Privacy Policy ibayar

1. Introduction

Ibayar ("we", "Platform") is an online gaming and betting platform operating in Malaysia. We understand that your trust in ibayar depends not only on the quality of our games and ease of transactions, but also on how we handle your personal information.

This Privacy Policy is designed to give you a clear and transparent overview of our data handling practices. We do not use complicated language or conceal any important information — our goal is to ensure you fully understand what happens to your data when you use ibayar.

This Policy operates alongside ibayar's Terms and Conditions. Should any conflict arise between the two documents, this Privacy Policy shall prevail for matters relating to personal data.

2. Data We Collect

Ibayar collects your personal data through several channels — during account registration, during platform use, and through your interactions with our support team. The following are the categories of data we collect:

2.1 Identity Data

• Full name as shown on MyKad or Passport
• Identity card number (MyKad) or passport number
• Date of birth and gender
• Identity document image (for KYC process)
• Selfie or facial photo (for identity verification)

2.2 Contact Data

• Registered email address
• Mobile phone number
• Residential address

2.3 Financial Data

• Bank account number and bank name
• E-wallet information (Touch 'n Go, GrabPay)
• Deposit and withdrawal transaction history
• Betting records and wins

2.4 Technical & Usage Data

• IP address and approximate location information
• Device type, operating system, and web browser
• In-platform activity logs (login times, games played)
• Cookie data and session identifiers

3. How We Use Your Data

The personal data we collect is used for lawful and transparent purposes. Below is a summary table of data usage and the legal basis underpinning each purpose:

Ibayar will not use your data for any purpose beyond the list above without obtaining your consent first. If you have previously consented to receiving marketing communications but later change your mind, you may withdraw that consent at any time through your account settings.

4. Disclosure to Third Parties

Ibayar does not sell or rent your personal data to any third party. However, in certain limited situations, we may need to share your data with the following parties:

4.1 Service Providers

Ibayar works with third-party service providers that help operate our platform, including payment gateway providers, identity verification services, and cloud infrastructure providers. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Legal Obligations

Ibayar may be required by law to disclose your personal data to government authorities or regulatory bodies, including Bank Negara Malaysia, the Financial Intelligence Unit (UFIU), or law enforcement, where there is a valid legal basis to do so.

4.3 Business Transfers

In the event of a merger, acquisition, or business asset transfer, your personal data may be transferred to the new entity. You will be notified in advance and given the option to opt out before any such transfer takes place.

5. Cookies & Tracking Technologies

Ibayar uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and maintain the security of your login session.

5.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve your user experience.
• Preference Cookies: Saves your preferences such as language and time zone.
• Analytics Cookies: Helps us understand usage patterns in aggregate, anonymous form.

5.2 Managing Cookies

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the ibayar platform. For guidance on managing cookies in popular browsers, please refer to your browser's documentation.

6. Data Security

Ibayar invests seriously in data security infrastructure to ensure your personal information is always protected against unauthorized access, modification, disclosure, or destruction.

6.1 Technical Measures

• Data encryption in transit using TLS 1.3 protocol
• Encryption of stored data (data at rest) using AES-256
• Password encryption using a one-way hashing algorithm (bcrypt)
• 24/7 security monitoring and real-time threat detection system
• Regular independent penetration testing

6.2 Organisational Measures

• Mandatory data security training for all ibayar staff
• Role-based access control policy
• Documented security incident response procedures
• Non-disclosure agreements (NDA) for all staff handling personal data

7. Data Retention & Deletion

Ibayar retains your personal data for as long as your account is active or as long as necessary to provide services to you. Following account closure, ibayar retains certain data for the period required by Malaysian law.

7.1 Retention Period

• Financial transaction data: Minimum 7 years in accordance with the Companies Act and anti-money laundering regulations
• KYC Data: Minimum 5 years after account closure
• Support communication logs: 3 years from the date of interaction
• Login and session data: 90 days from the date of activity

7.2 Data Deletion

Upon expiry of the designated retention period, ibayar will securely delete or anonymize your personal data. You may submit an early data deletion request; however, such requests are subject to ibayar's subsisting legal obligations.

8. Your Rights

As a data subject, you have the following rights under Malaysia's PDPA and ibayar's policy:

8.1 Right of Access

You have the right to request a copy of the personal data ibayar holds about you. This request will be processed within 21 business days.

8.2 Right of Rectification

If your personal data is inaccurate, outdated, or incomplete, you have the right to request a correction. You may update basic information directly through your ibayar account settings.

8.3 Right of Erasure

You may request deletion of your personal data, subject to ibayar's legal obligations. This request can be submitted through the ibayar support team.

8.4 Right to Withdraw Consent

If you have previously given consent for certain data processing activities (such as receiving marketing communications), you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.

8.5 How to Submit a Request

9. Children's Data

The ibayar platform is restricted to users aged 18 and above. ibayar does not intentionally collect any personal data from children or individuals under the age of 18. Should we find that we have collected data from someone under 18, we will immediately delete that data and close the relevant account.

If you are a parent or guardian and believe your child has registered on ibayar, please contact us immediately through our official support channels.

10. Policy Amendments

Ibayar reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material amendments will be communicated to you via:

• Prominent notice on the ibayar platform homepage
• Notification email to the address registered on your account
• In-app notifications on ibayar

Continued use of the ibayar platform after any policy amendment takes effect constitutes acceptance of the new terms. If you do not agree with any amendment, you have the right to close your account.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ibayar handles your personal data, please contact us through the following channels:

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.