Support communication logs | 3 years after last interaction | Complaint resolution & audit |
| Technical log data | 90 days | Security & fraud detection |
| Marketing data (with consent) | Until consent is withdrawn | Promotional communications |
Once the retention period has ended, data will be securely deleted or anonymized so that it can no longer be linked to your identity.
7 Your Rights Regarding Personal Data
As a data subject, you have certain rights under applicable data protection laws. ekplus8 is committed to facilitating the exercise of these rights:
Right of Access
You have the right to obtain a copy of the personal data we hold about you in a readily readable format.
Right to Rectification
You may request corrections to inaccurate or incomplete data at any time through your account panel.
Right to Erasure
You may request the deletion of your personal data, subject to applicable legal retention obligations.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time without penalty.
Right to Data Portability
You have the right to receive your data in a structured format that can be transferred to another service provider.
Right to Restriction of Processing
Under certain circumstances, you may request that we restrict the processing of your data while a review or investigation is pending.
To exercise any of the above rights, contact our support team via live chat or email. We will process your request within 14 working days. Identity verification may be required before your request is processed.
8 Cookie Policy
Ekplus8 uses cookies and similar tracking technologies to enhance platform functionality and user experience. Cookies are small text files stored on your device when you browse our website.
We use three main categories of cookies:
| Cookie Type | Description | Can Be Disabled? |
|---|---|---|
| Required for core platform functions — login, user sessions, account security, and transaction processing | No — required for operation | |
| Help us understand how users interact with the platform for performance and interface improvement purposes. | Yes — via cookie settings | |
| Used to display relevant promotions and measure the effectiveness of our marketing campaigns | Yes — via cookie settings |
You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect overall platform functionality.
9 Cross-Border Data Transfers
As part of global digital platform operations, your data may be processed or stored on servers located outside Malaysia. When this occurs, ekplus8 ensures that protection equivalent to Malaysian standards is upheld through the following measures:
- Use of approved standard contractual clauses for international data transfers.
- Selection of technical partners who comply with internationally recognised data protection standards.
- Data protection impact assessment prior to any new cross-border data transfer.
- Ongoing monitoring of partners' compliance with their data protection obligations.
By using the ekplus8 platform, you acknowledge and agree that your data may be transferred outside Malaysia under the circumstances described above, with adequate protections in place.
10 Children's Privacy
The ekplus8 platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals below this age.
If we find that we have collected data from an individual who does not meet the age requirement, we will take immediate steps to:
- Close and terminate the relevant account.
- Delete all personal data associated with the account.
- Return any valid balance to the original deposit method.
If you have reason to believe that a minor has registered on our platform, please contact our support team immediately.
11 Links to Third-Party Platforms
The ekplus8 platform may contain links or references to third-party services, such as payment providers or gaming software suppliers. This Privacy Policy applies to the ekplus8 platform only.
Ekplus8 is not responsible for the privacy practices or content of any third-party websites or services you access through our platform. We recommend reading the privacy policy of each third-party platform you use separately before providing them with any personal information.
12 Amendments to This Privacy Policy
Ekplus8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Any material amendments will be communicated to you via:
- In-platform notifications upon login.
- A notification email to the address registered to your account.
- Update the "Last Updated" date at the top of this page.
Continued use of the ekplus8 platform after the effective date of any amendment constitutes acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account and contact us for assistance with that process.
Current Version: This Privacy Policy takes effect from January 2026. Previous versions are available upon request from our support team for reference.
13 Contact Us Regarding Privacy
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist:
- Live Chat: Available 24 hours a day, 7 days a week via the ekplus8 platform.
- Email: [email protected]
- Response Time: Privacy-related inquiries will be responded to within 3 business days.
For more formal complaints relating to data protection, you also have the right to refer to the Personal Data Protection Commissioner of Malaysia if you believe your rights under the PDPA have been violated.