Privacy Policy — ecwon Platform

ecwon ("we", "us", "our") operates the online casino and sports betting platform accessible at https://ecwon.cam (the "Platform"). We understand that the privacy of our players is of paramount importance, and we are committed to handling your personal data with transparency, care, and in full compliance with applicable data protection laws.

This Privacy Policy ("Policy") describes how ecwon collects, uses, stores, shares, and protects personal data relating to individuals who register for an account, visit the Platform, or otherwise interact with our services ("you", "User", "Player"). It should be read together with our Terms & Conditions and our Responsible Gambling Policy.

By creating an account on ecwon, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not register for or use the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means ecwon, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of ecwon in accordance with our instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data.
• "KYC" means Know Your Customer — the mandatory identity verification process required under anti-money laundering regulations.
• "Cookie" means a small text file placed on your device by a website to store information about your browsing session or preferences.

ecwon collects Personal Data through several channels including account registration, identity verification, platform usage, payment transactions, and customer support interactions. The categories of data we collect are described below.

3.1 Account Registration Data. When you create an account on ecwon, we collect:

• Full legal name
• Date of birth (for age verification — 21+ policy)
• Email address
• Mobile phone number
• Chosen username and encrypted password
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)

3.2 Identity Verification (KYC) Data. To comply with anti-money laundering (AML) obligations and verify your age, we may collect:

• Copies of government-issued identification (Malaysian IC, passport, or driving licence)
• Proof of residential address (utility bill or bank statement dated within 3 months)
• Proof of payment method ownership
• Source of funds documentation for high-value transactions

3.3 Transaction & Financial Data. We record information relating to your financial activity on the Platform:

• Deposit and withdrawal amounts and timestamps
• Payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank)
• Transaction reference numbers
• Betting history, wagering activity, and game sessions

3.4 Technical & Usage Data. When you access the Platform, we automatically collect:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited, session duration, and navigation paths
• Login timestamps and access logs
• Cookie and session identifiers

3.5 Communications Data. Where you contact our support team via Live Chat, WhatsApp, or email, we retain records of those communications including the content of messages, timestamps, and any attachments provided.

ecwon processes your Personal Data for the following purposes:

• Account Management: To create, maintain, and administer your ecwon account, including password resets, account verification, and security notifications.
• Service Delivery: To enable you to access betting markets, casino games, live dealer tables, and all other features of the Platform.
• Payment Processing: To facilitate deposits via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other supported methods, and to process withdrawal requests to your verified payment account.
• Identity & Age Verification (KYC): To verify that you are aged 21 or above and to confirm your identity in accordance with anti-money laundering and responsible gambling obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other unlawful or prohibited activities.
• Responsible Gambling Monitoring: To identify patterns of behaviour that may indicate problem gambling and to apply account controls where appropriate, in accordance with our Responsible Gambling Policy.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable laws and regulations, including responding to lawful requests from regulatory authorities.
• Customer Support: To respond to your queries, complaints, and requests submitted through Live Chat, WhatsApp, or email ([email protected]).
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how the Platform is used and to develop new features and improvements.
• Marketing Communications (where consent has been given): To send you personalised promotions, bonus offers, and platform updates by email or push notification.

ecwon relies on the following legal bases to process your Personal Data:

• Contractual Necessity: Processing required to perform the contract between you and ecwon — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with anti-money laundering laws, age verification requirements, and applicable regulatory obligations.
• Legitimate Interests: Processing undertaken for fraud prevention, security, responsible gambling monitoring, and platform improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where you have provided clear and specific consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

ecwon does not sell, rent, or trade your Personal Data to any third party. We may share your data with carefully selected third parties only in the circumstances described below:

• Payment Service Providers: Necessary financial data is shared with payment processors (including e-wallet operators such as Touch 'n Go, Boost, and GrabPay, and banking intermediaries for DuitNow and FPX transactions) to process your deposit and withdrawal requests.
• Identity Verification Services: KYC documentation may be submitted to accredited identity verification service providers for automated or manual verification of your identity and age.
• Game Content Providers: Limited technical data (such as Player ID and session tokens) is shared with our licensed game studio partners to deliver game content. These providers are prohibited from using this data for any other purpose.
• Fraud Prevention & Security Partners: Technical data including IP addresses and device fingerprints may be shared with fraud detection services to identify and prevent prohibited activity.
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to relevant governmental authorities, regulators, or law enforcement agencies where we are legally required to do so, or where necessary to prevent or detect crime.
• Professional Advisors: In connection with legal proceedings, audits, or compliance reviews, we may share data with legal counsel, accountants, or auditors under strict confidentiality obligations.

All third-party processors engaged by ecwon are required to handle your Personal Data in accordance with this Policy and applicable data protection laws, and are prohibited from using it for their own purposes beyond the scope of their engagement.

ecwon uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and understand how our services are used. The types of cookies we deploy are as follows:

ecwon does not use third-party advertising cookies or behavioural targeting cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary or security cookies will impair Platform functionality.

ecwon retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, or longer where required by regulatory mandate.
• Transaction Records: Retained for a minimum of five (5) years in line with financial record-keeping requirements.
• Support Communications: Retained for a maximum of three (3) years from the date of the last interaction, unless retention is required for ongoing dispute resolution or legal proceedings.
• Marketing Consent Records: Retained from the date of consent until withdrawal, plus a further two (2) years to evidence compliance.
• Technical Logs: Retained for up to twelve (12) months for security monitoring purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

ecwon implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 128-bit SSL/TLS encryption for all data transmitted between your browser and the Platform
• Encryption at rest for sensitive data stored in our databases, including KYC documents and financial records
• Role-based access controls ensuring that only authorised personnel can access Personal Data on a need-to-know basis
• Multi-factor authentication for staff accessing sensitive systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Incident response procedures to detect, contain, and remediate data security incidents promptly

As an ecwon player, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team via Live Chat or at [email protected]. We will respond to all verified requests within 30 days.

Please note that certain rights are subject to exemptions. For example, we are unable to delete data that we are legally required to retain under anti-money laundering or financial record-keeping laws. We will explain any applicable exemptions when responding to your request.

Some of ecwon's third-party service providers may be located in, or process data in, jurisdictions outside Malaysia. Where Personal Data is transferred internationally, ecwon ensures that appropriate safeguards are in place to protect such data, including:

• Transfers to countries recognised as providing an adequate level of data protection;
• Contractual clauses requiring third-party processors to maintain data protection standards equivalent to those applied by ecwon; or
• Other legally recognised transfer mechanisms as applicable.

ecwon's primary data processing infrastructure is designed with Malaysian player data security as a priority. Where possible, we prefer service providers with data centres located within the Asia-Pacific region.

The ecwon Platform is strictly intended for individuals aged 21 years or above. We do not knowingly collect Personal Data from individuals under the age of 21, and the Platform is not directed at or designed for use by minors.

As part of our KYC verification process, all registered players are required to provide proof of age before any withdrawal is processed. Accounts found to belong to individuals under 21 will be immediately suspended, all Personal Data associated with the account will be handled in accordance with applicable law, and any funds deposited will be returned to the originating payment method where legally permissible.

If you believe that ecwon holds Personal Data relating to a minor, please contact us immediately at [email protected] so that we can take appropriate action.

ecwon may send you marketing communications about promotions, bonus offers, new game releases, and platform updates, but only where you have provided your explicit consent to receive such communications during the account registration process or at a later stage through your account preferences.

Marketing communications may be delivered via email, SMS, or on-platform notifications. You may opt out of all marketing communications at any time by:

• Updating your communication preferences in your account settings;
• Clicking the "unsubscribe" link included in any marketing email; or
• Contacting our support team at [email protected] with a request to opt out.

Please note that even if you opt out of marketing communications, ecwon will continue to send you transactional and service-related communications necessary for the operation of your account, such as withdrawal confirmation emails and security notifications. These communications are not marketing and cannot be suppressed while your account remains active.

ecwon reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or our business operations. When material changes are made, we will provide advance notice to registered players via the email address associated with their account and/or through a prominent notice on the Platform.

The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the Platform following the publication of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights, please contact the ecwon data support team through any of the following channels:

When submitting a data rights request, please provide sufficient information to allow us to verify your identity before processing your request. This may include your registered email address, username, and a copy of an identity document. We will not process data rights requests that cannot be adequately verified.

For more information about your rights as an ecwon player or our responsible gambling practices, please visit our Responsible Gambling page or review our Terms & Conditions. For players aged 21 and above only.