Privacy Policy — EKL88

This Privacy Policy (hereinafter referred to as the "Policy") sets out the manner in which EKL88 (hereinafter referred to as "the Company", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals (hereinafter referred to as "Players", "you", or "your") who access or use the ekl88 platform accessible at ekl88.cam.

EKL88 is committed to protecting the privacy and personal data of all Players in a manner consistent with applicable data protection legislation and recognised best practices in the online gaming and financial services industries. We recognise that Malaysian players entrust us with sensitive personal and financial information when they register and transact on the ekl88 platform, and we take that responsibility seriously.

By registering an account on the ekl88 platform, making a deposit via any of our supported Malaysian payment channels — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong — or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the ekl88 platform overall. In the event of any conflict between this Policy and the Terms & Conditions in relation to data privacy matters, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms shall bear the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction, whether by automated or manual means.
• "Data Controller" means EKL88, which determines the purposes and means of processing Personal Data collected through the ekl88 platform.
• "Data Processor" means any third party that processes Personal Data on behalf of EKL88 pursuant to documented instructions from the Company.
• "Sensitive Personal Data" means Personal Data that reveals racial or ethnic origin, political opinions, religious beliefs, health data, financial account details, or biometric data.
• "Cookie" means a small data file placed on a Player's device by a web server, used to store session information, preferences, and analytics data.
• "KYC" means the Know Your Customer identity verification process required by the Company as part of its anti-money laundering and fraud prevention obligations.

EKL88 collects Personal Data only to the extent necessary for the lawful operation of the platform, the provision of gambling services, regulatory compliance, and the improvement of the Player experience. The categories of Personal Data we collect include:

EKL88 does not collect Sensitive Personal Data such as health information, racial or ethnic origin, religious beliefs, or biometric data except where strictly required by applicable law or regulation, or where you have provided explicit consent.

EKL88 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to promotional communications.
• Automated Collection: Technical and usage data collected automatically when you access the ekl88 platform, including IP addresses, device identifiers, browser fingerprints, and session activity logs.
• Payment Processors: Transaction confirmation data received from Malaysian payment intermediaries including DuitNow, FPX, and integrated banking partners (Maybank, CIMB, Public Bank, Hong Leong) and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay).
• Identity Verification Providers: Confirmation data from third-party KYC and age-verification service providers used to validate the identity and age (21+) of registered Players.
• Cookies and Tracking Technologies: Data collected via cookies, pixel tags, and similar technologies as described in Section 8 of this Policy.
• Fraud Prevention Services: Risk signals and device reputation data shared by third-party fraud prevention partners to protect the platform and its Players.

EKL88 processes your Personal Data for the following specific purposes:

• Account Management: To create, maintain, and administer your registered ekl88 account, including storing your profile, preferences, and balance history.
• Identity and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with our KYC obligations. Players from Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya, and all other Malaysian cities are subject to the same verification standards.
• Payment Processing: To process deposits and withdrawals in MYR through your selected payment method and to maintain an accurate transaction history.
• Fraud Prevention and Anti-Money Laundering: To detect, investigate, and prevent fraudulent transactions, money laundering, and other financial crimes in compliance with applicable regulations.
• Responsible Gambling: To monitor your gaming activity for signs of problem gambling behaviour and to apply any deposit limits, session restrictions, or self-exclusion measures you have requested.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent, and to manage your marketing preferences.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required under financial crime prevention obligations.
• Platform Improvement: To analyse usage patterns, optimise game performance, and improve the overall Player experience on the ekl88 platform.

EKL88 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the contract established by the Terms & Conditions — including account creation, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable anti-money laundering laws, financial crime prevention regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing necessary for EKL88's legitimate business interests, including fraud prevention, platform security, and responsible gambling monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, including for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

EKL88 does not sell, rent, or otherwise commercially exploit your Personal Data. We may disclose your Personal Data to the following categories of recipients only where necessary and in accordance with this Policy:

• Payment Processors: Malaysian payment intermediaries and banking partners (including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay) to facilitate your deposits and withdrawals in MYR.
• KYC and Identity Verification Providers: Third-party identity verification services engaged to confirm your identity and age in compliance with our regulatory obligations.
• Fraud Prevention and Compliance Partners: Third-party providers of anti-fraud, anti-money laundering, and risk scoring services used to protect the platform and its Players.
• Game Providers: Certified third-party game providers whose software powers certain live casino, slot, and sports betting markets on the ekl88 platform, to the extent required for service delivery.
• Regulatory and Law Enforcement Authorities: Competent regulatory bodies and law enforcement agencies where EKL88 is required or permitted by applicable law to disclose Personal Data, including in response to lawful requests, court orders, or regulatory investigations.
• Professional Advisers: Legal, accounting, and auditing professionals engaged by EKL88 in the normal course of business operations, subject to binding confidentiality obligations.

The ekl88 platform uses cookies and similar tracking technologies to support platform functionality, enhance the Player experience, and gather analytical data. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session authentication, security tokens, and maintaining your login state. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as language selection and notification preferences, to improve your experience across sessions.
• Analytics Cookies: Used to collect aggregate, anonymised data about how Players interact with the ekl88 platform, including page visits, session duration, and navigation paths. This data is used solely to improve platform performance and User experience.
• Marketing Cookies: Used where you have provided consent to deliver relevant promotional communications and to measure the effectiveness of our marketing activities. You may withdraw this consent at any time by updating your account preferences.

You may manage your cookie preferences through your browser settings. However, disabling certain categories of cookies — particularly strictly necessary cookies — may affect the functionality of the ekl88 platform and your ability to access certain features.

EKL88 retains your Personal Data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following principles:

• Active Accounts: Personal Data is retained for the duration of your registered account and for a minimum period following account closure as required by applicable anti-money laundering and financial crime prevention legislation.
• Transaction Records: Financial transaction records, including deposits and withdrawals in MYR, are retained for a minimum of five (5) years following the date of the transaction, as required by standard financial record-keeping obligations.
• KYC Documentation: Identity verification documents submitted as part of the KYC process are retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer Support Records: Communications and support ticket records are retained for a minimum of two (2) years from the date of the last interaction, or longer where required for dispute resolution or legal proceedings.
• Marketing Data: Data held on the basis of your consent for marketing purposes is retained until you withdraw consent or for a maximum of three (3) years of inactivity, whichever occurs first.

Upon the expiry of the relevant retention period, Personal Data will be securely deleted or anonymised in a manner that prevents reconstruction. Players may request early deletion of their Personal Data subject to the limitations described in Section 11 of this Policy.

EKL88 implements a range of technical and organisational security measures proportionate to the risks associated with the processing of Personal Data on an online gaming platform. These measures include, but are not limited to:

• Encryption: All data transmitted between your device and the ekl88 platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative systems.
• Intrusion Detection: Continuous monitoring for unauthorised access attempts, anomalous activity, and security threats across all platform infrastructure components.
• Third-Party Security Assessments: Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Incident Response: A documented data breach response procedure to identify, contain, and report security incidents in a timely manner in accordance with applicable notification obligations.

Notwithstanding the foregoing, no security measure is entirely infallible. EKL88 does not guarantee the absolute security of your Personal Data and accepts no liability for security breaches attributable to causes beyond our reasonable control. Players are strongly encouraged to maintain strong, unique passwords and to enable two-factor authentication on their ekl88 account.

Subject to applicable law and the terms of this Policy, registered Players have the following rights in respect of their Personal Data held by EKL88:

To exercise any of the above rights, please contact EKL88 via live chat or at [email protected]. We will respond to all verified requests within a reasonable timeframe, and in any event within 30 calendar days. We may request proof of identity before processing certain requests to ensure the security of your Personal Data.

The ekl88 platform is strictly intended for individuals aged 21 years and above. EKL88 does not knowingly collect, process, or store Personal Data relating to individuals under the age of 21, and does not permit such individuals to register or maintain an account.

All Players are required to confirm their age at registration and to submit valid identity documentation as part of the KYC process prior to making any withdrawal. In the event that EKL88 discovers that Personal Data has been collected from an individual under the age of 21, we will immediately deactivate the relevant account, delete the associated Personal Data, and reverse any financial transactions where legally permissible.

If you are a parent or guardian and believe your minor child has registered an account on the ekl88 platform, please contact our support team immediately at [email protected] so that we may take appropriate action without delay.

The ekl88 platform may reference or integrate third-party services — including payment processors, game providers, and identity verification tools — whose own privacy practices may differ from those described in this Policy. EKL88 is not responsible for the privacy practices of these third parties and encourages Players to review the relevant privacy notices of any third-party service they interact with.

EKL88 does not control the data practices of third-party payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong. Players are advised to review those providers' own privacy policies in relation to data shared with them during payment processing.

EKL88 reserves the right to amend, update, or replace this Privacy Policy at any time. All material changes will be published on this page with an updated "Last Updated" date. Where changes are significant, we may notify registered Players via email or an in-platform notification.

Your continued use of the ekl88 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes and, where applicable, your consent to the updated data processing practices. If you do not accept the revised Policy, you should cease using the platform and contact us to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which EKL88 processes your Personal Data, please contact us through any of the following channels:

All data-related requests — including requests to access, correct, delete, or restrict processing of your Personal Data — should be submitted in writing with sufficient information to verify your identity. We will acknowledge receipt of all requests and endeavour to respond within 30 calendar days.

Our support team is staffed with representatives experienced in Malaysian player queries, including those relating to transactions in MYR, local payment methods, and account data management. We are committed to handling all privacy-related matters with the highest level of professionalism and care.