iJaya88 Privacy Policy

This Privacy Policy (the "Policy") is issued by iJaya88 (the "Platform", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with your use of the iJaya88 online gaming platform, accessible at https://ijaya88.cam (the "Website"), including all associated services, features, and communications.

iJaya88 is an English-language online gaming platform built for the Malaysian market. We are committed to protecting the privacy and personal data of every Player who registers and interacts with our services. This Policy explains in clear terms how your personal information is handled from the point of registration through to account closure.

By accessing the iJaya88 platform, completing our registration process, or using any of our services, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which govern the overall use of our platform.

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly — including but not limited to a name, identification number, location data, online identifier, or one or more factors specific to the physical, economic, or social identity of that person.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. iJaya88 acts as the Data Controller for all personal data collected through this platform.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller, pursuant to a binding data processing agreement.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Player" or "User" means any registered account holder on the iJaya88 platform.
• "KYC" means Know Your Customer — the identity and age verification process required for account compliance and withdrawal authorisation.
• "Cookies" means small text files stored on your device by your web browser when you visit the iJaya88 platform, used to maintain session state and collect analytical data.

iJaya88 is the Data Controller responsible for personal data collected through the Website and associated services. As Data Controller, iJaya88 determines the purposes for which your personal data is processed and the means by which that processing takes place.

iJaya88 operates as an English-language online gaming platform targeting the Malaysian market. All data processing activities conducted by iJaya88 are subject to applicable data protection principles, including those governing the lawful, fair, and transparent processing of personal data.

iJaya88 collects personal data through several channels during the course of your interaction with our platform. The categories of data we collect are as follows:

iJaya88 does not collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) except where expressly required for responsible gambling compliance purposes (e.g., self-exclusion records).

iJaya88 processes your personal data only for the purposes specified below, and only where a lawful basis for processing exists:

• Account Registration & Management: To create and maintain your iJaya88 account, verify your identity and age, and provide you with access to our gaming services. Legal basis: performance of contract.
• Payment Processing: To process deposits via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay, and to process withdrawal requests to your verified payment method. Legal basis: performance of contract.
• KYC & Identity Verification: To verify that you meet our minimum age requirement of 21 years and to confirm the legitimacy of your identity and payment method, in compliance with anti-money laundering (AML) and responsible gambling regulations. Legal basis: legal obligation.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited activities. Legal basis: legitimate interests.
• Responsible Gambling Compliance: To monitor player activity for signs of problem gambling behaviour, to enforce self-exclusion requests, and to maintain records of responsible gambling tool usage. Legal basis: legal obligation and legitimate interests.
• Customer Support: To respond to your enquiries, resolve complaints, and communicate with you regarding your account, transactions, or our services. Legal basis: performance of contract.
• Platform Improvement: To analyse aggregated usage data and improve the iJaya88 platform's functionality, design, and performance. Legal basis: legitimate interests.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent. Legal basis: consent (withdrawable at any time).

iJaya88 does not sell, rent, or commercially transfer your personal data to any third party. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: Malaysian banking institutions and e-wallet operators (including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay) receive the minimum personal and financial data necessary to process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and AML compliance service providers may process copies of your identity documents for the purpose of age and identity verification. All such providers are bound by data processing agreements that restrict the use of your data solely to the verification purpose.
• Fraud Detection & Security Services: Specialised fraud prevention and cybersecurity service providers may receive technical data (including IP addresses and device identifiers) to assist in identifying and blocking fraudulent activity on our platform.
• Regulatory & Law Enforcement Authorities: We are required by law to disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where such disclosure is legally compelled or required to comply with AML, counter-terrorism financing (CTF), or other applicable legal obligations.
• Professional Advisors: Legal counsel, auditors, and accountants may receive personal data on a confidential basis where required for compliance, legal proceedings, or audit purposes.

All third parties with whom iJaya88 shares personal data are required to maintain appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose other than the specific purpose for which it was shared.

iJaya88 retains personal data only for as long as is necessary for the purposes set out in this Policy, and in accordance with applicable legal and regulatory retention obligations. The following retention periods apply:

• Account & Transaction Records: Retained for a minimum of 5 years following account closure or the date of the last transaction, in compliance with anti-money laundering (AML) regulatory requirements.
• KYC Documentation: Identity verification documents are retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Communications Records: Live chat transcripts, email correspondence, and support ticket records are retained for a minimum of 3 years for quality assurance and dispute resolution purposes.
• Technical & Log Data: Server logs and technical data (including IP addresses and access logs) are retained for 12 months from the date of collection, unless retention is required for longer in connection with a fraud investigation or legal proceeding.
• Self-Exclusion Records: Records of self-exclusion requests are retained for the full duration of the exclusion period plus a minimum of 5 years to prevent inadvertent re-registration by excluded Players.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with iJaya88's data disposal procedures. Where anonymisation is used, the resulting data does not constitute personal data and may be retained indefinitely for analytical purposes.

iJaya88 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the iJaya88 platform is encrypted using industry-standard SSL/TLS encryption, ensuring that sensitive information including payment details and login credentials cannot be intercepted in transit.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised iJaya88 personnel with a legitimate operational need are granted access, and all access is subject to logging and audit trail requirements.
• Data Storage Security: Personal data is stored on secured servers with firewall protection, intrusion detection systems, and regular vulnerability assessments.
• Incident Response: iJaya88 maintains a documented data breach response procedure. In the event of a security incident that may affect the personal data of Players, we will take immediate remedial action and notify affected Players as required by applicable law.

While iJaya88 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials. You should never share your password with anyone — iJaya88 staff will never ask for your password. If you suspect any unauthorised access to your account, please contact our support team immediately.

iJaya88 uses cookies and similar tracking technologies to operate and improve our platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the iJaya88 platform to function. They maintain your login session, remember your account preferences, and ensure the security of your interactions with the platform. These cookies cannot be disabled without impairing platform functionality.
• Analytical Cookies: We use analytical cookies to collect aggregated data on how Players interact with the iJaya88 platform — including pages visited, time spent on each page, error rates, and navigation flows. This data helps us identify areas for improvement. Analytical cookies do not identify you personally.
• Functional Cookies: These cookies remember your preferences, such as language settings and display options, to provide a more personalised experience during your visit.

You may configure your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies may impair your ability to access certain features of the iJaya88 platform, including the ability to log in to your account.

iJaya88 is an online gaming platform targeting the Malaysian market. In the course of operating our services, certain personal data may be transferred to, processed, or stored in countries outside Malaysia — for example, where cloud infrastructure providers or identity verification services operate servers in other jurisdictions.

Where such transfers occur, iJaya88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within Malaysia. Such safeguards may include:

• Data processing agreements with recipient service providers incorporating contractual data protection obligations;
• Transfer to jurisdictions recognised as providing an adequate level of data protection;
• Implementation of technical and organisational security measures equivalent to those described in Section 8 of this Policy.

By using the iJaya88 platform and consenting to this Privacy Policy, you acknowledge and agree to the potential transfer of your personal data to countries outside Malaysia where necessary for the purposes described in this Policy.

iJaya88 operates a strict minimum age policy. The platform is accessible only to individuals who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21.

As part of our mandatory KYC process, all Players are required to submit identity documentation confirming their date of birth before withdrawal functionality is activated on their account. Where age verification reveals that a Player is under 21 years of age:

• The Player's account will be immediately suspended;
• Any deposits made will be returned to the originating payment method;
• All winnings will be forfeited;
• Any personal data collected in connection with the underage account will be deleted promptly, except where retention is required for legal compliance purposes.

If you are a parent or guardian and believe that a minor has created an account on iJaya88 using false information, please contact our support team immediately. We will investigate and take appropriate action without delay.

As a Player on the iJaya88 platform, you hold the following rights in relation to the personal data we hold about you. You may exercise any of these rights by contacting our support team via live chat or email:

iJaya88 will respond to all data subject requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it. There is no charge for making a data subject request.

With your consent, iJaya88 may send you marketing communications including promotional offers, bonus notifications, new game announcements, and platform updates. These communications may be sent via email, SMS, or in-platform notifications.

You may withdraw your consent to marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email;
• Adjusting your communication preferences in your iJaya88 account settings;
• Contacting our support team via live chat and requesting to be removed from all marketing lists.

Withdrawing consent to marketing communications does not affect your ability to use the iJaya88 platform or access any services. You will continue to receive essential transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — as these are necessary for the operation of your account and cannot be opted out of while your account is active.

The iJaya88 platform may contain references to third-party payment providers and services — such as Maybank, CIMB, Touch 'n Go eWallet, Boost, and GrabPay — which operate under their own independent privacy policies. iJaya88 is not responsible for the privacy practices of these third-party providers.

When you use a third-party payment service to deposit or withdraw funds, you are interacting with that provider's platform directly, and that provider's privacy policy will govern the collection and use of your data in connection with that transaction. We encourage you to review the privacy policies of any third-party services you use in connection with the iJaya88 platform.

iJaya88 does not embed third-party social media widgets, advertising tags, or cross-site tracking pixels on our platform that would allow third parties to collect your personal data without your knowledge.

iJaya88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this Policy will be updated to reflect the date of any revision.

Where a material change is made to this Privacy Policy — for example, where we introduce a new category of data processing or share data with a new category of third party — we will notify registered Players via email or in-platform notification prior to the change taking effect, where reasonably practicable.

Your continued use of the iJaya88 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any revised terms, you may contact our support team to request account closure and deletion of your personal data, subject to our legal retention obligations.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by iJaya88, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 on the iJaya88 platform. Select "Privacy & Data" as the enquiry category when prompted. Average response time: under 3 minutes.
• Support Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Subject Request" for faster routing. This address is displayed as plain text and is not a clickable link.

When submitting a data subject request, please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise or the data processing concern you wish to raise. This will help our team process your request efficiently and within the required timeframe.

For further information about your rights and how to use the iJaya88 platform responsibly, please also visit our Responsible Gambling page and our Terms & Conditions.