Privacy Policy ipe88 — Personal Data Protection for Malaysia Members

Ipe88 collects your personal information through several channels as you interact with our platform. The types of information collected are as follows:

Account Registration Information:

• Full name as per valid identification document
• Active email address and mobile phone number
• Date of birth for age verification (18 years and above)
• Chosen username and password (passwords are stored in hashed form and are not human-readable)

Identity Verification (KYC) Information:

• A copy of a valid identity card (MyKad) or passport
• Proof of current residential address (utility bill or bank statement not older than 3 months)
• Selfie or facial verification photo if required

Financial Information:

• Bank account details for deposit and withdrawal purposes (account number, bank name, and account holder name)
• Transaction history records within the ipe88 platform
• Information related to the payment method used

Platform Usage Information:

• IP address, device type, operating system, and web browser used
• Game session records, bets placed, and activity within the platform
• Log timestamps and duration of platform usage
• Cookie data and related tracking technologies (detailed in Section 6)

Personal data collected by ipe88 is used solely for the following legitimate and stated purposes:

• Account Management: Create and manage your member account, process logins, and ensure account security at all times.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions carried out through the ipe88 platform quickly and securely.
• Identity Verification (KYC): Meet legal obligations related to member identity verification, fraud prevention, and anti-money laundering (AML) compliance.
• Customer Support: Provide technical assistance and responsive customer support for every enquiry or complaint submitted.
• Platform Communications: Send important notices related to your account, security alerts, terms updates, and relevant promotional information (subject to your communication preferences).
• Analytics and Improvement: Analyse platform usage patterns on an aggregated and anonymised basis to improve user experience, platform performance, and game offerings.
• Fraud Prevention: Monitor suspicious activity, detect fraud patterns, and protect the integrity of the platform from abuse.
• Legal Compliance: Fulfil any legal obligations, regulatory directives, or court orders requiring the disclosure of certain information.

Ipe88 will not use your personal data for any purpose other than those stated above without obtaining your consent beforehand. If we plan to use your data for a new purpose, we will notify you and obtain the necessary consent before doing so.

Ipe88 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). The processing bases we apply are as follows:

Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of processing carried out prior to the withdrawal.

Ipe88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the context of normal platform operations, we may share certain information with the following parties:

• Payment Service Providers: Transaction information is shared with FPX, DuitNow, and supported digital wallet providers as required to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum game data necessary to be shared with licensed game providers to ensure a smooth and fair gaming experience.
• Technology Service Providers: Server infrastructure providers, analytics systems, and cybersecurity tools that support the operation of the ipe88 platform, subject to strict data processing agreements.
• Legal Authority: ipe88 will disclose required information to the police, courts, or regulatory bodies when mandated by law or a valid court order.
• Business Transfer: In the event of a merger, acquisition, or sale of company assets, user data may be transferred to the successor entity, with prior notice given to members and on the condition that the successor adheres to a comparable Privacy Policy.

Ipe88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Data Encryption in Transit: All communications between your device and ipe88's servers are secured by TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive data stored in the ipe88 database, including financial information and KYC documents, is encrypted using the AES-256 encryption algorithm.
• Role-Based Access Control: Only staff who require access to specific data to perform their duties are permitted to do so, based on the principle of least privilege.
• 24/7 Security Monitoring: A SIEM (Security Information and Event Management) system monitors all platform activity in real time to detect and respond to security threats.
• Regular Data Backups: Member data is regularly backed up to a secure, separate location to ensure swift data recovery in the event of a technical incident.
• Security Testing: Penetration testing and vulnerability scanning are conducted regularly by qualified independent parties.

While ipe88 takes all reasonable steps to protect your data, no security system can be guaranteed to be completely foolproof. In the event of any data breach that affects you, ipe88 will notify you in a timely manner in accordance with applicable legal requirements.

Ipe88 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session authentication and language preference storage. These cookies cannot be disabled as the platform will not function correctly without them.
• Performance Cookies: Collect information about how you use the platform — most frequently visited pages, page response times, and error messages — to help us improve platform performance.
• Functional Cookies: Allow the platform to remember your preferences such as username, preferred language, and display settings to deliver a more personalised experience.
• Analytics Cookies: Used to understand aggregate usage patterns for platform improvement purposes. Analytics data is collected anonymously and is not linked to any individual's identity.

You can control and manage cookies through your web browser settings. Disabling certain cookies may affect some functions of the ipe88 platform. For more information on managing cookies in different browsers, please refer to your browser's help documentation.

As an ipe88 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

• Right of Access: You have the right to request and obtain a copy of the personal data we hold about you in a readable format.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or outdated.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data, subject to legal obligations requiring us to retain certain records.
• Right to Object to Processing: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
• Right to Complain: You have the right to lodge a complaint with Malaysia's Department of Personal Data Protection if you believe your privacy rights have been violated.

To exercise any of the above rights, please contact the ipe88 support team via Live Chat available 24/7 within the platform. We will process your request within 30 working days from the date of receipt, or notify you if a longer period is required.

Ipe88 retains your personal data for as long as your account is active and for as long as necessary to fulfil the purposes stated in this Privacy Policy. Our data retention policy is as follows:

• Active Account Data: Retained for the duration your account is active, plus any additional period required by law.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and AML legal requirements.
• KYC Documents: Retained for the period stipulated by the relevant compliance regulations, typically 5 years after account closure.
• Platform Activity Logs: Retained for 12 months for security and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires and there is no legal obligation requiring continued storage, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

The ipe88 platform is exclusively for individuals aged 18 years and above. ipe88 does not intentionally collect, process, or store personal data from individuals under the age of 18.

If ipe88 discovers that personal data of a minor has been collected without our knowledge, we will take immediate action to delete such information and close the associated account. Parents or guardians who become aware that their child has registered on the ipe88 platform should contact our support team immediately.

Ipe88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you through the following means:

• A clear notice on the ipe88 platform's home page
• Email notification to the registered address (for significant changes)
• Update the "Last Updated" date at the top of this page

Continued use of the ipe88 platform after changes to the Privacy Policy are published will be considered your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or requests regarding ipe88's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the ipe88 platform — the fastest way to get immediate assistance
• Email: [email protected] — for more detailed written enquiries

The ipe88 Data Protection Officer team is ready to assist you with all privacy-related matters and will respond within 5 working days for general enquiries, and 30 working days for official requests related to data subject rights.