At ekplus, we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, who we may share it with, and what rights you hold over your information as a player on Malaysia's premier online gaming platform.
A plain-language summary of our key data practices before you read the full policy below.
Identity, contact details, payment data, and gaming activity logs
Account management, payments, KYC compliance, and platform improvement
Trusted payment providers, identity verifiers, and regulators only
Data held for the account lifetime plus a minimum of five years post-closure
256-bit SSL, restricted access controls, and encrypted storage
Access, correction, portability, erasure, and restriction of processing
This Privacy Policy ("Policy") describes how ekplus ("we", "us", "our", "Company", "Platform") collects, processes, stores, uses, and protects the personal data of individuals ("you", "Player", "User") who access or use the ekplus online gaming platform at https://ekplus.cam.
ekplus is committed to handling your personal data with respect, transparency, and in accordance with applicable data protection principles. We process personal data only for the purposes set out in this Policy and only to the extent necessary for those purposes. Our data handling practices are designed to reflect the trust that Malaysian players place in the ekplus platform.
This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the contractual framework governing your use of the Platform. By registering an account or using ekplus, you acknowledge that you have read and understood this Policy and consent to the processing of your data as described herein.
Our Core Privacy Commitment: ekplus does not sell your personal data to third parties for marketing or commercial purposes. We do not share your data with any organisation that does not have a legitimate, documented need to process it in connection with the services ekplus provides to you.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
ekplus collects personal data in the following categories, depending on your interaction with the Platform:
When you create an account, we collect your full legal name, date of birth, email address, Malaysian mobile phone number, and a username and password of your choice. This data is required to establish your player identity and verify your eligibility to use the Platform.
To comply with anti-money laundering (AML) obligations and verify your age (21+), we may collect copies of your government-issued identification document (MyKad, passport, or driving licence), a proof of residential address, and documentation relating to your nominated payment method.
We collect records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment methods used (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency transaction identifiers where applicable. We do not store full payment card numbers on our servers.
We maintain records of your gaming activity, including games played, wager amounts, session durations, win and loss records, and bonus usage. This data is used for account management, dispute resolution, responsible gambling monitoring, and platform improvement.
We automatically collect technical data when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and session timestamps. This data supports platform security, fraud detection, and performance analytics.
Records of communications between you and our support team — including live chat transcripts and email correspondence — are retained for quality assurance, dispute management, and regulatory compliance purposes.
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full name, date of birth, email, phone | Registration |
| KYC Documents | MyKad, passport, proof of address | Verification request |
| Financial Data | Deposit/withdrawal records, payment method | Each transaction |
| Gaming Activity | Bets placed, sessions, game history | During Platform use |
| Technical Data | IP address, browser, device ID | Each site visit |
| Communications | Live chat logs, support emails | When contacting support |
ekplus processes your personal data for the following specific purposes:
ekplus processes your personal data on one or more of the following legal grounds:
Withdrawing Consent: Where we process data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect processing carried out under other legal bases.
ekplus does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
Transaction data is shared with our Malaysian payment processing partners (including FPX clearing houses, e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay, and banking institutions including Maybank, CIMB, Public Bank, Hong Leong, and RHB) solely for the purpose of processing your deposits and withdrawals in MYR.
KYC documents and identity data may be shared with authorised third-party identity verification providers for the purpose of confirming your identity and age in compliance with our verification obligations.
Anonymised or pseudonymised gaming activity data may be shared with our game providers for the purpose of administering game outcomes, resolving disputes, and managing jackpot pools. Personal identity data is not transmitted to game providers.
Technical and transactional data may be shared with fraud detection and cybersecurity service providers to protect the integrity of the Platform and the safety of all players' accounts and funds.
We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to protect the legal rights, property, or safety of ekplus, its players, or the public.
No Sale of Personal Data: ekplus does not and will not sell your personal data to data brokers, advertisers, or any other commercial entity. Any disclosure of personal data is strictly limited to the operational and legal purposes described in this section.
The ekplus Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. Below is a summary of the cookie types we deploy:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Session management, login state, security tokens. Required for Platform functionality. | Session |
| Functional Cookies | User preferences, language settings, remembered deposit methods. | Up to 12 months |
| Analytics Cookies | Aggregated usage data for Platform performance and feature development. | Up to 24 months |
| Fraud Prevention | Device fingerprinting for multi-account detection and suspicious session identification. | Up to 12 months |
You may manage cookie preferences through your browser settings. Disabling essential cookies will impair or prevent access to the Platform. Analytics and functional cookies may be declined without affecting core Platform access.
ekplus retains your personal data for as long as your account is active and for a minimum period following account closure, as required by applicable legal and regulatory obligations. Our general retention principles are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified individual.
ekplus implements technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include but are not limited to:
While we take all reasonable precautions, no data transmission over the internet or electronic storage system is entirely free from risk. In the event of a data breach that poses a risk to your rights and freedoms, ekplus will notify affected players and relevant authorities within the timeframes required by applicable law.
Your Security Responsibility: You are responsible for maintaining the confidentiality of your ekplus account password and two-factor authentication credentials. Do not share your login details with any third party. If you suspect unauthorised access to your account, contact our support team immediately via live chat.
As a player and data subject, you hold the following rights with respect to your personal data processed by ekplus. To exercise any of these rights, please contact our support team via the channels listed in Section 15 of this Policy.
You may request a copy of the personal data we hold about you, including the categories of data, the purposes of processing, and any third parties to whom it has been disclosed.
You may request correction of any inaccurate or incomplete personal data we hold about you. Corrections to identity data may require supporting documentation.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may request that we restrict processing of your data in certain circumstances, such as while the accuracy of data is disputed or an objection is pending.
Where processing is based on consent or contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
We will respond to all verified data rights requests within thirty (30) days of receipt. Complex requests may require an extension of up to an additional sixty (60) days, in which case we will notify you of the delay and the reason for it. Requests must be submitted by the registered account holder and may require identity verification before we can action them.
The ekplus Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21.
Age verification is a mandatory step in our account registration and KYC process. Where we discover or have reasonable grounds to suspect that an account is operated by a person under the age of 21, we will immediately suspend the account, withhold any associated funds pending investigation, and permanently close the account upon confirmation of underage use. Any personal data collected in connection with an underage account will be deleted promptly following account closure, except where retention is required for legal or regulatory compliance purposes.
If you are a parent or guardian and believe that a minor has registered an account on the ekplus Platform, please contact our support team immediately via live chat or email at the address provided in Section 15.
Strict 21+ Policy: ekplus enforces a zero-tolerance policy regarding underage gambling. Age verification is conducted at registration and may be requested again at any time during your account lifecycle. For players aged 21 and above only.
The ekplus Platform integrates with a number of third-party service providers to deliver its full range of features. These providers are engaged as data processors under contractual agreements that require them to process personal data only on our instructions and in accordance with applicable data protection standards.
Categories of third-party services integrated into the Platform include:
ekplus does not operate social media sharing buttons, embedded third-party advertising networks, or affiliate tracking pixels on its Platform that would result in your data being shared with social media companies or external advertisers without your knowledge.
To deliver its services, ekplus may process or store personal data on servers or through service providers located outside of Malaysia. Where personal data is transferred to jurisdictions that may have different data protection standards, ekplus implements appropriate safeguards to ensure that your data remains protected to a standard consistent with this Policy.
Safeguards used for cross-border transfers include: contractual data processing agreements incorporating internationally recognised data protection clauses; transfer to jurisdictions subject to formal adequacy recognition; and application of supplementary technical measures such as end-to-end encryption for data in transit.
ekplus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Material changes to this Policy will be communicated to registered players via email at least fourteen (14) days before the revised Policy takes effect.
The date on which the current version of this Policy was last updated is displayed prominently at the top of this page. We encourage you to review this Policy periodically to stay informed of how we handle your personal data. Continued use of the ekplus Platform following the effective date of an amendment constitutes your acceptance of the revised Policy terms.
The most current version of this Policy is always available at https://ekplus.cam/privacy-policy.
If you have questions about this Privacy Policy, wish to exercise your data rights, or need to raise a privacy concern, please contact the ekplus team through the following channels. All contacts are displayed as plain text — not clickable links.
For data access requests, rectification, erasure, and other rights under this Policy. Response within 30 days.
[email protected]Available 24 hours a day, 7 days a week, from your Player Dashboard. Best channel for urgent privacy concerns or suspected data breaches affecting your account.
Data rights requests: Within 30 days. Privacy complaints: Acknowledged within 5 business days, resolved within 30. Security incidents: Immediate action upon detection.
Responsible Gambling & Privacy: Your responsible gambling status — including self-exclusion, deposit limits, and problem gambling flags — is treated as sensitive personal data and afforded the highest level of protection within our systems. This information is never shared with third parties except where required by law. Visit our Responsible Gambling page for more information on available support tools.
Six concrete commitments we make to every player on the Platform, in practice — not just on paper.
Your personal data is not a product at ekplus. We do not sell, license, or transfer your data to data brokers, advertisers, or any commercial third parties. Full stop — no exceptions.
Every piece of data transmitted between your device and ekplus servers — login credentials, payment details, game activity — is protected by bank-grade 256-bit SSL/TLS encryption in transit and encrypted at rest.
Access, correct, download, restrict, or delete your personal data at any time through your Player Dashboard or by contacting our support team. We process all verified data rights requests within 30 days.
We collect only the personal data that is genuinely necessary to provide you with a safe, functional, and compliant gaming experience. We do not collect data speculatively or for undefined future purposes.
Your responsible gambling status — including self-exclusion, deposit limits, and any problem gambling flags — is classified as sensitive personal data and is never shared with any third party except where legally required.
In the event of a data breach posing a risk to your rights, ekplus commits to notifying affected players and relevant authorities promptly within the timeframes required by applicable data protection law.
Our support team is available 24/7 to answer your privacy questions and help you exercise your data rights. We're committed to transparent, respectful data handling at every step.
See also: Terms & Conditions | Responsible Gambling | About Us. For players aged 21 and above only. Play responsibly.