Privacy Policy isama —
Protection of Your Personal Data

1 Introduction

Isama respects the privacy of every user who trusts our platform. This Privacy Policy ("Policy") explains in detail how isama — the operator of an online betting platform in isama.app — collects, processes, stores, and protects your personal data.

We understand that your personal data is a trust you place in us. That is why we handle it with full responsibility and care, in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

This Policy applies to all users of the isama platform, including website visitors, registered members, and those who interact with our customer support services. Please read this Policy carefully together with Terms and Conditions and Responsible Gaming Policy us.

2 Data We Collect

Isama collects various types of personal data to ensure our services run smoothly and securely. The following are the categories of data we collect:

In some cases, we may also collect sensitive data such as information related to gambling issues for the purposes of our responsible gaming programme. This type of data is handled with a higher level of protection.

3 How We Use Your Data

Isama uses collected personal data solely for legitimate purposes directly related to the provision of our services. These purposes include:

• Account Management: Creating, maintaining, and managing your isama account, including the registration process and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, duplicate accounts, and other suspicious activities.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to you.
• Service Communications: Sending important notifications related to your account, transactions, terms changes, and security information.
• Platform Improvements: Analysing usage patterns to improve the quality, usability, and performance of the isama platform.
• Legal Compliance: Fulfilling our obligations under applicable Malaysian law, including reporting requirements to the relevant authorities.
• Responsible Gaming: Monitoring betting patterns to identify users who may need assistance and offering appropriate support.

4 Data Sharing

Isama does not sell or disclose your personal data to third parties for their own commercial purposes. However, we may share your data in the following limited and controlled circumstances:

• Service Providers: Payment providers (such as FPX processors and digital wallets), gaming platforms, cloud service providers, and technical support vendors that help us operate the isama platform. All such providers are bound by strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or direction from a competent authority in Malaysia, we will disclose the necessary data.
• Fraud Prevention: To fraud prevention agencies or financial authorities if we suspect illegal activity involving your account.
• Business Transfer: In the event of a merger, acquisition, or sale of isama assets, user data may be transferred as part of that transaction, with prior notice given to users.

In all data sharing situations, isama ensures adequate protections are applied and data is used only for the stated purpose.

5 Data Security

The security of your personal data is isama's highest priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL Encryption: All communications between your device and isama servers are encrypted using the latest TLS protocol.
• Secure Storage: Sensitive data such as passwords are stored in an irreversible hash format, and financial information is stored in a PCI-DSS compliant environment.
• Access Control: Access to user data within isama is restricted on a need-to-know basis and is continuously monitored.
• Two-Factor Authentication: isama supports two-factor authentication (2FA) as an additional security layer for user accounts.
• Regular Security Audits: We conduct regular audits and penetration testing to identify and address any security vulnerabilities.
• Incident Response Plan: isama has clear procedures for handling any data breach, including notifying affected users within the stipulated timeframe.

6 Cookies & Tracking Technologies

Isama uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform for improvement purposes.
• Functional Cookies: Saving your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies: Used to analyze traffic patterns and platform usage in an aggregated and anonymized manner.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the isama platform.

7 Data Retention

Isama retains your personal data for as long as your account is active or as long as necessary to provide services to you. Following account closure, we will retain your data for a specified period to meet applicable legal and regulatory obligations.

• Active Account Data: Retained for the duration your account remains active with isama.
• Post-Account Closure Data: Transaction records and KYC data are retained for a minimum of 7 years following account closure, in compliance with Malaysian financial legal requirements.
• Technical Log Data: Retained for 12 months for fraud detection and security purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

When the retention period expires or you request deletion (and no legal obligation prevents it), isama will securely delete or anonymize your data.

8 Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the isama Privacy team by email at [email protected]. We will process your request within 14 business days.

9 Children's Data

The isama platform is intended exclusively for individuals aged 18 years and above. We do not knowingly collect any personal data from children or individuals under the age of 18.

If we find that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered an account on isama are required to contact us immediately at [email protected].

10 Third-Party Links

The isama platform may contain links or integrations with third-party services such as payment providers and gaming platforms. Once you leave the isama platform and access a third-party website or service, our Privacy Policy no longer applies.

Isama is not responsible for the privacy practices or content of third-party websites. We encourage you to read the Privacy Policy of each third-party website you visit. Our payment providers such as FPX, DuitNow, Touch 'n Go, and GrabPay have their own privacy policies that apply when you use their services.

11 Policy Amendments

Isama reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or relevant technological developments.

When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the isama platform about the changes.
• Sending email notifications to registered users if the changes materially affect your privacy rights.

Your continued use of the isama platform after changes are published constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how isama handles your personal data, please contact us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 at isama.app

The isama Privacy team will respond to your enquiry within 14 business days. For more serious complaints involving data breaches, we will prioritize a response within 72 hours.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or another relevant authority.