Privacy Policy EVO888 – How We Protect the Personal Data of Malaysian Members

EVO888 collects personal data from members through several means — directly when you register or use the platform, and automatically through technologies embedded in the platform. Below are the categories of data we collect and why they are necessary:

EVO888 uses your personal data solely for the following purposes — nothing beyond this list without your additional consent:

• Platform service delivery: Enables you to access football betting, Live Casino, slots, e-sports, and other sports on EVO888. Without this data, we are unable to identify your account or process your bets.
• Financial transaction processing: Handles deposits via Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, FPX Maybank2u, CIMB Clicks, and withdrawals back to the same methods — all in Malaysian Ringgit (MYR).
• Identity verification and legal compliance: Confirms that you are at least 18 years of age, meet anti-money laundering (AML) requirements, and comply with all other applicable legal requirements governing online betting platform operations.
• Account security: Detecting and preventing unauthorized access, fraud, bonus abuse, and conduct that violates EVO888's Terms and Conditions.
• Improving user experience: Analysing platform usage patterns on an aggregate (not individual) basis to improve platform design, speed, and the range of markets on offer.
• VIP program and promotions: Calculating VIP points, managing VIP tier progression, and ensuring the correct promotions are awarded to eligible members based on their playing activity.
• Service communications: Sending important notices related to your account — including deposit confirmations, security alerts, and updates to our Terms or Privacy Policy. These are not marketing emails — they are essential service communications.

EVO888 does not sell, rent or disclose your personal data to third parties for their own marketing or commercial purposes. This is an absolute commitment on our part. However, in the course of operating the platform, we do need to share certain data with selected third parties for legitimate operational purposes:

• Licensed payment processors: The payment processors we use to handle Touch 'n Go, DuitNow, GrabPay, and other Malaysian payment method transactions only receive the data necessary to process the relevant transaction. They are bound by strict confidentiality agreements with EVO888 and are not permitted to use your data for any other purpose.
• Game software providers: Slot and Live Casino providers that partner with EVO888 (such as Pragmatic Play) may receive session data necessary for gameplay to function, but not your personally identifiable information.
• Statutory authorities: EVO888 may disclose personal data to Malaysian regulatory authorities if required by court order, law, or in the course of a legitimate criminal investigation. We will notify you of any such disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition or transfer of EVO888's assets, members' personal data may form part of the transferred assets. You will be notified by email and via an in-platform notice before your data becomes subject to a different privacy policy.

EVO888 employs multiple layers of technical and organisational security controls to protect your personal data against unauthorised access, alteration, disclosure, or destruction. The key measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser or app and EVO888's servers are encrypted using 256-bit SSL — the same security standard used by Malaysia's leading banking institutions, including Maybank and CIMB. This means your data cannot be read even if intercepted in transit.
• Encrypted password storage: Your EVO888 account password is never stored in plain text. We use a one-way hashing algorithm that cannot be decrypted — meaning no one, including EVO888 staff, can ever view your actual password.
• Two-factor authentication (2FA): Every new login from an unrecognised device will trigger an OTP verification sent to your registered Malaysian phone number. This adds an extra layer of security even if your password has been compromised.
• 24/7 security monitoring: EVO888's automated monitoring system runs around the clock to detect suspicious account activity, including login attempts from unfamiliar locations and unusual transaction patterns.
• Data segregation: Members' financial data is stored separately from profile data and is re-encrypted at the database level using distinct encryption keys, adding an extra layer of protection.
• Regular security audits: EVO888 conducts regular security audits and independent penetration testing to identify and address vulnerabilities before they can be exploited.

EVO888 uses cookies — small text files stored on your device — to enhance your experience on the platform. Below are the types of cookies we use and their purposes:

• Session Cookies: Required to maintain your login state during an active session. Without this cookie, you would need to log in again every time you navigate between pages on EVO888. Session cookies are automatically deleted when you close your browser.
• Preference Cookies: Saves your preferences such as interface language, favourite betting markets (Malaysia Super League football, live casino or slots) and your preferred odds format — so you don't have to reconfigure the platform every time you log in.
• Analytics Cookies: Helps us understand how members use the EVO888 platform in aggregate — which pages are visited most, how long sessions last, and which features are used most frequently. This data is used to improve the platform, not to identify individuals.
• Security Cookies: Detecting login patterns and suspicious activity to protect your account from unauthorised access. This is a key component of EVO888's account security system.

You can manage or delete cookies through your browser settings. However, removing certain cookies (particularly session and security cookies) may affect the functionality of the EVO888 platform and your overall experience. We recommend deleting only analytics cookies if you have concerns, and keeping session and security cookies enabled for an optimal and secure experience.

As an EVO888 member, you have the following rights regarding your personal data. These rights can be exercised at any time by contacting our support team via 24/7 Live Chat or email at support@evo888.site:

• Right to Access: You have the right to request a copy of all personal data we hold about you. EVO888 will provide a data report within 14 business days of receiving your request.
• Right to Rectification: If any of your personal data is inaccurate or out of date (for example, an old phone number or an email address no longer in use), you have the right to request that we update it promptly.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data from EVO888's systems. However, this right has certain limitations — we may need to retain specific financial transaction records to meet legal obligations for the minimum period required under Malaysian law.
• Right to Restriction of Processing: In certain circumstances (for example, during a dispute about the accuracy of data), you may request that we restrict the processing of your personal data while the matter is being resolved.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, particularly for marketing communications. Objections will be processed within 5 business days.
• Data Portability Right: You may request that your personal data be provided in a structured, machine-readable format for transfer to another service provider should you choose to do so.

EVO888 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required under Malaysian law. The general principles governing retention periods are as follows:

• Active account data: Retained for as long as your EVO888 account remains active. If you close your account, basic account data will be deleted within 90 days of the closure date.
• Financial transaction records: Deposit and withdrawal transaction records in Malaysian Ringgit (MYR) are retained for a minimum of 7 years from the transaction date, in line with Malaysian legal requirements on financial records and anti-money laundering.
• Betting records: Settled betting records are retained for 3 years for dispute resolution and audit purposes. Records older than 3 years will be anonymised (personal identifiers removed), though aggregated statistical data may be retained.
• Security logs: Security-related access and activity logs are retained for 12 months to support security incident investigations where necessary.
• Support communications: Live Chat session records and support emails are retained for 2 years to ensure service continuity and quality training.

Once the relevant retention period has ended, data will be permanently deleted or anonymized so that it can no longer be linked to any individual. EVO888 runs regular data cleansing processes to ensure that expired data is handled appropriately.

EVO888 takes child protection very seriously. Our platform is exclusively for individuals aged 18 and above without exception. We do not knowingly collect any personal data from individuals under the age of 18.

EVO888's age verification system is designed to identify and prevent access by underage individuals. This includes verification via a Malaysian phone number requiring real-name registration, as well as MyKad or passport verification procedures where required for withdrawals.

If EVO888 finds that personal data has been collected from an individual under the age of 18 — whether through direct registration or through an adult account used by a minor without the account holder's knowledge — the following actions will be taken immediately:

• The account in question will be suspended immediately without prior notice
• All data relating to minors will be permanently deleted from EVO888's systems
• Any remaining account balance will be returned to the original deposit source
• Cases involving the use of an adult account by a minor may be reported to the relevant authorities

EVO888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or updates to platform services. All changes will be published on this page with the latest revision date.

For changes deemed material — that is, changes that significantly affect how we collect, use, or protect your data — EVO888 will:

• Sending email notices to all active members at least 14 days before changes take effect
• Displaying clear notices within the EVO888 platform when members log in
• Maintaining an archive of previous versions of the Privacy Policy, available to members upon request

By continuing to use the EVO888 platform after a revised Privacy Policy takes effect, you are deemed to have accepted the updated version. If you do not agree with any material changes, you have the right to close your account and request the deletion of your personal data (subject to the legal retention limits outlined in Section 7).