Privacy Policy — iduit88a

iduit88a ("the Company", "we", "us", "our") operates the online casino and sports betting platform available at https://iduit88a.cam. As a platform serving players across Malaysia — including users based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — we process personal data in connection with the operation of our services, the management of player accounts, the processing of deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian banks, and our compliance with applicable licensing and regulatory obligations.

This Privacy Policy ("Policy") sets out in clear terms what personal data we collect from players ("you", "your"), the purposes for which that data is processed, the parties with whom it may be shared, how long it is retained, the security measures applied to protect it, and the rights you hold in relation to your personal data.

This Policy applies to all personal data processed by iduit88a in connection with the Platform, whether collected via the website, mobile interface, customer support channels, or third-party payment processors.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, phone number, payment details, and IP address.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" means iduit88a, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of iduit88a under written instruction and subject to appropriate data protection obligations.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of personal data for a stated purpose.
• "Data Subject" means the individual to whom personal data relates — in the context of this Policy, the registered Player or Platform user.
• "KYC Data" means identity and address verification documents collected as part of the Know Your Customer process, including NRIC, passport, and proof of address.
• "Sensitive Personal Data" means categories of personal data that warrant heightened protection, including financial data, identity documents, and data relating to health or vulnerable status.

iduit88a collects personal data only to the extent necessary for the operation of the Platform and compliance with our legal obligations. The categories of data we collect include:

We do not collect special categories of personal data (such as health data, racial or ethnic origin, or religious beliefs) unless specifically required for responsible gambling purposes (e.g., processing a self-exclusion request), in which case such data is handled with heightened confidentiality.

iduit88a collects personal data through the following channels and mechanisms:

iduit88a processes personal data for the following purposes. Each processing activity is limited to what is necessary to fulfil the stated purpose:

• Account management: Creating, maintaining, verifying, and closing player Accounts, including password resets and communication regarding Account status.
• Payment processing: Facilitating deposits and withdrawals in Malaysian Ringgit (MYR) via Eligible Payment Methods; reconciling transaction records; issuing refunds where applicable.
• KYC and AML compliance: Verifying player identity and age (21+ requirement); monitoring transactions for indicators of money laundering, fraud, or suspicious activity; fulfilling reporting obligations to relevant regulatory bodies.
• Platform security: Detecting, investigating, and preventing unauthorised access, fraud, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gambling: Monitoring account activity for indicators of problem gambling; processing self-exclusion requests, deposit limit changes, and cooling-off periods; maintaining exclusion records.
• Customer support: Responding to player queries and complaints; maintaining records of support interactions for quality assurance and dispute resolution.
• Legal compliance: Meeting our obligations under our international gaming licence; responding to lawful requests from regulatory authorities, law enforcement agencies, and courts.
• Analytics and improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, payment processing efficiency, and player experience.
• Marketing communications: Sending promotional communications (subject to your opt-in preferences) regarding bonuses, new games, and platform updates. You may opt out of marketing communications at any time via Account settings.

iduit88a processes personal data on one or more of the following legal bases, depending on the specific processing activity:

iduit88a does not sell, rent, or trade personal data to third-party marketers or advertising networks. Personal data may be shared only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and Malaysian banking partners (Maybank, CIMB, Public Bank, RHB, Hong Leong) receive only the financial and identity data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC service providers may receive copies of identity documents for the purpose of automated or manual verification in compliance with our licensing obligations.
• Game technology providers: Game studios and platform infrastructure providers may receive anonymised session data necessary to deliver games and maintain technical performance. They do not receive financial or identity data.
• Regulatory authorities: We may disclose personal data to our licensing authority, law enforcement agencies, tax authorities, or other government bodies where required by law, court order, or regulatory instruction.
• Fraud prevention services: Transaction data and technical identifiers may be shared with fraud prevention and AML screening services to protect the integrity of the Platform and comply with our licensing obligations.
• Professional advisers: Legal, audit, or compliance advisers may access personal data under strict confidentiality obligations where necessary to provide professional services to iduit88a.

iduit88a retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following indicative retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years from the date of account closure, in compliance with AML and gaming licence record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the completion of the relevant transaction or account relationship, or longer if required by applicable law.
• Communications and support records: Retained for 3 years from the date of the communication, or longer where relevant to an unresolved dispute or regulatory matter.
• Technical logs (IP addresses, session data): Retained for up to 12 months for security and fraud prevention purposes, after which they are deleted or anonymised.
• Marketing consent records: Retained for the duration of the Account plus 3 years to maintain evidence of consent and opt-out history.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained for analytical purposes indefinitely.

iduit88a implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and iduit88a's servers, ensuring the same level of encryption used by major Malaysian banks including Maybank and CIMB.
• Data encryption at rest for all sensitive personal data stored on our servers, including financial data and KYC documents.
• Role-based access controls limiting internal access to personal data to authorised personnel who require it to perform their specific job functions.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities.
• Two-factor authentication options available to players for Account login, providing an additional layer of protection against unauthorised access.
• Incident response protocols to identify, contain, and report personal data breaches in accordance with applicable regulatory requirements.

Notwithstanding the above, no data transmission over the internet or method of electronic storage can be guaranteed as entirely secure. Players are responsible for maintaining the security of their Account login credentials and should contact our support team immediately if they suspect unauthorised access to their Account.

iduit88a uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. The following categories of cookies are used:

Subject to applicable law and the limitations imposed by our regulatory and AML obligations, you hold the following rights in relation to your personal data held by iduit88a. To exercise any of the rights below, please contact our support team at the details provided in Section 15.

iduit88a will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days with notice provided to you. Some rights requests may be refused where fulfilling them would conflict with our legal or regulatory obligations — for example, deletion requests cannot be fulfilled in respect of data we are required to retain for AML compliance purposes.

iduit88a strictly prohibits the registration and use of the Platform by individuals under the age of 21 years. We do not knowingly collect personal data from minors. Age verification is conducted as part of the Account registration process and is enforced prior to any withdrawal being processed.

Where iduit88a becomes aware that personal data has been collected from an individual under 21 years of age — whether through our own verification processes or through notification from a third party — we will take immediate steps to suspend the relevant Account, investigate the matter, and delete all associated personal data to the extent permitted by applicable legal obligations.

If you are a parent or guardian and believe that a minor has accessed the iduit88a Platform or provided personal data to us, please contact our support team immediately using the details in Section 15. We will investigate and respond within 5 business days.

The iduit88a Platform operates under an international gaming licence, and certain elements of our infrastructure, game technology, and payment processing may be hosted or operated in jurisdictions other than Malaysia. As a result, personal data collected from Malaysian players may be transferred to and processed in countries outside Malaysia.

Where personal data is transferred internationally, iduit88a ensures that appropriate safeguards are in place to protect the data, including:

• Contractual clauses in data processing agreements requiring recipients to maintain equivalent data protection standards.
• Transfer only to jurisdictions that maintain adequate legal frameworks for the protection of personal data.
• Technical security measures (encryption, access controls) applied irrespective of the jurisdiction in which data is processed.

If you have questions about the specific jurisdictions to which your personal data may be transferred, please contact our support team.

iduit88a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where amendments are material, we will provide reasonable advance notice via email or a prominently displayed notice on the Platform.

The "Last updated" date at the top of this document will reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following publication of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests in relation to this Privacy Policy, or if you wish to exercise any of your data rights as set out in Section 11, please contact the iduit88a data protection team using the details below. All communications must be in English.

When submitting a data rights request, please include your full name as registered on your Account, your registered email address, a clear description of the right you wish to exercise, and any relevant reference numbers. We may request additional verification of your identity before processing the request to protect against unauthorised access.