Privacy Policy isma88 — Data Protection & Personal Information

Isma88 collects your personal information only for specific and legitimate purposes. The information collected falls into two main categories: information you provide directly while using the platform, and information collected automatically as you browse our site.

1.1 Information You Provide Directly

When registering a new account or using isma88 services, you may be required to provide the following information:

• Identity Information: Full name (as shown on official identification documents), date of birth, IC number or passport number;
• Contact Information: Active email address, valid Malaysian mobile number;
• Financial Information: Bank account or digital wallet details used for deposits and withdrawals — isma88 does not directly store credit or debit card numbers;
• KYC Verification Documents: Copies of your identity card, passport, bank statement, or other supporting documents required for the identity verification process;
• Account Information: Your chosen username and account preferences you have configured.

1.2 Information Collected Automatically

When you browse and use the isma88 platform, our systems automatically record certain technical information for operational and security purposes:

• Device & Technical Data: IP address, browser type, operating system, device model, screen resolution;
• Session Data: Login date and time, session duration, pages visited, in-platform actions;
• Game Data: Betting records, win and loss history, gameplay patterns — used for security purposes, fraud detection, and regulatory compliance;
• Cookie Data: Language preferences, login status and display settings — see Section 5 for more details on cookie usage.

Isma88 uses collected personal information solely for legitimate purposes that were stated at the time of collection. We will not process your data for any other purpose without prior notice or your consent where required.

• Account Management: Creating, verifying and maintaining your member account; processing new registrations and KYC identity verification;
• Transaction Processing: Processing deposits, withdrawals and refunds; verifying the legitimacy of every financial transaction;
• Customer Support: Responding to enquiries, resolving disputes and providing technical support to members;
• Platform Security: Detecting and preventing fraud, money laundering, account abuse and other security threats;
• Regulatory Compliance: Fulfilling obligations under Malaysian law, including PDPA and financial reporting requirements;
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance;
• Platform Improvements: Analysing usage data in aggregate (not individually) to improve user experience and platform performance;
• Marketing Communications: Sending information about promotions, offers and platform updates — only to members who have consented to receive them.

Isma88 fully respects member privacy. We do not sell, rent, disclose, or share your personal information with third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary and legally permitted:

3.1 Third-Party Service Providers

Isma88 works with carefully selected service providers to support our platform operations. They receive only the data necessary to perform their services and are bound by strict data protection agreements:

• Payment Gateway: FPX, Touch 'n Go, DuitNow and other payment providers for processing financial transactions;
• Game Providers: Third-party game software providers offering slots, Live Casino, and other games on the isma88 platform;
• KYC Services: Identity verification companies that help us securely verify members' documents;
• Cloud Computing Infrastructure: Hosting providers that store data to enterprise-grade security standards.

3.2 Legal Requirements

Isma88 may disclose member personal information to authorities or regulatory bodies when:

• Required by a valid court order, warrant, or legal directive;
• Required to comply with anti-money laundering (AML) or counter-terrorism financing (CFT) obligations;
• There is an urgent need to protect public safety or prevent crime.

Isma88 continually invests in robust information security infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we implement are as follows:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the isma88 servers is encrypted using industry-standard SSL/TLS protocols, ensuring no third party can intercept your information;
• Role-Based Access Control (RBAC): Only staff with a legitimate business need are granted access to member data, with every access logged and audited;
• Two-Factor Authentication (2FA): isma88 supports and encourages the use of 2FA on all member accounts for an added layer of security;
• Periodic Vulnerability Scanning: The isma88 system undergoes regular penetration testing and security scanning by independent cybersecurity teams;
• Encryption of Data at Rest: Sensitive data such as financial information and KYC documents is stored in encrypted format even within internal databases;
• 24/7 Monitoring: A continuous anomaly detection system that identifies and responds to suspicious activity in real time.

Isma88 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyze platform usage patterns. Cookies are small text files stored in your browser when you visit our site.

5.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are critical to platform operations;
• Preference Cookies: Storing your personal settings such as language preference, display theme and platform configurations you have set;
• Analytics Cookies: Collecting aggregate data on how members use the platform to help us understand and improve the overall user experience;
• Security Cookies: Helping identify suspicious activity, prevent fraud and protect member accounts from unauthorised access.

5.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note, however, that disabling essential cookies may affect the functionality of the isma88 platform and your gaming experience. To manage your cookie preferences, refer to the help documentation of your browser (Chrome, Firefox, Safari or Edge).

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and isma88's internal policies, every member holds the following rights regarding their personal information. We are committed to facilitating the exercise of these rights at no additional charge:

To exercise any of the above rights, please contact the isma88 support team via 24/7 live chat or our support email. We will process your request within 14 business days.

Isma88 retains your personal information only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Our data retention principles are as follows:

• Active Account Data: Retained for as long as your account is active and for a reasonable period after account closure for audit and compliance purposes;
• Financial Transaction Records: Retained for a minimum of seven (7) years as required by Malaysian financial laws for audit and tax reporting purposes;
• KYC Documents: Retained for a minimum of five (5) years after account closure, in line with anti-money laundering (AML) requirements;
• Security & Audit Logs: Retained for three (3) years for fraud detection and security investigation purposes;
• Customer Communication Data: Retained for two (2) years for customer service reference and dispute resolution purposes;
• Analytics Cookie Data: Anonymised or deleted within twelve (12) months from the date of collection.

Once the retention period has expired and there is no legitimate or legal basis to continue storage, isma88 will securely delete or anonymise your personal data using established, irreversible data deletion procedures.

Isma88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or developments to the isma88 platform. Whenever a material amendment is made, we will take the following steps to ensure members are informed:

• In-Platform Notices: Displaying a clear notice on the homepage or at the member's next login regarding changes made;
• Email Notifications: Sending notification emails to all active registered members with a summary of key changes;
• Effective Date: Clearly stating the effective date of amendments, with a notice period of at least seven (7) days for non-material changes and thirty (30) days for more significant changes;
• Policy Archive: Maintaining an archive of previous versions of the Privacy Policy that members may request for reference and comparison.

Your continued use of the isma88 platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes made, you have the right to close your account and request deletion of your personal data in accordance with the procedures set out.

If you have any questions, concerns or complaints regarding this Privacy Policy or how isma88 handles your personal information, our Data Protection Officer (DPO) team is ready to assist you through the following channels:

• 24/7 Live Chat: The fastest way to get immediate assistance — available directly within the isma88 platform at all times;
• Privacy Email: [email protected] — please include full details of your inquiry and your account number for faster processing;
• Official Telegram: Follow the official isma88 Telegram channel for Privacy Policy update notifications and the latest platform news.

Isma88 is committed to responding to all privacy-related enquiries within three (3) business days. For formal complaints involving a possible data breach or your PDPA rights, we aim to resolve the matter within fourteen (14) business days from the date the complaint is received.

If you believe that isma88 has not handled your complaint satisfactorily, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia for further investigation under the provisions of PDPA 2010.