efc88 Privacy Policy for Malaysian Users

1 Introduction

This Privacy Policy applies to personal data processed by efc88 when a user visits the website, creates or manages an account, contacts customer support, completes identity verification, deposits or withdraws funds, participates in a promotion, or uses casino and sports betting services. It should be read together with the efc88 Terms & Conditions.

efc88 recognises that privacy is especially important where identity documents, financial records, betting activity, and account-security information are involved. We therefore seek to process personal data fairly, transparently, and only for legitimate purposes connected with operating and safeguarding the efc88 platform.

2 Definitions

In this Privacy Policy, the following expressions have the meanings set out below:

• “Account” means the personal user profile registered on efc88.
• “Personal Data” means information relating to an identified or reasonably identifiable individual.
• “Processing” includes collecting, recording, organising, storing, using, sharing, updating, restricting, and deleting Personal Data.
• “KYC” means the Know Your Customer process used to verify identity, age, payment ownership, and account eligibility.
• “Services” means the website, account tools, casino games, sports markets, promotions, payments, and support functions offered through efc88.
• “Service Provider” means an organisation engaged to perform services for efc88, such as identity verification, payment processing, hosting, fraud prevention, or technical support.

3 Information We Collect

The categories of Personal Data collected by efc88 depend on how you interact with the Services. Information may include:

• Identity information: full legal name, date of birth, nationality, gender where relevant, and identification details from a MyKad, passport, or other accepted document;
• Contact information: email address, Malaysian mobile number, residential address, and communication preferences;
• Account information: username, encrypted password data, security settings, account status, login history, and responsible gambling settings;
• Financial information: payment method type, masked account or card details, bank name, transaction references, deposit history, withdrawal history, and source-of-funds information where required;
• Gaming information: bets, stakes, winnings, losses, bonus activity, wagering progress, game selections, and sports markets viewed or used;
• Technical information: IP address, browser type, operating system, device identifiers, language settings, approximate location, session times, and diagnostic records;
• Communications: live chat transcripts, support emails, complaint records, verification correspondence, and feedback submitted to efc88.

efc88 does not request more information than is reasonably necessary for the relevant purpose. Additional records may be requested where required to investigate fraud, confirm payment ownership, handle a dispute, or comply with an applicable legal obligation.

4 How Information Is Collected

efc88 collects Personal Data directly when you register, update your profile, communicate with support, upload verification documents, select a payment method, claim a promotion, or place a wager. Data is also generated automatically when the platform records account activity, security events, device information, and transaction history.

Certain information may be received from payment processors, KYC providers, fraud-prevention partners, banks, e-wallet providers, and game suppliers. For example, efc88 may receive transaction confirmation from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, or Public Bank without receiving every financial detail held by that provider.

Where another person provides information concerning you, efc88 may take reasonable steps to verify its accuracy and the authority under which it was provided.

5 Purposes of Data Processing

efc88 may process Personal Data for the following purposes:

• Creating, maintaining, securing, and administering your efc88 Account;
• Confirming that users are aged 21 or above and eligible to use the Services;
• Completing KYC, anti-fraud, anti-money-laundering, and payment-ownership checks;
• Accepting deposits, calculating balances, settling wagers, and processing withdrawals in MYR or another supported currency;
• Providing live casino games, slot titles, EPL, Liga Super Malaysia, UFC, and other sports markets;
• Applying bonus rules, wagering requirements, loyalty benefits, and promotional eligibility criteria;
• Responding to questions, complaints, payment concerns, and responsible gambling requests;
• Monitoring platform reliability, investigating technical faults, and improving mobile performance;
• Detecting suspicious activity, collusion, account takeover, bonus abuse, and other prohibited conduct;
• Complying with lawful requests, regulatory duties, record-keeping obligations, and dispute-resolution requirements.

efc88 may also use aggregated or de-identified information to understand general platform activity. Where information can no longer reasonably identify an individual, it is not treated as Personal Data under this policy.

6 Legal Grounds for Processing

Depending on the circumstances and applicable law, efc88 processes Personal Data because the processing is necessary to perform the agreement between the user and efc88, comply with a legal obligation, protect vital interests, pursue a legitimate operational or security interest, or act on valid consent.

Legitimate interests may include preventing fraud, protecting account security, maintaining platform integrity, improving service performance, and defending legal claims. efc88 considers whether these interests are proportionate and whether they may be overridden by the rights and reasonable expectations of users.

Where Malaysian privacy requirements apply, efc88 seeks to handle Personal Data consistently with applicable principles under the Personal Data Protection Act 2010 and related standards. This statement does not limit any stronger right available under another applicable law.

7 Payments, Verification, and KYC

Financial and identity checks are necessary to protect efc88 users, prevent third-party funding, reduce withdrawal fraud, and verify that funds are returned to an appropriate recipient. Before processing a withdrawal, efc88 may request an identity document, proof of address, a bank statement with unrelated details obscured, or evidence that an e-wallet belongs to the Account holder.

Payment information may be shared with the relevant bank, e-wallet, gateway, blockchain service provider, or payment processor to complete a requested transaction. efc88 does not use payment data for an unrelated purpose merely because it has been supplied during a deposit or withdrawal.

8 Cookies and Similar Technologies

efc88 uses cookies and related technologies to maintain login sessions, remember essential preferences, protect Accounts, analyse platform performance, and understand how pages are used. Essential cookies are required for core functions such as authentication, transaction continuity, and fraud prevention.

Other cookies may help efc88 measure page performance, identify technical problems, or remember non-essential preferences. Browser settings can be used to block or remove cookies, but disabling essential cookies may prevent login, interrupt a betting session, or cause parts of the platform to operate incorrectly.

Cookie records may include a pseudonymous identifier, device data, timestamps, and navigation events. efc88 does not use cookies to obtain unrelated files stored on your device.

9 Data Sharing and Disclosure

efc88 does not sell Personal Data. Information may be disclosed only where reasonably necessary to:

• Payment providers processing a requested deposit, withdrawal, refund, or transaction review;
• KYC and fraud-prevention providers checking identity, age, sanctions exposure, or document authenticity;
• Hosting, cybersecurity, technical support, communication, and platform providers acting under contractual controls;
• Game and betting suppliers where limited account or transaction information is required to settle a game or investigate a dispute;
• Professional advisers, auditors, insurers, or dispute-resolution bodies bound by appropriate confidentiality duties;
• Regulators, courts, law-enforcement bodies, or other authorities where disclosure is legally required or necessary to protect legal rights.

Service Providers are expected to process information only for authorised purposes and to apply suitable confidentiality and security measures. efc88 seeks to limit disclosures to the information relevant to the service or legal requirement concerned.

10 International Data Transfers

Some efc88 Service Providers or technical systems may operate outside Malaysia. As a result, Personal Data may be processed in a jurisdiction with privacy laws different from those in Malaysia. Where such a transfer occurs, efc88 seeks to apply appropriate contractual, technical, and organisational safeguards.

These measures may include contractual data-protection clauses, access restrictions, encryption, provider assessments, and limits on onward disclosure. A cross-border transfer does not permit the recipient to use Personal Data for purposes unrelated to the efc88 Services.

11 Security Measures

efc88 applies reasonable safeguards appropriate to the nature and sensitivity of the information processed. Measures may include encrypted connections, restricted administrative access, password protection, logging, network monitoring, secure development controls, staff confidentiality obligations, and incident-response procedures.

No internet-based system can be guaranteed to be completely secure. Users also have an important role in protecting their efc88 Accounts. Passwords should be unique, difficult to guess, and never shared. Users should sign out on shared devices and contact efc88 promptly if an unfamiliar login, withdrawal, or account change is detected.

If a Personal Data incident creates a material risk to affected users, efc88 will assess the event and provide notification where required by applicable law.

12 Data Retention

efc88 retains Personal Data only for as long as reasonably necessary for the purpose for which it was collected, including account administration, payment settlement, fraud prevention, responsible gambling controls, legal compliance, and the establishment or defence of claims.

Retention periods vary according to record type. Account and transaction records may need to be kept after Account closure to meet financial, regulatory, anti-fraud, self-exclusion, or dispute-handling obligations. Data that is no longer required will be securely deleted, anonymised, or placed beyond routine operational use.

An Account closure request does not automatically require immediate deletion of every record. efc88 may retain limited information where deletion would conflict with an applicable legal duty or undermine fraud prevention, self-exclusion, or legal claims.

13 Your Privacy Rights

Subject to applicable law and any valid exemption, you may ask efc88 to:

• Confirm whether efc88 processes Personal Data relating to you;
• Provide access to eligible Personal Data and information about its use;
• Correct information that is inaccurate, incomplete, or out of date;
• Delete eligible information that is no longer required for a lawful purpose;
• Restrict or object to certain processing activities;
• Withdraw consent where processing depends specifically on consent;
• Review a significant decision made solely through automated processing, where such a right applies;
• Receive eligible information in a portable format where required by law.

efc88 may need to verify your identity before fulfilling a privacy request. This protects information from being disclosed to an unauthorised person. Requests may also be limited where disclosure would prejudice another person's rights, platform security, fraud investigations, or a legal obligation.

Users may submit a request using the contact details stated below. efc88 aims to acknowledge requests promptly and respond within the period required by applicable law.

14 Marketing Preferences

Where permitted, efc88 may send information about promotions, casino releases, sports offers, loyalty benefits, or service updates. Marketing communications may be based on Account preferences, previous interactions, or consent where consent is required.

Users may change their marketing preferences or request that promotional communications stop. A marketing opt-out does not prevent efc88 from sending necessary operational messages concerning Account security, verification, withdrawals, policy changes, or responsible gambling controls.

efc88 does not intend to direct gambling promotions to persons known to be under 21 or to users whose Accounts are subject to active self-exclusion.

15 Age Restrictions and Responsible Use

efc88 Services are intended only for individuals aged 21 and above. efc88 may use identity and age-verification information to prevent underage registration and to close Accounts where eligibility cannot be established.

Parents and guardians should take reasonable steps to prevent minors from accessing gambling websites or payment credentials. If you believe a person under 21 has provided Personal Data to efc88, notify our support team so the matter can be investigated.

Privacy requests relating to deposit limits, cooling-off measures, self-exclusion, or other safer gambling controls may also be handled under the efc88 Responsible Gambling procedures. Records may be retained where necessary to enforce an exclusion and prevent an excluded user from opening another Account.

16 Changes to This Privacy Policy

efc88 may update this Privacy Policy to reflect changes in the Services, technology, legal requirements, payment methods, security practices, or internal processes. The revision date shown at the top of the page identifies the latest published version.

Where a change materially affects how Personal Data is used, efc88 will take reasonable steps to provide notice through the platform or an available Account communication channel. Continued use of the Services after an update is subject to the revised policy, but efc88 will seek fresh consent where applicable law requires it.

17 Contact Us

Questions, concerns, complaints, and privacy-rights requests may be directed to the efc88 support team. Please describe the request clearly and include enough information for efc88 to identify the relevant Account or record. Do not include your password.

If your concern relates to the rules governing Account use, payments, bonuses, or withdrawals, please also review the efc88 Terms & Conditions. For deposit limits, self-exclusion, and safer play guidance, visit the Responsible Gambling page.