Es125 Privacy Policy – Personal Data Protection for Malaysian Players

1 Data We Collect

In operating the es125 platform, we may collect the following categories of personal data from you:

Identity Data:

• Full name as stated in your official identification document (MyKad).
• National identity card number (MyKad) or passport number.
• Date of birth for age verification purposes (18 years and above).
• Current residential address in Malaysia.
• Images of identity documents where required for the KYC (Know Your Customer) process.

Contact Data:

• An active email address used for es125 account communications.
• An active Malaysian phone number for OTP verification and important communications.

Financial Data:

• Payment method details used – including account name, e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), bank account numbers for FPX (Maybank2u, CIMB Clicks), or DuitNow account details.
• Records of deposit and withdrawal transactions at es125.
• Gaming and betting activity history.

Technical Data:

• Your device's IP address when accessing the es125 platform.
• Your device's web browser type and operating system.
• The time and date of your access to the es125 platform.
• Cookie data and similar tracking technologies.
• Activity logs within the es125 platform for security and audit purposes.

2 How We Collect Your Data

Your personal data is collected through various means during your interactions with the es125 platform:

• Account Registration: When you register a new account at es125.my, you provide your identification and contact details directly to us through the online registration form.
• Identity Verification (KYC): When identity verification is required – typically before your first withdrawal or upon reaching certain transaction thresholds – you will be asked to submit a copy of your identity document to the es125 team.
• Financial Transactions: Each time you make a deposit or withdrawal through an es125-supported Malaysian payment method, we receive the necessary transaction information from the respective payment service provider.
• Platform Usage: Technical data is collected automatically via cookie technology, tracking pixels, and server logs while you browse and use the es125 platform.
• Customer Support Communications: When you contact the es125 support team via live chat or email, the information you provide during that interaction will be recorded and stored for reference and service improvement purposes.
• Survey Form Submissions: If you participate in any survey or customer satisfaction study conducted by es125, the data you provide will be collected for the purpose of platform improvement.

3 How We Use Your Data

The personal data we collect is used solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and managing your es125 account — including secure login, account activity monitoring, and account-related communications.
• Transaction Processing: Processing deposits and withdrawals you make through es125-supported Malaysian payment methods, including Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and ShopeePay.
• Legal Compliance: To fulfil applicable legal and regulatory obligations — including KYC requirements, anti-money laundering (AML) compliance, and reporting required by Malaysian authorities.
• Platform Security: Detect and prevent fraudulent activity, account misuse, unauthorised access, and other security threats that may compromise the es125 platform or our members.
• Service Improvement: Analyses aggregate es125 platform usage patterns (without identifying individuals) to improve design, performance, and overall user experience.
• Marketing Communications: To send you information about promotions, new offers, and es125 platform updates — provided you have given your consent to receive marketing communications. You may withdraw this consent at any time.
• Customer Support: To resolve enquiries, complaints, and technical issues you report to the es125 support team more efficiently and effectively.

4 Disclosure to Third Parties

Es125 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, in certain limited circumstances, we may share your personal data with the following parties:

• Payment Service Providers: Data required to process your financial transactions is shared with the Malaysian payment service providers we work with — such as FPX providers, e-wallet gateways, and DuitNow processors. All such providers are bound by strict confidentiality agreements with es125.
• Game Software Providers: Game session information required to operate games on the es125 platform may be processed by third-party game software providers working in partnership with us. This data does not include full personal identification details.
• Malaysian Authorities: es125 will fully comply with any lawful request for information from Malaysian authorities — including law enforcement agencies, the Malaysian Communications and Multimedia Commission (MCMC), or any other competent regulatory body — when required by law.
• Professional Advisors: In certain cases requiring legal, financial, or accounting advice, relevant information may be shared with es125's professional advisors who are bound by confidentiality obligations.

In all of the above cases, es125 ensures that the receiving parties are bound by data protection standards equivalent to or higher than those we uphold ourselves.

5 Data Security

Es125 continually invests in the latest cybersecurity infrastructure to protect all members' personal data. Our key security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and es125's servers is protected by the same industry-grade encryption used by leading banking institutions.
• Internal Access Controls: Access to members' personal data within the es125 system is restricted to staff with a legitimate business need only. All access is automatically logged and monitored.
• Two-Factor Authentication (2FA): The es125 internal system uses two-factor authentication for all administrative access to prevent unauthorised entry even in the event that login credentials are compromised.
• Imaging and Backup: Data is regularly backed up across multiple secure server locations to ensure swift data recovery in the event of an unexpected incident.
• Regular Security Audits: es125 conducts regular internal and external security audits to identify and address any vulnerabilities in our systems before they can be exploited.
• Staff Training: All es125 staff who handle members' personal data undergo regular data protection training to ensure best practices are consistently upheld.

While es125 takes all reasonable measures to protect your data, no security system can be guaranteed 100% safe against every cyber threat. In the event of a data security incident involving your personal data, es125 is committed to notifying you and the relevant authorities within the timeframe required under Malaysian law.

6 Cookie Policy

The es125 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the es125 platform and prevent you from logging in or using certain features properly.

7 Data Storage & Retention

Your personal data is stored on secure servers. Data retention periods at es125 are as follows:

• Active Account Data: Retained for as long as your account remains active on the es125 platform, and for the required period following account closure in accordance with legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction, in line with Malaysian financial and tax legal requirements.
• Platform Activity Logs: Retained for 2 years for security purposes, dispute resolution, and internal audits.
• Customer Support Data: Records of interactions with the es125 support team are retained for 3 years from the date of the last interaction.
• Closed Account Data: Once an account is closed, personally identifiable information will be anonymised within 90 days, unless there is a legal requirement to retain it for a longer period.

Once the relevant retention period has expired, es125 will securely delete or anonymise your data using methods recognised by industry standards.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by es125:

To exercise any of the above rights, please contact the es125 Privacy Officer by email at [email protected] stating the type of right you wish to exercise and your es125 account details. We will process your request within 21 business days from the date of receipt, in accordance with Malaysia's PDPA requirements.

9 Children's Data

The es125 platform is intended solely for individuals aged 18 years and above. es125 does not knowingly collect or process any personal data from individuals under the age of 18.

Should we discover that personal data has been collected from a minor, we will take immediate steps to:

• Suspending the account in question immediately.
• Delete that individual's personal data from our systems as promptly as possible.
• Return any remaining funds in the relevant account in accordance with the appropriate procedures.

If you are a parent or guardian and discover that your child under the age of 18 has registered an account at es125, please contact us immediately at [email protected] with the relevant account details so that we can take the appropriate action without delay.

10 Privacy Policy Amendments

Es125 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or relevant technological developments. Where material amendments are made to this Privacy Policy, we will:

• Updating the "Latest Version" date at the top of this page.
• Notifying all registered es125 members via the email address linked to their account.
• Display a prominent notice on the es125.my homepage for at least 7 days before the amendments take effect.

Your continued use of the es125 platform after the effective date of any amendments constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how es125 handles your personal data.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how es125 handles your personal data, please contact us through the following channels:

• Privacy Officer Email: [email protected] – please include "Privacy Enquiry" in the subject line of your email.
• Live Chat: Available 24 hours a day, 7 days a week via the live chat icon at the bottom corner of the es125 platform.
• Response Time: es125 is committed to responding to all privacy-related enquiries within 3 business days.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory body overseeing PDPA compliance in this country.