Privacy Policy

This Privacy Policy ("Policy") describes how evo888 ("evo888", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("User", "Player", "you") who access or use the evo888 platform at https://evo888.lat and all associated services (collectively, the "Services").

evo888 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws. We understand that privacy is important to our players — particularly those transacting in Malaysian Ringgit (MYR) through local payment channels such as Touch 'n Go eWallet, Maybank, CIMB, DuitNow, and FPX — and we have designed our data practices accordingly.

By registering an account or using any part of the evo888 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Services and do not register an account.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could be used to identify a natural person, directly or indirectly, including name, identification number, contact details, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, organisation, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, evo888.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of evo888, such as payment gateway providers, KYC verification services, and cloud infrastructure partners.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Cookies" means small text files stored on your device by your web browser when you visit the evo888 platform, used to maintain session state, recognise returning visitors, and analyse platform usage.
• "KYC" (Know Your Customer) means the identity verification process conducted in compliance with anti-money laundering (AML) regulations, requiring players to submit proof of identity and address documentation.

evo888 is the Data Controller responsible for the Personal Data collected through the platform at https://evo888.lat. As Data Controller, evo888 determines the purposes for which your Personal Data is processed and the means by which that processing is carried out.

For any data-related enquiries, access requests, or complaints, you may contact our Data Protection representative using the contact details provided in Section 15 of this Policy.

evo888 collects Personal Data through several channels in the course of operating the platform. The categories of data collected are as follows:

4.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Email address and contact number
• Residential address (city, state, postcode)
• Username and encrypted password
• Preferred currency (MYR)

4.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (Malaysian MyKad, passport, or driving licence)
• Proof of address documentation
• Proof of ownership of payment methods (e.g., e-wallet screenshot)
• Source of funds documentation (where requested for AML compliance)

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts in MYR, timestamps, payment method)
• Payment method identifiers (partial card numbers, e-wallet account names — full card numbers are never stored by evo888)
• Bonus and promotional credit history

4.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session logs — pages visited, features used, session duration
• Game play history (games played, wager amounts, outcomes)
• Cookie identifiers and session tokens

4.5 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with our support team
• Feedback or survey responses submitted voluntarily

evo888 processes your Personal Data for the following specific purposes. Where a processing purpose requires a particular legal basis, that basis is identified in Section 6.

evo888 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

1. Contractual Necessity: Processing is necessary to perform our contractual obligations to you — specifically, to operate your account, process your wagers, and execute deposit and withdrawal transactions in MYR.
2. Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements (21+), and financial record-keeping mandates.
3. Legitimate Interests: Processing is necessary for evo888's legitimate business interests, such as fraud prevention, platform security, and improving the player experience — provided these interests are not overridden by your fundamental rights and freedoms.
4. Consent: For certain optional processing activities — such as sending you promotional emails about new games, bonuses, and EPL or Liga Super Malaysia betting offers — we rely on your freely given, specific, and withdrawable consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

evo888 does not sell your Personal Data. We may share your data with the following categories of third parties, strictly for the purposes identified in this Policy:

• Payment Service Providers: Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), bank transfer gateways (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong), card processors (Visa, Mastercard), and cryptocurrency processors (BTC, USDT) — solely to facilitate your transactions.
• KYC & Identity Verification Services: Third-party identity verification providers engaged to perform document checks and age verification as required by our compliance framework.
• Game Studio Partners: Licensed international game studios whose games are hosted on the evo888 platform. Relevant session and account identifiers may be shared to enable game authentication and outcome recording.
• Cloud & Infrastructure Providers: Hosting and database service providers who store platform data on our behalf under data processing agreements that bind them to confidentiality and security standards equivalent to our own.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or at the direction of a competent government authority, evo888 will disclose Personal Data as legally obligated.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by evo888, subject to strict professional confidentiality obligations.

evo888 retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Where Personal Data is retained solely to satisfy a legal obligation, it will be restricted from further active use and securely deleted once the retention period expires.

evo888 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and evo888 servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Two-factor authentication (2FA) available for all player accounts
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis
• Regular penetration testing and security audits of platform infrastructure
• Intrusion detection and real-time anomaly monitoring on all system endpoints
• Secure data centre facilities with physical access controls, environmental monitoring, and redundant systems

While evo888 takes all reasonable precautions, no data transmission or storage system is entirely risk-free. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect any unauthorised access to your account, contact our support team immediately.

evo888 uses cookies and similar tracking technologies to deliver and improve the platform experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function — session authentication tokens, language preferences, and security cookies. These cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to understand how players navigate the platform — pages visited, features used, session duration. Data is aggregated and anonymised wherever possible.
• Functional Cookies: Remember your preferences such as currency display (MYR), game category selections, and responsible gambling limit settings.
• Marketing Cookies: Used to deliver relevant promotions (e.g., EPL season offers, festive deposit bonuses). These are only activated with your prior consent.

You may manage or withdraw your cookie consent at any time through your browser settings or via the cookie preferences panel on the platform. Please note that disabling strictly necessary cookies will affect your ability to use certain features of evo888.

As an internationally operating platform, evo888 may transfer your Personal Data to servers or service providers located outside of Malaysia. Where such transfers occur, evo888 ensures that appropriate safeguards are in place, which may include:

• Binding data processing agreements incorporating standard contractual clauses
• Transfers to jurisdictions with an adequate level of data protection as recognised under applicable law
• Vendor security assessments prior to onboarding any new Data Processor

By using evo888, you consent to the transfer of your Personal Data to jurisdictions outside Malaysia where such transfers are necessary to deliver the Services to you.

Subject to applicable data protection law, you have the following rights in respect of your Personal Data held by evo888. To exercise any of these rights, please contact our support team via live chat or email. We will respond within 30 calendar days of receiving a valid request.

evo888 is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process prior to the processing of any withdrawal transaction.

If evo888 discovers or is notified that an account has been created by a person under 21 years of age, we will immediately:

1. Suspend and permanently close the account;
2. Reverse any outstanding transactions where possible;
3. Delete all Personal Data associated with the account, except where retention is required for regulatory compliance or fraud investigation purposes.

If you are a parent or guardian and believe your child has created an account on evo888, please contact our support team immediately.

evo888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where changes are material — meaning they affect how we process your Personal Data in a significant way — we will notify you via email to your registered address or via an in-platform notification before the changes take effect.

The "Last Updated" date at the top of this document reflects when this Policy was most recently revised. We encourage you to review this page periodically to stay informed of how evo888 protects your data.

Your continued use of the evo888 platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact evo888 using the following channels:

• Live Chat: Available 24/7 through the evo888 platform — fastest response channel, typically under 3 minutes during Malaysian peak hours
• Email: [email protected] — data subject requests acknowledged within 2 business days; full responses within 30 calendar days

When submitting a data rights request by email, please include your registered account username and a description of the right you wish to exercise. We may need to verify your identity before processing the request to prevent unauthorised data disclosure.