Privacy Policy ewtown
— Your Data, Our Responsibility

Ewtown ("we", "Platform") takes user privacy very seriously. This Privacy Policy is designed to provide full transparency on how we handle your personal data when you register and use the ewtown platform.

This policy applies to all users of the ewtown platform — whether accessed via our official website or mobile app. It covers all data you provide to us directly, as well as data we collect automatically when you use our services.

We comply with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international data protection standards. If you have any questions about how we handle your data, the ewtown customer support team is available via 24/7 live chat.

Ewtown collects several categories of personal data to ensure the service runs smoothly, securely, and in compliance with regulatory requirements. Below is a summary of the data we collect:

Sensitive financial data such as bank card details are not stored directly by ewtown — processing is handled through certified, PCI-DSS-compliant third-party payment processors.

Ewtown uses your personal data only for legitimate and necessary purposes. We do not use your data for any other purpose without your consent. The primary purposes for which we use your data are as follows:

• Identity Verification (KYC): To verify that you meet the age and eligibility requirements before you can fully use the platform, and to comply with anti-money laundering (AML) regulatory requirements.
• Transaction Processing: To process deposits and withdrawals accurately and securely through your chosen payment method.
• Account Security: To detect and prevent unauthorised access, fraud, and suspicious activity that could compromise your account.
• Service Communications: To send you important notifications relating to your account, transactions, and platform updates.
• Customer Support: To provide effective assistance when you contact the ewtown support team.
• Platform Enhancement: To understand how users interact with the platform and make continuous improvements.
• Legal Compliance: To fulfil legal and regulatory obligations applicable to the platform's operations.

Ewtown does not sell, rent, or trade your personal data to any third party for commercial purposes. However, we may share your data in the following limited circumstances:

• Payment Processors: Financial data required to process deposits and withdrawals is shared with certified payment processors such as Touch 'n Go, Boost, FPX, and others. They are bound by strict confidentiality agreements.
• Technology Service Providers: Technical infrastructure providers that help operate the ewtown platform, subject to strict data processing agreements.
• Regulatory Authority: When required by law or by a legitimate regulatory authority, ewtown will disclose the necessary data.
• Law Enforcement: If required by a court order or a lawful request from a competent authority.

Ewtown invests seriously in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key measures we have in place include:

• 256-bit SSL Encryption: All data communications between your device and ewtown's servers are fully encrypted.
• Data Segregation: Personal data and financial data are stored separately with different layers of security.
• Role-Based Access Control: Only staff who require access to specific data to perform their duties are permitted to access it.
• 24/7 Monitoring: Our security systems monitor platform activity around the clock to detect any anomalies or threats.
• Regular Security Audits: ewtown undergoes independent security audits on a regular basis to identify and address any vulnerabilities.
• Two-Factor Authentication (2FA): Available to all users as an extra layer of security for their accounts.

While we take all reasonable steps to protect your data, no security system can guarantee 100% protection against all threats. We encourage users to also take security measures such as using a strong, unique password and enabling 2FA.

Ewtown uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform for improvement purposes.
• Functional Cookies: Remembering your preferences such as language and display settings.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect platform functionality. Cookies are not used to personally identify you or to monitor your activity outside the ewtown platform.

Ewtown retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for the duration of the active account period and for the period prescribed by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
• KYC Records: Retained for a minimum of 5 years after the end of the business relationship in accordance with AML legislation.
• Security Log Data: Retained for 12 months for security incident investigation purposes if required.

When data is no longer needed and the mandatory retention period has ended, ewtown will securely delete or anonymise that data using appropriate procedures.

As an ewtown user, you have the following rights regarding your personal data, in line with Malaysia's PDPA and international standards:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure: Under certain circumstances, you may request that your data be deleted, subject to our legal retention obligations.
• Right to Object to Processing: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request that your data be provided in a machine-readable format.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time.

The ewtown platform is exclusively for users aged 18 and above. We do not intentionally collect, store or process any personal data from individuals under the age of 18.

If we discover that a child's data has been collected without our knowledge, we will take immediate steps to delete the data and terminate the associated account. Parents or guardians who find that their child has registered on ewtown should contact our support team immediately.

Ewtown applies age verification procedures during registration and conducts periodic KYC checks to ensure compliance with minimum age requirements.

Ewtown reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons.

When material amendments are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this policy.
• Sending notifications to all registered users via email or in-platform notifications.
• In the case of highly material amendments, we may request your renewed consent.

Your continued use of the ewtown platform after any amendments take effect constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or complaints regarding our Privacy Policy or how we handle your personal data, please contact the ewtown support team via:

• Live Chat: Available 24/7 directly within the ewtown platform — the fastest way to get a response.
• Support Email: [email protected] — for written enquiries requiring a detailed response.

Our dedicated data privacy management team will take your enquiry seriously and aim to respond within 5 business days. For cases requiring further investigation, we will keep you informed of the status and expected resolution timeline.