Ibet2u Privacy Policy – Member Personal Data Protection

Introduction

Ibet2u respects the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you register, log in, or use any service on ibet2u.win.

This document applies to all registered members, website visitors, ibet2u mobile app users, and anyone who interacts with our platform in any form. By using ibet2u services, you agree that your personal information is collected and used as described in this Privacy Policy.

If you disagree with any part of this policy, please discontinue use of the platform and contact our privacy team for further assistance. We are always ready to address any concerns you may have regarding your data privacy.

Information We Collect

Ibet2u collects various types of information to ensure a secure, seamless, and personalised user experience. Below are the categories of information we collect:

In certain circumstances, we may also collect supporting documents such as ID card images, bank statements, or selfie photos for identity verification (KYC) purposes. These documents are stored securely and accessed only by authorised compliance staff.

How We Use Your Data

The information we collect is used responsibly for the following purposes, and only within the scope necessary to deliver our services properly:

• Account Management: Creating, verifying, and securely managing your member account.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions within the platform.
• Identity Verification (KYC): Meeting compliance requirements including age and identity verification to prevent money laundering.
• Customer Support: Responding to enquiries, resolving complaints, and providing effective technical support.
• Platform Security: Detecting and preventing fraudulent activity, multi-account use, and cybersecurity threats.
• Service Improvement: Analysing usage patterns to improve platform functionality, interface, and overall user experience.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — only to members who have opted in to receive them.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to ibet2u's operations.

We will not use your data for any purpose beyond those stated above without first obtaining your additional consent.

Legal Basis for Data Processing

Ibet2u processes your personal data on valid legal grounds as provided under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: When you register and accept our Terms & Conditions, you give your consent to data processing for the purposes stated.
• Contract Performance: Processing required to fulfil the service agreement between you and ibet2u, including account management and transaction processing.
• Legal Obligation: Some data processing is required by law, including AML (Anti-Money Laundering) and KYC procedures.
• Legitimate Interest: ibet2u may process data based on legitimate business interests, such as fraud prevention, platform security enhancement, and internal analytics.

You have the right to withdraw your consent at any time by contacting our privacy team. However, withdrawing consent may affect our ability to provide certain services to you.

Data Sharing with Third Parties

Ibet2u takes seriously its responsibility not to share your personal information without legitimate necessity. Your data is only shared in the following circumstances:

• Certified Service Providers: Third parties that support platform operations — including game software providers, payment processors, and cloud services — are all bound by strict confidentiality agreements.
• Legal Authorities: When required by a court, law enforcement agency, or regulatory authority under applicable law.
• Fraud Prevention: Required information may be shared with identity verification agencies or industry fraud prevention networks to protect the platform and its members.
• Corporate Changes: In the event of a merger, acquisition, or asset sale, user data may be transferred — however, members will be notified in advance.

All third parties receiving ibet2u member data are required to meet security and confidentiality standards equivalent to or exceeding those we maintain ourselves.

Data Protection Measures

The security of your personal data is ibet2u's top priority. We continuously invest in the latest security infrastructure to ensure your data is always protected:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocol — no sensitive information is ever sent in plain text.
• Data Encryption at Rest: Personal data stored in our databases is also encrypted to protect against unauthorised access even if the servers are physically accessed.
• Multi-Layer Firewall: The ibet2u server infrastructure is protected by firewall systems and a WAF (Web Application Firewall) that automatically monitors and filters malicious traffic.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account.
• 24/7 Security Monitoring: Our cybersecurity team continuously monitors the system to detect any threats or suspicious activity.
• Regular Security Audits: The ibet2u platform undergoes regular penetration testing and independent security audits.

While we do our utmost to protect your data, no security system is one hundred percent perfect. You are also responsible for keeping your password and account login details confidential.

Data Retention Period

Ibet2u retains your personal data only for as long as necessary for the stated purposes or as required by law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration of the active account and up to 7 years after account closure to meet legal compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in line with AML and tax reporting requirements.
• Communication Logs: Support chat records and emails are retained for 3 years for dispute resolution purposes.
• Technical Log Data: Server logs and technical activity data are retained for 12 months before being automatically deleted.
• KYC Documents: Identity verification documents are retained for 7 years after account closure in accordance with legal requirements.

Once the retention period expires, data will be permanently deleted or anonymised so it can no longer be linked to any individual. The data deletion process is carried out in accordance with recognised security standards.

Your Rights Over Personal Data

As an ibet2u member, you have the following rights regarding your personal data, as provided under applicable privacy laws:

• Right of Access: You have the right to receive a copy of the personal data we hold about you within 21 business days of your request being received.
• Right to Rectification: If your data is inaccurate or out of date, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances, you may request that your personal data be deleted — subject to legal obligations that require its retention.
• Right to Restrict Processing: You have the right to restrict how your data is processed in certain circumstances, such as during the process of verifying data accuracy.
• Right to Data Portability: You may request that your data be provided in a machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in the final section of this document. We will process your request carefully and respond within the stipulated timeframe.

Cookies and Tracking Technologies

Ibet2u uses cookies and similar tracking technologies to enhance your user experience, maintain login session security, and understand how our platform is used. Below are the categories of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how visitors use our website, including the most frequently visited pages. This data is used to improve platform performance.
• Functional Cookies: Saving your preferences such as language, region, and display settings so you don't need to reconfigure them each time.
• Analytics Cookies: Helps us understand overall user behaviour in order to develop more useful new features.

You can manage or disable cookies through your browser settings at any time. However, disabling essential cookies may affect your ability to log in or use certain platform features normally.

Ibet2u does not use third-party cookies for targeted advertising purposes. We respect your right to browse our platform with your privacy fully protected.

Links to Third-Party Websites

The ibet2u platform may contain links or integrations with third-party services such as game software providers and payment processors. When you access these third-party services, their own privacy policies apply — not the ibet2u Privacy Policy.

Ibet2u is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of each third-party service you use before providing any personal information.

Cross-Border Data Transfers

In the course of its operations, ibet2u may need to transfer your personal data to servers or facilities located outside Malaysia, including to international technical partners and cloud service providers.

Every cross-border data transfer is implemented with adequate safeguards, including:

• Legally binding data processing agreements with all data recipients.
• Use of internationally recognised standard contractual clauses to safeguard your rights.
• Selecting partners that operate in jurisdictions with data protection standards equivalent to or exceeding those of Malaysia.
• Data protection impact assessments (DPIA) conducted before any new data transfer is implemented.

You have the right to obtain more information about the safeguards we use for international data transfers by contacting our privacy team.

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

We are committed to handling every privacy complaint seriously and transparently. If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.