EP369 is an online gaming platform operating under a valid international licence, fully committed to protecting the personal data of all its users. We understand how important privacy is to you, and we take this responsibility very seriously.
This Privacy Policy applies to all users who access or use the website ep369.win, including the EP369 mobile app, customer support systems, and all our official communication channels. This document clearly explains the types of data we collect, why we need it, and the protective measures we take to ensure your data remains secure at all times.
EP369 acts as the data controller (data controller) for all personal data collected from users of our platform. This means we are fully accountable for how your data is processed and protected in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.
EP369 only collects personal data that is genuinely necessary to provide our services safely and efficiently. The following are the categories of data we collect:
| Data Category | Information Types | Mandatory / Optional |
|---|---|---|
| Personal Identity | Full name, date of birth, identity card or passport number, nationality | Mandatory |
| Contact Information | Email address, mobile phone number, residential address | Mandatory |
| Financial Information | Bank account number, bank name, card details, deposit and withdrawal transaction records | Mandatory |
| KYC Verification Data | Copy of ID, verification selfie, proof of address (utility bill) | Mandatory (first withdrawal) |
| Technical Data | IP address, device type, operating system, web browser, login session data | Automatic |
| Gaming Data | Betting history, wins, losses, games played, session duration | Automatic |
| Communications | Customer support chat logs, emails, and submitted complaints | Where applicable |
| User Preferences | Language settings, bonus preferences, self-set game limits | Options |
EP369 never collect sensitive data such as medical information, religious beliefs, biometric data, or political information unless required by applicable law.
Your personal data is collected through several different channels as you interact with the EP369 platform. We always ensure this data collection process takes place transparently and with your knowledge.
- Account Registration: When you register a new account at EP369, you will be asked to provide basic personal information such as your name, email, phone number, and date of birth.
- KYC (Know Your Customer) Process: To comply with anti-money laundering (AML) legal requirements, we collect identity verification documents when you request your first withdrawal or exceed certain transaction limits.
- Financial Transactions: Every time you make a deposit or withdrawal via FPX, Touch 'n Go eWallet, GrabPay, or credit and debit cards, we record the transaction details required for secure processing.
- Gaming Activity: Our system automatically records your game history, betting activity, and sessions for account management, dispute resolution, and responsible gaming promotion purposes.
- Cookies and Tracking Technologies: The ep369 website uses cookies and similar tracking technologies to enhance the user experience, analyse web traffic, and deliver relevant content.
- Customer Support Interactions: All communications with the ep369 support team via live chat, email, or other channels are recorded for quality assurance and issue resolution purposes.
- Authorised Third Parties: In certain cases, we may receive your information from payment providers, third-party identity verification bodies, or registered fraud prevention agencies.
EP369 uses your personal data solely for legitimate and necessary purposes. We do not use your data for any purpose other than those stated below without first obtaining your consent.
- Identity verification and account registration
- Deposit and withdrawal processing
- KYC compliance and AML requirements
- Customer support delivery
- Account management and user profile
- Game dispute resolution
- Fraud detection and prevention
- Anti-money laundering prevention
- Legal requirements compliance
- Platform security and integrity
- Responsible Gaming Programme
- Reporting to relevant authorities
We also use your non-personally identifiable data (aggregated and anonymised) to analyse platform usage patterns, improve our services, and develop better new features for the Malaysia player experience.
Should ep369 wish to use your personal data for any direct marketing purposes unrelated to existing services, we will obtain your explicit consent beforehand. You are free to withdraw this consent at any time through your account settings.
EP369 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in the course of operating our platform, we may share your data with the following categories of third parties:
- Payment Service Providers: Required transaction data is shared with payment providers such as FPX, Touch 'n Go, and card processors to securely process your deposits and withdrawals.
- Identity Verification Service Providers: To conduct KYC verification, we work with registered and regulated third-party identity verification service providers.
- Technology and Analytics Providers: We use third-party services for platform analytics, security testing, and technical infrastructure. All such providers are bound by strict confidentiality agreements.
- Lawful Authorities: EP369 will disclose required information to regulatory bodies, law enforcement agencies, or courts when mandated by Malaysian law or a valid court order.
- Group Companies: Data may be shared within the EP369 group of companies for operational, technical support, and internal compliance purposes related to the services you use.
The security of your personal data is the absolute priority of ep369. We continuously invest in the latest cybersecurity infrastructure to ensure your data is always protected against unauthorised access, disclosure, alteration, or destruction.
The technical and organisational security measures we implement include:
256-bit SSL Encryption
All data transmitted between your device and ep369's servers is encrypted using TLS 1.3 protocol with AES-256 encryption. No sensitive data is transmitted in plain text.
Two-Factor Authentication (2FA)
EP369 supports and encourages the use of two-factor authentication for all accounts. The 2FA feature adds an extra layer of protection beyond a standard password.
Financial Data Segregation
Player funds are held in accounts completely segregated from EP369's operational accounts, ensuring your money remains safe even in the event of unforeseen financial disruptions.
24/7 Continuous Monitoring
Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
Internal Access Controls
Access to users' personal data within EP369 is strictly limited to personnel who genuinely require it to carry out their official duties.
Data Backup and Recovery
Your data is automatically backed up to geographically separate data centres to ensure full availability and recovery in the event of a system failure.
In the event of a data breach affecting your rights and freedoms, ep369 will notify the relevant authorities and you personally within the timeframe stipulated by applicable law.
EP369 uses cookies and similar tracking technologies to enhance platform functionality, analyse website performance, and deliver a more personalised user experience. The following are the types of cookies we use:
| Cookie Types | Function | Duration |
|---|---|---|
| Essential Cookies | Required for core platform functions such as login, gaming sessions, and security. Cannot be disabled. | Session / 30 days |
| Performance Cookies | Collects data on how users interact with the platform to help us improve website performance and functionality. | Up to 1 year |
| Functional Cookies | Stores your preferences such as language, display settings, and region for a more personalised experience. | Up to 1 year |
| Analytics Cookies | Helps us understand traffic patterns, most visited pages, and user behaviour on an aggregated and anonymised basis. | Up to 2 years |
You can manage cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the EP369 platform. Guides for managing cookies on popular browsers are available in our platform's support section.
Under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have certain rights regarding the personal data we hold about you. EP369 fully respects these rights and provides straightforward mechanisms for you to exercise them.
Right of Access
You have the right to know what personal data we hold about you and to receive a copy of it within 21 working days from the date of your request.
Right to Rectification
If your personal data is inaccurate or outdated, you have the right to request a correction through your account settings page or our support team.
Right to Withdraw Consent
You may withdraw consent for certain data processing at any time, including for marketing communications, without affecting the provision of core services.
Right to Restriction
In certain circumstances, you have the right to request that EP369 restrict the processing of your personal data while a complaint or request is being resolved.
Right to Lodge a Complaint
If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department.
Right to Data Portability
You may request your personal data in a machine-readable format for transfer to another service provider, subject to technical compatibility.
To exercise any of the above rights, please contact the ep369 support team via in-platform live chat or our official email. All requests will be processed within 21 business days. In complex cases, this period may be extended up to 60 days with appropriate notice to you.
EP369 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. We do not retain your personal data for longer than necessary.
- Active Account Data: While your account remains active, we retain all relevant data to ensure continuous and secure service for you.
- Data After Account Closure: After account closure, financial transaction records and KYC data are retained for a minimum of 7 years in accordance with Malaysia's AML legal requirements.
- Communication Records: Support chat logs and emails are retained for 2 years after the last interaction for quality assurance and potential dispute resolution purposes.
- Secure Data Disposal: Once the retention period expires, your personal data is securely deleted using digital erasure methods that comply with international security standards.
EP369 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological improvements. Any material amendments will be communicated to you via in-platform notifications or your registered email at least 7 days before the changes take effect.
The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.
Your continued use of the ep369 platform following any amendments to this Privacy Policy shall constitute your acceptance of those amendments. If you do not agree with any amendments, you have the right to close your account before the amendments take effect.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ep369, our Data Protection Officer team is ready to assist you.
For formal written requests regarding your data protection rights, please include your full name, ep369 account number, and details of your request. We will verify your identity before processing any personal data request to protect your account security.
Why Your Privacy Is Safe with ep369
Military-Grade Encryption
All your personal and financial data is protected with 256-bit AES SSL encryption — the same standard used by leading financial institutions worldwide — ensuring no third party can read your information.
Fast & Secure KYC
The ep369 KYC verification process is designed to be fast, straightforward, and secure. Your documents are encrypted immediately upon upload and accessed only by authorised personnel.
Safe & Fast Payments
EP369 supports a variety of local Malaysian payment methods including FPX, Touch 'n Go eWallet, GrabPay, and credit/debit cards with full encryption throughout every transaction.
No Data Selling
EP369 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data belongs solely to you.
Malaysia PDPA Compliance
EP369's privacy policy and data processing practices are fully drafted in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia, providing you with robust legal protection.
24/7 Privacy Support
The ep369 support team is ready to assist you with any privacy or personal data enquiries at any time via live chat within our platform, available around the clock.