1Introduction
This Privacy Policy ("Policy") is issued by the operator of the ep369 online gaming platform, accessible at ep369.cam ("Platform", "ep369", "we", "us", "our"). It describes how ep369 collects, uses, stores, shares, and protects the personal data of individuals ("User", "Player", "you", "your") who access or use the Platform.
ep369 is committed to handling personal data with integrity, transparency, and in accordance with applicable data protection principles. This Policy applies to all personal data processed in connection with your use of the ep369 Platform, including data collected during account registration, identity verification, financial transactions, customer support interactions, and Platform browsing activity.
By registering an account on ep369, depositing funds, placing wagers, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that your personal data will be processed as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact our support team to arrange account closure and data handling.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference and available on the ep369 website.
2Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, location data, and online identifiers. |
| "Processing" | Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, the operator of the ep369 Platform. |
| "Data Processor" | A natural or legal person that processes personal data on behalf of the Data Controller, such as payment service providers, KYC verification vendors, and cloud hosting providers. |
| "KYC" | Know Your Customer verification — the process of verifying a User's identity, age, and source of funds as required by applicable regulatory and compliance obligations. |
| "Cookies" | Small text files stored on a User's device by the Platform's web server, used to maintain sessions, remember preferences, and collect usage analytics. |
| "Sensitive Data" | A special category of personal data that warrants heightened protection, including but not limited to financial account details, government-issued identification numbers, and data relating to gambling behaviour patterns. |
3Data We Collect
ep369 collects personal data only to the extent necessary to provide, maintain, and improve the Platform and to fulfil applicable legal and regulatory obligations. The categories of personal data we collect are set out below.
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued identification number (e.g., MyKad number or passport number), and photograph where required for KYC verification. |
| Contact Data | Email address, mobile telephone number, and residential address (including city references such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam). |
| Financial Data | Payment method details (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB account references), transaction history, deposit and withdrawal amounts in MYR, and source of funds declarations where required. |
| Account & Usage Data | Account username, login timestamps, session duration, game history, betting activity, wagering patterns, bonus usage records, and VIP tier status. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, and referring URL. |
| Communications Data | Records of correspondence with ep369's customer support team via live chat, email, and any other channel used to contact us. |
| Compliance Data | Records generated in connection with anti-money laundering (AML) checks, responsible gambling assessments, self-exclusion requests, and deposit limit settings. |
ep369 does not intentionally collect or process personal data of individuals under the age of 21. If we become aware that personal data belonging to a minor has been collected, we will take immediate steps to delete that data and close the associated account.
4How We Use Your Data
ep369 processes personal data for the following specific and lawful purposes:
- Account Management: To create, maintain, verify, and administer your ep369 account, including processing registration information and managing account preferences.
- Transaction Processing: To process deposits and withdrawals in MYR via your selected payment method, including Touch 'n Go eWallet, DuitNow, FPX, and direct bank transfers to Malaysian financial institutions.
- Identity Verification (KYC): To verify your identity, age, and place of residence as required by applicable compliance and regulatory obligations, including anti-money laundering (AML) screening.
- Platform Delivery: To provide access to all gaming products, sportsbook markets (including Liga Super Malaysia, EPL, UFC, and other live events), live dealer tables, and ancillary Platform features.
- Responsible Gambling Compliance: To monitor gameplay patterns for indicators of problem gambling, administer responsible gambling tools (deposit limits, self-exclusion, session reminders), and fulfil our duty of care obligations to Players.
- Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance submitted by Users across Malaysia.
- Security and Fraud Prevention: To detect, prevent, and investigate suspicious account activity, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
- Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.
- Marketing Communications (with consent): To send promotional offers, VIP programme updates, and Platform announcements to Users who have opted in or who have not objected to receiving such communications.
- Platform Analytics and Improvement: To analyse Platform usage patterns in aggregate and make data-driven improvements to the user experience, game library, and payment infrastructure.
ep369 will not use your personal data for any purpose that is incompatible with the purposes listed in this Section without first providing you with notice and, where required, obtaining your consent.
5Legal Basis for Data Processing
ep369 processes personal data on the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to perform our obligations under the agreement established with you upon account registration — including account administration, transaction processing, and Platform access.
- Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, AML compliance, responsible gambling obligations, and record-keeping duties.
- Legitimate Interests: Processing carried out in pursuit of ep369's legitimate business interests where such interests are not overridden by your fundamental rights and freedoms — including fraud prevention, Platform security, analytics, and customer support delivery.
- Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — principally in respect of direct marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6Data Sharing & Disclosure
ep369 does not sell, rent, or trade personal data to third parties. We may share personal data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate contractual safeguards:
- Payment Service Providers: Malaysian payment partners including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong, RHB) — solely for the purpose of processing your deposits and withdrawals in MYR.
- KYC and Identity Verification Vendors: Third-party service providers engaged to perform identity verification, document authentication, and AML screening on behalf of ep369.
- Technology and Hosting Providers: Cloud infrastructure and software providers used to host the Platform, store data securely, and deliver gaming content.
- Game Content Providers: Providers of slot, live dealer, and sports betting software whose products are available on the Platform. Data shared is limited to what is technically necessary for game delivery and integrity monitoring.
- Legal and Regulatory Authorities: Relevant authorities, law enforcement agencies, or courts where ep369 is under a legal obligation or court order to disclose personal data, or where disclosure is necessary to protect the rights, property, or safety of ep369, its Players, or others.
- Fraud Prevention Services: Third-party services used to detect and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform.
All third-party Data Processors engaged by ep369 are required to process personal data only in accordance with ep369's documented instructions and to implement appropriate technical and organisational security measures.
7Data Retention
ep369 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal or regulatory minimum retention requirements. The following general retention principles apply:
- Active Account Data: Personal data associated with an active ep369 account is retained for the duration of the account's existence plus any mandatory post-closure retention period required by law.
- Transaction and Financial Records: Records of financial transactions, including deposit and withdrawal histories in MYR, are retained for a minimum of seven (7) years following the transaction date in accordance with applicable financial record-keeping requirements.
- KYC and Compliance Records: Identity verification documents and AML compliance records are retained for a minimum of five (5) years following account closure, or longer where required by a regulatory body or court order.
- Customer Support Records: Records of communications with our support team are retained for a period of three (3) years following the resolution of the relevant enquiry.
- Marketing Consent Records: Records of consent to receive marketing communications are retained for the duration of the consent and for three (3) years following its withdrawal, to demonstrate compliance.
- Technical and Usage Data: Aggregated, anonymised usage analytics data may be retained indefinitely for Platform improvement purposes. Individually identifiable technical data is deleted within twelve (12) months of collection.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
8Your Rights
As a data subject, you are entitled to exercise the following rights in relation to the personal data held about you by ep369. To exercise any of these rights, please contact our support team as described in Section 14 of this Policy.
Right of Access
You may request a copy of the personal data ep369 holds about you, including information on how it is being processed.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data held about you without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to legal retention obligations.
Right to Restrict Processing
You may request restriction of processing in certain circumstances, such as where you contest the accuracy of the data or object to its use.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your data.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes, including profiling related to direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Rights re: Automated Decisions
You may request human review of any decision made solely by automated processing that significantly affects you, and request an explanation of the logic involved.
ep369 will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.
To protect your privacy and prevent unauthorised data access, ep369 will require you to verify your identity before processing any data rights request. This typically involves confirming account-specific information or providing a copy of your identity document.
9Cookies & Tracking Technologies
The ep369 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session integrity, and collect anonymised usage analytics. The following categories of cookies are used on ep369.cam:
| Cookie Type | Required | Purpose |
|---|---|---|
| Strictly Necessary | Yes | Essential for Platform operation — session authentication, security tokens, load balancing, and maintaining your logged-in state. Cannot be disabled without impairing Platform functionality. |
| Functional | Yes | Remembers your preferences such as language settings, preferred game lobby view, and responsible gambling tool configurations. |
| Analytics | Optional | Anonymised data on page visits, session duration, and navigation patterns — used to improve Platform performance and usability. No personally identifiable information is collected through analytics cookies. |
| Marketing | Optional | Used to deliver relevant promotional content to you based on your Platform interaction. Activated only where you have consented to receive personalised marketing from ep369. |
You may manage or disable optional cookies at any time through your browser's settings menu. Please note that disabling functional cookies may affect certain Platform features. Instructions for managing cookies are available in your browser's help documentation.
10Security Measures
ep369 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the ep369 Platform;
- Encryption of sensitive personal data (including payment information) at rest using industry-standard encryption protocols;
- Role-based access controls limiting employee access to personal data to only that which is necessary for their specific functions;
- Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
- Multi-factor authentication (MFA) requirements for all internal staff accessing systems containing personal data;
- Comprehensive audit logging of all access to and modifications of personal data;
- Staff training and awareness programmes covering data protection obligations and security best practices;
- Data breach detection systems and a documented incident response procedure.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ep369 will notify you without undue delay and provide full details of the nature of the breach, its likely consequences, and the measures taken to address it.
11Third-Party Links & Services
The ep369 Platform may contain links to third-party websites or services — for example, in connection with payment processing redirects or responsible gambling support resources. ep369 does not control the privacy practices of third-party websites and is not responsible for their content or privacy policies.
When you access a third-party website via the Platform, you do so at your own risk and any personal data you provide to that third party is subject to their own privacy policy, not this one. ep369 encourages you to review the privacy policies of any third-party service you interact with.
12Children & Minors
The ep369 Platform is strictly intended for individuals aged 21 years and above. ep369 does not knowingly collect, solicit, or process personal data from any person under the age of 21. Registration by individuals under 21 is expressly prohibited under our Terms & Conditions.
If ep369 becomes aware or has reasonable grounds to suspect that personal data belonging to a person under the age of 21 has been collected, we will take immediate action to: (i) suspend the associated account; (ii) conduct an identity verification review; and (iii) delete the relevant personal data unless retention is required by applicable law.
If you believe that ep369 may have inadvertently collected personal data belonging to a minor, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
13Amendments to This Policy
ep369 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The effective date displayed at the top of this Policy will be updated each time a revision is made.
Where amendments are material — meaning they significantly alter how we collect, use, or share your personal data — ep369 will provide advance notice via email to your registered account address and/or via a prominent notification on the Platform prior to the amended Policy taking effect. Non-material updates (such as typographical corrections or clarifications that do not change the substance of the Policy) may be made without prior notification.
Your continued use of the ep369 Platform following the effective date of any amendment to this Policy constitutes your acknowledgment of the updated terms. We recommend reviewing this Policy periodically to stay informed of how your personal data is protected.
14Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ep369, please contact our dedicated support team using the details below. All privacy-related enquiries are handled with priority and in strict confidence.
- Email: [email protected] — plain text only, not a clickable link
- Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on ep369.cam — the fastest route for urgent data rights requests.
ep369 serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations. All privacy requests received in writing will be acknowledged within two (2) business days and substantively responded to within thirty (30) calendar days of verified receipt, in accordance with applicable data protection obligations.
For data rights requests such as access, rectification, or erasure, please contact us via live chat or email and clearly state the nature of your request. We may need to verify your identity before fulfilling the request to protect your personal data from unauthorised disclosure.