Privacy Policy ewbola — Personal Data Protection for Malaysia Players

Ewbola values the privacy of every player on our platform. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

As a responsible data controller, ewbola determines the purpose and manner in which your personal data is processed. We are committed to processing your data lawfully, fairly, and transparently — and only for the purposes clearly stated in this policy.

This policy applies to all personal information collected through the ewbola website, mobile app, customer support interactions and any other communication channels between you and ewbola.

Ewbola collects various types of personal information depending on how you interact with our platform. The following are the main categories of data we collect:

A) Information You Provide Directly

• Registration information: Full name, date of birth, phone number, email address, and username.
• Identity verification documents (KYC): A copy of your MyKad or passport, proof of current address, and any additional information required to meet KYC obligations.
• Financial information: Bank account number, e-wallet number, and payment card details used for deposits and withdrawals. Full card numbers are not stored on ewbola servers.
• Support communications: The content of any queries, complaints, or communications you send to the ewbola support team.

B) Information Collected Automatically

• Technical data: IP address, browser type, operating system, screen resolution and device identifier.
• Usage data: Pages visited, time spent, games played, access dates and times, and navigation patterns within the platform.
• Transaction data: Records of deposits, withdrawals, bets placed, wins, and losses.
• Location data: General location information derived from your IP address for security and compliance purposes.

Ewbola only collects and processes your personal data for lawful and specific purposes. The following are the primary purposes of our data processing:

• Account management: Creating, managing, and maintaining your player account, including identity verification and the KYC process.
• Transaction processing: Processing deposits, withdrawals, and maintaining accurate and secure financial records.
• Service delivery: Providing access to games, sports betting, Live Casino, and all ewbola platform features.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and platform abuse.
• Legal compliance: Fulfilling legal obligations including licensing requirements, AML reporting, and requests from relevant authorities.
• Service communications: Sending important information about your account, changes to terms, security updates, and transaction notifications.
• Marketing (with consent): Sending promotional information, bonuses, and special offers from ewbola. You may withdraw this consent at any time through your account settings.
• Platform improvement: Analyzing usage patterns to improve the user experience, platform performance, and new features.

Ewbola does not sell your personal data to any third party for commercial purposes. We only share your data in limited and necessary situations:

• Service providers: Third-party companies that assist us in delivering our services — such as payment gateway providers, gaming software providers, and customer support platforms. They may only process your data under ewbola's instructions and for no other purpose.
• Legal requirements: Regulatory authorities, law enforcement bodies, or courts when ewbola is required to do so by law or court order.
• Identity verification: KYC and AML service providers that help us verify player identities and meet compliance obligations.
• Business transfers: In the event of a merger, acquisition or sale of company assets, personal data may be transferred to the acquiring entity. You will be notified before any such transfer takes place.

Ewbola implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and ewbola's servers is encrypted using the latest TLS protocols, making it unreadable to any unauthorised third parties.
• Strict access control: Only staff with a genuine need may access player personal data. All access is logged and continuously monitored.
• Secure password storage: Passwords are stored in hashed format using modern cryptographic algorithms — ewbola does not store your password in any readable format.
• 24/7 monitoring: ewbola's security monitoring system operates around the clock to detect and respond to any threats or suspicious activity.
• Regular security audits: Penetration testing and independent security audits are conducted regularly to identify and address system vulnerabilities.

While ewbola takes reasonable steps to protect your data, no security system is 100% guaranteed. You are also responsible for keeping your account login information secure.

Ewbola uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential cookies (required): Required for core platform functions such as login, session management and security. The platform cannot function without these cookies.
• Performance cookies: Collecting information on how users interact with the platform to help us identify technical issues and improve performance.
• Functional cookies: Saving user preferences such as language, theme, and display settings for a more personalized experience.
• Analytics cookies: Used to understand aggregate usage patterns, helping us make data-driven decisions for continuous improvement.

Under the Malaysia Personal Data Protection Act (PDPA) and international data protection standards, you have the following rights regarding your personal data held by ewbola:

• Right of access: You have the right to obtain a copy of the personal data we hold about you.
• Right to rectification: If your personal data is inaccurate or incomplete, you have the right to request that we correct it.
• Right to erasure: Under certain circumstances, you have the right to request that we delete your personal data. However, ewbola may be required to retain certain data for legal compliance purposes.
• Right to object to processing: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: For consent-based processing, you may withdraw your consent at any time via your account settings.
• Right to data portability: You have the right to receive your data in a machine-readable format for transfer to another service provider.

To exercise any of these rights, contact the ewbola privacy team by email at [email protected]. We will process your request within 30 business days.

Ewbola retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by law:

• Active account data: Retained for as long as your account is active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of 7 years in compliance with financial regulations and AML requirements in Malaysia.
• KYC documents: Retained for 5 years after the business relationship ends, in line with Bank Negara Malaysia guidelines.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Marketing data: Retained until you withdraw your marketing consent or your account is closed.

Once the retention period has expired and there is no legal requirement to retain the data, ewbola will securely delete or anonymise your personal data.

Ewbola strictly prohibits use of the platform by individuals under 18 years of age. Our platform is not designed for, directed at, or knowingly collecting any personal information from minors.

If ewbola finds that personal data of a minor has been collected without proper age verification, we will take immediate action to delete that data and close the associated account. Parents or guardians who suspect their child has registered with ewbola should contact our support immediately.

Ewbola reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology used, legal requirements, or other relevant factors.

When we make significant changes, ewbola will notify you via in-platform notifications, an email to your registered address, or by displaying a prominent notice on the website. The "Updated" date at the top of this page will always reflect the latest version of this policy.

Continued use of the ewbola platform after any amendments take effect constitutes your acceptance of the revised policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ewbola, you may contact us through the following channels: