Ibc88 Privacy Policy — Protection of Your Personal Data

Information We Collect

Ibc88 collects several categories of information from members to enable the platform to operate securely, smoothly, and in compliance with legal requirements. This information is collected directly through the registration process, platform usage, and via automated technology as you browse our website.

Information you provide directly:

• Full name as stated on your identity card or passport.
• Date of birth for age verification.
• Active email address used for account communications.
• Mobile phone number for two-factor authentication and transaction notifications.
• Bank account or digital wallet details for processing deposits and withdrawals.
• Identity documents (MyKad, passport) during the KYC process.
• Current residential address for compliance and identity verification purposes.

Information collected automatically:

• IP address and device information used to access the platform.
• Browser data including type, version, and language settings.
• Session activity records including login time, games played, and total wagering amount.
• Cookie data for an improved user experience and platform traffic analysis.
• General location data based on IP address for security and geographic compliance purposes.

How Your Information Is Used

Every piece of information we collect has a clear and legitimate purpose. ibc88 does not collect information excessively and only processes data that is strictly necessary for the following purposes:

Should ibc88 wish to use your data for any purpose not stated above, we will obtain your consent before any such processing takes place.

Data Sharing with Third Parties

Ibc88 does not share members' personal data with third parties except in limited and legitimate circumstances as outlined below. All data sharing is subject to strict non-disclosure agreements (NDAs) and data processing agreements.

• Payment service providers: Required transaction information is shared exclusively with approved payment processors solely for the purpose of processing your deposits and withdrawals. These providers are bound by confidentiality agreements and strict security standards.
• Game software providers: Limited member identification information may be shared with game providers solely for the purpose of game account management.
• Legal authorities: ibc88 will disclose required information to the relevant authorities if mandated by law, court order, or the applicable regulatory body.
• Regulatory body: Under the anti-money laundering (AML) and counter-terrorism financing (CTF) compliance framework, certain information may be required to be disclosed to recognised relevant authorities.
• Auditors and legal consultants: Professionals involved in auditing or legal advisory may access required data, subject to their professional confidentiality obligations.

Security and Data Protection

Ibc88 continuously invests in security infrastructure to ensure that members' personal data is always protected against cyber threats, unauthorised access, alteration, or loss. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption: All communications between your device and ibc88 servers are encrypted using the latest SSL/TLS protocol, ensuring that transmitted data cannot be intercepted by third parties.
• One-way password hashing: Member passwords are stored in an irreversible hash format using the bcrypt or argon2 algorithm. No one, including ibc88 staff, can view your original password.
• Two-factor authentication (2FA): ibc88 supports and encourages the use of 2FA on all accounts to add an extra layer of protection against unauthorised access.
• 24-hour security monitoring: Automated monitoring systems operate around the clock to detect and alert on any unusual or suspicious activity within the platform.
• Network segregation and data segmentation: Sensitive data is stored in isolated server environments with restricted access via secure internal networks only.
• Regular security audits: Penetration testing and security audits are conducted regularly by independent parties to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can guarantee absolute safety. We encourage you to take protective measures on your end, such as using a strong password, not sharing your login credentials, and keeping your device up to date.

Data Retention Period

Ibc88 retains members' personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law. Retention periods vary according to data type and legal requirements:

• Active account data: For as long as the member account is active and for 7 years after account closure, in line with Malaysia's financial record-keeping requirements.
• Financial transaction records: Minimum 7 years from the transaction date as required by applicable anti-money laundering (AML) legislation.
• KYC Documents: For as long as the account is active and a minimum of 5 years after account closure or the end of the business relationship.
• Security log data: Retained for 12 months for security incident investigation purposes if required.
• Customer support communication records: Retained for 3 years for service reference and improvement.
• Cookie and analytics data: Depending on the type of cookie — session cookies are deleted when the browser is closed, while persistent cookies are stored for a set duration.

Once the retention period expires, personal data will be securely deleted or anonymised so it can no longer be linked to any individual.

Your Rights as a Data Subject

As a data subject, you have certain rights under Malaysia's Personal Data Protection Act 2010 (PDPA). ibc88 fully respects and facilitates these rights:

• Right to Access: You have the right to request a copy of the personal data we hold about you. Data access requests will be processed within 21 working days.
• Right to Rectification: If your personal data is inaccurate or outdated, you have the right to request a correction. Contact our support team with the correct information for it to be updated.
• Right to Withdraw Consent: For data processing that relies on your consent (such as marketing communications), you may withdraw consent at any time without affecting any processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for certain purposes, including direct marketing.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. However, such requests are subject to our legal obligations to retain certain records.
• Right to Lodge a Complaint: If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Children's Privacy

The ibc88 platform is strictly for adult users aged 18 and above. We do not intentionally collect, use, or store personal data from individuals under the age of 18. Account registration by minors is strictly prohibited and constitutes a serious violation of our platform's terms.

If we discover that personal data of an underage individual has been collected unintentionally, we will take immediate steps to delete that data and terminate the associated account. Parents or guardians who become aware that a child under their care has registered with ibc88 are requested to contact our support team immediately.

Cross-Border Data Transfers

In certain operational situations, member personal data may need to be transferred to or accessed from outside Malaysia, particularly in the context of cloud infrastructure or international technical support services. ibc88 ensures that any such data transfers are carried out with adequate safeguards:

• Data Processing Agreements compliant with international data protection standards are signed with all involved partners.
• Encryption in transit and at rest is mandatory for all cross-border data transfers.
• Data protection impact assessments (DPIA) are conducted for high-risk data transfers before they take place.
• All third-party service providers accessing ibc88 member data are required to comply with security standards equivalent to or higher than Malaysia's PDPA requirements.

Location Detection and App Usage

When you use the ibc88 mobile app, we may request permission to access certain functions on your device. All permissions are optional and can be revoked at any time through your device settings:

• Location: Used for geographic verification for security and compliance purposes. We do not continuously track your location in the background.
• Camera: Used during the KYC process to capture identity document photos and verification selfies where required.
• Push notifications: Used to send transaction updates, promotional offers you have subscribed to, and account security alerts.
• Device storage: Used to store files downloaded from the platform or account-related documents.

You can manage all permissions for this app via the Settings menu on your Android or iOS device. Disabling certain permissions may restrict specific features within the ibc88 app.

Policy Amendments and How to Contact Us

Ibc88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Members will be notified of any material amendments via email or in-platform notification at least 14 days before the changes take effect.

Continued use of the ibc88 platform after the effective date of any amendment constitutes acceptance of the updated policy. The date of the latest amendment is always displayed at the top of this document for your reference.

For any enquiries, concerns, or requests regarding this Privacy Policy, you may contact the ibc88 Privacy Officer via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Email: [email protected] (please state "Privacy Enquiry" in your email subject line).