Data Security
All data transmitted between your device and ew8 is encrypted using TLS. Personal and financial data is stored on secured, access-controlled infrastructure.
No Third-Party Sale
ew8 does not sell, rent, or trade your personal data to third-party marketing organisations for their independent commercial use.
Your Controls
You may access, correct, or request deletion of your personal data at any time by contacting the ew8 support team via live chat or email.
KYC Compliance
As a licensed gaming operator, ew8 is required to collect identity documents and verify player details to comply with anti-money laundering obligations.
Cookie Use
ew8 uses first-party cookies to maintain your session and improve platform performance. No third-party advertising cookies are placed without your consent.
Data Retention
Account data is retained for a minimum of five years following account closure to satisfy regulatory and anti-money laundering record-keeping requirements.
1. Data Controller
The data controller responsible for your personal data is the operator of the ew8 platform at ew8.one ("ew8", "we", "us", "our"), licensed under an international gaming authority. ew8 determines the purposes and means of processing your personal data in connection with the operation of its online casino and sports betting platform.
If you have any questions about how ew8 handles your personal data, you may contact our Data Protection team via the support channels described in Section 14 of this Policy.
2. Personal Data We Collect
ew8 collects the following categories of personal data in the course of providing and operating its platform:
- Identity Data — full legal name, date of birth, nationality, government-issued identification number, copies of identity documents (passport, MyKad, or equivalent) collected during the KYC verification process;
- Contact Data — email address, mobile phone number, and residential address;
- Account Data — username, password (stored in hashed form), account preferences, and communication preferences;
- Financial Data — payment method details (e-wallet identifiers, bank account information, transaction references), deposit history, withdrawal history, and bonus transaction records;
- Gaming Activity Data — wager history, game logs, session durations, responsible gaming tool usage, and self-exclusion records;
- Technical Data — IP address, device identifiers, browser type and version, operating system, referring URLs, and session timestamps collected automatically when you access the ew8 platform;
- Communications Data — records of your interactions with ew8 customer support, including live chat transcripts and support ticket content.
3. How We Collect Your Data
ew8 collects personal data through the following means:
- Direct Submission — information you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, or contacting support;
- Automated Technologies — Technical Data collected automatically via server logs, session cookies, and analytics tools when you visit or use the ew8 platform;
- Third Parties — identity verification data from KYC service providers, fraud screening data from anti-fraud partners, and payment confirmation data from payment processors. ew8 only receives data from third parties where you have authorised that third party to share it, or where ew8 has a legitimate legal basis to obtain it.
4. How We Use Your Personal Data
ew8 processes your personal data for the following purposes:
- To create and manage your ew8 player account and verify your identity in compliance with KYC and anti-money laundering obligations;
- To process deposits and withdrawals, and to maintain accurate financial records;
- To provide and operate the casino, sportsbook, and other gaming services available on the ew8 platform;
- To detect, prevent, and investigate fraudulent activity, account abuse, collusion, and other prohibited conduct;
- To comply with our obligations under our international gaming authority licence, including responsible gaming, anti-money laundering, and counter-terrorism financing requirements;
- To communicate with you about your account, transactions, promotional offers (where you have consented to receive them), and important platform updates;
- To improve the ew8 platform through analysis of aggregated usage data and technical performance metrics;
- To respond to enquiries, complaints, and support requests submitted to ew8's customer support team.
ew8 does not use your personal data for automated individual decision-making (including profiling) that produces legal or similarly significant effects on you without human review.
5. Legal Basis for Processing
ew8 processes your personal data on the following legal bases:
- Contract Performance — processing necessary to provide the ew8 services you have contracted for, including account management, payment processing, and game operation;
- Legal Obligation — processing required to comply with applicable law and our licensing obligations, including KYC verification, AML record-keeping, and regulatory reporting;
- Legitimate Interests — processing for fraud prevention, platform security, responsible gaming enforcement, and improving the quality of the ew8 platform, where such interests are not overridden by your fundamental rights;
- Consent — processing of your data for optional marketing communications, where you have explicitly opted in to receive such communications. You may withdraw consent at any time by contacting support.
6. Data Sharing & Disclosure
ew8 does not sell, rent, or trade your personal data. We may disclose your data to the following categories of third parties, where necessary and proportionate:
- Payment Processors — Touch n Go, Boost, GrabPay, Maybank, CIMB, and other payment service providers, solely to process your deposits and withdrawals;
- KYC & Identity Verification Providers — third-party identity verification services used to authenticate your identity documents as part of the KYC process;
- Anti-Fraud & AML Screening Services — screening providers used to detect fraud and comply with anti-money laundering obligations;
- Game Content Providers — third-party game studios whose products are offered on the ew8 platform. These providers may receive limited technical data necessary to deliver games and maintain game integrity;
- Regulatory & Law Enforcement Authorities — where ew8 is required by law, court order, or regulatory direction to disclose personal data, including to our licensing authority;
- Professional Advisers — legal, audit, and compliance advisers who are bound by confidentiality obligations.
All third-party recipients of personal data are required to process that data only for the purposes for which it was shared and to maintain appropriate security standards.
7. Data Retention
ew8 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:
- Account and identity data: retained for a minimum of five (5) years following the closure of your ew8 account, to comply with anti-money laundering record-keeping obligations;
- Transaction and financial records: retained for a minimum of seven (7) years in accordance with financial record-keeping requirements;
- Gaming activity logs: retained for a minimum of five (5) years for regulatory, dispute resolution, and responsible gaming monitoring purposes;
- Support communications: retained for three (3) years following the resolution of the relevant enquiry or complaint.
Where data is retained beyond the period of active use, it is stored securely in an archived format with access restricted to personnel with a demonstrated regulatory need.
8. Data Security
ew8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- TLS (Transport Layer Security) encryption for all data transmitted between your device and the ew8 platform;
- Hashed storage of passwords — ew8 does not store passwords in plain text and cannot retrieve your password;
- Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role;
- Regular security assessments and penetration testing of the ew8 platform;
- Incident response procedures for identifying, containing, and notifying affected parties in the event of a data breach.
While ew8 maintains robust security standards, no data transmission over the internet can be guaranteed as completely secure. You are responsible for maintaining the confidentiality of your ew8 account credentials and for notifying us immediately if you suspect unauthorised access to your account.
9. Cookies & Tracking Technologies
ew8 uses cookies and similar tracking technologies on the ew8 platform for the following purposes:
- Strictly Necessary Cookies — session cookies required to maintain your logged-in state and enable core platform functionality. These cannot be disabled without impairing platform operation;
- Performance & Analytics Cookies — first-party cookies used to collect aggregated, anonymised data about how players navigate and use the ew8 platform, enabling us to identify and resolve technical issues and improve user experience;
- Preference Cookies — cookies that remember your language preference, interface settings, and responsible gaming tool configurations.
ew8 does not place third-party advertising or behavioural tracking cookies on the platform. You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies will affect your ability to use the ew8 platform.
10. Your Data Rights
Subject to applicable law and our legitimate regulatory obligations, you have the following rights in respect of your personal data held by ew8:
- Right of Access — you may request a copy of the personal data ew8 holds about you;
- Right of Rectification — you may request correction of inaccurate or incomplete personal data held by ew8;
- Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ew8's legal and regulatory retention obligations;
- Right to Restrict Processing — you may request that ew8 restrict processing of your data while a rectification or objection request is being considered;
- Right to Object — you may object to processing based on legitimate interests, including profiling for marketing purposes;
- Right to Data Portability — where processing is based on consent or contract and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
To exercise any of the above rights, contact ew8 via live chat or at the email address provided in Section 14. ew8 will respond to verifiable data rights requests within thirty (30) days. We may require identity verification before processing a data rights request.
Note: Certain data rights requests — particularly erasure requests — may be declined where ew8 is required by law to retain the relevant data for regulatory compliance, AML record-keeping, or ongoing dispute resolution purposes.
11. Minors & Age Restriction
The ew8 platform is strictly restricted to persons aged 21 and above. ew8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account.
If you believe that a minor has accessed the ew8 platform or provided personal data to ew8, please contact our support team immediately so that we can investigate and take appropriate action.
12. International Data Transfers
As an operator licensed under an international gaming authority, ew8 may transfer personal data to, and process personal data in, jurisdictions outside Malaysia. Where such transfers occur, ew8 ensures that appropriate safeguards are in place to protect your data, including:
- Transferring data only to recipients in jurisdictions that provide an adequate level of data protection;
- Using contractual mechanisms (such as standard data protection clauses) with recipients in other jurisdictions;
- Applying technical and organisational security measures consistent with those applied within Malaysia.
13. Changes to This Privacy Policy
ew8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be notified via a platform announcement or email to your registered address. The date of the most recent revision is displayed at the top of this page.
Your continued use of the ew8 platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed of how your data is handled.