Your privacy matters to us. This Privacy Policy explains exactly what personal data ElitePlay collects, why we collect it, how we use and protect it, and the rights you hold as a member of our platform.
A plain-English overview of how ElitePlay handles your data. The full legally binding clauses are set out in the sections below.
All data transmitted between your device and ElitePlay's servers is protected by 256-bit TLS encryption. Stored personal data — including payment details and identity documents — is held in encrypted form with strict access controls.
ElitePlay does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your data is used solely to operate and improve the Platform, verify your identity, process transactions, and fulfil our legal obligations.
We collect only the data we genuinely need. Every category of personal data we process is tied to a specific, documented purpose — from KYC identity verification to responsible gambling monitoring. We do not collect data speculatively or without a clear legal basis.
ElitePlay respects the principles set out in the Personal Data Protection Act 2010 (PDPA) of Malaysia. Malaysian members have the right to access, correct, and — where applicable — request deletion of their personal data held by us.
Your data is not held indefinitely. We maintain documented retention schedules for every data category. Transactional and identity records are kept for the minimum period required by applicable anti-money laundering regulations (typically five to seven years), then securely deleted.
You may at any time request a copy of the data we hold about you, ask us to correct inaccurate information, withdraw marketing consent, or submit a deletion request where we have no overriding legal basis for continued processing. Contact us at [email protected].
ElitePlay ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of all individuals who interact with our website and services. This Privacy Policy ("Policy") describes how ElitePlay collects, processes, stores, shares, and safeguards personal data in connection with the operation of the online casino and sports betting platform accessible at https://eliteplay.cam.
This Policy applies to all registered members, prospective members who have begun but not completed the registration process, and visitors to the ElitePlay website. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
ElitePlay takes its privacy obligations seriously. We operate in accordance with the principles of the Malaysian Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. Where we process data for members located in other jurisdictions, we apply equivalent levels of care and protection.
The following terms carry the meanings assigned below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Subject" | The natural person to whom the personal data relates — in the context of this Policy, primarily the registered member or website visitor. |
| "Data Controller" | ElitePlay, as the entity that determines the purposes and means by which personal data is processed. |
| "Third-Party Processor" | A service provider engaged by ElitePlay to process personal data on our behalf under a written data processing agreement, including payment processors and identity verification providers. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data, expressed either by a statement or by a clear affirmative action. |
| "KYC" | Know Your Customer — the mandatory identity and age verification process applied to all members of the Platform before withdrawals are processed. |
ElitePlay collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party verification and payment providers. The categories of data we collect include the following:
Full legal name, date of birth, gender, Malaysian identity card number (MyKad) or passport number, nationality, residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Shah Alam, Johor Bahru, Penang), email address, and mobile phone number.
Bank account details (for withdrawals to Maybank, CIMB, Public Bank, Hong Leong, and other Malaysian financial institutions), e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow references, FPX transaction references, cryptocurrency wallet addresses (where applicable), deposit and withdrawal history, wager history, and bonus transaction records.
IP address, browser type and version, operating system, device type and unique identifiers, session timestamps, pages visited, click-stream data, and referring URL. This data is collected automatically when you access the Platform and is used for security, fraud prevention, and platform optimisation purposes.
Records of your communications with ElitePlay's customer support team via live chat, email, and any other channel, including the content of messages, timestamps, and resolution outcomes.
Self-assessment responses, deposit and loss limit settings, cool-off period requests, self-exclusion applications, and session behaviour data used to monitor for indicators of problem gambling in accordance with our responsible gambling obligations.
ElitePlay processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:
ElitePlay uses personal data for the following purposes, each tied to a legal basis identified in Section 4:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity |
| Identity verification (KYC) | Legal obligation, contractual necessity |
| Processing deposits, withdrawals, and wagers | Contractual necessity |
| Bonus and promotion administration | Contractual necessity |
| Fraud prevention and security monitoring | Legitimate interests, legal obligation |
| Anti-money laundering compliance | Legal obligation |
| Responsible gambling monitoring | Legal obligation, legitimate interests |
| Customer support and dispute resolution | Contractual necessity, legitimate interests |
| Marketing and promotional communications | Consent |
| Platform analytics and improvement | Legitimate interests |
ElitePlay does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary for each purpose:
We share transaction-related personal data with licensed payment processors — including the operators of Malaysian e-wallet services (Touch 'n Go eWallet, Boost, GrabPay), DuitNow and FPX network participants, and our banking partners — to facilitate deposits, withdrawals, and fraud screening.
We engage accredited third-party KYC and AML screening providers to verify the identities of our members and screen against international sanctions lists. These providers receive only the minimum data necessary to perform verification.
ElitePlay will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by law or valid legal process, including responses to subpoenas, court orders, and requests from financial intelligence units in connection with AML investigations.
Our platform is hosted and supported by third-party cloud infrastructure and software providers who may process personal data as data processors on our behalf. All such providers operate under written data processing agreements with contractual obligations no less protective than those set out in this Policy.
In the event of a merger, acquisition, or sale of all or a material portion of ElitePlay's business assets, personal data held by us may be transferred as part of that transaction. Affected members will be notified by email prior to any such transfer taking effect and given the opportunity to request deletion of their data.
ElitePlay uses cookies and similar tracking technologies (including local storage, session tokens, and analytics pixels) to operate and improve the Platform. Cookies are small text files placed on your device when you visit our website.
We use the following categories of cookies:
You may manage your cookie preferences at any time through the cookie settings panel accessible from the footer of the ElitePlay website. Please note that disabling strictly necessary cookies will affect your ability to log in and use the Platform.
ElitePlay retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Identity and KYC documents | 6 years from account closure (AML regulatory minimum) |
| Transaction records (deposits, withdrawals, wagers) | 7 years from transaction date |
| Customer support correspondence | 3 years from last interaction |
| Marketing consent records | Until consent withdrawn, then 2 years as evidence of consent |
| Technical / device logs | 13 months (rolling) |
| Responsible gambling records | 5 years from account closure |
At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any individual.
ElitePlay implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Our security programme includes, but is not limited to, the following controls:
In the event of a data breach that poses a material risk to affected individuals, ElitePlay will notify impacted members without undue delay and will take all reasonably practicable steps to mitigate harm.
ElitePlay's infrastructure and certain third-party service providers operate servers in jurisdictions outside of Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that required under Malaysian law, ElitePlay will ensure that appropriate safeguards are in place, which may include:
You may request information about the specific safeguards in place for international transfers of your personal data by contacting us using the details set out in Section 15.
As a data subject under the Malaysian Personal Data Protection Act 2010 and applicable international standards, you have the following rights in relation to your personal data held by ElitePlay:
You may request a copy of the personal data ElitePlay holds about you, together with information about how it is being processed and the legal basis for processing. We will respond to verified access requests within 21 calendar days.
You may request that inaccurate or incomplete personal data be corrected. Where we are unable to process a correction request — for example, because it conflicts with a verified KYC record — we will explain our reasoning in writing.
You may request the deletion of your personal data where we no longer have a legal basis for processing it. Please note that certain data must be retained for statutory periods (see Section 8) and cannot be deleted on request where a legal obligation to retain exists.
Where processing is based on your consent — primarily for marketing communications — you may withdraw that consent at any time by updating your account notification preferences or contacting our support team. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.
You may request a copy of the personal data you have provided to ElitePlay in a structured, commonly used, machine-readable format where technically feasible and where the processing is based on consent or contractual necessity.
You may object to processing based on legitimate interests at any time. ElitePlay will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment or defence of legal claims.
ElitePlay is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage individuals from opening accounts. If we become aware that we have inadvertently collected personal data from a person under 21, we will promptly delete that data and close the associated account.
If you believe that a minor has submitted personal data to ElitePlay, please contact us immediately at the address in Section 15 so that we can investigate and take appropriate action.
The ElitePlay Platform may, from time to time, contain references to external content, partner services, or payment provider portals. When you click on a link to a third-party site, you leave the ElitePlay domain and are subject to the privacy policy of that third party. ElitePlay is not responsible for the privacy practices or content of external websites and encourages you to review the privacy policy of any third-party service you access.
ElitePlay reserves the right to update this Privacy Policy at any time. Where changes are material — that is, where they affect the nature of data collected, the purposes for which it is used, or the rights available to members — we will notify affected members by email at least fourteen (14) days before the revised Policy takes effect.
We encourage all members to review this Policy periodically. The version number and effective date are displayed prominently at the top of this document and are updated with each revision. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.
For all privacy-related enquiries, data rights requests, or concerns about how ElitePlay processes your personal data, please contact our Data Protection team using the details below. Please note that our email address is displayed as plain text and is not a clickable link — please copy it manually into your email client.
For general account support, responsible gambling assistance, or payment queries, please use our 24/7 live chat service accessible from the ElitePlay homepage. Our live chat team can also escalate your query to the Data Protection team if required.
We take data protection seriously — not because we have to, but because we believe our members deserve a platform they can genuinely trust. For players aged 21 and above.
Related policies: Terms & Conditions | Responsible Gambling | About Us