Idcash88 Privacy Policy – Personal Data Protection for Malaysian Players

1Introduction & Scope of Privacy Policy

idcash88 is an online entertainment platform offering a wide range of games including Poker, Baccarat, Roulette, Lottery, Live Casino, Sports Betting, Match Odds, and E-Sports to players in Malaysia. As a responsible platform operator, we understand that player trust is our most valuable asset — and that trust begins with how we handle your personal data.

This Privacy Policy applies to all users who access or use the idcash88 platform, including:

• Individuals who browse the idcash88.run website even without registering an account;
• Registered players with an active account at idcash88;
• Former members whose accounts have been closed but whose transaction records are retained for compliance purposes;
• Anyone who contacts the idcash88 customer support team through any communication channel.

This Policy does not apply to third-party websites or services that may be linked from the idcash88 platform. We encourage you to read the privacy policy of any other website you visit separately.

2Personal Data We Collect

idcash88 only collects personal data that is necessary to provide a secure, fair, and legally compliant platform service. Below are the categories of data we collect and the purpose for each:

We not collect credit card numbers directly. All financial transactions are processed through third-party payment gateways that comply with PCI-DSS security standards. idcash88 receives only transaction confirmation details, not your full card number.

3Purpose of Data Collection & Processing

idcash88 processes your personal data on valid legal grounds under Malaysia's PDPA 2010, including contractual necessity (the service agreement between you and idcash88), legal obligations, and the platform's legitimate interests. Specific purposes include:

• Account management: Creating, verifying, and managing your player account on idcash88.
• Transaction processing: Processes MYR deposits via DuitNow, Malaysian e-wallets, and FPX, and pays out winnings to your bank account or e-wallet.
• Identity verification (KYC): Meets anti-money laundering (AML) obligations and verifies that players are aged 18 and above in accordance with Malaysian legal requirements.
• Provision of gaming services: Runs Poker, Baccarat, Roulette, Lottery, Malaysia Super League and EPL football betting, Mobile Legends e-sports, and all other categories fairly.
• Platform security: Detecting and preventing fraud, bonus abuse, bot usage, player collusion, and other security threats.
• Customer support: Handles inquiries, complaints, and technical support requests in both Bahasa Melayu and English.
• Direct marketing: Sending promotional information, bonus offers, and platform updates — only if you have consented to receive marketing communications during registration or through your account settings. You may unsubscribe at any time.
• Platform improvements: Analysing aggregated platform usage patterns (without identifying individuals) to improve the interface, introduce new games, and enhance overall performance.
• Legal compliance: Maintains transaction records and data required under Malaysian law, including AML reporting obligations and requests from lawful authorities.

4Data Sharing with Third Parties

idcash88 does not sell or trade players' personal data. However, there are limited circumstances in which we need to share certain information with selected third parties, as outlined below:

• Payment processing providers: Payment gateways such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay receive only the minimum transaction data required to securely process your RM deposits and withdrawals.
• Platform service providers: Companies that assist us in operating our IT infrastructure, server hosting, data analytics, fraud detection systems, and customer support. All such parties are bound by strict data confidentiality agreements and may only use your data for the purposes specified.
• Game providers: For live casino and slots from third-party providers, minimum game session information may be shared to ensure game integrity and the resolution of technical disputes.
• Malaysian legal authorities: We will disclose data when required by Malaysian law, a valid court order, or an official request from a law enforcement agency. Each disclosure request is reviewed by the idcash88 compliance team before any action is taken.
• Business transfers: In the event of a merger, acquisition, or sale of idcash88's assets, user data may be transferred to the new entity subject to the same or stricter Privacy Policy obligations. Players will be notified by email at least 30 days before any such transfer takes place.

5Cookies & Tracking Technologies

Platform idcash88 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players interact with our platform.

• Essential Cookies (Required): Required for core platform functions such as maintaining login sessions, remembering language preferences, and securing transactions. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remembering your preferences such as favourite games, default bet amounts, and display settings to personalise your gaming experience.
• Analytics Cookies: Collecting aggregated, non-identifiable information about how players use the platform — this data helps us improve the interface and overall platform performance.
• Security Cookies: Used to detect suspicious access attempts, identify bots, and protect player accounts from fraudulent activity.

Idcash88 cookie retention periods vary by type: session cookies expire when you close your browser, while functional and analytics cookies may persist for up to 12 months. You can manage cookies through your browser settings, though disabling essential cookies may affect platform functionality.

6Data Security & Protection Measures

idcash88 implements a layered security approach to protect players' personal data from unauthorised access, disclosure, alteration, or destruction. The technical and organisational measures we employ include:

• Data encryption in transit: All data transmitted between your device and idcash88's servers is protected by TLS 1.3 with AES-256 encryption — the highest security standard used by leading financial institutions.
• Data encryption at rest: Sensitive data such as passwords (stored as one-way hashes that cannot be decrypted) and financial information are stored in encrypted form on our servers.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA using an OTP sent to their registered Malaysian mobile number for additional account protection.
• Internal access controls: Staff access to player data is restricted based on job role and the need-to-know principle. All access is logged and monitored.
• Regular penetration testing: Independent cybersecurity experts conduct regular penetration testing to identify and patch any system vulnerabilities before they can be exploited.
• 24/7 Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) are active around the clock to detect and block attempted cyberattacks.

7Data Retention & Deletion

idcash88 does not retain your personal data for longer than is necessary for the stated purposes or as required by Malaysian law. The following are our data retention guidelines by category:

• Active account data: Retained for the duration of your active account plus 7 years after closure, in accordance with Malaysia's tax and anti-money laundering legal requirements.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with requirements set by the Securities Commission and Bank Negara Malaysia.
• Game session logs: Retained for 3 years for dispute resolution and game fairness audit purposes.
• Support communication records: Retained for 2 years from the date of last interaction.
• Analytics cookie data: Aggregated non-identifiable data is retained for up to 12 months; individual cookies expire according to their respective settings.
• KYC records (identity verification): Retained for 7 years from the date of verification, in line with Malaysia's AML/KYC legal requirements.

When data is no longer needed and there is no legal obligation to retain it, idcash88 will securely destroy or anonymise that data using methods that ensure it cannot be recovered.

8Your Rights Under Malaysia's PDPA 2010

As a player idcash88 which are subject to protection under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data:

To exercise any of the above rights, please submit a written request to privacy@idcash88.run by stating your request type, full name, and idcash88 account number for identity verification. All requests will be acknowledged within 3 business days.

9Children's Data Protection

Platform idcash88 is intended for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that a minor's data has been collected inadvertently, immediate action will be taken to delete it and close the associated account.

If you as a parent or guardian believe your child has registered an account on idcash88, please contact us immediately at support@idcash88.run with supporting evidence. We will investigate and take appropriate action within 24 hours.

10Data Transfers Outside Malaysia

In operating the platform idcash88, there are instances where your personal data may be processed outside Malaysia by international service providers such as cloud infrastructure and game providers. Such transfers occur only when:

• The data recipient in the destination country is subject to data protection laws that are equivalent to or stricter than Malaysia's PDPA;
• A binding contractual agreement between idcash88 and the recipient ensures adequate data protection equivalent to Malaysian standards;
• The transfer is necessary for the performance of a service contract between you and idcash88 (such as processing live casino games from international studios);
• You have given explicit consent for such a transfer.

Idcash88 ensures that all international data transfers are carried out with adequate safeguards and in full compliance with Section 129 of Malaysia's PDPA 2010.

11Privacy Policy Amendments

idcash88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new Malaysian legal requirements, or service improvements. The amendment procedure is as follows:

• Significant amendments that affect your privacy rights will be communicated via email to all registered members at least 14 days before taking effect.
• All amendments will be reflected in an updated "Last Updated" date at the top of this document.
• A version history of the Privacy Policy is maintained and may be requested from our compliance team.
• Continued use of the idcash88 platform after the amendment's effective date constitutes acceptance of the updated privacy policy.
• If you do not agree with the amendments made, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 8 of this document.

12Contact idcash88's Privacy Officer

idcash88 has appointed a Data Privacy Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling all data protection enquiries. For any privacy-related enquiries, requests, or complaints:

• Privacy Email: privacy@idcash88.run (for privacy and PDPA-related enquiries)
• General Support Email: support@idcash88.run (for technical assistance and account inquiries)
• Live Chat: Available directly on the idcash88.run platform at all times (response < 2 minutes)
• Response time: Privacy-related requests are acknowledged within 3 business days and resolved within 21 business days.

If you are not satisfied with our response to your privacy complaint after going through idcash88's internal process, you have the right to refer the matter to Malaysia's Personal Data Protection Department (JPDP) under the Ministry of Communications for an independent investigation.