Ew8 Privacy Policy — Member Data Protection & Personal Information

Welcome to the ew8 Privacy Policy page. This policy explains in detail how ew8 ("we", "the Company", or "the platform") collects, uses, stores, and protects your personal information ("Member" or "User") when you use ew8's website, mobile app, and all associated services.

By registering an ew8 account or using any of our services, you confirm that you have read and understood this Privacy Policy and agree to how we manage your personal information as described herein.

We respect the privacy of every individual who interacts with our platform. Our commitment to data protection goes beyond a legal obligation — it is a core value of ew8, built on earning the long-term trust of every member in Malaysia.

Ew8 collects various types of information to provide you with a safe, seamless, and effective service. The main categories of data we collect are as follows:

We only collect information that is strictly necessary for the stated purposes. Any additional information you voluntarily provide will be handled under the same principles set out in this Privacy Policy.

Information collected by ew8 is used responsibly for the following purposes, which are lawful and legitimate from both a legal and business standpoint:

• Account management: Create, verify, and manage your member account, including the KYC process required for legal compliance.
• Transaction processing: Process your deposits, withdrawals, and all financial transactions securely and accurately.
• Platform security: Detect and prevent fraud, unauthorised access, account abuse, and suspicious activity.
• Customer support: Answer enquiries, resolve complaints, and provide effective technical assistance to members.
• Service communications: Send important notifications relating to your account, transactions, security updates, and relevant promotional information.
• Platform improvement: Analyse aggregated usage patterns to improve the user experience and develop better new features.
• Regulatory compliance: Meet obligations under applicable laws, including Anti-Money Laundering (AML) and Counter-Terrorism Financing (CFT) requirements.

Ew8 does not sell or rent members' personal information to any third party for marketing or commercial purposes. However, in the following limited situations, your information may be shared:

• Trusted service providers: Third-party companies that assist us in platform operations — such as payment providers, cloud services, and analytics — are all bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.
• Legal requirements: When required by a court order, regulatory authority directive, or legitimate law enforcement request.
• Legitimate interest protection: In cases of fraud, cybercrime, or serious security threats where data disclosure is necessary to protect ew8 or other members.
• Business transfers: In the event of any merger, acquisition, or transfer of company assets, member data will be transferred provided that the new entity adheres to privacy standards at least equivalent to those set out in this Privacy Policy.

Ew8 uses cookies and similar tracking technologies to enhance the user experience and maintain platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Gather information on how you use the platform — such as frequently visited pages — to help us continually improve the overall user experience.
• Functional Cookies: Remember your preferences such as language and display settings so you do not need to reconfigure them on every visit.
• Security Cookies: Helps us detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the ew8 platform. We recommend keeping essential cookies active to ensure your account security.

Ew8 continuously invests in security infrastructure to ensure your personal data remains protected at all times. Key security measures we have implemented include:

• End-to-end encryption: All data transmitted between your device and ew8's servers is encrypted using the latest TLS 1.3 protocol, making it unreadable to any unauthorised party.
• Two-factor authentication (2FA): Members can activate this additional security layer to protect their account from unauthorized access, even if their password has been compromised.
• 24/7 monitoring: An automated security monitoring system operates around the clock to detect and respond to any threats or unusual activity.
• Regular security audits: ew8 conducts regular penetration testing and independent security audits by certified third-party specialists.
• Employee access controls: Only staff with a legitimate business need are granted access to member data, and all access is monitored and recorded.
• Secure data backup: Member data is automatically backed up to separate secure storage locations to ensure system resilience against technical failures.

While no security system can be guaranteed 100% foolproof, ew8 is committed to applying industry best practices to minimise risk and protect the interests of every one of our members.

Under Malaysia's Personal Data Protection Act 2010 and the privacy principles we uphold, you have the following rights regarding your personal data:

Ew8 retains your personal information only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Our general data retention periods are as follows:

• Active account data: Retained for the duration of your active membership and for a specified period after account closure for regulatory compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial and tax legislation in Malaysia.
• KYC records and identity verification: Retained for the period required under applicable anti-money laundering legislation.
• Support communication logs: Retained for 3 years for reference purposes and resolution of any disputes that may arise.
• Technical data and security logs: Retained for 12 months, or longer if required for an ongoing security investigation.

When data is no longer needed and there is no legal obligation to retain it, ew8 will securely delete or anonymize it using industry-recognized methods.

The ew8 platform is a service designed exclusively for adults aged 18 and above. ew8 does not intentionally collect any personal information from children or individuals under the age of 18.

We apply age verification procedures during registration and throughout the KYC process to ensure only eligible individuals use ew8 services. Child safety and protection is a non-negotiable priority.

Ew8 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Whenever material changes are made, we will notify you via:

• Notification email sent to your registered email address.
• An in-platform notification the next time you log in.
• Updates the "Last Updated" date at the top of this document.

Continued use of ew8 services after notice of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the ew8 customer support team through the official channels available on the platform. We are committed to addressing every inquiry seriously and within a reasonable timeframe.