Everwin Privacy Policy – Data Protection & Security of Your Information

01 Introduction

Everwin ("we", "Platform", or "Everwin") is an online gaming platform operating under a valid licence and committed to protecting the privacy of all its users. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best-practice data protection standards.

This document details the types of information we collect from you, why we need it, how we use it, who we share it with (where necessary), and the security measures we take to protect it. We also explain the rights you have over your personal data and how to exercise them.

Everwin believes transparency is the foundation of trust. We therefore strive to explain our privacy practices in clear, plain language that every player can understand, rather than in complex legal jargon. If you have any questions after reading this document, our support team is ready to help.

This policy takes effect from January 2026 and supersedes all previous versions. The latest update date is always displayed at the top of this document so you can easily track any changes that have been made.

02 Data We Collect

Everwin collects several categories of personal data depending on how you interact with our platform. Below is a complete table of the data types that may be collected:

Data marked as "Required" is necessary for basic account operations. Failure to provide required data may affect your ability to fully use Everwin's services, including withdrawal processing.

03 How We Collect Data

Everwin collects your personal data through three main channels. Understanding these data sources helps you better manage the information you share with us.

• Information you provide directly: During account registration, the KYC verification process, whenever you contact our support team, or when completing any form on the platform.
• Automatically collected data: When you use the Everwin website or app, our systems automatically record technical data such as your IP address, device information, session cookies, and usage patterns for security and performance purposes.
• Data from authorised third parties: In certain situations, such as third-party identity verification or financial background checks required by AML law, we may receive data from recognised verification service providers.
• Financial transaction data: When you make a deposit or withdrawal, our payment providers receive the transaction information needed to process and verify your payment.

We do not collect sensitive data such as biometric information, health data or political views. All data collection is purpose-specific and limited to what is strictly necessary to provide a safe and legitimate gaming platform service.

04 Purpose of Data Use

Everwin uses your personal data for clear and lawful purposes. We do not use your data for any purpose beyond those stated below without first obtaining your consent.

• Account management: Creating, verifying and maintaining your gaming account, including mandatory KYC processes.
• Transaction processing: Processing deposits, withdrawals and all financial transactions conducted through the everwin platform.
• Platform security: Detecting, investigating and preventing fraud, unauthorised access, money laundering and activities that violate the terms of service.
• Legal compliance: Meeting the legal obligations, regulations and reporting requirements applicable to online gaming platform operators.
• Service communications: Sending important account notifications, transaction confirmations, security alerts and service updates.
• Product improvement: Analysing aggregated and anonymised usage patterns to improve platform performance, user interface and gaming experience.
• Responsible gaming: Monitoring betting patterns to identify players who may need responsible gaming support and to enforce player-defined limits.
• Marketing communications (with consent): Sending promotional information, bonus offers and everwin-related content only to players who have given explicit consent. You may opt out of marketing communications at any time through your account settings.

Every use of your data has a valid legal basis, whether arising from contractual necessity, a legal obligation, everwin's legitimate interests, or consent you have provided.

05 Data Sharing with Third Parties

Everwin does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in operating the platform, we may need to share certain data with the following categories of third parties, all of whom are bound by strict confidentiality agreements:

• Payment providers: Financial institutions, payment gateways, digital wallet providers and card processors required to complete your financial transactions.
• KYC verification service providers: Registered and recognised third-party identity verification companies that assist us in verifying player identities to meet AML legal requirements.
• Technology service providers: Cloud hosting providers, email service providers, platform analytics systems and other technical infrastructure providers that assist us in operating our services. All such providers are subject to strict data processing agreements.
• Legal authorities: Law enforcement agencies, regulatory bodies, courts, or government authorities when we are required to do so under applicable law.
• Game providers: Game software developers who provide game content on the everwin platform may receive anonymised game data required to ensure game integrity.

All third parties we work with are required to protect your data to security standards no less stringent than those practised by everwin itself.

06 Data Storage & Security

The security of your personal data is everwin's top priority. We implement multiple layers of technical and organisational protection to ensure your data remains safe from unauthorised access, disclosure, alteration or destruction.

• Encryption of data in transit: All communications between your browser and our servers are secured with TLS 1.3 / 256-bit SSL encryption.
• Encryption of data at rest: Sensitive data including passwords and financial information is stored in encrypted format using the latest encryption algorithms.
• Strict access controls: Access to player personal data is restricted to staff who require it to perform their duties, and every access is recorded in a monitored audit log.
• 24/7 security monitoring: A real-time threat monitoring system operates around the clock to detect and respond to any suspicious activity.
• Regular security testing: Everwin conducts regular penetration testing and security audits by independent third-party experts.

Your data retention period depends on the type of data and applicable legal requirements. Generally, active account data is retained for as long as your account remains active. Financial transaction data is retained for a minimum of seven years to satisfy AML legal requirements.

While we take all reasonable precautions, no security system is completely impenetrable. In the event of any data breach that materially affects your data, we will notify you within the timeframe required by applicable law.

07 Cookies & Tracking Technologies

Everwin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential cookies: Required for core platform functions such as maintaining your login session, remembering language preferences, and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information about how you use the platform (pages visited, time spent, errors encountered) to help us improve performance and user experience. This data is collected in aggregated and anonymised form.
• Functional cookies: Remembering your preferences and settings such as display preferences, language and betting denomination to deliver a more personalised experience.
• Security cookies: Used for verification purposes, fraud prevention, and protection against unauthorised access to your account.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect platform functionality. For a full list of cookies we use and how to manage your cookie preferences, contact our support team.

08 International Data Transfers

In operating the platform, your personal data may be processed and stored on servers located outside Malaysia. This includes the use of cloud services whose data centres may be situated in various countries.

Everwin ensures that any international data transfers are protected by adequate safeguards, including:

• Data processing agreements compliant with international data protection standards.
• Use of recognised standard contractual clauses for cross-border data transfers.
• Ensuring that data recipients in other countries comply with data protection standards equivalent to or higher than Malaysia's PDPA.
• Conducting data transfer risk assessments before authorising any new data transfers to new countries.

By using Everwin's services, you agree to the data transfers described above. If you would like to learn more about the protection mechanisms used for specific international data transfers, you may contact our data protection team.

09 How to Exercise Your Rights

Everwin fully respects your rights under Malaysia's PDPA. To exercise any of the rights described in this section, you may contact our data protection team through the official support channels.

• Data access requests: You may request a copy of the personal data we hold about you. We will provide this information within 21 business days from the date your request is received.
• Data correction: If you find that your data is inaccurate or out of date, please notify us and we will make the necessary corrections within seven working days.
• Marketing consent withdrawal: You may withdraw consent to receive marketing communications at any time through your account settings or by contacting support.
• Deletion requests: You may request deletion of your personal data upon account closure, subject to applicable legal record-retention obligations.

Everwin will not charge any fee for reasonable data rights requests. However, we reserve the right to charge a reasonable fee for requests that are repetitive, unreasonable, or excessive. We reserve the right to refuse requests that are clearly unfounded or that infringe the rights of others.

10 Minor Account Protection

Everwin is an adult gaming platform intended solely for individuals aged 18 and above. We take our responsibility seriously to ensure the platform is not accessed by those who have not reached the required age.

• We do not knowingly collect personal data from individuals under the age of 18.
• All registrants are required to confirm they are 18 years of age or older during the registration process.
• A rigorous KYC verification process helps us confirm each player's true age.
• If we find that we have collected data from someone under the age of 18, we will immediately delete that data and close the account in question.

If you have reason to believe that someone under the age of 18 has registered an account on everwin, please contact us immediately so that appropriate action can be taken without delay.

11 Changes to the Privacy Policy

Everwin reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer.

• You will be notified of any material changes via email to your registered address at least three days before they take effect.
• Notices of significant changes will also be prominently displayed on the platform's home page.
• The "Updated" date at the top of this document will always reflect the latest version.
• Continued use of the everwin platform after the effective date of any changes constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically. A version history of this document is available upon request so you can identify changes made compared to previous versions.

12 Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how everwin handles your personal data, please contact our data protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the live chat icon at the bottom-right corner of the platform.
• Response time: We aim to respond to all privacy enquiries within two working days.

We take every privacy complaint seriously and will investigate and respond promptly and thoroughly. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Department of Personal Data Protection or the relevant authority in your jurisdiction.