Privacy Policy — idcash88

1 Introduction

This Privacy Policy ("Policy") describes how idcash88 ("idcash88", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "User", "Member") who register for, access, or use the idcash88 online gaming platform accessible at idcash88.cam and associated services.

idcash88 is committed to handling personal data responsibly and in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. This Policy applies to all personal data collected through our website, mobile-optimised platform, customer support channels, and any other touchpoint through which you interact with idcash88.

By registering an account with idcash88 or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood its contents. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which govern your use of the platform.

2 Definitions

The following terms carry the meanings assigned below throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other available information.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. idcash88 is the Data Controller in respect of Member data.
• "Data Processor" — a third party that processes personal data on behalf of idcash88, under contractual instruction, for defined purposes only.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer: identity and address verification procedures required to confirm the identity of Members and comply with anti-money-laundering obligations.
• "Cookies" — small text files stored on a User's device by a web browser to retain session state, preferences, and analytical data.
• "Data Breach" — any confirmed or reasonably suspected unauthorised access to, disclosure of, or destruction of personal data held by idcash88.

3 Personal Data We Collect

3.1 Registration Data

When you create an idcash88 account, we collect the information you provide directly, including: your full legal name, date of birth, email address, phone number, and residential address. This information is required to create and maintain your account and to verify your identity in line with our KYC obligations.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering and responsible gambling requirements, we collect identity documents including: government-issued photo identification (Malaysian MyKad, passport, or equivalent), proof of residential address (utility bill, bank statement), and where applicable, source-of-funds documentation. These documents are processed by our KYC verification system and retained in encrypted storage.

3.3 Financial & Transaction Data

We collect details of all financial transactions conducted through the platform, including: deposit amounts and dates, payment methods used (Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, USDT, BTC), withdrawal requests, and transaction confirmation records. We do not store full payment card details; payment processing is handled by certified third-party payment processors.

3.4 Platform Activity Data

We collect records of your gaming activity on the platform, including: games played, bet amounts, win/loss outcomes, session durations, bonus usage, and VIP tier progression. This data is used for account management, responsible gambling monitoring, bonus compliance, and platform improvement.

3.5 Technical & Device Data

Automatically collected technical data includes: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session timestamps, and language preferences. This data supports security monitoring, fraud prevention, and platform optimisation.

3.6 Communications Data

When you contact our support team via live chat or email, we retain records of those communications for service quality, dispute resolution, and regulatory compliance purposes. Support communications are stored for a minimum of 24 months.

4 How We Collect Personal Data

idcash88 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC, make a deposit or withdrawal, contact support, respond to a survey, or participate in a promotion.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies as you interact with the platform.
• From third-party service providers: Including identity verification services, payment processors (FPX, DuitNow network, e-wallet operators), and fraud detection services that provide supplementary data to validate your identity or transactions.
• From publicly available sources: Where necessary for fraud prevention, compliance, or regulatory reporting, we may cross-reference data against publicly available records.

5 Purposes of Processing Personal Data

idcash88 processes personal data for the following defined purposes:

• Account creation and management: Creating, maintaining, and securing your idcash88 account throughout the membership lifecycle.
• Identity verification (KYC): Confirming your identity and age (21+) to comply with anti-money-laundering regulations and responsible gambling standards.
• Transaction processing: Processing deposits, withdrawals, and bonus credits accurately and promptly through your chosen payment method.
• Responsible gambling monitoring: Monitoring gaming patterns to identify indicators of problem gambling and apply appropriate interventions, including deposit limits and self-exclusion enforcement.
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of support interactions.
• Fraud detection and security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, money laundering, and other prohibited conduct.
• Platform improvement: Analysing aggregated usage patterns to improve platform features, performance, and user experience.
• Legal and regulatory compliance: Meeting reporting obligations, responding to lawful regulatory requests, and maintaining records required by applicable law.
• Service communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where consent has been provided, promotional communications.

6 Legal Basis for Processing

idcash88 processes personal data under the following legal bases, applicable in accordance with relevant data protection law:

• Contractual necessity: Processing required to perform the contract between you and idcash88 — including account management, transaction processing, and support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate interests: Processing undertaken for our legitimate business interests, including fraud prevention, platform security, internal analytics, and dispute resolution — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent (for example, for certain marketing communications), we will seek that consent explicitly. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

7 Data Sharing & Disclosure

idcash88 does not sell personal data. Data sharing with third parties is limited to the categories and circumstances described below:

7.1 Service Providers (Data Processors)

We share data with contracted third-party service providers who process data on our behalf under strict data processing agreements, including: payment processors (FPX network operators, DuitNow, e-wallet platforms such as Touch 'n Go, Boost, GrabPay), identity verification providers, cloud infrastructure and hosting providers, customer support platform operators, and anti-fraud service providers. These processors are permitted to use data only for the specific purposes instructed by idcash88.

7.2 Regulatory and Legal Authorities

We may disclose personal data to governmental, regulatory, or law enforcement authorities where required or authorised by applicable law, including in response to lawful court orders, regulatory audits, or anti-money-laundering investigations. In such cases, disclosure is limited to what is strictly required.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of idcash88's business, Member data may be transferred to the relevant successor entity. We will notify affected Members before their data is transferred and becomes subject to a different privacy policy.

7.4 With Your Consent

We will not share your personal data with any third party beyond the categories described above without your explicit consent, obtained in advance.

8 International Data Transfers

Some of our service providers and infrastructure partners may process personal data in jurisdictions outside Malaysia. Where such international transfers occur, idcash88 implements appropriate safeguards to ensure that your data receives an equivalent level of protection, including:

• Standard contractual clauses or equivalent contractual protections with the receiving entity.
• Transfer only to jurisdictions that have been assessed to provide adequate data protection standards.
• Technical security controls applied uniformly regardless of the location of data processing.

By using the idcash88 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia in connection with the delivery of our services.

9 Data Retention

idcash88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your membership and for a period of at least 5 years following account closure, to satisfy anti-money-laundering retention requirements.
• KYC documents: Retained for a minimum of 5 years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years following the relevant transaction, in compliance with financial record-keeping obligations.
• Support communications: Retained for a minimum of 24 months from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance documentation.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised. Data that has been anonymised — where it can no longer be linked to an identifiable individual — is not subject to this Policy and may be retained indefinitely for analytical or reporting purposes.

10 Cookies & Tracking Technologies

The idcash88 platform uses cookies and similar technologies to enable core platform functionality, maintain session state, support security controls, and gather aggregated analytical data to improve the user experience.

10.1 Types of Cookies Used

• Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences such as language settings, display preferences, and remembered login state to improve your experience on return visits.
• Analytical cookies: Collect aggregated, anonymised data about how visitors interact with the platform — including pages visited, session duration, and click patterns — to help us identify and resolve usability issues.
• Security cookies: Used to detect suspicious activity, prevent fraud, and maintain platform integrity by identifying unusual access patterns.

10.2 Managing Cookie Preferences

You may configure your browser to refuse all or certain categories of cookies. Please be aware that disabling essential cookies will impair the functionality of the idcash88 platform and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in your browser's help section.

11 Security Measures

idcash88 implements a multi-layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: 256-bit AES encryption for data at rest; TLS 1.3 for all data in transit between your device and our servers.
• Access controls: Role-based access control (RBAC) ensuring that only authorised personnel with a legitimate operational need can access Member data.
• Multi-factor authentication: Required for administrative system access and available to Members for account login.
• Regular security audits: Periodic penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Real-time fraud monitoring: Automated systems monitor transactions and account activity 24/7 for indicators of fraud, money laundering, or unauthorised access.
• Incident response: A documented data breach response procedure is in place. In the event of a confirmed breach affecting Member data, affected individuals will be notified in accordance with applicable regulatory requirements.

While idcash88 employs robust security measures, no online system can be guaranteed entirely free from risk. You play an important role in protecting your own account by maintaining a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with third parties.

12 Your Data Protection Rights

Subject to applicable law and certain exceptions, you hold the following rights in relation to your personal data held by idcash88:

To exercise any of the above rights, please contact our support team via email at [email protected] (plain text — not a clickable link) or via live chat. We will respond to all valid data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days — you will be notified if this applies.

Please note that certain rights may be limited where idcash88 is required to retain or continue processing data to comply with a legal obligation, defend a legal claim, or prevent fraud — for example, KYC records retained under anti-money-laundering regulations may not be eligible for early deletion regardless of a deletion request.

13 Children & Minors

The idcash88 platform is strictly for individuals aged 21 years and above. idcash88 does not knowingly collect personal data from individuals under the age of 21. Account registration requires confirmed date-of-birth submission and is subject to mandatory KYC age verification.

If idcash88 becomes aware that personal data has been collected from a person under the age of 21 without parental consent or in breach of our age restriction policy, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our platform, please contact our support team immediately so we can investigate and act.

14 Amendments to This Privacy Policy

idcash88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will:

• Update the "Last Reviewed" date at the top of this page.
• Display a prominent notice on the platform informing active Members of the update.
• Where significant changes affect how we use your data, seek fresh consent or provide a meaningful opt-out mechanism where appropriate.

Your continued use of the idcash88 platform following notification of an updated Privacy Policy constitutes acknowledgement of the revised terms. We encourage you to review this Policy periodically to stay informed of how your data is being handled.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the idcash88 data privacy team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the platform
• Subject Line (for email): Please use "Privacy Request — [Your Registered Username]" to ensure your query is directed to the correct team

For data subject rights requests, please include sufficient identification information to allow us to locate your records — typically your registered email address and account username. We may request additional verification before fulfilling a data access or deletion request to ensure we do not disclose or delete data belonging to an account you do not own.