Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by ibayar99 ("ibayar99", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://ibayar99.cam and its associated sub-domains, mobile interfaces, and applications (collectively, the "Platform").

This Policy describes how ibayar99 collects, uses, stores, shares, and protects the personal data of individuals who access or use our Platform, including registered Players, prospective registrants, and general website visitors (collectively referred to as "you", "User", "Data Subject"). It applies to all interactions with the Platform regardless of the device or method used to access it.

By accessing the ibayar99 Platform, creating an Account, or using any of our services, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

ibayar99 is committed to handling personal data responsibly and in compliance with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA) and such other applicable privacy frameworks as may govern our operations.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., information that can be used, directly or indirectly, to identify you.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means ibayar99 as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of ibayar99 under instruction, such as payment processors, KYC verification providers, and cloud infrastructure providers.
• "KYC" means Know Your Customer — the identity and address verification procedures conducted pursuant to anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.
• "Cookies" means small data files stored on your device by the ibayar99 Platform to enable functionality, analyse usage, and personalise your experience.
• "Account" means the registered user account created by a Player on the ibayar99 Platform.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, as amended from time to time.

Data We Collect

ibayar99 collects Personal Data in the categories set out below. We collect only what is necessary for the specified purpose.

3.1 Registration and Account Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Username and encrypted password
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification — MyKad, Driver's Licence, or Passport bio-data page
• Proof of residential address (utility bill or bank statement dated within 3 months)
• Selfie photograph or live video verification image
• Proof of payment method ownership (e.g., bank statement)

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (masked card or account numbers; ibayar99 does not store full card numbers)
• Transaction timestamps, amounts in MYR, and payment method type (e.g., DuitNow, Touch 'n Go eWallet, Maybank2u, FPX, CIMB Clicks, GrabPay, Boost, Public Bank Online)
• Bonus and promotional activity records

3.4 Gaming and Betting Activity Data

• Game history (games played, bets placed, outcomes, session duration)
• Sports betting records (matches wagered on, bet types, odds accepted)
• Account balance history
• Responsible gambling tool settings and usage

3.5 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Session timestamps and duration
• Pages visited, features accessed, and navigation patterns within the Platform
• Error logs and crash reports

3.6 Communications Data

• Content and timestamps of live chat support interactions
• Email correspondence with ibayar99 Customer Support
• Feedback, survey responses, and complaint records

How We Collect Data

ibayar99 collects Personal Data through the following means:

• Direct collection: Information you provide during Account registration, KYC submission, deposit and withdrawal requests, customer support interactions, and promotional participation.
• Automated collection: Technical and usage data collected automatically when you access the Platform via cookies, server logs, and analytics tools.
• Third-party sources: Identity verification and fraud screening data received from licensed KYC/AML service providers in the course of verifying your Account. Financial transaction data received from payment processors including but not limited to DuitNow, FPX, and Malaysian e-wallet providers.

Data Processing & Use

ibayar99 processes your Personal Data for the following purposes:

Legal Basis for Processing

ibayar99 processes Personal Data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and ibayar99 — including account operation, game provision, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including AML/CTF regulations, KYC obligations, and tax reporting requirements.
• Legitimate interests: Processing for purposes that are in ibayar99's legitimate business interests and not overridden by your rights — including fraud prevention, platform security, and analytics for service improvement.
• Consent: Processing for marketing communications, certain types of cookies, and any other purpose for which we have obtained your explicit consent. Consent may be withdrawn at any time.

Data Sharing & Disclosure

ibayar99 does not sell, rent, or commercially trade your Personal Data to any third party. We share Personal Data only in the specific circumstances described below:

7.1 Service Providers (Data Processors)

ibayar99 engages carefully vetted third-party service providers who process Personal Data strictly on our instructions and are contractually bound by data protection obligations. These include:

• KYC and identity verification providers
• Payment processing companies facilitating MYR transactions (including providers supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong)
• Cloud hosting and infrastructure providers
• Fraud detection and cybersecurity providers
• Analytics and platform performance providers
• Customer support platform providers

7.2 Legal and Regulatory Authorities

ibayar99 may be required to disclose Personal Data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts where such disclosure is required by law or a valid legal order. Such disclosures will be limited to the minimum information necessary.

7.3 Business Transfers

In the event that ibayar99 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, Personal Data held by ibayar99 may be transferred to the acquiring entity. Players will be notified of any such transfer via email and Platform notice in advance of the transfer taking effect.

Cookies & Tracking Technologies

The ibayar99 Platform uses cookies and similar tracking technologies to provide core platform functionality, maintain session security, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without impairing core functionality such as login sessions, game state persistence, and payment flow integrity.
• Functional Cookies: Enable personalisation features such as remembered language preferences, last-visited game categories, and responsible gambling tool settings.
• Analytics Cookies: Used to understand how Players interact with the Platform — which pages are visited most frequently, where sessions originate, and how features are used. Analytics data is aggregated and anonymised where technically feasible.
• Security Cookies: Used for fraud detection, duplicate session monitoring, and identifying suspicious access patterns that may indicate account compromise.

You may configure your browser settings to refuse or delete cookies. Note that disabling cookies may affect the functionality of certain features of the ibayar99 Platform, including login persistence and game session continuity.

Data Retention

ibayar99 retains Personal Data for only as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of the Account relationship and for a period of at least five (5) years following Account closure, in compliance with AML record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from Account closure or the conclusion of any dispute or regulatory investigation, whichever is later.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years following the conclusion of the relevant interaction, or longer if the communication relates to an ongoing dispute or investigation.
• Technical and Usage Data: Retained for a maximum of twenty-four (24) months from collection, unless required longer for security investigation purposes.
• Marketing Consent Records: Retained for the duration of the consent and for three (3) years following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with ibayar99's data disposal procedures.

Data Security

ibayar99 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption for data stored at rest across all database systems.
• TLS 1.3 protocol for all data transmitted between your device and ibayar99 servers.
• Two-factor authentication (2FA) available for all Player Accounts.
• Role-based access controls restricting employee access to Personal Data on a strict need-to-know basis.
• Daily automated security scans and vulnerability assessments.
• Segregated storage of Player funds from operational funds to protect financial integrity.
• Regular staff training on data protection obligations and security best practices.
• Incident response procedures for data breach identification, containment, and notification.

Your Rights

As a Data Subject, you hold the following rights in relation to your Personal Data held by ibayar99. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and a description of your request. ibayar99 will respond to all verified requests within thirty (30) days.

Please note that some rights are subject to limitations — for example, the right to erasure does not apply where ibayar99 is required to retain data for AML compliance, legal proceedings, or regulatory obligations.

Children's Privacy

The ibayar99 Platform is strictly intended for individuals aged 21 years and above. ibayar99 does not knowingly collect, process, or store Personal Data from persons under the age of 21. We employ age verification measures during Account registration and KYC processing to enforce this requirement.

If ibayar99 becomes aware that Personal Data has been collected from a person under the age of 21, that Account will be immediately closed, all balances and winnings forfeited, and all associated Personal Data deleted as promptly as technically feasible, subject to any mandatory retention obligations under applicable law.

If you believe that a minor has registered an Account on ibayar99, please contact our Customer Support team immediately via live chat or at [email protected].

Third-Party Services

The ibayar99 Platform may contain integrations with or references to third-party services, including payment gateways (such as DuitNow, FPX, Touch 'n Go eWallet, and Maybank) and game content providers. This Privacy Policy applies solely to the ibayar99 Platform and does not extend to third-party services.

When you interact with a third-party payment method or game provider through the ibayar99 Platform, that third party's own privacy policy and data processing practices will apply to any Personal Data you share with them directly. ibayar99 is not responsible for the privacy practices of third-party service providers beyond the contractual data processing obligations we impose on them as Data Processors.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of ibayar99.

International Data Transfers

Some of the third-party service providers engaged by ibayar99 — including cloud infrastructure providers and KYC verification platforms — may process Personal Data in jurisdictions outside of Malaysia. Where such international data transfers occur, ibayar99 ensures that adequate safeguards are in place to protect your Personal Data, including:

• Contractual data protection obligations equivalent to those applicable in Malaysia, imposed on all overseas Data Processors.
• Transfer of Personal Data only to jurisdictions that maintain an adequate standard of data protection as assessed by ibayar99's compliance team.
• Encryption of Personal Data during transfer using TLS 1.3 or equivalent protocols.

Amendments to This Policy

ibayar99 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, our data processing practices, or Platform features. Material changes — that is, changes that affect your rights or our obligations in a meaningful way — will be communicated to registered Players via email notification and a prominent Platform notice at least fourteen (14) days prior to taking effect.

Minor updates that do not materially affect data subject rights (such as editorial corrections or clarifications) may be made without advance notice. The "Last updated" date at the top of the TOC sidebar reflects the date of the most recent revision. Continued use of the Platform following any update constitutes acknowledgement of the revised Policy.

Contact Us

For all privacy-related enquiries, data subject rights requests, or concerns about ibayar99's data handling practices, please contact us through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for prompt routing.
• Live Chat: Available 24/7 via the Platform. Typical response time under 5 minutes for general enquiries.

ibayar99 aims to respond to all privacy-related requests and enquiries within thirty (30) calendar days. For complex requests, we will acknowledge receipt within five (5) business days and provide an estimated timeline for full resolution.