Privacy Policy

1 Introduction

evo888h5 ("the Platform", "we", "us", "our") is an online casino and sports betting platform operated at https://evo888h5.cam. We are committed to protecting the privacy and personal data of all users, including visitors, registered players, and verified members of the Platform.

This Privacy Policy sets out in clear, accessible terms how evo888h5 collects, uses, stores, shares, and protects personal data. It also describes the rights available to data subjects and how those rights may be exercised. We encourage all users to read this policy carefully and to contact us if any part requires clarification.

This policy is to be read in conjunction with our Terms & Conditions. In the event of any conflict between this policy and the Terms & Conditions with respect to data handling, this Privacy Policy shall prevail.

evo888h5 processes personal data in accordance with the principles of applicable international data protection frameworks. While Malaysia's Personal Data Protection Act 2010 (PDPA) applies to certain commercial data processing activities involving Malaysian residents, evo888h5 also aligns its practices with broader international standards including the General Data Protection Regulation (GDPR) principles where practicable.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, financial details, and device identifiers.
• "Data Subject" means the individual to whom the personal data relates — in this context, any user or registered player of the evo888h5 Platform.
• "Data Controller" means evo888h5, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party engaged by evo888h5 to process personal data on its behalf, such as payment processors and identity verification service providers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation.
• "KYC" means Know Your Customer identity verification, the process by which we verify player identity using government-issued identification documents.
• "AML" means Anti-Money Laundering — regulatory compliance obligations requiring the monitoring and reporting of suspicious financial activity.

3 Data We Collect

evo888h5 collects personal data through several channels and at different stages of the player relationship. The categories of data we collect include:

4 Legal Basis for Processing

evo888h5 processes personal data only where a valid legal basis exists. The legal bases we rely upon include:

• Contractual Necessity: Processing that is necessary to perform our contract with you, including operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with our regulatory, licensing, AML, and KYC obligations under applicable law.
• Legitimate Interests: Processing that is necessary for our legitimate business interests, including fraud prevention, platform security, improving user experience, and responsible gambling monitoring — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by applicable law, we will request your explicit consent before processing your data for specific purposes, such as marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 How We Use Your Data

Personal data collected by evo888h5 is used for the following purposes:

• To create, maintain, and manage your player account;
• To verify your identity and age in compliance with our 21+ policy and KYC requirements;
• To process deposits, withdrawals, and other financial transactions — including via Touch 'n Go eWallet, Boost eWallet, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and supported cryptocurrency wallets;
• To detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited conduct;
• To provide customer support and respond to enquiries or complaints;
• To deliver and improve our gaming services, including sports betting on EPL, Liga Super Malaysia, and other markets;
• To personalise your experience on the Platform, including game recommendations and promotional targeting where you have consented to receive marketing communications;
• To monitor and enforce responsible gambling obligations, including detecting patterns that may indicate problem gambling behaviour;
• To comply with applicable legal and regulatory obligations, including reporting requirements under AML frameworks;
• To analyse Platform usage patterns and technical performance for the purpose of system improvement.

6 Data Sharing & Disclosure

evo888h5 does not sell, rent, or trade personal data to third parties for commercial purposes. We may share your data with third parties only in the following circumstances:

• Payment Service Providers: We share necessary financial data with payment processors (including e-wallet operators, banks, and cryptocurrency service providers) to facilitate your transactions. These providers are bound by their own data protection obligations.
• Identity Verification Services: We use accredited third-party KYC providers to verify the identity documents you submit. These processors act on our instructions and are contractually bound to maintain data confidentiality.
• Game Software Providers: Usage data relevant to game sessions may be shared with our game provider partners (such as Pragmatic Play, PG Soft, and Evolution Gaming) for technical support and audit purposes. No personally identifiable information is shared beyond what is operationally necessary.
• Regulatory Authorities: We are required by law to disclose certain data to licensing authorities, financial intelligence units, or law enforcement agencies where legally compelled to do so — for example, in connection with AML reporting obligations.
• Service Providers: We engage trusted third-party service providers for functions such as data hosting, IT security, analytics, and customer support infrastructure. All such providers are subject to data processing agreements that restrict use of your data to the specific service purpose.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data held by evo888h5 may be transferred to the acquiring entity, subject to equivalent privacy protections remaining in place.

7 Cookies & Tracking Technologies

evo888h5 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during a gaming session. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Used to collect anonymous, aggregated data on how players interact with the Platform — such as page load times, error rates, and feature usage — to identify areas for technical improvement.
• Functional Cookies: Used to remember your preferences such as language settings, game display options, and deposit limit acknowledgements.
• Analytics Cookies: Used to understand user behaviour patterns at an aggregate, anonymised level for the purpose of Platform optimisation.

Most web browsers allow you to manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling other categories of cookies will not prevent you from accessing the Platform but may reduce certain personalisation features.

evo888h5 does not use third-party advertising cookies or tracking pixels for cross-site advertising purposes.

8 Data Retention

evo888h5 retains personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by applicable law. Our standard retention principles are:

• Active Accounts: Personal data associated with active player accounts is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, we retain core identity, financial transaction, and compliance records for a minimum of five (5) years, as required by anti-money laundering regulations and our licensing obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, in compliance with AML regulations.
• Support Communications: Customer support records are retained for up to three (3) years following resolution of the relevant enquiry.
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security and incident investigation purposes.
• Marketing Data: Where processing is based on consent, data is retained until consent is withdrawn or for a maximum of two (2) years from the last interaction, whichever is earlier.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9 Data Security

evo888h5 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security practices include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to production systems;
• Continuous monitoring for suspicious access patterns and potential security incidents;
• Formal incident response procedures for data breach detection, containment, and notification.

Despite these measures, no method of electronic transmission or storage is completely secure. evo888h5 cannot guarantee absolute security, but we are committed to promptly addressing any security incidents that affect player data.

10 International Data Transfers

evo888h5 operates internationally and may transfer your personal data to, or store it in, countries outside Malaysia. These countries may have different data protection laws to those in Malaysia. Where international transfers occur, evo888h5 takes steps to ensure that an adequate level of protection is applied to your data, including:

• Transferring data only to recipients in countries that provide a level of data protection comparable to international standards;
• Entering into contractual data transfer agreements with third-party recipients that impose data protection obligations equivalent to those applied by evo888h5;
• Applying additional technical safeguards (such as encryption) to data transferred to regions with lower baseline protections.

By using the evo888h5 Platform, you consent to the international transfer of your personal data as described in this policy.

11 Your Rights

Subject to applicable data protection law and our legal retention obligations, registered players have the following rights with respect to their personal data:

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Privacy Request". We will respond to all valid requests within thirty (30) calendar days. We may request proof of identity before processing any request to protect against fraudulent access to another person's data.

12 Children's Privacy

The evo888h5 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has registered an account on evo888h5, please contact our support team at [email protected] so that we may investigate and take appropriate action promptly. We take underage gambling seriously and support all efforts to prevent minors from accessing gambling services.

13 Third-Party Links

The evo888h5 Platform may contain references to third-party game providers, payment processors, and other service partners. While we take care in selecting trusted partners, evo888h5 does not control the privacy practices of third parties and is not responsible for the content or privacy policies of any external websites or services accessed through links or integrations on our Platform.

We encourage you to review the privacy policies of any third-party services you interact with. This Privacy Policy applies solely to data collected and processed by evo888h5 directly.

14 Changes to This Policy

evo888h5 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or service offerings. Where changes are material, we will make reasonable efforts to notify registered players through in-platform notifications or email to the address registered on the account.

The effective date of the most recent version of this policy is indicated in the "Last updated" field at the top of this document. Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with the updated terms, you should cease using the Platform and request account closure.

We recommend that players review this Privacy Policy periodically to remain informed of how evo888h5 handles their personal data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by evo888h5, please contact us through the following channels:

• Email (Privacy & Data Requests): [email protected] — please use the subject line "Data Privacy Request" for all privacy-related enquiries
• Live Chat: Available 24 hours a day, 7 days a week, via the live chat widget on our Platform

We aim to acknowledge all data privacy enquiries within 2 business days and to provide a full response within thirty (30) calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further thirty (30) days with prior notification.

For more information on your rights under applicable Malaysian data protection law, you may contact the Department of Personal Data Protection Malaysia (JPDP). For issues related to responsible gambling, please visit our Responsible Gambling page.