Privacy Policy

This Privacy Policy ("Policy") is issued by epwin7 ("Company", "We", "Us", "Our"), the operator of the online gaming platform accessible at epwin7.cam ("Platform", "Website"). This Policy applies to all individuals who access, register with, or otherwise interact with the Platform, including players based in Malaysia and internationally.

epwin7 is committed to processing personal data responsibly, transparently, and in accordance with applicable data protection standards. We recognise that the trust our players — from Kuala Lumpur to Johor Bahru, Penang, Petaling Jaya, and Shah Alam — place in us depends in part on our commitment to handling their information with integrity.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between epwin7 and its users. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, whether directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means epwin7, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party engaged by epwin7 to process Personal Data on its behalf, such as payment processors and KYC verification providers.
• "User" / "You" means any individual who accesses or registers on the Platform.
• "KYC" means Know Your Customer procedures, including identity, age, and source-of-funds verification.
• "Cookies" means small text files placed on your device by the Platform to enhance functionality and collect usage data.
• "MYR" / "RM" means Malaysian Ringgit, the primary transaction currency used on the Platform for Malaysian users.

epwin7 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

Identity & Contact Data

Financial & Transaction Data

Technical & Usage Data

Communications Data

epwin7 collects Personal Data through the following means:

• Direct Provision: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or corresponding with our team by email or live chat.
• Automated Technical Collection: Data collected automatically as you interact with the Platform, including IP address, device identifiers, session data, and cookie-based tracking (see Section 10 for details).
• Third-Party Sources: Data received from identity verification providers, payment processors (including Malaysian payment networks such as FPX and DuitNow), fraud prevention services, and publicly available databases used for KYC and AML compliance purposes.
• Inferred Data: Insights derived from your activity on the Platform, such as game preferences, deposit patterns, and responsiveness to promotional communications, used for personalisation and responsible gambling monitoring purposes.

epwin7 processes your Personal Data for the following purposes:

epwin7 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and epwin7 — including account registration, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and age verification obligations.
• Legitimate Interests: Processing carried out for epwin7's legitimate business interests, including fraud prevention, platform security, and responsible gambling monitoring, where such interests are not overridden by your rights.
• Consent: Processing based on your explicit, freely given consent, particularly in relation to marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

epwin7 does not sell, rent, or trade your Personal Data to third parties for their own commercial or marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Malaysian and international payment processors (including operators of DuitNow, FPX, Touch 'n Go eWallet infrastructure, Boost, GrabPay, and card networks) to facilitate your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and age, and to screen against sanctions lists and politically exposed person (PEP) databases.
• Game Content Providers: Licensed game studios whose content is hosted on the Platform may receive anonymised player session data for the purpose of game performance analytics and RNG certification audits.
• Cloud & Infrastructure Providers: Hosting, storage, and IT service providers engaged to operate and maintain the Platform's technical infrastructure, subject to strict contractual data processing obligations.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory instruction, epwin7 may disclose your data to competent government authorities, licensing bodies, or law enforcement agencies.
• Professional Advisors: Lawyers, auditors, and compliance consultants engaged by epwin7 on a confidential basis where necessary for the conduct of our business.

epwin7 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Active Accounts: Personal Data associated with an active account is retained for the duration of your relationship with epwin7.
• Closed Accounts: Following account closure, epwin7 retains identity and transaction records for a minimum of five (5) years from the date of closure, in compliance with AML and regulatory record-keeping obligations.
• Marketing Data: Marketing preference records and communication histories are retained for two (2) years from your last interaction or until you opt out, whichever is earlier.
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security and fraud prevention purposes.
• Legal Proceedings: Where data is relevant to any pending or anticipated legal proceedings, dispute resolution, or regulatory inquiry, epwin7 may retain it for longer than the standard periods described above until such matters are fully resolved.

Following the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

epwin7 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for Personal Data stored in our database systems;
• Two-factor authentication (2FA) available for all player accounts;
• Role-based access controls limiting internal access to Personal Data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments carried out by independent security specialists;
• Intrusion detection systems and real-time security monitoring;
• Staff training on data protection obligations and secure data handling practices.

epwin7 uses cookies and similar tracking technologies to operate the Platform effectively, understand how users interact with our services, and deliver a more personalised experience.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of some parts of the Platform.

Subject to applicable law, you have the following rights in relation to your Personal Data held by epwin7. To exercise any of these rights, please contact our support team using the details in Section 15.

epwin7 will respond to data rights requests within 30 days of receipt. Where requests are complex or numerous, this period may be extended by a further 30 days, and you will be notified accordingly.

The epwin7 Platform is strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under this age. Age verification is a mandatory component of our KYC process, and accounts found to have been registered by individuals under 21 years of age will be closed immediately.

If you have reason to believe that a minor has registered on the Platform or provided Personal Data without parental consent, please contact us immediately at the details set out in Section 15. Any data confirmed to have been collected from a minor will be deleted without delay.

As an international gaming platform serving players from Malaysia and across the world, epwin7 may transfer Personal Data to, and process it in, countries outside your country of residence. These transfers may occur in connection with our data hosting infrastructure, third-party service providers, or affiliated entities.

Where Personal Data is transferred internationally, epwin7 ensures that appropriate safeguards are in place to protect the data to a standard consistent with this Policy. These safeguards may include contractual clauses, approved data transfer mechanisms, or transfers to jurisdictions that maintain adequacy determinations in relation to data protection standards.

For Malaysian users, please note that while Malaysian law currently governs a number of data protection matters, our international operations mean that your data may also be subject to the data protection frameworks of other jurisdictions in which our service providers are located.

epwin7 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Material changes will be communicated to registered users via the Platform or by email to your registered address, with at least seven (7) days' notice prior to the amended Policy taking effect.

The date of the most recent update is indicated at the top of this Policy. We encourage you to review this page periodically. Your continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to submit a data-related complaint, please contact our Data Protection team through the following channels. We operate 24 hours a day, 7 days a week.