Your Privacy Is Our Priority iwalet99 — We Protect Your Data Like It's Our Own

1Personal Data We Collect

Iwalet99 collects the personal data necessary to provide safe and responsible online betting services. We only collect data that is genuinely required — not simply because we can.

Data collected during registration:

• Full name as shown on your official identification document.
• An active email address and a Malaysia phone number.
• Date of birth (for age verification).
• Passwords stored as a hashed format that cannot be reversed.

Data collected during platform use:

• Transaction information – deposits, withdrawals, and wagering history.
• Device and browser data – device type, operating system, browser version.
• IP address and general location information (not GPS or precise location).
• Activity logs – login times, logout times, and in-platform actions.

KYC (Know Your Customer) Data:

• A valid copy of MyKad or Malaysian passport.
• Proof of current address (utility bill or bank statement not older than 3 months).
• In certain cases, a selfie with your identity document for further verification.

2How We Use Your Data

The personal data we collect is used exclusively for legitimate and necessary purposes in the operation of the iwalet99 platform. We never use your data for purposes to which you have not given explicit or implied consent.

• Identity verification and account security — ensuring only the legitimate account owner can access and use their account.
• Transaction processing — processing deposits, withdrawals, and bets accurately and securely.
• Legal compliance — meeting KYC, AML (Anti-Money Laundering), and reporting obligations required by law.
• Service improvement — analyzing usage patterns to improve the overall platform experience.
• Service communications — sending important notifications related to your account, transactions, and policy updates.
• Fraud prevention — detecting and preventing suspicious activity that could compromise the security of the platform and other members.
• Customer Support — providing relevant and accurate assistance when you contact our support team.

3Data Sharing with Third Parties

Iwalet99 does not sell, rent, or share member personal data with third parties for marketing purposes. However, there are specific situations where limited data sharing is necessary for platform operations:

• Payment providers — transaction information required to process deposits and withdrawals is shared with integrated payment providers such as Billplz, iPay88, and verified DuitNow providers.
• Game software providers — usernames and session information required to run games are shared with game providers such as Pragmatic Play and Evolution Gaming, limited to technical requirements only.
• Legal Authorities — when required by a valid court order or official request from a Malaysian law enforcement agency.
• Analytics services — data that cannot personally identify an individual is used for platform analytics to improve our services.

4Data Security Measures

We continually invest in security infrastructure to protect member personal data from unauthorised access, use, modification, or disclosure.

The technical security measures we implement include:

• 256-bit SSL/TLS encryption for all data communications between browser and server.
• Passwords stored using bcrypt hashing with a unique salt for each account.
• Two-factor authentication (2FA) available to all members as an additional layer of security.
• Real-time security monitoring by automated threat detection systems.
• Regular independent security audits conducted by third-party cybersecurity firms.
• Role-based access control (RBAC) for all iwalet99 internal systems.

5Your Rights Regarding Personal Data

As an iwalet99 member, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right to Access — you may request to view the personal data we hold about you at any time.
• Right to Rectify — if your personal data is inaccurate or outdated, you have the right to request a correction.
• Right to Withdraw Consent — you may withdraw consent for marketing communications at any time.
• Right to Request Deletion — in certain circumstances, you may request deletion of your personal data, subject to applicable legal retention requirements.
• Right to Lodge a Complaint — if you believe your privacy rights have been violated, you may file a complaint with us and with the Malaysian Personal Data Protection Commissioner.

To exercise any of the above rights, contact the iwalet99 customer support team via live chat within the platform. We will respond to valid requests within 14 business days.

6Data Retention Period

Iwalet99 does not retain your personal data indefinitely. Retention periods are determined based on the purpose of collection and applicable legal requirements:

• Active account data: Retained for the duration of active membership.
• Financial transaction data: Retained for a minimum of 7 years after the transaction as required by Malaysian financial law.
• KYC Data: Retained for a minimum of 5 years after account closure for AML compliance.
• Access and security logs: Retained for 12 months for security investigation purposes.
• Customer support communication data: Retained for 2 years for reference and service improvement purposes.

7Children's Privacy

The iwalet99 platform is exclusively for users aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18.

If we find that personal data has been collected from individuals under the age of 18 without proper verification, the account will be closed immediately, the data will be deleted, and any related deposits will be refunded through the established process.

If you are a parent or guardian and believe your child who is under age may have registered or used the iwalet99 platform, please contact our support team immediately.

8How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may reach us through the following channels:

• Live Chat Platform — the fastest option, available 24 hours a day, 7 days a week. First response in under 2 minutes.
• Support Email – [email protected] — for enquiries requiring a formal written response. We aim to reply within 24 hours.

For data rights requests requiring identity verification, please state "Data Rights Request" in your email subject line and include your registered account number.