Privacy Policy ewbola — Our Commitment to Protecting Your Personal Data

This Privacy Policy is published by ewbola ("we", "Platform") and applies to all users who access or use ewbola's services through the official website, Android and iOS mobile apps, or any digital channel operated by ewbola.

We take user privacy seriously because it is more than a legal obligation — it is the foundation of the trust you place in us. Every time you register, make a deposit, play, or contact our support team, you are entrusting ewbola with some of your personal information. We do not take that responsibility lightly.

Ewbola collects data through two primary means: data you provide directly to us, and data collected automatically while you use the platform.

Data you provide directly:

• Account registration details such as full name, email address, phone number, and password.
• Identity verification documents (KYC) such as MyKad or passport images submitted for verification purposes.
• Payment method details for processing deposits and withdrawals to your account.
• Information you share when contacting ewbola customer support.

Data collected automatically:

• Access logs include IP address, device type, operating system, and web browser used.
• Platform activity history including games played, bets placed, and transactions made.
• Cookie and session identifier data to ensure the platform functions correctly.

Data collected by ewbola is used solely for legitimate and transparent purposes. We do not use your data beyond the scope stated in this policy:

• Account Operations: Managing your account, processing logins, verifying identity, and keeping your account secure.
• Payment Processing: Processing deposits, verifying withdrawals, and maintaining your financial transaction records.
• Legal Compliance: Fulfilling KYC obligations, anti-money laundering (AML) compliance, and applicable regulatory reporting requirements.
• Platform Security: Detecting and preventing fraud, unauthorised access, and platform abuse.
• Customer Support: Resolving complaints, answering queries, and assisting you with technical issues.
• Platform Improvement: Analysing usage patterns to improve features and the overall user experience.
• Marketing Communications: Sending relevant promotional information — only if you have given consent to receive it.

Ewbola does not sell or transfer users' personal data to third parties for marketing or commercial purposes. However, in certain situations, your data may be shared with the following parties:

• Payment Service Provider: Approved payment gateways require the information necessary to process your financial transactions securely.
• KYC Service Provider: Third-party identity verification platforms that help us verify user documents — all providers are bound by strict confidentiality agreements.
• Game Provider: Gaming companies providing casino content on the ewbola platform receive only the minimum session data required for game functionality.
• Legal Authority: ewbola will disclose user information to authorities when required to do so by law, court order, or a valid official investigation.

Ewbola makes serious investments in data security infrastructure. The following are the technical and organisational measures we implement to protect your data:

• SSL/TLS 1.3 Encryption: All communications between your device and ewbola servers are encrypted using the latest security protocols.
• Stored Data Encryption (At-Rest Encryption): Sensitive data stored in the ewbola database is protected with AES-256 encryption — the same standard used by international banking institutions.
• Layered Access Controls: Only ewbola staff with a legitimate work need may access user data, and every access is logged for audit purposes.
• 24/7 Monitoring: An automated threat monitoring system operates around the clock to detect any unauthorised access attempts.
• Regular Backups: User data is backed up every six hours across geographically separate redundant systems to ensure continuity.
• Regular Security Testing: ewbola conducts regular penetration testing by independent third parties to identify and patch potential vulnerabilities.

Ewbola uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login verification and secure sessions. Cannot be disabled without affecting platform functionality.
• Functional Cookies: Remembering your preferences such as language choice and display settings.
• Analytics Cookies: Helps us understand how users interact with the platform for improvement purposes — this data is collected in aggregate form and cannot be individually identified.
• Marketing Cookies: Used to display relevant promotions to you — can be disabled via your preference settings.

You may manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect certain functions of the ewbola platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy principles, you have the following rights regarding the personal data held by ewbola. Further details on each right are outlined in the User Rights section below.

Ewbola retains users' personal data only for as long as necessary to fulfil the purpose of its collection or as required by law:

• Active Account Data: Retained for as long as your ewbola account is active and in use.
• Financial Transaction Data: Retained for seven (7) years after a transaction occurs, in line with accounting and anti-money laundering legal requirements.
• KYC Data (Verification Documents): Retained for five (5) years after account closure, as required by financial compliance regulations.
• Access Logs & Security: Retained for two (2) years for security investigation purposes.
• Post-Account Closure Data: Data not subject to legal retention requirements will be deleted within 90 days of account closure upon user request.

The ewbola platform is strictly limited to individuals aged 18 and above. ewbola does not intentionally collect data from underage individuals. Our KYC and age verification processes are part of our active efforts to ensure no underage users can access this platform.

If we identify that data has been collected from a person under 18 without valid age verification, the account will be closed and the data deleted immediately without delay.

Ewbola reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform operations, legal requirements, or evolving industry practices.

When significant changes occur, ewbola will notify users via in-account notifications and their registered email address at least 14 days before the changes take effect. Continued use of the ewbola platform after the effective date of any amendment will be considered acceptance of the revised terms.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent amendment to this document.

If you wish to exercise any of your privacy rights, have questions about how we handle your data, or want to raise a privacy complaint, please contact us via:

• Live Chat: Available 24/7 on the ewbola website and app — the fastest way to handle urgent privacy requests.
• Email: [email protected] — for detailed enquiries or official data requests.
• FAQ: Visit the page FAQ us for answers to general privacy-related questions.

Ewbola strives to respond to all privacy-related enquiries within 30 working days from the date of receipt. For cases requiring identity verification, response times may be longer.