Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how imalaysia2 ("the Platform", "we", "us", "our") collects, uses, discloses, and safeguards the personal data of individuals ("you", "User", "Player") who access or use the imalaysia2 website at imalaysia2.cam, including all associated gaming services such as online casino games, live dealer products, sports betting, and platform-related customer communications.

imalaysia2 operates under an internationally recognised gaming licence and is committed to handling personal data in accordance with applicable data protection standards. While imalaysia2 is primarily accessible to players in Malaysia, this Policy applies to all users regardless of geographic location.

By registering an account, depositing funds, or otherwise using the imalaysia2 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, you should not use the Platform.

Definitions

The following terms carry the meanings set out below throughout this Policy:

Data Controller Information

imalaysia2 acts as the Data Controller in respect of personal data collected through the Platform. We determine the purposes for which, and the means by which, your personal data is processed.

imalaysia2 is licensed and regulated under an international gaming regulatory framework. While we serve a substantial user base in Malaysia — including players across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru — our Data Controller obligations are governed by the laws of our licensing jurisdiction, which requires adherence to internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, and data security.

For all data-related queries, requests, or concerns, please contact us via the details set out in Section 15 of this Policy.

Personal Data We Collect

We collect personal data through a number of channels — directly when you provide it during registration or in your interactions with us, automatically when you use the Platform, and from third parties where necessary to verify your identity or process payments.

4.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, phone number, and preferred currency (MYR);
• KYC Verification Data: Government-issued photo ID (e.g., MyKad, passport), proof of address, and proof of payment method ownership;
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet account reference, Maybank2u or CIMB Clicks account details, USDT TRC20 wallet address) — note that full card numbers and banking credentials are never stored by imalaysia2;
• Communications Data: The content of messages you send us via live chat, email ([email protected]), or other support channels;
• Responsible Gambling Data: Self-imposed deposit limits, cooling-off period requests, and self-exclusion requests.

4.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution;
• Usage Data: Pages visited, games played, session duration, bet history, win/loss records, and platform navigation patterns;
• Transaction Data: Deposit and withdrawal amounts, timestamps, payment method used, and transaction reference numbers;
• Cookie and Tracking Data: As described in Section 9 of this Policy.

4.3 Data from Third Parties

We may receive personal data from third-party service providers, including identity verification agencies (for KYC purposes), payment processors (to confirm transaction status), fraud prevention services, and analytics providers. All third-party data sharing is governed by written data processing agreements.

Purpose of Processing & Legal Basis

We process your personal data only for defined, legitimate purposes. The table below sets out the primary purposes for which we process personal data, alongside the corresponding lawful basis for each:

Where processing is based on consent (e.g., for marketing communications), you have the right to withdraw that consent at any time by adjusting your account notification settings or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Data Sharing & Disclosure

imalaysia2 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We may, however, share your personal data in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf as Data Processors. These include payment processors, identity verification agencies, cloud infrastructure providers, customer support software providers, and gaming technology partners. All such providers are bound by written data processing agreements that restrict them to processing your data only as directed by imalaysia2 and only for specified purposes.

6.2 Regulatory and Legal Disclosure

We may disclose personal data to our licensing regulator, law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, disclosure will be limited to the minimum data necessary to satisfy the legal requirement.

6.3 Business Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the imalaysia2 business, personal data held by imalaysia2 may be transferred to the successor entity, subject to the same data protection obligations as set out in this Policy. Players will be notified of any such material change in advance wherever possible.

Data Retention Periods

imalaysia2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention standards apply:

• Account and Registration Data: Retained for the lifetime of the active account, plus a minimum of five (5) years following account closure, to satisfy anti-money laundering and licensing record-keeping obligations;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial crime prevention obligations;
• Customer Support Communications: Retained for a period of three (3) years from the date of the interaction, unless a longer retention period is required in connection with an ongoing dispute or legal matter;
• Marketing Preferences: Retained until you withdraw your consent or close your account, after which marketing data is promptly deleted or anonymised.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Anonymised data (which can no longer be attributed to any individual) may be retained indefinitely for statistical and analytical purposes.

Security Measures

imalaysia2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the imalaysia2 server is encrypted in transit using industry-standard TLS protocols;
• Encryption at Rest: Sensitive data stored in our systems — including personal identifiers and financial records — is encrypted at rest using AES-256 or equivalent standards;
• Two-Factor Authentication (2FA): Available for all player accounts and mandatory for administrative access;
• Role-Based Access Controls: Personal data is accessible only to authorised personnel who require access to perform specific, defined job functions;
• Security Monitoring: Continuous monitoring for suspicious activity, unauthorised access attempts, and anomalous transaction patterns;
• Data Breach Response: A documented incident response plan is in place. In the event of a confirmed data breach that poses a high risk to your rights, you will be notified promptly in accordance with applicable obligations.

While we employ extensive security safeguards, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and must not share your password with any third party.

Cookies & Tracking Technologies

imalaysia2 uses cookies and similar tracking technologies on the Platform to provide functionality, improve user experience, and gather analytical insights. A cookie is a small text file placed on your device when you visit a website. The types of cookies we use are as follows:

9.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core features such as account login sessions, security token management, and session continuity. Essential cookies cannot be disabled without significantly impairing your use of the Platform.

9.2 Functional Cookies

Functional cookies remember your preferences and settings — such as your selected language, game display preferences, and notification settings — to provide a more personalised experience on return visits.

9.3 Analytical Cookies

We use anonymised analytical cookies to understand how players interact with the Platform — including which games are most popular, where players experience difficulties, and how navigation flows perform. This data is used solely to improve Platform quality and is not linked to your identifiable personal data.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect Platform functionality. You can also withdraw consent to non-essential cookies at any time by adjusting your browser settings.

International Data Transfers

As an internationally licensed online gaming platform serving players including those based in Malaysia, imalaysia2 may transfer personal data to and from jurisdictions outside of Malaysia. This includes data processing by cloud infrastructure providers and gaming software vendors whose servers may be located in jurisdictions other than your country of residence.

When personal data is transferred internationally, imalaysia2 ensures that appropriate safeguards are in place to maintain the protections afforded to your data under this Policy. Such safeguards include contractual data protection obligations imposed on receiving parties, which require them to handle your data in a manner consistent with the standards described in this Policy.

By using the imalaysia2 Platform, you acknowledge and consent to the transfer, storage, and processing of your personal data in accordance with this Section.

Minors — Under 21 Policy

If imalaysia2 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all data collected will be securely deleted, and any funds held in the account will be returned by the deposit method subject to verification.

If you are a parent or guardian and believe that a minor under your care has accessed the imalaysia2 Platform and provided personal data without your knowledge, please contact us immediately at [email protected] (plain text — not a hyperlink).

Your Data Rights

Subject to the applicable data protection laws of imalaysia2's licensing jurisdiction, and to the extent permitted by those laws, you have the following rights in relation to your personal data:

To exercise any of the rights above, please submit a written request to our support team via live chat or by email to [email protected]. We will respond to verified requests within 30 days. In some cases, we may need to verify your identity before processing your request. We reserve the right to refuse manifestly unfounded or excessive requests.

Complaints

If you believe that imalaysia2 has not handled your personal data in accordance with this Policy or with applicable data protection law, we encourage you to contact us in the first instance using the contact details in Section 15. We take all privacy complaints seriously and will investigate and respond within a reasonable timeframe.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your situation. imalaysia2 will cooperate with any such authority in the investigation of a complaint.

Changes to This Privacy Policy

imalaysia2 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices, or the data we collect and process. When we make material changes to this Policy, we will notify you by posting a clear notice on the Platform's homepage and, where appropriate, by email to your registered address.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to remain informed about how we protect your personal data. Your continued use of the Platform following any changes constitutes your acceptance of the revised Policy.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by imalaysia2, please contact our Data Protection team using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform. This is the fastest way to reach us for data-related queries.
• Email: [email protected] — please use the subject line "Privacy Request" and include your registered username for faster processing. Allow up to 30 days for a formal written response to data rights requests.

We are committed to resolving all privacy-related enquiries in a professional, timely, and respectful manner. Your trust is important to us and we take every data-related communication seriously.