Privacy Policy imbajp – Malaysian Player Data Protection

1Introduction & Scope of Privacy Policy

Imbajp is an online betting and casino platform built specifically for Malaysian players. We understand that player trust is earned not just through game quality and payout speed — but also through how we handle the personal information you entrust to us when using this platform.

This Privacy Policy applies to all information collected through the official imbajp website, the imbajp mobile application (where applicable), and any written or electronic communications between you and the imbajp team. It covers all registered players, visitors to the imbajp website, and any individual who interacts with our customer support channels.

Imbajp is committed to complying with the Personal Data Protection Act 2010 (PDPA) of Malaysia in all aspects of player data handling. We appoint an internal Data Protection Officer responsible for ensuring ongoing compliance with applicable data protection legislation.

2Types of Personal Data We Collect

Imbajp collects personal data from you in several ways — directly during registration, automatically through your use of the platform, and in certain cases, from trusted third parties. The following are the categories of data we may collect:

Imbajp does not collect sensitive data such as health information, religious beliefs, or political views, except in specific circumstances required by law — for example, compliance with responsible gambling obligations that necessitate the assessment of certain risk factors.

3Purposes for Using Personal Data

Imbajp uses collected personal data solely for legitimate and transparent purposes. We do not use your data for any purpose beyond those stated below:

• Account management: Verifying your identity, processing registrations, managing your account profile, and keeping your imbajp account secure at all times.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, and handling withdrawal of winnings to verified accounts.
• Legal compliance: Meeting imbajp's legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) verification, and compliance with applicable gambling regulations.
• Platform security: Detecting, preventing, and investigating fraud, unauthorised access, multi-account abuse, and other unlawful activities on the imbajp platform.
• Customer support: Responding to enquiries, resolving complaints, and providing technical support in Bahasa Malaysia to all imbajp players.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the user experience, introduce relevant new games, and optimise platform performance.
• Marketing communications: Sending promotional information, bonus offers, and relevant campaigns — only to players who have given explicit consent to receive such communications.
• Responsible gaming: Monitoring gameplay patterns to identify players who may be experiencing gambling-related issues and connecting them with appropriate support resources.

4Data Sharing & Disclosure to Third Parties

Imbajp do not sell player personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may need to share certain data with the following parties, all of whom are bound by strict confidentiality agreements:

• Payment processors: Certified payment gateways that process your deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX. They receive only the data necessary to process those transactions.
• Game providers: Evolution Gaming, Pragmatic Play Live, Playtech Live, and other game providers that require basic session information to operate Live Casino tables, slots, and Sports Betting on the imbajp platform.
• Identity verification services: Third-party KYC providers that assist imbajp in verifying player identity during registration and large withdrawal processes.
• Legal authorities: Malaysian authorities or relevant regulatory bodies where imbajp is legally required to disclose certain information, such as in financial crime investigations or pursuant to a court order.
• Cloud and infrastructure services: Technical service providers that host and support the imbajp platform infrastructure, operating under strict data protection agreements.

All third parties receiving imbajp player data are contractually bound to use that data solely for the stated purposes and must adhere to data protection standards equivalent to those set out in this imbajp Privacy Policy.

5imbajp Data Security Measures

The security of your personal data is imbajp's highest technical and operational priority. We implement multiple layers of protection to keep your data safe from both internal and external threats:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and imbajp's servers is encrypted using TLS 1.3 — the current industry-recognised security standard. This ensures that no third party can intercept or read your data in transit.
• Secure password storage: imbajp account passwords are stored using a high-grade hashing algorithm with a unique salt. imbajp never stores passwords in plain text, and our staff cannot view your password.
• Two-factor authentication (2FA): 2FA is available for all imbajp accounts, adding an extra layer of security that requires a second form of identity verification when logging in from a new device.
• 24/7 threat monitoring: imbajp's cybersecurity team continuously monitors platform activity to detect and respond to any unauthorised access attempts or suspicious behaviour.
• Regular penetration testing: Security audits and penetration testing are conducted on a regular basis by independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited.
• Internal access controls: Access to player personal data within imbajp is strictly limited to staff who require it to carry out their duties. All access is logged and audited.

6Cookies & Tracking Technologies

The imbajp platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Cookies are small text files stored on your device when you visit the imbajp website.

You can manage or delete cookies through your web browser settings. However, removing essential cookies may affect how the imbajp platform functions, such as your ability to stay logged in or save your game preferences. imbajp does not use cookies for third-party advertising or cross-site tracking purposes.

7Data Retention & Deletion Period

Imbajp retains players' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our data retention guidelines:

• Active account data: Retained for as long as your imbajp account remains active. Data is updated whenever you update your profile.
• Financial transaction records: Retained for a minimum of seven (7) years following the transaction, in line with Malaysian accounting and anti-money laundering legislation.
• Game records: Retained for three (3) years for dispute resolution and imbajp's internal audit purposes.
• Support communication records: Retained for two (2) years for service quality control purposes and case history reference.
• Technical log data: Retained for 90 days for security and threat detection purposes.
• Closed account data: Following account closure, personal data is retained for the minimum period required by law, then securely deleted or anonymised.

Once the retention period expires, personal data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to any specific individual. The deletion process uses methods that guarantee data cannot be recovered after deletion.

8Your Rights as an imbajp Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and imbajp's own policies, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the imbajp Data Protection Officer by email support@imbajp.best with the subject line "Personal Data Rights Request". Please include your full name, imbajp account number, and details of your request. We will respond within 14 business days.

9Child Data Protection

The imbajp platform is strictly restricted to individuals aged 18 years and above. imbajp does not knowingly collect or store any personal data from individuals under the age of 18.

If imbajp determines that personal data belonging to a child or minor below the age limit has been collected without valid parental or guardian consent, we will take immediate action to:

• Terminating the associated account immediately.
• Deleting all personal data associated with that individual from our systems within 72 hours.
• Reporting the incident to the relevant authorities where required.

If you are a parent or guardian who believes your child has registered an imbajp account without your consent, please contact us immediately at support@imbajp.best so that appropriate action can be taken without delay.

10Amendments to This Privacy Policy

Imbajp reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or evolving technology. We are committed to informing you of any material amendments through:

• In-platform notifications on imbajp displayed upon your next login.
• Notification emails sent to the email address registered on your imbajp account.
• Updating the "Last Updated" date displayed prominently at the top of this Privacy Policy page.

Continued use of the imbajp platform after any amendments take effect constitutes implicit acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your imbajp account and request deletion of your personal data through the channels specified in Section 8 above.