Privacy Policy

i5malaysia ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every person who accesses or uses the i5malaysia website at https://i5malaysia.cam and all associated gaming and sports betting services (collectively, "the Services"). This Privacy Policy ("Policy") sets out in clear and transparent terms how we collect, receive, store, use, transfer, and otherwise process personal data in the course of providing the Services to you.

This Policy applies to all visitors, registered users, and players of the Platform, regardless of location, although i5malaysia's Services are primarily directed toward players in Malaysia. When we refer to "personal data" in this Policy, we mean any information that identifies or could reasonably be used to identify you as a natural person, either on its own or in combination with other data.

By registering an account, making a deposit, or otherwise engaging with i5malaysia's Services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

The following definitions apply throughout this Policy:

• "Controller" means i5malaysia, the entity that determines the purposes and means by which personal data is processed.
• "Data Subject" means the natural person (you, the User) to whom personal data relates.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, contact information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Processor" means a third party that processes personal data on behalf of i5malaysia in accordance with our documented instructions.
• "Sensitive Data" refers to special categories of personal data requiring heightened protection, including financial account details, identification documents, and KYC verification materials.
• "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, analytics, preference retention, and fraud prevention, as further described in Clause 7.
• "KYC" (Know Your Customer) means the identity and address verification procedures conducted by i5malaysia in compliance with applicable anti-money laundering and responsible gambling obligations.

i5malaysia collects personal data from you in several ways — directly from you when you register or interact with the Platform, automatically through your use of the Services, and in limited cases from verified third-party sources. The categories of data we collect are as follows:

3.1 Data You Provide Directly

• Registration data: full legal name, date of birth, email address, phone number, and residential address (including city, postcode, and country — primarily Malaysia).
• Identity verification documents: copy of government-issued photo ID (MyKad, passport, or driver's licence), proof of residential address, and selfie verification photographs submitted for KYC purposes.
• Financial data: bank account numbers, e-wallet account details (Touch 'n Go eWallet, Boost, GrabPay), transaction history, deposit and withdrawal records denominated in MYR.
• Communications data: messages, emails, live chat transcripts, and any other correspondence you submit to our support team.
• Responsible gambling preferences: self-exclusion requests, deposit limit settings, and cooling-off period elections.

3.2 Data Collected Automatically

• Technical data: IP address, device type and model, operating system, browser type and version, screen resolution, and device identifiers.
• Session and usage data: pages visited, time spent on each page, games played, wagers placed, betting history, login timestamps, and session duration.
• Location data: approximate geographic location derived from your IP address (country and city level), used for fraud prevention and regulatory compliance.
• Cookie and tracking data: as further described in Clause 7 of this Policy.

3.3 Data Received from Third Parties

• Identity verification results from licensed KYC and AML screening service providers.
• Payment authentication data from Malaysian payment processors, including FPX, DuitNow, and participating banks (Maybank, CIMB, Public Bank, Hong Leong, RHB).
• Fraud risk scores and flaging data from third-party fraud detection platforms used to protect the security of all user accounts.

i5malaysia processes your personal data only for the specific, lawful purposes set out in the table below. We do not use your data for any purpose inconsistent with what is described in this Policy.

We will not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you without your knowledge, except where required by applicable law or where you have provided explicit prior consent.

i5malaysia relies on the following legal bases when processing your personal data:

• Contract Performance: Processing is necessary for the performance of the contract between you and i5malaysia — including providing Services, processing transactions, and managing your account.
• Legal Obligation: Processing is necessary for i5malaysia to comply with applicable legal requirements, including anti-money laundering legislation, age verification obligations, and regulatory reporting duties.
• Legitimate Interest: Processing is necessary for our legitimate interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your freely given, specific, informed, and unambiguous consent — for example, receiving marketing communications about promotions and new game launches — you may withdraw that consent at any time by contacting our support team or updating your account marketing preferences.

i5malaysia does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Personal and financial data is shared with licensed Malaysian payment processors and banking partners (including Maybank, CIMB, Public Bank, Hong Leong, RHB, DuitNow, and FPX infrastructure providers) solely for the purpose of processing your deposits and withdrawal requests.
• KYC and AML Providers: Identity and address verification data is transmitted to licensed KYC screening and AML compliance service providers for the purpose of fulfilling our legal obligations regarding age and identity verification.
• Fraud Prevention Services: Technical and transactional data may be shared with specialist fraud detection providers to protect the Platform and all users from financial crime and account takeover attacks.
• Game and Platform Providers: Gameplay and session data may be shared with licensed game software providers in connection with the delivery and technical support of gaming services on the Platform.
• Legal and Regulatory Authorities: i5malaysia may disclose personal data to law enforcement agencies, regulatory authorities, courts, or government bodies where required or permitted by applicable law, including response to lawful requests, court orders, or where disclosure is necessary to protect the safety of any person or to prevent financial crime.
• Business Transfers: In the event of a merger, acquisition, reorganisation, or sale of substantially all assets of i5malaysia, personal data held by us may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

All third-party processors engaged by i5malaysia are required to process personal data strictly in accordance with our instructions and to implement appropriate technical and organisational security measures consistent with this Policy.

i5malaysia uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and analyse Platform usage. A cookie is a small data file stored on your device when you access the Platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings, preferred game categories, and display configurations, to provide a more personalised experience across sessions.
• Analytics Cookies: Allow us to understand how visitors interact with the Platform — which pages are most visited, where users drop off, and how the Platform performs across different devices. This data is aggregated and used solely for improving Platform quality.
• Security and Fraud Prevention Cookies: Used to identify anomalous behaviour patterns, detect automated bot activity, and flag potentially fraudulent account activity to protect all users.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including session management and personalisation features. For full cookie management, consult the help documentation of your browser (Chrome, Safari, Firefox, Edge, or equivalent).

i5malaysia retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Policy, or as required by applicable legal, regulatory, audit, or dispute resolution obligations.

The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with applicable AML and financial record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the relevant transaction, in accordance with applicable financial regulations.
• KYC documentation: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for up to three (3) years from the date of the relevant interaction, or for the duration of any related dispute.
• Marketing consent records: Retained until consent is withdrawn or for three (3) years from the date of last active account engagement, whichever is earlier.
• Technical and analytics data: Retained in aggregated or anonymised form indefinitely; identifiable technical data retained for up to twenty-four (24) months.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction protocols.

i5malaysia implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive data stored within our database infrastructure.
• Role-based access control (RBAC) ensuring that only authorised personnel with a verified need to access specific data categories may do so.
• Multi-factor authentication (MFA) requirements for all internal staff accessing production systems.
• Regular third-party penetration testing and vulnerability assessment of the Platform infrastructure.
• Continuous real-time monitoring for anomalous access patterns and potential security incidents.
• Formal incident response procedures, including data breach notification protocols aligned with applicable regulatory requirements.

While i5malaysia takes every reasonable precaution to protect your personal data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Subject to applicable data protection legislation and any overiding legal obligations held by i5malaysia (such as AML and KYC retention requirements), you have the following rights in relation to your personal data: