Privacy Policy isma88 – Your Personal Data Protection

This Privacy Policy is published by isma88 ("we", "isma88" or "Platform") and applies to all users who access or use the isma88.pro website and the isma88 mobile app for Android and iOS. This document transparently outlines our privacy practices, including the types of data collected, how it is used, who may receive it, and the choices you have regarding your personal data.

Isma88 is committed to protecting your privacy and ensuring your personal data is handled in a responsible, secure, and fully transparent manner. We operate in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

By using the isma88 platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for further assistance.

Isma88 collects various categories of personal data depending on how you interact with our platform. Below is detailed information on the types of data collected:

Data You Provide Directly

• Identity information: Full name, date of birth, national ID or passport number, nationality.
• Contact information: Email address, mobile number, residential address.
• Account information: Username, password (in encrypted form), security questions.
• Financial information: Bank account number, digital wallet details, deposit and withdrawal transaction history.
• KYC verification documents: Copies of identity documents, utility bills, or other proof-of-address documents submitted during the verification process.

Automatically Collected Data

• Technical data: IP address, device type, operating system, web browser version.
• Usage data: Pages visited, games played, session duration, login and logout times.
• Location data: General geographic location based on IP address for legal compliance purposes.
• Cookie data: User preferences, session tokens, and website analytics data.

Isma88 uses your personal data only for lawful and necessary purposes. We do not process your data beyond what is required for the following purposes:

• Account management: Create, verify, and maintain your member account, including the secure login process.
• Transaction processing: Process deposits, withdrawals, and all financial activities within the platform securely and efficiently.
• KYC/AML Compliance: Fulfill legal obligations related to identity verification and anti-money laundering.
• Customer support: Respond to inquiries, resolve complaints, and provide necessary technical assistance.
• Platform security: Detect and prevent fraud, unauthorized access, suspicious activity, and other security threats.
• Service improvement: Analyze usage patterns to improve user experience and develop new features.
• Marketing communications: Send information about promotions, special offers, and platform updates – only where you have given consent.
• Legal compliance: Meet reporting and compliance requirements mandated by relevant authorities.

The security of your personal data is isma88's highest priority. We implement multiple layers of technical and organizational protection to keep your data safe from unauthorized access, alteration, disclosure, or destruction.

Technical Security Measures

• 256-bit SSL Encryption: All data transmitted between your device and isma88 servers is encrypted using the latest TLS 1.3 protocol.
• Database encryption: Sensitive data such as financial information and KYC documents are encrypted at rest within our database.
• Two-factor authentication (2FA): 2FA is available for all accounts to add an extra layer of protection at login.
• 24/7 Monitoring: Our security team continuously monitors systems to detect any threats or unusual activity.
• Regular penetration testing: Security audits and penetration testing are conducted periodically by independent security experts.

Organizational Security Measures

• Access to member personal data is restricted to staff who require it for their job duties only.
• All isma88 staff who handle personal data are required to undergo regular data protection training.
• Strict confidentiality agreements are enforced on all staff and contractors with access to user data.

Isma88 does not sell or trade your personal data to any party. However, in certain limited and lawful circumstances, we may need to share your data with the following parties:

• Payment service providers: Payment processors such as FPX, digital wallet providers, and banking networks required to securely process your transactions.
• KYC service providers: Third-party identity verification companies that assist us in fulfilling our AML and KYC obligations.
• Cloud service providers: IT infrastructure providers that store and process data on our behalf under strict data protection agreements.
• Legal authority: Government agencies, regulatory bodies, or law enforcement authorities when required by law or court order.
• Business partners: In the event of a merger, acquisition, or business asset transfer, data may be transferred to the successor entity subject to equivalent protections.

All third parties who receive your data are required to protect it to the same security standards as isma88 and to use it solely for the purposes specified in their service agreements with us.

Isma88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies Used

• Essential cookies: Required for core platform functions such as login session verification and language preferences. Cannot be disabled.
• Performance cookies: Collect analytics data on how visitors use our website to help us improve the platform.
• Functional cookies: Store your preferences and settings such as display themes and game settings for a more personalized experience.
• Marketing cookies: Used to display relevant content and promotions based on your interests – only active with your consent.

You can manage or disable certain cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the isma88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data that isma88 is fully committed to upholding:

To exercise any of the above rights, please contact the isma88 support team. We will process your request within 30 business days.

Isma88 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law:

• Active account data: Retained for the duration your account is active, plus the period required to resolve any pending claims.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's AML legal requirements.
• KYC documents: Retained for 5 years after account closure or for the period required by the relevant authorities.
• Customer support communication logs: Retained for 3 years for quality control and dispute resolution purposes.
• Analytics and cookie data: Retained for no more than 13 months before being deleted or anonymized.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.

The isma88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children or minors under the age of 18.

If you are a parent or guardian and believe your child who is underage has registered an account at isma88 or provided us with personal data, please contact us immediately. We will take prompt action to delete the relevant data and close the account.

Isma88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments. Any amendments will take effect upon publication of the updated version on the isma88 website.

For material amendments that significantly affect your privacy rights, we will notify you via in-account notification or your registered email at least 14 days before the changes take effect. Continued use of the platform after any amendment constitutes acceptance of the updated privacy terms.

We encourage you to review this page periodically to ensure you are always informed about how we protect your privacy.

If you have any questions, concerns, or wish to exercise your personal data rights, the isma88 Data Protection Officer (DPO) team is ready to assist you:

• Live Chat: Available directly on the isma88 website and app for immediate 24/7 response.
• Privacy Email: [email protected] – exclusively for enquiries related to data protection and privacy.
• General Support Email: [email protected] – for general enquiries including privacy matters.

We endeavor to respond to all privacy inquiries within 3 business days. For formal rights requests such as data access or deletion, the response period is 30 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.