Privacy Policy

1. Introduction

eva1118 ("we", "us", "the Platform") is committed to protecting the personal data and privacy of its Members and website visitors. This Privacy Policy applies to all personal data collected and processed through the eva1118 website at https://eva1118.club, including during account registration, gameplay, financial transactions, customer support interactions, and marketing communications.

By creating an eva1118 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy forms part of the eva1118 Terms & Conditions and should be read together with them.

2. Personal Data We Collect

eva1118 collects the following categories of personal data:

Identity & Contact Data

• Full legal name (as per Malaysian IC / MyKad or passport)
• Date of birth
• Email address
• Malaysian mobile phone number
• Residential address
• Identity document numbers (IC number, passport number) and document images submitted for KYC verification
• Selfie photographs submitted alongside identity documents

Financial Data

• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay account IDs)
• Bank account numbers and bank names for FPX and direct bank transfer transactions
• Deposit and withdrawal history
• Transaction amounts and timestamps
• Source of funds documentation (where requested for enhanced due diligence)

Gaming & Behavioural Data

• Game session records: games played, bet amounts, outcomes, session duration, game type
• Sportsbook betting records: markets selected, stake amounts, odds, settlement outcomes
• Bonus and promotion participation records
• Responsible gaming tool settings (deposit limits, self-exclusion status, session reminders)

Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Login timestamps and session identifiers
• Referral source (if accessed via a promotional link)
• Cookie data and similar tracking technologies (see Section 9)

Communications Data

• Records of live chat, email, and other support interactions
• Records of any complaints or disputes raised
• Marketing communication preferences and opt-in/opt-out status

3. How We Collect Your Data

eva1118 collects personal data through the following means:

• Direct submission: Information you provide during account registration, identity verification, payment transactions, support interactions, and promotional opt-ins.
• Automated collection: Technical and device data collected automatically when you access the Platform, including IP addresses, device fingerprints, and cookie data.
• Third-party sources: Identity verification agencies and fraud screening services (used to verify the accuracy of information you submit). Payment processors and e-wallet operators (transaction confirmation data). Marketing affiliates where you accessed eva1118 via a referred link (referral attribution only; no detailed profile data is received from affiliates).

4. How We Use Your Personal Data

eva1118 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your eva1118 account; authenticating login sessions; processing password resets and security requests.
• Identity verification (KYC): Verifying that you meet the minimum age requirement of 21 years; confirming your identity to satisfy anti-money laundering (AML) and know-your-customer (KYC) obligations under applicable gaming regulations.
• Payment processing: Processing deposits and withdrawals in MYR via your nominated e-wallet or bank account; reconciling transaction records; handling refunds and dispute investigations.
• Game provision and platform operation: Enabling access to live casino, slots, sportsbook, and poker products; maintaining game session records; settling bets and casino results.
• Fraud prevention and security: Detecting and preventing unauthorised access, account takeover, bonus abuse, money laundering, and other fraudulent or prohibited activity.
• Regulatory compliance: Complying with applicable gaming licence conditions, AML reporting obligations, data retention requirements, and any requests from competent regulatory or law enforcement authorities.
• Customer support: Responding to your inquiries, complaints, and support requests; maintaining records of support interactions for quality assurance and audit purposes.
• Marketing communications: Sending promotional emails and platform notifications about offers, new games, and account-relevant updates — only where you have provided consent or where we have a legitimate interest, and subject to your opt-out preferences.
• Platform improvement: Analysing aggregated and anonymised usage data to improve game selection, platform performance, navigation, and user experience.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators; implementing tools and interventions where appropriate; administering self-exclusion requests.

5. Legal Basis for Processing

eva1118 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to fulfil the Member agreement (account creation, game access, payment processing, customer support).
• Legal obligation: Processing required to comply with applicable gaming regulations, AML laws, KYC requirements, and tax reporting obligations.
• Legitimate interests: Fraud prevention, security monitoring, platform analytics, and direct marketing to existing Members — where our legitimate interests are not overridden by your privacy rights.
• Consent: Marketing communications and non-essential cookies — where we rely on your explicit opt-in consent, which you may withdraw at any time.

6. Data Sharing & Disclosure

eva1118 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors and e-wallet operators: Transaction data shared with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, FPX, and other payment service providers solely for the purpose of processing your deposit or withdrawal.
• Identity verification providers: Identity document data shared with KYC and fraud screening service providers for the purpose of verifying your identity and age in compliance with regulatory requirements.
• Game software providers: Session identifiers and game-relevant data shared with our licensed game providers (e.g., Pragmatic Play, PG Soft) to enable game delivery and result settlement. These providers process data only under eva1118's instructions and are contractually prohibited from using the data for their own purposes.
• Regulatory and law enforcement authorities: We are required by law to disclose certain information — including transaction records and identity data — to gaming regulators, financial intelligence units, and law enforcement agencies upon receipt of a lawful request or where mandatory reporting thresholds are triggered.
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving eva1118, Member data may be transferred to the acquiring entity as part of the business assets, subject to equivalent privacy protections.

All third parties with whom eva1118 shares personal data are required by contract to maintain appropriate technical and organisational security measures and to process personal data only for the specified purposes.

7. International Data Transfers

eva1118 is a platform designed primarily for use by Malaysian Members. Some of our service providers — including cloud infrastructure providers, game software vendors, and KYC verification services — may operate servers or processing facilities outside of Malaysia. Where personal data is transferred internationally, eva1118 ensures appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses;
• Transfers only to jurisdictions or service providers that maintain data protection standards materially equivalent to those described in this Policy;
• Use of encryption and access controls that apply regardless of the physical location of data storage.

8. Data Retention

eva1118 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by applicable law or regulation.

• Account and KYC data: Retained for a minimum of 5 years from account closure, in accordance with AML record-keeping obligations typical of international gaming licence conditions.
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction.
• Gaming session records: Retained for a minimum of 3 years from the date of the session.
• Customer support records: Retained for 3 years from the date of the interaction, or longer where the interaction is related to an unresolved complaint or dispute.
• Marketing preference records: Retained until you withdraw consent or request erasure, subject to overriding legal retention requirements.

When data is no longer required, eva1118 securely destroys or anonymises it in accordance with our internal data destruction procedures.

9. Cookies & Tracking Technologies

eva1118 uses cookies and similar tracking technologies (including pixel tags and session storage) on the Platform. Cookies are small data files stored on your device that help us recognise you and improve your experience.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and game state preservation. These cannot be disabled without preventing Platform access.
• Performance and analytics cookies: Used to understand how Members navigate the Platform, which games are most accessed, and where technical errors occur. Data is collected in aggregate and anonymised form.
• Functional cookies: Remember your preferences (language, display settings, game filter selections) to personalise your experience across sessions.
• Marketing cookies: Used only with your consent to track referral sources and support affiliate attribution. We do not use cookies to build third-party advertising profiles.

You may control non-essential cookies through your browser settings. Note that disabling functional cookies may affect platform personalisation features. Disabling strictly necessary cookies will prevent you from accessing your account.

10. Security Measures

eva1118 implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the eva1118 servers;
• Password hashing using industry-standard one-way cryptographic algorithms (plaintext passwords are never stored);
• Two-factor authentication (2FA) available to all Members via SMS OTP;
• Access controls limiting internal access to personal data on a need-to-know basis, with access logged and audited;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Automatic session expiry after configurable idle periods to protect accounts on shared devices.

While eva1118 takes all reasonable steps to secure Member data, no internet-based platform can guarantee absolute security. Members are responsible for maintaining the confidentiality of their own login credentials and for enabling available security features such as 2FA.

11. Your Data Rights

As an eva1118 Member, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data eva1118 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes collected, where you withdraw consent (for consent-based processing), or where processing was unlawful. This right is subject to overriding legal retention obligations — eva1118 cannot erase data it is legally required to retain (e.g., AML transaction records).
• Right to restrict processing: You may request that eva1118 restricts the processing of your data in certain circumstances (e.g., while accuracy is disputed).
• Right to object: You may object to processing based on legitimate interests (including direct marketing) at any time. eva1118 will cease such processing unless compelling legitimate grounds override your objection.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to withdraw consent: Where eva1118 relies on your consent as the legal basis for processing (e.g., marketing emails, non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. Unsubscribe links are included in all marketing emails.

To exercise any of the above rights, contact eva1118 at [email protected] with the subject line "Privacy Request". We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing the request.

12. Protection of Minors

eva1118 strictly prohibits access to the Platform by persons under the age of 21. The Platform is not directed at minors. We do not knowingly collect personal data from anyone under 21 years of age. Where eva1118 discovers that personal data has been collected from a person under 21 — whether through age misrepresentation during registration or otherwise — the relevant account will be immediately suspended, any funds held will be managed in accordance with our regulatory obligations, and the minor's personal data will be deleted to the extent permitted by applicable law.

Parents or guardians who believe their minor child has registered on the Platform are urged to contact eva1118 support immediately at [email protected].

13. Third-Party Links

The eva1118 Platform may contain references to game provider brands and payment method operators. eva1118 does not control the privacy practices of these third parties. This Privacy Policy applies solely to data collected and processed by eva1118 through the eva1118 Platform. Members who interact directly with third-party services are subject to those services' own privacy policies.

14. Changes to This Privacy Policy

eva1118 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to Members via the registered email address and/or a prominent notice on the Platform at least 7 days before the update takes effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform after any update constitutes acceptance of the revised Privacy Policy. If you do not accept the updated Policy, you should close your account before the effective date.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or eva1118's data practices, please contact us:

• Email: [email protected]
• Subject line for privacy matters: "Privacy Request" or "Data Subject Request"
• Live Chat: Available 24/7 via the Platform
• Response time: Written responses to privacy requests within 30 days

eva1118 takes privacy matters seriously. All privacy-related requests are handled by trained staff with access to the relevant Member data records. Your request will be treated with confidentiality.