Privacy Policy efawin

1. Introduction and Scope of Policy

This Privacy Policy is issued by efawin, an online gambling platform operating under international licensing, and applies to all users who register an account, visit our website at efawin.app, or use any services offered through our platform.

By registering or using the efawin platform, you agree to the collection and use of your personal information as described in this document. If you do not agree with any part of this policy, you are advised not to proceed with registration or use of the platform.

This policy covers all ways you interact with efawin — including account registration, betting activity, financial transactions, communications with the support team, and general visits to our website.

2. Information We Collect

efawin collects personal information from you in several ways, including information you provide directly during registration, information generated when you use the platform, and information obtained through automated tracking technologies.

The categories of information we may collect include:

• Identity information: full name, date of birth, MyKad or passport number, and a photo of your identification card for identity verification (KYC) purposes.
• Contact information: email address, mobile phone number, and residential address.
• Financial information: e-wallet account details (Touch 'n Go eWallet, Boost, ShopeePay), bank account information for FPX, and your deposit and withdrawal transaction history on our platform.
• Betting activity information: betting records, games played, session duration, wins and losses.
• Technical information: IP address, device type, browser type, operating system, and access logs.
• Cookie and similar tracking technology information used to improve the user experience.

Information marked as mandatory during the registration process is required for us to comply with licensing requirements and to ensure a safe and responsible gaming environment.

3. How We Use Your Information

The information we collect is used solely for legitimate purposes related to the operation of the efawin platform. The main purposes for which data is used are as follows:

• Processing account registration and verifying user identity in line with KYC and AML (Anti-Money Laundering) requirements.
• Processing financial transactions including deposits, withdrawals, and bonus payments.
• Providing customer service via live chat and email in Bahasa Melayu and English.
• Sending account-related notices, security updates, and important information about the platform.
• Monitoring platform activity for the purpose of fraud detection, account abuse prevention, and security protection.
• Complying with legal obligations and the requirements of relevant regulatory bodies.
• Conducting internal analysis to improve product quality and the user experience.
• Identifying usage patterns that may indicate problem gambling issues for user protection purposes.

4. Sharing Information with Third Parties

efawin does not sell or rent your personal information to any external party for marketing purposes. However, in the course of operating the platform, we may share data with selected third parties in the following circumstances:

• Payment service providers that process transactions via DuitNow, FPX, Touch 'n Go eWallet, Boost, ShopeePay and crypto asset networks (USDT, BTC, ETH) — data shared is limited to what is necessary to process the transaction.
• Gaming software and casino platform providers that supply game content — information shared is in the form required for technical purposes only.
• Regulatory bodies and qualified authorities when required by law, court order, or licensing requirements.
• Companies within the efawin corporate group for legitimate internal operations management purposes.

All third parties we work with are required to comply with equivalent data security standards and are not permitted to use your information for any purpose outside the scope of their agreement with efawin.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption of data during transmission using 256-bit SSL/TLS protocols.
• Encryption of data during storage on protected servers.
• Strict internal access controls based on the principle of least privilege.
• Continuous system monitoring to detect suspicious activity.
• Regular data backup procedures to ensure continuity of service.
• Mandatory data security training for all staff who handle user data.

While we take all reasonable steps, no system for transmitting or storing data over the internet can be guaranteed 100% secure. You are responsible for keeping your account password confidential and not sharing your login information with anyone.

6. Data Retention Period

efawin retains your personal information for as long as your account is active or as long as it is needed to provide services to you. Once an account is closed, we will retain your data for the period required by Malaysian law and applicable international licensing requirements.

Financial and transaction records are typically retained for the minimum period prescribed by applicable law, which is generally six years from the date of the transaction, to meet reporting and audit obligations.

Data that is no longer needed will be deleted or anonymised in a secure manner. Requests for early data deletion may be submitted, but are subject to assessment based on any outstanding legal obligations that still apply.

7. Cross-Border Data Transfers

As efawin operates under international licensing, your data may be processed or stored on servers located outside Malaysia. Such data transfers are carried out in compliance with recognised protection mechanisms, including valid data processing agreements and established security standards.

We ensure that a level of data protection equivalent to the requirements of Malaysia's PDPA is maintained for all cross-border data transfers, regardless of where the data is processed.

8. Cookies and Tracking Technologies

efawin uses cookies and similar tracking technologies to improve the user experience, analyse usage patterns, and ensure the platform functions properly. The types of cookies we use include:

• Session cookies — required to maintain your login status during an active session.
• Preference cookies — store your chosen settings such as language and interface display.
• Analytics cookies — help us understand how users interact with the platform for improvement purposes.
• Security cookies — used to detect and prevent fraudulent activity.

You can control cookie settings through your web browser. However, blocking certain cookies may affect the functionality of some parts of the efawin platform.

9. Privacy Policy Updates

efawin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or how the platform operates. Any significant updates will be communicated to you via a notice on the platform or by email to your registered address.

Continued use of the efawin platform after the effective date of an update constitutes your acceptance of the latest version of the Privacy Policy. We encourage you to review this page periodically to stay informed about how we handle your information.