Privacy Policy evo888 — Our Commitment to Protecting Your Personal Data

Evo888 ("we", "Platform") is committed to protecting the privacy and security of the personal data of all members who use our online entertainment platform. This Privacy Policy transparently explains how we handle your personal information from the moment you first visit the evo888 website until after you stop using our services.

This document is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. By registering for or using the evo888 platform, you fully agree to the terms of this Privacy Policy.

We understand that trust is the foundation of the relationship between evo888 and every member. That is why we strive to always be transparent about what we do with your data — not just because the law requires it, but because we believe it is the right thing to do.

Evo888 collects various categories of personal information depending on how you use our platform. Below is a detailed breakdown of the data we collect:

We only collect data that is genuinely necessary for the stated purpose. This principle of data minimisation ensures we do not retain irrelevant or unnecessary information.

Your personal data is collected through several channels as you interact with the evo888 platform. Understanding how this collection works helps you make more informed decisions about the information you share with us.

• Account registration — information you provide when first opening an evo888 account
• KYC Verification — identity documents uploaded during the identity verification process
• Financial transactions — details submitted when making a deposit or withdrawal
• Platform usage — data automatically generated while you play or browse the site
• Communications with us — information shared when contacting customer support via live chat or email
• Cookies and tracking technologies — technical data automatically collected through your browser
• Trusted third parties — verification information from payment providers or authorised identity verification bodies

We never purchase data lists from third parties for marketing or any other purpose. All data we hold is either provided directly by you or generated through your use of our own platform.

Evo888 uses your personal data for legitimate and specific purposes. We do not use your data for any purpose other than those stated below:

• Account management — opening, verifying, maintaining, and closing your member account
• Transaction processing — processing deposits, withdrawals, and all financial transactions in your account
• Identity verification (KYC) — verifying that you meet the age requirement and preventing money laundering
• Platform security — detecting and preventing fraudulent activity, hacking, or account abuse
• Customer support — providing effective assistance when you need help
• Responsible gaming — monitoring gaming patterns to identify signs of problem gambling and provide appropriate assistance
• Platform improvements — analysing usage data to improve the quality of evo888 services
• Legal compliance — fulfilling applicable legal and regulatory obligations
• Marketing communications — sending information about promotions and new offers (only if you have given your consent)

Evo888 does not sell, rent, or disclose your personal data to third parties without your consent, except in the following circumstances required for legitimate platform operations:

• Payment provider — financial information required to process your deposits and withdrawals via FPX, DuitNow, Touch 'n Go, and GrabPay
• KYC service provider — identity information shared with authorised verification bodies for age and identity verification purposes
• Game provider — minimum technical data required for third-party game providers to function within the evo888 platform
• IT infrastructure provider — server and cloud service providers that process data on behalf of evo888 and are bound by strict confidentiality agreements
• Legal authorities — information required to be disclosed based on a court order or directive from a legitimate authority

All third parties we work with are bound by strict data protection agreements. They are only permitted to use your data for specific purposes and nothing beyond that. evo888 conducts regular reviews to ensure our partners uphold the same high data protection standards that we hold ourselves to.

Should evo888 undergo a merger, acquisition or asset sale, member personal data may be transferred as part of that transaction. In such cases, you will be notified in advance and a new Privacy Policy will be published.

Protecting your personal data from unauthorized access, loss or leaks is evo888's top priority. We implement multiple layers of technical and operational security to ensure your data remains safe at all times.

• 256-bit SSL Encryption — all data transmitted between your device and evo888 servers is encrypted using 256-bit SSL technology
• Two-factor authentication (2FA) — an additional security layer to protect your account login
• 24/7 Monitoring — a threat detection system operates around the clock to identify suspicious activity
• Strict access controls — only authorised staff with a legitimate need may access member personal data
• Regular security audits — independent security assessments are conducted periodically by third-party experts
• Secure data storage — data stored on protected servers in certified, secure data centres

While evo888 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in account security by keeping your password safe and not sharing your login credentials with anyone.

The evo888 platform uses cookies and similar tracking technologies to enhance the user experience, ensure security and understand how the platform is used. Cookies are small files stored on your device when you visit our website.

Here are the types of cookies we use:

• Essential cookies — required for core platform functions such as login and session management. These cookies cannot be disabled.
• Performance cookies — collecting information on how you use the platform to help us improve our services
• Functional cookies — saving your preferences such as language and settings to deliver a more personalised experience
• Analytical cookies — helping us understand overall platform usage patterns using anonymised data

You can manage or delete cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the evo888 platform. For guidance on managing cookies in different browsers, refer to your browser's documentation.

As an evo888 member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). evo888 fully respects and facilitates the exercise of these rights.

To exercise any of these rights, contact the evo888 customer support team via live chat. We will process your request within 30 business days. Some requests may require identity verification first to ensure the security of your account.

Evo888 only retains your personal data for as long as necessary for the stated purposes or as required by law. Our data retention policy is as follows:

• Active account data — retained for as long as your account is active and for the required period following account closure
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia financial and tax legal requirements
• KYC Documents — retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements
• Support communication logs — retained for 2 years for reference and service improvement purposes
• Cookies and analytics data — most data is collected anonymously and retained for no more than 13 months

Once the retention period has ended, your personal data will be securely deleted or anonymized in accordance with industry-standard procedures. The data deletion process is irreversible.

Evo888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any amendments will be published on this page with a new "Last Updated" date.

For significant amendments that may materially affect how we process your personal data, evo888 will endeavour to notify members via email or in-platform notification at least 14 days before the changes take effect.

Your continued use of the evo888 platform after any amendments are published will be considered your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how evo888 handles your personal data, please contact us through the following channels:

• Live Chat — the fastest channel for immediate enquiries, available 24 hours a day, 7 days a week
• Email — [email protected] for enquiries requiring detailed clarification

The evo888 privacy team will process your enquiry within 3 business days. For requests related to personal data rights such as data access or deletion, processing time may be up to 30 business days depending on the complexity of the request.