Privacy Policy — How ijaya88a Protects Your Data

01Introduction

This Privacy Policy (the "Policy") is issued by ijaya88a (the "Company", "We", "Us", or "Our"), the operator of the online gaming and sports betting platform accessible at ijaya88a.cam (the "Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data submitted by or collected from users of the Platform (each a "User", "Player", or "You").

ijaya88a serves players across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and beyond — and recognises the importance of maintaining the privacy and confidentiality of personal information in compliance with applicable data protection standards.

By accessing the Platform, creating an Account, or using any service provided by ijaya88a, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease use of the Platform immediately.

02Definitions

For the purposes of this Policy, the following terms carry the meanings assigned below:

Term	Definition
"Personal Data"	Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device identifiers.
"Processing"	Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or erasure.
"Data Controller"	ijaya88a, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
"Data Processor"	Any third-party entity that processes Personal Data on behalf of and under instruction from the Company.
"KYC Data"	Identity and address verification documents submitted by Account Holders as part of the Know Your Customer process, including government-issued identification and proof of address.
"Cookies"	Small text files stored on a User's device by the Platform to enable functionality, session management, and analytics.
"Account"	The registered user account created upon successful completion of the Platform's sign-up process.

03Data We Collect

ijaya88a collects the following categories of personal data in the ordinary course of providing its services:

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify that you meet the minimum age requirement of 21 years);
• Email address and mobile phone number;
• Username and encrypted account credentials;
• Residential address (city, state, postcode — particularly relevant for players in Kuala Lumpur, Penang, Johor Bahru, and other Malaysian locations).

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued identification documents, including Malaysian MyKad (IC), driver's licence, or valid passport;
• Proof of residential address, such as a utility bill (e.g., TNB, Syabas, Indah Water) or bank statement dated within the preceding three (3) months;
• Selfie photograph taken whilst holding the submitted identification document.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Malaysian Ringgit (MYR/RM), timestamps, and reference numbers;
• Payment method identifiers — including the names of Malaysian payment channels used such as DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect — but not full card or bank account numbers which are processed exclusively by licensed payment processors;
• Wagering history, game activity logs, and balance records.

3.4 Technical & Device Data

• IP address and approximate geographic location at time of login;
• Device type, operating system, browser version, and screen resolution;
• Session duration, pages visited, and feature usage patterns within the Platform;
• Cookie identifiers and tracking pixel data (see Section 10).

3.5 Communications Data

• Records of correspondence submitted to our support team via live chat or email;
• Feedback, complaints, and dispute records where applicable.

04How We Collect Data

We collect personal data through the following channels and mechanisms:

• Directly from you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to any Platform communication;
• Automatically as you interact with the Platform through server logs, cookies, session tracking technologies, and analytics tools;
• From third-party payment processors who confirm the outcome of deposit and withdrawal transactions initiated via Malaysian payment channels including FPX, DuitNow, and e-wallet providers;
• From identity verification service providers engaged by the Company to assist in validating KYC documentation;
• From fraud detection and anti-money laundering compliance systems that cross-reference account data against relevant watchlists and databases as required by our regulatory obligations.

05Data Processing & Legal Basis

The Company processes personal data only where a valid legal basis exists. The primary legal bases on which ijaya88a relies when processing your data are as follows:

Legal Basis	Application
Contractual Necessity	Processing required to perform the services you have contracted for — including account management, payment processing, and game delivery.
Legal Obligation	Processing necessary to comply with applicable anti-money laundering (AML) regulations, KYC mandates, and gaming compliance requirements.
Legitimate Interests	Processing for fraud prevention, platform security, abuse detection, and internal analytics — where such interests are not overridden by your fundamental rights.
Consent	Processing for optional communications such as promotional emails or SMS notifications, where you have provided explicit opt-in consent.

06Purposes of Processing

ijaya88a processes your personal data for the following specific purposes:

• To create and manage your Account, including authentication and access control;
• To verify your identity and age eligibility (21+ requirement) as part of the KYC process;
• To process deposits and withdrawals through Malaysian payment channels and settle winnings in MYR;
• To provide, improve, and maintain Platform features, including sports betting markets, live casino games, and slots;
• To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other prohibited conduct;
• To fulfil our regulatory and legal compliance obligations under applicable gaming and financial regulations;
• To provide customer support and resolve disputes, complaints, or technical queries;
• To send transactional communications — including deposit confirmations, withdrawal status updates, and security alerts — which are necessary to the delivery of our services;
• To send promotional communications, offers, and bonus notifications where you have opted in to receive such communications;
• To conduct internal analytics, performance monitoring, and product improvement activities.

07Data Sharing & Third Parties

ijaya88a does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes under any circumstances. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Licensed payment processors who facilitate deposit and withdrawal transactions via DuitNow, Touch 'n Go eWallet, FPX, Boost, GrabPay, Maybank2u, CIMB Clicks, and other Malaysian payment channels;
• KYC and identity verification service providers engaged to assist with document authentication and age verification;
• Game software providers who supply casino, sports betting, and live dealer products accessible via the Platform;
• Fraud prevention and AML compliance platforms used to screen transactions and account activity against regulatory watchlists;
• Cloud infrastructure and hosting providers responsible for the secure hosting of Platform data;
• Regulatory and law enforcement authorities where disclosure is required by applicable law, court order, or regulatory instruction.

All third-party Data Processors engaged by the Company are bound by contractual data processing agreements that require them to process personal data only in accordance with the Company's instructions and applicable data protection standards.

08Data Retention

The Company retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements. The following indicative retention periods apply:

• Active Account Data: Retained for the full duration of the Account relationship;
• KYC Documentation: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction;
• Support Correspondence: Retained for a period of three (3) years from the date of the relevant interaction;
• Technical Log Data: Retained for a period of twelve (12) months from collection, unless required for longer retention in connection with a fraud investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

09Data Security

The Company implements a comprehensive suite of technical and organisational security measures designed to protect personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit TLS/SSL Encryption applied to all data transmitted between Users and the Platform, ensuring that information — including financial transaction data and login credentials — cannot be intercepted in transit;
• Encrypted data storage with access controls limiting database access to authorised personnel on a strict need-to-know basis;
• Multi-factor authentication (MFA) for administrative access to Platform systems;
• Regular security audits and penetration testing conducted by qualified security professionals to identify and remediate vulnerabilities;
• Intrusion detection systems that monitor Platform infrastructure for anomalous activity on a continuous basis.

Whilst the Company takes all reasonable precautions to protect your data, no system of data transmission or storage is completely immune from security risks. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us promptly in the event of suspected unauthorised access.

10Cookies & Tracking Technologies

ijaya88a uses cookies and similar tracking technologies to operate the Platform, enhance your user experience, and support our security and analytics functions. The categories of cookies deployed on the Platform include:

• Strictly Necessary Cookies: Required for core Platform functionality, including session management, authentication, and security. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred game categories, and deposit method selections.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform — including pages visited, session duration, and feature usage — to inform product improvements.
• Security Cookies: Used to support fraud detection, bot prevention, and suspicious activity monitoring across Platform sessions.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Platform. The Company does not use cookies to serve third-party advertising on the Platform.

11Your Rights as a Data Subject

Subject to applicable data protection legislation, you hold the following rights with respect to your personal data held by ijaya88a:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your Account.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations that require retention (such as AML record-keeping requirements).
• Right to Restriction: You may request that we restrict the processing of your personal data in certain defined circumstances, such as where you contest its accuracy.
• Right to Data Portability: Where processing is based on your consent or contract, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to our support team (see Section 15). We will respond to all verified requests within a reasonable timeframe and in accordance with applicable regulatory timelines.

12Minors & Age Restriction

The Platform is strictly intended for persons aged 21 years and above. ijaya88a does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the KYC process, and any Account found to have been registered by a person under the minimum age will be immediately suspended and all associated data reviewed in accordance with our legal obligations.

If you believe that a minor has submitted personal data to our Platform without appropriate parental or guardian consent, please contact us immediately using the details in Section 15 so that we may take appropriate remedial action.

13International Data Transfers

The Company may transfer personal data to, or process personal data in, jurisdictions outside of Malaysia where our Data Processors, cloud service providers, or other authorised third parties are located. Where such transfers occur, the Company ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that required under applicable data protection law, including the use of contractual data protection clauses with recipient entities.

14Amendments to This Policy

The Company reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Where a material change is made to this Policy, we will notify registered Account Holders via their registered email address or through a prominent notice on the Platform prior to the change taking effect.

Minor clarifications or non-material updates may be made without prior notice. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms.

15Contact & Data Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ijaya88a, you may contact our support team through the following channel:

Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week via the Platform's live chat facility.
Response Time: Data enquiries submitted via email are typically addressed within 8 business hours. Live chat queries are addressed within 2 minutes on average.

When submitting a data rights request or privacy-related enquiry, please include your registered Account username, the nature of your request, and any relevant reference information so that our team can identify and process your request efficiently.