Privacy Policy Ecwon —
Data Protection & Information Security

Ecwon collects your personal information solely to provide a safe, responsible, and high-quality platform experience. We only collect data that is genuinely necessary for operational and legal compliance purposes.

Information you provide directly:

• Full name as shown on official identification documents.
• Active email address and mobile phone number.
• Date of birth for age verification.
• Current residential address.
• Bank account or e-wallet details for deposits and withdrawals.
• KYC documents (identity card, passport, bank statement) when requested.

Information collected automatically:

• IP address and device information (device type, operating system, browser).
• Platform usage log data (login time, games played, session duration).
• Session cookies and performance cookies (see Section 7 for details).
• General location information based on IP address (not precise GPS).

Every piece of data we collect has a clearly defined purpose and is not used beyond the stated scope. Below is a full list of the purposes for which ecwon uses your data:

For purposes marked "Optional", you may withdraw consent at any time through your account settings without affecting the core services you receive.

Ecwon processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices. These grounds are as follows:

• Contract performance — Data processing required to fulfil the service agreement between you and ecwon, including account management and payment processing.
• Legal obligation — We are required by law to collect and verify certain information for anti-money laundering (AML) and counter-terrorism financing (CTF) purposes.
• Legitimate interest — Processing for the purposes of platform security, fraud prevention, and service improvement that does not adversely affect your fundamental rights.
• Consent — For optional activities such as marketing communications and advanced analytics, we rely on the explicit consent you provided during registration or through your account settings.

Ecwon does not sell or trade your personal data. However, there are specific situations where we may need to share your information with carefully selected parties:

• Payment service providers — Licensed payment gateways that process your deposit and withdrawal transactions. They receive only the data necessary to complete the relevant transaction.
• Licensed game providers — Companies such as Pragmatic Play, Evolution Gaming, and others require basic account information to operate game sessions in a secure and fair manner.
• KYC service providers — Third-party identity verification platforms that help us verify documents quickly and securely.
• Statutory authority — Government agencies, law enforcement authorities, or regulatory bodies when lawfully required by law or court order.
• Security analysts — Cybersecurity firms that help us detect and prevent fraud and cyberattacks against the platform.

All third parties that receive your data are bound by strict confidentiality agreements and are prohibited from using your data for any purpose beyond the scope defined in those agreements. ecwon remains responsible for the protection of your data even when it is processed by third parties on our behalf.

Ecwon retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable law.

After the retention period ends, data will be permanently deleted or anonymised so it can no longer be linked to any individual. In cases where an active dispute or ongoing investigation exists, relevant data may be retained longer until the matter is fully resolved.

As a data subject, you have the following rights regarding your personal information held by ecwon. We are committed to respecting and facilitating the exercise of these rights:

Ecwon uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Necessary Cookies (Required) — Required for core platform functions such as login authentication, session management, and security settings. These cookies cannot be disabled.
• Functional Cookies — Saves your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time.
• Analytics Cookies — Helps us understand how members use the platform so we can continuously improve its design and content. This data is collected in aggregate and anonymised form.
• Performance Cookies — Monitors page load speed and performance to ensure a smooth experience, especially during live game sessions.

You can manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the ecwon platform. For guidance on managing cookies by browser type, please refer to your browser's help page.

Ecwon implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, modification, or disclosure.

• Data encryption in transit — All communication between your browser and our servers is protected with the latest TLS 1.3 protocol.
• Data encryption at rest — Sensitive data such as KYC information and financial details is stored in encrypted form using AES-256.
• Role-based access control — ecwon staff may only access the data required to perform their respective duties. Access to sensitive data is audited on a regular basis.
• Two-factor authentication (2FA) — Enforced for all internal staff accounts with access to user data systems.
• Regular security audits — ecwon conducts penetration testing and security audits with independent cybersecurity firms at least twice a year.
• Incident response plan — A clear incident response procedure ensures that any data breach is detected, contained, and reported within the required timeframe.

As ecwon operates as an online platform, your personal data may be processed or stored on servers located outside Malaysia in certain situations, particularly when involving technical service providers or international game providers.

Ecwon ensures that any international data transfers only take place to countries or entities that comply with data protection standards equivalent to or higher than those set out under Malaysia's PDPA. Protective measures in place include:

• Standard Contractual Clauses binding all international data recipients.
• Data transfer risk assessments conducted prior to any sharing of data with third parties outside Malaysia.
• Ongoing monitoring of service providers' compliance with their data protection obligations.

The ecwon platform is intended exclusively for individuals aged 18 years and above. We do not accept registrations from underage individuals and do not knowingly collect personal data from children.

If ecwon determines that data from a minor has been collected unintentionally, we will take immediate steps to:

• Close the account in question immediately.
• Permanently delete all associated personal data.
• Investigate how the registration occurred and strengthen the age verification process.

Parents and guardians who become aware that a child under their care has registered on the ecwon platform are urged to contact our support team immediately so that appropriate action can be taken without delay.

The ecwon platform may contain links to third-party websites or applications in certain contexts, such as game provider pages or payment method information. ecwon is not responsible for the privacy practices of those third-party websites.

We encourage you to read the privacy policies of any third-party websites you visit separately, as their policies may differ from those of ecwon. Visiting third-party websites is at your own risk and discretion, and ecwon has no control over how they handle your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how ecwon handles your personal data, our privacy team is ready to assist through the following channels:

• Live Chat — Available 24/7 within the ecwon platform. This is the fastest way to get a response.
• Email — Contact us at [email protected]. We aim to respond within 2 business days.

For data rights requests (access, correction, deletion), please clearly state the type of request, your full name, and registered account number so our team can process your request efficiently.

This Privacy Policy was last updated on 1 January 2026. Ecwon reserves the right to update this policy from time to time. Any significant amendments will be communicated to members via email or in-platform notification at least 7 days before taking effect. For more information about your rights and obligations as a user, please refer to Terms and Conditions us.