Privacy Policy

Introduction

ikaya88 (hereinafter referred to as "we", "us", "our", or "the Platform") operates the online gaming and sports betting platform accessible at https://ikaya88.cam. In providing our services — which include sports betting, live dealer casino games, slot games, and related gaming products — we necessarily collect and process certain personal data about the individuals who register and use our Platform.

This Privacy Policy (hereinafter "Policy") sets out in clear, structured terms how we collect, process, store, share, and protect that personal data. It also explains the rights you hold as a data subject and how to exercise those rights. We are committed to handling your personal data with the same standard of care that we apply to the security of your funds — with rigour, transparency, and respect.

ikaya88 primarily serves users in Malaysia, including residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. This Policy is written in English and applies to all data subjects regardless of their geographic location within Malaysia or internationally.

This Policy is incorporated by reference into our Terms and Conditions. Together, these two documents constitute the binding agreement between you and ikaya88 regarding your use of the Platform.

Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — a data subject — including but not limited to name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means ikaya88, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party engaged by ikaya88 to process personal data on our behalf, subject to contractual data protection obligations.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by ikaya88 — in practice, this means registered users of the Platform.
• "KYC" means Know Your Customer — the identity verification process conducted to confirm a user's identity and eligibility before processing withdrawals or as otherwise required by compliance obligations.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and certain functional features.
• "Account" means your registered user account on the ikaya88 Platform.

Data We Collect

ikaya88 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically when you access or use the Platform, and in some cases from third-party verification and payment providers. The categories of personal data we collect are set out below.

3.1 Registration & Account Data

When you create an Account on ikaya88, we collect the information you provide during the registration process, including your full legal name, date of birth, email address, contact number, and chosen username and password. This information is necessary to establish and operate your Account.

3.2 Identity Verification (KYC) Data

To process withdrawals and comply with anti-money laundering (AML) obligations, we collect identity verification documents from users. This typically includes a copy of your Malaysian identity card (MyKad — front and back) or a valid passport, proof of residential address (such as a utility bill or bank statement), and proof of payment method. This data is processed and stored securely and is used exclusively for compliance and fraud prevention purposes.

3.3 Financial Transaction Data

We collect records of all financial transactions processed through your Account, including deposits, withdrawals, and gaming activity. For Malaysian users, this includes transactions processed via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels (BTC and USDT). Transaction records include amounts in MYR or cryptocurrency equivalent, timestamps, payment method identifiers, and transaction reference numbers.

3.4 Device & Technical Data

When you access the Platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.5 Behavioural & Usage Data

We collect data about how you interact with the Platform, including pages visited, games played, betting markets accessed, session duration, click patterns, and search terms entered within the Platform. This data helps us improve the user experience and personalise relevant promotions.

3.6 Communications Data

We retain records of communications between you and our support team, including live chat transcripts, email correspondence, and any documents you provide in connection with a support query, complaint, or verification request.

3.7 Data We Do Not Collect

ikaya88 does not collect full credit or debit card numbers. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or genetic data, except where this information is voluntarily provided in the context of a responsible gambling assessment. We do not collect the personal data of children under 21 years of age — see Section 12 for our policy on minors.

How We Use Your Data

ikaya88 processes your personal data only for the purposes described below. We do not process personal data for purposes that are incompatible with the original purpose of collection without obtaining your prior consent.

Legal Basis for Processing

ikaya88 processes personal data under the following legal bases, as appropriate to each processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you — including Account operation, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and our licensing conditions as an international gaming operator.
• Legitimate Interest: Processing conducted for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent for specific processing activities (such as sending promotional communications), you may withdraw that consent at any time by contacting our support team or updating your communication preferences in Account settings.

Data Sharing & Disclosure

ikaya88 does not share your personal data with third parties except in the limited circumstances described in this section. Where we do share data with third parties, we ensure that appropriate contractual and technical safeguards are in place to protect your data.

6.1 Payment Processors

To process your MYR deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks, we share the minimum necessary payment and identity data with our verified payment processing partners. These partners process data only as required to complete your transactions and are bound by contractual data protection obligations.

6.2 Identity Verification Providers

To conduct KYC verification, we may share your identity documents and personal data with third-party verification service providers who are contractually bound to process such data only for verification purposes and to maintain appropriate security standards.

6.3 Regulatory and Law Enforcement Authorities

We may disclose personal data to regulators, law enforcement agencies, or government authorities where we are legally required to do so, where disclosure is necessary to prevent fraud or criminal activity, or where required under the conditions of our international gaming licence.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your personal data may be transferred to the relevant successor entity. We will provide notice of any such transfer and ensure that the successor entity is bound to respect the terms of this Policy.

6.5 Aggregate and Anonymised Data

We may share aggregate, anonymised statistical data — which cannot be used to identify individual users — with business partners, analytics providers, or for industry research purposes. This data does not constitute personal data and is not subject to the protections set out in this Policy.

Cookies & Tracking Technologies

ikaya88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you access a website. They do not contain executable code or viruses and cannot directly access other information stored on your device.

7.1 Types of Cookies Used

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state and security cookies that help protect your Account. These cookies cannot be disabled without significantly impairing Platform functionality.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — pages visited, time on page, navigation paths, and error events. This data is used to improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred payment method, and display configurations, so you do not have to re-enter them on each visit.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot activity, account takeover attempts, and suspicious login patterns.

7.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive alerts before cookies are stored. Please note that disabling essential cookies may prevent certain Platform features from working correctly. For detailed instructions on managing cookies in your specific browser, please consult your browser's help documentation.

Data Retention

ikaya88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your Account being open and active on the Platform.
• Account Data Post-Closure: Retained for a minimum of five (5) years following Account closure, in accordance with AML record-keeping requirements applicable to international gaming operators.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the completion of the most recent verification process, or longer where required by specific regulatory obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, unless the communication is related to an active dispute or legal matter.
• Anonymised Analytics Data: May be retained indefinitely as it cannot be used to identify individual users.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request early deletion of your data under your rights described in Section 10, we will assess and respond to your request in accordance with our legal obligations.

Data Security

ikaya88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all Account interactions, payment transactions, and data submissions.
• Encrypted Data Storage: Sensitive personal data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to ikaya88 personnel who require it to perform their job functions. All staff with data access are subject to confidentiality obligations and regular data protection training.
• Two-Factor Authentication: Optional two-factor authentication (2FA) is available for all user Accounts to add an additional layer of protection beyond username and password.
• Intrusion Detection: Our systems are monitored continuously for suspicious activity, anomalous access patterns, and potential security incidents.
• Regular Security Assessments: We conduct regular internal and external security assessments of our platform infrastructure and data handling practices.

While we implement robust security measures, no digital system can be guaranteed to be entirely immune from security threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users promptly in accordance with our notification obligations.

Your Rights

As a data subject, you hold the following rights with respect to your personal data processed by ikaya88. To exercise any of these rights, please contact us as described in Section 15. We will respond to all valid requests within a reasonable timeframe — typically within 30 days.

International Data Transfers

ikaya88 operates as an internationally licensed gaming platform. In the course of providing our services to users in Malaysia and other jurisdictions, your personal data may be transferred to and processed in countries outside Malaysia, including countries in which our platform infrastructure, data centres, or third-party service providers are located.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to maintain an equivalent level of data protection. These safeguards may include standard contractual data protection clauses incorporated into agreements with data processors, or reliance on the receiving country's recognised data protection framework.

By using the Platform, you acknowledge and consent to such international transfers of your personal data for the purposes described in this Policy.

Minors & Age Verification

ikaya88 does not knowingly collect or process the personal data of individuals under the age of 21 years. Our Platform is strictly intended for adults aged 21 and above. We implement age verification measures as part of our Account registration and KYC processes to prevent access by minors.

If we become aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. All funds held in such Accounts will be handled in accordance with our Terms and Conditions.

If you are a parent or guardian and believe your child may have registered an Account on ikaya88, please contact us immediately at [email protected] so that we can investigate and take appropriate action. We also recommend the use of parental control software to help prevent minors from accessing gambling websites.

Third-Party Services

The ikaya88 Platform may contain references to third-party services — such as payment processors and game studio providers — that operate under their own privacy policies. Where you interact with such third-party services through our Platform (for example, when processing a Touch 'n Go eWallet or DuitNow transaction), that interaction is governed by the relevant third party's privacy policy.

ikaya88 is not responsible for the privacy practices of third-party services. We recommend that you review the privacy policies of any third-party services you interact with, particularly your chosen payment provider, to understand how they handle your personal data.

ikaya88 does not authorise any third party to collect personal data on our behalf except where explicitly described in this Policy (e.g., verified payment processors and KYC verification providers acting as data processors under contract).

Policy Amendments

ikaya88 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — for example, changes to the categories of data we collect, new purposes for processing, or changes to data sharing arrangements — we will provide notice to registered users via email or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how we handle your personal data. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels. We are committed to responding to all privacy-related enquiries promptly and in good faith.

• Live Chat: Available directly on the Platform at https://ikaya88.cam — available 24 hours a day, 7 days a week including Malaysian public holidays. For straightforward Account or data queries, live chat is the fastest channel.
• Email: [email protected] — for formal data subject rights requests, privacy complaints, and detailed enquiries. Please mark the subject line clearly as a "Privacy Request" or "Data Rights Request" so that our team can route your message to the appropriate person. We aim to acknowledge all privacy-related emails within 24 hours and to provide a substantive response within 30 days.

For formal data subject access requests, please provide your Account username and the specific data or information you are requesting. We may ask you to verify your identity before processing the request to ensure that data is only disclosed to the correct individual.