I2malaysia Privacy Policy – Member Personal Data Protection

This Privacy Policy is published by i2malaysia ("we", "Platform") and applies to all users who access or use the i2malaysia platform through our website at i2malaysia.vin or via our mobile app.

We understand that entrusting your personal information to any online platform is a serious decision. That is why we want to be fully transparent about what we do with your data, why we need it, and how we protect it.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy us. Your continued use of our platform constitutes your acceptance of the terms set out in this document.

I2malaysia collects your personal data through several different means. Below is a complete breakdown of the types of data we collect and the sources from which it is collected:

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to platform operations without first obtaining your consent.

• Account Management: To create, verify, and maintain your member account, including the identity verification (KYC) process required by law.
• Payment Processing: To process deposits, withdrawals, and other financial transactions securely and accurately to the bank account registered in your name.
• Gaming Operations: To provide access to all games on the platform, accurately record game results, and ensure a smooth gaming experience.
• Bonus Management: To determine promotional eligibility, manage bonus wagering requirements, and prevent abuse of the promotions system.
• Fraud Prevention: To detect and prevent fraudulent activity, money laundering, and other illegal activities that could harm the platform and other members.
• Customer Support: To process enquiries, complaints, and assistance requests more efficiently and provide accurate resolutions to each issue.
• Service Communications: To send important notices regarding your account, service changes, security updates, and necessary technical information.
• Legal Compliance: To fulfil reporting and compliance obligations under applicable laws, including anti-money laundering requirements.
• Platform Improvements: To analyse aggregated usage patterns in order to improve service quality, enhance the user interface, and develop new features.

If you choose to receive marketing communications from us, we will use your information to send you promotional offers and platform updates. You may withdraw this consent at any time through your account settings.

I2malaysia does not sell, rent, or share your personal data with third parties for marketing purposes. However, there are certain situations where we need to share your information with specific parties to enable the platform to operate properly:

• Payment Service Providers: Minimal transaction information required to process deposits and withdrawals is shared with approved payment providers such as local banks, FPX, Touch 'n Go eWallet and GrabPay. These providers are bound by strict confidentiality agreements.
• Game Providers: Required game session information is shared with game software providers to ensure a smooth gaming experience. This does not include your personal financial information.
• Identity Verification Services: For KYC purposes, your identity information may be verified through licensed and trusted third-party verification services.
• Statutory Authorities: We will disclose the required information to authorities, law enforcement agencies or courts when required by law or court order.
• Audit and Compliance: Independent auditors and industry compliance bodies may require limited access to certain records for audit and compliance verification purposes.

Protecting your personal data is a responsibility we take very seriously. i2malaysia continuously invests in the latest security technologies and procedures to ensure your data is always protected from unauthorized access, loss, or misuse.

The security measures we apply include:

• End-to-End Encryption: All data transmitted between your device and our servers is protected using TLS 1.3 encryption protocol with a 256-bit SSL certificate.
• Two-Factor Authentication (2FA): We provide and encourage the use of two-factor authentication for all accounts as an added layer of protection.
• Continuous Monitoring: Automated monitoring systems operate 24/7 to detect any suspicious activity or unauthorised access attempts.
• Strict Access Control: Only authorised personnel may access member personal data, and such access is limited strictly to what is necessary for them to perform their duties.
• Backup and Recovery: Data is regularly backed up to a separate secure location to ensure swift data recovery in the event of a technical incident.
• Penetration Testing: Our platform undergoes regular security testing by independent security experts to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no security system is completely foolproof. You also play an important role in protecting your account by keeping your password confidential and not sharing your login credentials with anyone.

I2malaysia does not retain your personal data longer than is necessary for the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for the duration of your active membership and up to 7 years after account closure, in line with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial records.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical Data and System Logs: Retained for 90 days for security and technical troubleshooting purposes.
• KYC Documents: Retained for the duration of active membership and 7 years after account closure in accordance with compliance requirements.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the international data protection principles we adhere to, you have the following rights regarding your personal data:

The i2malaysia platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how our platform is used.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security and navigation. These cookies cannot be disabled.
• Preference Cookies: Stores your personal settings such as preferred language and display preferences for a more comfortable experience.
• Analytics Cookies: Collects information about how you use the platform in aggregated, anonymized form for service improvement purposes. This data does not identify you individually.
• Security Cookies: Helps detect and prevent fraudulent activity and unauthorized access to your account.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. Continued use of our platform after a cookie notice is displayed is considered your consent to the use of essential cookies.

In the course of operating our platform, there are situations where your personal data may be transferred to or processed outside Malaysia, particularly by the technical service providers and cloud infrastructure vendors we use.

When such a transfer occurs, we ensure that:

• The recipient country has a level of data protection equivalent to or higher than that required in Malaysia.
• Appropriate data transfer agreements have been established, including internationally recognized standard data protection clauses.
• Service providers in other countries are bound by the same data protection obligations that we adhere to.

The i2malaysia platform is strictly for individuals aged 18 and above. We do not intentionally collect, store or process personal data of any individual under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe that someone under the age of 18 has registered on our platform, please contact our support team immediately.

I2malaysia reserves the right to update or modify this Privacy Policy at any time. Any significant changes will be communicated to you via email or a prominent notice on the platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will be updated each time a change is made. We encourage you to review this page periodically so you are always aware of how we protect your privacy.

Continued use of the i2malaysia platform after any changes to the Privacy Policy take effect constitutes your acceptance of the latest version of that policy. If you disagree with any changes made, you have the right to close your account and withdraw your balance before the changes take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the i2malaysia privacy team is always ready to assist.

You can reach us in several ways:

• Privacy Email: [email protected]
• Live Support: Via the live chat function within the platform while you are logged in.
• FAQ Page: Check FAQ page for answers to frequently asked questions about privacy and data.

We are committed to responding to all privacy-related enquiries within 3 working days. For formal data rights requests (such as access or deletion requests), processing time is up to 30 working days depending on the complexity of the request.