Privacy Policy imalaysia2 —
Your Personal Data Protection

This Privacy Policy is published by imalaysia2 ("we", "our platform") and applies to all individuals who register for, browse, or use the imalaysia2 platform in any capacity. It describes the types of personal data we collect, the purposes for which we collect it, how we store and protect it, and your rights as a data subject under Malaysian law.

Imalaysia2 treats privacy not merely as a legal obligation, but as the foundation of trust between our platform and every member. Malaysian players who entrust us with their personal information deserve to know exactly what we do with it — and that is precisely why this document has been written as clearly as possible.

This Privacy Policy should be read together with Terms & Conditions imalaysia2. By registering for or using the imalaysia2 platform, you agree to the data handling practices described in this document.

Imalaysia2 collects personal data through several channels — during account registration, during platform use, during payment processing, and during communications with the support team. Below is a detailed breakdown of the types of data collected and their sources:

Imalaysia2 does not collect sensitive data such as medical information, religious beliefs, or political views, except where required by Malaysian law. We also do not collect data from social media sources without your explicit consent.

Imalaysia2 uses the personal data it collects solely for legitimate and relevant purposes. We do not process your data beyond what is necessary for the following purposes:

• Account management: Create and maintain your account, process registration, verify identity, and ensure login security.
• Payment processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks, and managing your winnings withdrawals.
• Service delivery: Allows you to access and play all games on the imalaysia2 platform, including Live Casino, Sports Betting, slots, poker, and lottery.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-account usage, system manipulation, and any other misuse of the platform.
• Legal compliance: To fulfil obligations under Malaysian law, including the PDPA 2010, anti-money laundering (AML) requirements, and directives issued by relevant authorities.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve the user experience, resolve technical bugs, and develop new features.
• Service communications: Sending account-related notifications, security alerts, system updates, and responses to your customer support enquiries.
• Responsible gambling: Monitor gaming patterns to identify signs of problem gambling and reach out to members who may need support through imalaysia2's responsible gambling programme.

Should imalaysia2 wish to use your data for a new purpose not described above, we will inform you in advance and obtain your consent where required by law.

Imalaysia2 does not sell, rent, or trade members' personal data to any third party. That said, in the course of normal platform operations, we may share personal data with the following parties under limited and controlled circumstances:

• Payment providers: Information required to process transactions is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and payment processors FPX, Maybank2u, and CIMB Clicks. This sharing is kept to the minimum necessary solely to complete your transaction.
• Game providers: Required game session data is shared with third-party game software providers to enable gameplay functionality. All providers are bound by strict data protection agreements.
• Identity verification services: During the KYC process, verification documents may be shared with approved identity verification service providers who are subject to confidentiality agreements.
• Legal authorities: imalaysia2 will disclose personal data to Malaysian government or law enforcement authorities when required by a court order or applicable law.
• Technical services: Technical infrastructure providers — such as cloud computing services and system monitoring solutions — may have limited access to data strictly in a technical capacity.

Imalaysia2 implements robust technical and organisational security measures to protect members' personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures we have in place include:

• 256-bit SSL Encryption for all data transmitted between your device and imalaysia2's servers.
• Data encryption at rest for all sensitive data stored in our databases, including financial information and identity verification documents.
• Two-factor authentication (2FA) available as an additional security layer for member accounts.
• 24/7 security monitoring by the imalaysia2 security team to detect and respond to any suspected threats or intrusion attempts.
• Penetration testing conducted on a regular basis by independent third parties to identify and address system vulnerabilities.
• Internal access controls strictly enforced — only imalaysia2 staff with a genuine operational need are granted access to members' personal data, and every access is automatically logged.
• Regular data backups to ensure service continuity and protect data against accidental loss.

While imalaysia2 implements all reasonably practicable security measures, no digital system can guarantee absolute 100% security. In the event of a data breach affecting members' personal data, imalaysia2 is committed to notifying affected members and the relevant authorities within the timeframes required under Malaysian law.

Imalaysia2 retains your personal data only for as long as it is needed for the purposes described in this policy, or as required by Malaysian law. The following is a general guide to data retention periods by category:

• Active account data: Retained for as long as your imalaysia2 account remains active.
• Financial transaction data: Retained for a minimum of seven (7) years following the transaction date, in accordance with Malaysian financial and AML legal requirements.
• Support communications records: Retained for three (3) years for reference and dispute resolution purposes.
• Technical log data: Retained for 90 days for security and technical troubleshooting purposes.
• KYC documents: Retained for five (5) years after account closure in accordance with anti-money laundering legal requirements.

Once the applicable retention period has expired, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to you as an individual. The data deletion process follows industry-standard procedures that ensure the data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold several rights regarding the personal data that imalaysia2 keeps on you. We respect these rights and make it straightforward for you to exercise them:

• Right of access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.
• Right to rectification: If your personal data is inaccurate or incomplete, you have the right to request that we correct it. You can also update basic information directly through your own account settings.
• Right to withdraw consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing that has already taken place.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data. Such requests are subject to imalaysia2's data retention obligations under Malaysian law.

To exercise any of the rights above, please contact the imalaysia2 Data Protection Officer by email at support@imalaysia2.best stating the right you wish to exercise and your account details. We may require identity verification before processing your request to ensure data security.

Imalaysia2 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand platform usage patterns. Cookies are small text files stored on your device when you visit our platform.

The following describes the types of cookies we use and their purposes:

The imalaysia2 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process personal data belonging to anyone under the age of 18. If we discover that we have received personal data from a minor without the knowledge or consent of a parent or guardian, we will take immediate steps to delete that data and close the relevant account.

If you become aware that a child has registered for or is using the imalaysia2 platform, please contact us immediately at support@imalaysia2.best so that we can take appropriate action without delay. imalaysia2 takes the protection of minors seriously and will treat any such report as a priority.

Imalaysia2 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or new platform features. The latest version will always be available on this page, with the update date clearly noted at the top.

For material amendments — meaning changes that significantly affect how we handle your personal data — we will notify you via an in-platform notification and/or an email to your registered address at least 14 days before the amendment takes effect. This gives you sufficient time to review the changes and make an informed decision.

Continued use of the imalaysia2 platform after any amendment takes effect will be taken as your acceptance of the revised Privacy Policy. If you do not agree with the amendments, please stop using the platform and contact us to close your account and request data deletion in accordance with the prescribed procedure.

For any questions, concerns, or requests relating to this Privacy Policy or how imalaysia2 handles your personal data, please contact our Data Protection Officer through the channels below. We are committed to responding within a reasonable timeframe and to addressing every enquiry seriously.

If you are not satisfied with imalaysia2's response to your privacy inquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the authority responsible for enforcing the PDPA 2010 in Malaysia.