epicvip Privacy Policy

1. Overview & Scope

This Privacy Policy ("Policy") is issued by epicvip ("epicvip", "we", "us", or "our") and applies to all users ("you" or "your") who access or register on the epicvip platform at https://epicvip.lat, including our web-based casino, sportsbook, and all associated product pages. This Policy forms part of our overall Terms & Conditions and should be read alongside our Terms & Conditions and Responsible Gaming pages.

epicvip is committed to protecting the privacy of our players across Malaysia — whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, or anywhere else in the country. By registering an account with epicvip, you acknowledge that you have read, understood, and agree to the data practices described in this Policy.

2. Information We Collect

We collect personal data in the following categories:

2.1 Registration & Identity Data

• Full legal name (as per your MyKad, Passport, or other government-issued ID)
• Date of birth (for age verification — you must be 21 or above)
• Nationality and country of residence
• Valid email address
• Mobile phone number (Malaysian numbers accepted: +60)
• Username and encrypted password

2.2 Financial & Transaction Data

• Bank account details (e.g., Maybank, CIMB, Public Bank, Hong Leong)
• eWallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay)
• Deposit and withdrawal history
• Transaction timestamps and amounts in MYR
• Bonus and promotional credit usage records

2.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and features used
• Login timestamps and frequency
• Game history, bet amounts, and wagering patterns

2.4 Verification & Compliance Data

• Copies of government-issued identification documents (MyKad, Passport)
• Proof of address documents (utility bills, bank statements)
• Source of funds declarations where required by applicable regulations
• Responsible gaming questionnaire responses and self-exclusion requests

2.5 Communications Data

• Records of your correspondence with our support team
• Feedback, complaints, and dispute records
• Marketing preferences and opt-in or opt-out status

3. How We Use Your Information

epicvip processes your personal data for the following lawful purposes:

1. Account Administration: To create, verify, maintain, and manage your epicvip player account, including identity verification (KYC) and age confirmation.
2. Transaction Processing: To facilitate deposits, withdrawals, and bonus credits in MYR via your chosen payment method, and to maintain accurate financial records.
3. Legal & Regulatory Compliance: To fulfil our obligations under applicable Malaysian laws, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements, and to respond to lawful requests from regulatory authorities.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other security threats.
5. Responsible Gaming: To monitor wagering activity for signs of problem gambling, enforce deposit limits, and administer self-exclusion requests in accordance with our Responsible Gaming commitments.
6. Customer Support: To respond to your queries, resolve disputes, and improve the quality of our support services.
7. Service Improvement: To analyse platform usage, fix technical issues, and develop new features and games that better serve Malaysian players.
8. Marketing Communications: To send you promotional offers, bonus notifications, and updates about epicvip — only where you have given explicit consent or where we have a legitimate interest, and always with a clear opt-out mechanism.

4. Sharing & Disclosure

epicvip does not sell, rent, or trade your personal data. We may share your information only with the following categories of recipients, and only to the minimum extent necessary:

• Payment Service Providers: Banks and eWallet operators (e.g., Maybank2u, CIMB Clicks, Touch 'n Go, DuitNow, FPX) to process your financial transactions securely.
• Identity Verification Partners: Third-party KYC and AML screening providers who assist us in verifying your identity and meeting compliance obligations.
• Technology & Hosting Providers: Cloud infrastructure, platform, and security vendors who process data on our behalf under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Government agencies, courts, or law enforcement bodies where we are legally compelled to disclose information.
• Responsible Gaming Organisations: Approved self-exclusion and problem gambling support services, where you have requested referral or where we are required to report.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant successor entity, subject to the same level of protection.

All third-party service providers are contractually bound to handle your data securely and only for the purposes we specify. They are prohibited from using your data for their own marketing or other independent purposes.

5. Cookies & Tracking Technologies

epicvip uses cookies and similar tracking technologies to enhance your experience on our platform. A cookie is a small text file placed on your device when you visit our site. We use the following types:

• Strictly Necessary Cookies: Required for the platform to function — session management, login state, and security tokens. These cannot be disabled.
• Performance & Analytics Cookies: Help us understand how players navigate the site, which games are most popular, and where technical issues arise. Data is aggregated and anonymised.
• Functional Cookies: Remember your preferences such as language, currency display (MYR), and notification settings to personalise your experience.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content about epicvip bonuses and offers. You may opt out at any time via your account settings.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the epicvip platform. For a full list of cookies we use, please contact us at [email protected].

6. Data Security

We implement a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• All data transmitted between your device and epicvip servers is protected by TLS 1.2 or higher encryption.
• Passwords are hashed using bcrypt with per-user salting — we never store plain-text passwords.
• Sensitive financial data is tokenised and never stored in raw form on our servers.
• Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
• We conduct regular internal security audits and third-party penetration testing.
• Our systems are monitored 24/7 for suspicious activity and potential data breaches.

7. Data Retention

epicvip retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention schedule is as follows:

• Active Account Data: Retained for the duration of your account and updated as needed.
• Account Closure Data: Identity and transaction records are retained for a minimum of five (5) years after account closure to satisfy AML and financial regulatory requirements.
• Support Communications: Retained for three (3) years from the date of the interaction.
• Marketing Data: Retained until you withdraw consent or for two (2) years of inactivity, whichever comes first.
• Technical Logs: Retained for up to twelve (12) months for security and diagnostic purposes.

Once the applicable retention period has elapsed, your data is securely deleted or irreversibly anonymised.

8. Your Rights

As an epicvip player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with your registered account email:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may ask us to limit how we use your data in certain circumstances, such as while a dispute is being resolved.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. We will honour all marketing opt-out requests promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all verifiable data rights requests within thirty (30) calendar days. In complex cases, we may extend this period by a further thirty (30) days, with notice to you.

9. Minors & Age Verification

epicvip operates exclusively for adults. Our platform, games, and services are strictly intended for individuals who are 21 years of age or older, in line with responsible gambling standards applicable to Malaysian players.

We employ multi-step age and identity verification processes during registration. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that a minor has provided us with personal data, we will immediately suspend the relevant account and delete all associated data.

If you suspect that a minor has registered on epicvip, please notify us immediately at [email protected].

10. International Data Transfers

epicvip's primary servers are located in secure data centres. In some instances, personal data may be processed by our service providers in jurisdictions outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses
• Transfers only to jurisdictions with recognised adequate data protection standards
• Technical encryption and access controls equivalent to those applied domestically

By using epicvip, you acknowledge that your data may be transferred internationally under these safeguards.

11. Changes to This Policy

epicvip reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Send an email notification to your registered address at least 14 days before the changes take effect
• Display a prominent notice on the epicvip platform

Your continued use of epicvip after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way epicvip handles your personal data, please reach out to our Data Protection team:

• Email: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within five (5) business days.
• Language: Support is available in English, Bahasa Melayu, and Mandarin Chinese.

For concerns relating to responsible gaming, self-exclusion tools, or problem gambling support, please visit our Responsible Gaming page.