Ikis88 Privacy Policy – Malaysia Personal Data Protection

1. Introduction & Scope of the Privacy Policy

This Privacy Policy ("Policy") is published by ikis88, an online betting platform operating in Malaysia. This policy explains how we collect, store, process, use, and protect your personal data when you use the ikis88 website, mobile app, or any of our services.

This Privacy Policy applies to all users of the ikis88 platform, including website visitors, individuals registering a new account and existing members. By using the ikis88 platform, you agree to the collection and use of your information as described in this Privacy Policy.

Ikis88 acts as the data controller (data controller) for all personal data collected through our platform. We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) and take this responsibility very seriously.

2. Information We Collect

Ikis88 collects various types of information depending on how you interact with our platform. The following are the categories of data we collect:

2.1 Information You Provide Directly

• Full name as per identity card or passport
• MyKad (national ID) or passport number
• Date of birth
• An active Malaysian mobile number
• Email address
• Residential address
• Bank account or eWallet information for financial transaction purposes
• Password (stored in encrypted form — we do not store passwords in plain text)

2.2 Information Collected Automatically

• Your device's IP address
• Web browser type and version
• Device operating system
• Login session information including date, time, and approximate location
• Platform usage data, including games played and bets placed
• Cookie data and device identifiers

2.3 Financial Transaction Information

• Deposit and withdrawal history
• Payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX)
• Transaction reference number
• Account balance and game history

3. How We Use Your Personal Data

Ikis88 uses collected personal data solely for legitimate and necessary purposes. We do not process your data beyond the scope of the purposes stated below:

• Identity and eligibility verification: Ensuring every member meets the minimum age requirement of 18 years and is a legitimate Malaysian resident.
• Account management: Creating, maintaining and protecting your member account on the ikis88 platform.
• Transaction processing: Handling deposits and withdrawals securely and efficiently using Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX.
• Service provision: Gives you access to all games and features on the ikis88 platform, including slots, live casino, Sports Betting, e-sports, and lottery.
• Customer support: Handling enquiries, complaints, and assistance requests submitted to our support team.
• Security and fraud prevention: Monitoring suspicious activity, preventing unauthorised access, and protecting the platform from misuse.
• Legal compliance: To fulfil legal obligations under the PDPA, anti-money laundering (AML) laws, and other applicable regulatory requirements in Malaysia.
• Service communications: Sending important notifications related to your account, security, promotions (where you have consented), and platform updates.
• Platform enhancements: Analysing usage patterns in aggregate and anonymised form to improve the ikis88 platform experience.

4. Data Sharing & Disclosure

Ikis88 does not sell, rent or trade your personal data to third parties. However, under limited and controlled circumstances, we may share your data with the following parties:

• Payment service providers: The necessary transaction information is shared with eWallet providers and FPX services (such as Maybank2u and CIMB Clicks) solely for the purpose of processing your payment.
• Technology service providers: Our technical partners who support platform operations — such as server hosting providers and security systems — are bound by strict confidentiality agreements.
• Third-party game providers: Some basic information is required by our game software providers to verify gaming sessions. No sensitive financial data is shared for this purpose.
• Legal authorities: ikis88 will disclose personal data when required by Malaysian law, court order, or directive from a competent authority such as LHDN or PDRM.
• Fraud prevention agencies: In cases of suspected fraud or money laundering, we reserve the right to share the necessary information with the relevant authorities in the interest of public safety and platform integrity.

All third parties that receive personal data from ikis88 are required to uphold data protection standards equivalent to, or stricter than, those observed by ikis88 itself.

5. Data Security

Ikis88 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and ikis88's servers is encrypted using the latest TLS protocol, ensuring no third party can intercept your information in transit.
• Two-factor authentication (2FA): An additional security layer via SMS OTP that protects your account from unauthorised access, even if your password is compromised.
• Password encryption: Passwords are stored using a strong hashing algorithm (bcrypt) — we have no way of viewing your password in its original form.
• 24/7 Monitoring: The ikis88 cybersecurity team continuously monitors the platform to detect and respond to any security threats.
• Internal access controls: Access to member personal data within ikis88 is restricted to staff on a need-to-know basis only.
• Regular security audits: The ikis88 platform undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities.

6. Cookies & Tracking Technologies

Ikis88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised data on how you use the platform to help us improve site performance and navigation.
• Functional Cookies: Remembering your preferences such as language, display settings, and login information to provide a more personalised experience.
• Analytics Cookies: Used to understand aggregate usage patterns through our internal analytics tools.

You can manage or disable cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the ikis88 platform.

7. Data Retention

Ikis88 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law. Our data retention guidelines are as follows:

• Active account data: Retained for as long as your account is active and in use on the ikis88 platform.
• Financial transaction data: Retained for a minimum of 7 years in line with Malaysian tax and anti-money laundering legal requirements.
• Identity verification data: Retained for the duration of the active account plus 5 years after account closure to meet regulatory requirements.
• Activity and security logs: Retained for 2 years for security investigation and audit purposes.
• Inactive accounts: Accounts inactive for more than 24 months will be archived. Data will be deleted after 5 years of inactivity, subject to ongoing legal obligations.

Once the retention period has ended, your personal data will be securely deleted or anonymised in accordance with ikis88's approved data management procedures.

8. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data, all of which ikis88 is committed to upholding:

To exercise any of the rights above, please contact the ikis88 data protection team by email at privacy@ikis88.com. We will process your request within 21 working days in accordance with the provisions of the PDPA.

9. Children's Data & Minor Protection

Ikis88 has a zero-tolerance policy against the use of the platform by underage individuals. The ikis88 platform not designed, intended, or permitted for use by anyone under the age of 18.

We do not knowingly collect personal data from minors under the age of 18. If we become aware or confirm that personal data belonging to an individual under 18 has been collected without valid age verification, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered an account with ikis88, please contact us immediately at privacy@ikis88.com so that we may take the appropriate action.

10. Privacy Policy Amendments

Ikis88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Whenever material changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered members at least 14 days before changes take effect
• Displaying a prominent notice on the ikis88 platform's main page

Your continued use of the ikis88 platform after any Privacy Policy amendment takes effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact Us – Data Protection Officer

For any enquiries, requests or complaints regarding this Privacy Policy or how ikis88 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Privacy Email: privacy@ikis88.com
• General Support Email: support@ikis88.com
• Live Chat: Available 24/7 directly within the ikis88 platform

We are committed to responding to all privacy-related enquiries within 3 working days and resolve formal requests within 21 working days as required under Malaysia's PDPA.

If you are not satisfied with our response, you have the right to lodge a complaint with Personal Data Protection Commissioner of Malaysia through the official channels of the Department of Personal Data Protection under the Ministry of Communications.