isac88 Privacy Policy

1. Introduction

1.1 isac88 ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of all registered players and visitors to the isac88.win platform. This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, and share personal data in connection with your use of the isac88 platform and any associated services.

1.2 By registering an account with isac88 or continuing to use the Platform after this Policy has been communicated to you, you acknowledge that you have read and understood the practices described herein. Where processing of your personal data requires your consent, we will ask for it separately and distinctly.

1.3 isac88 recognises that Malaysian players have specific expectations around the responsible handling of personal and financial data. This Policy is designed to be transparent about our practices and to give you meaningful control over your personal information where the law permits.

2. Data Controller

2.1 The data controller responsible for personal data collected through the isac88 Platform is the isac88 operating entity. For privacy-related enquiries, you may contact the isac88 Data Protection team via the support email listed at Section 14 of this Policy.

2.2 Where isac88 engages third-party service providers to process personal data on its behalf (as described in Section 6), those providers act as data processors under the direction of isac88 and are bound by contractual obligations consistent with applicable data protection law.

3. Personal Data We Collect

3.1 isac88 collects personal data through several channels and for specific purposes. The categories of data we collect are set out in the table below:

3.2 isac88 does not collect special categories of personal data (such as health information, racial or ethnic origin, or religious beliefs) except where specifically required to fulfil responsible gaming obligations (for example, where a player provides medical documentation in connection with a self-exclusion request).

4. How We Use Your Personal Data

4.1 isac88 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your isac88 Account, including processing deposits and withdrawals and maintaining your transaction history.
• Identity verification (KYC): To verify your identity and age in accordance with our legal and regulatory obligations, and to prevent the use of the Platform by minors or persons using false identities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activity on the isac88 Platform.
• Responsible gaming monitoring: To identify and respond to patterns of gaming behaviour that may indicate problem gambling, and to action self-exclusion or limit requests promptly.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and develop improvements to the isac88 Platform and user experience.
• Marketing communications: To send you information about isac88 promotions, bonuses, and platform updates, where you have separately consented to receive such communications.
• Legal compliance: To comply with applicable laws, regulations, court orders, and requests from competent regulatory or law enforcement authorities.

5. Legal Basis for Processing

5.1 isac88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations under the isac88 Terms & Conditions, including account operation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where these interests are not overridden by your privacy rights.
• Consent: Processing of personal data for marketing communications and non-essential cookies, where you have given freely given, specific, informed, and unambiguous consent.

6. Sharing Your Personal Data

6.1 isac88 does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors: Financial data is shared with payment service providers (including e-wallet operators such as Touch n Go eWallet and Boost, and banking institutions such as Maybank, CIMB, and Public Bank) solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Identity and contact data is shared with our contracted KYC service providers for the purpose of verifying your identity and age.
• Game providers: Limited technical and gaming data may be shared with our game content providers for the purpose of delivering and auditing game sessions.
• Fraud prevention services: Technical and financial data may be shared with fraud detection partners where isac88 has reasonable grounds to suspect fraudulent activity.
• Regulatory and law enforcement authorities: isac88 will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory directive.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of isac88, personal data held by the Company may be transferred to the acquiring entity, subject to obligations equivalent to those in this Policy.

6.2 All third-party service providers engaged by isac88 are required to implement appropriate technical and organisational measures to protect personal data and are prohibited from using that data for any purpose other than the specific service they provide to isac88.

7. International Data Transfers

7.1 The isac88 Platform operates internationally. Where personal data is transferred outside of Malaysia to countries that may not provide equivalent levels of data protection, isac88 will implement appropriate safeguards — including standard contractual clauses or equivalent transfer mechanisms — to ensure that your personal data remains protected to the standard described in this Policy.

8. Data Retention

8.1 isac88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice, this means:

• Account data is retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering retention requirements.
• Transaction and gaming records are retained for a minimum of five (5) years from the date of the transaction or game session.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing consent records are retained until you withdraw consent, and for a period thereafter sufficient to demonstrate that consent was obtained.

8.2 Where personal data is no longer required for any lawful purpose, isac88 will securely delete or anonymise it.

9. Cookies & Similar Technologies

9.1 The isac88 Platform uses cookies and similar tracking technologies to operate essential Platform functionality, maintain your login session, remember your preferences, and analyse how the Platform is used.

9.2 The categories of cookies used by isac88 are as follows:

• Strictly necessary cookies: Essential for the operation of the Platform, including session management and security functions. These cannot be disabled without affecting Platform functionality.
• Performance cookies: Used to collect anonymised information about how visitors use the Platform, enabling isac88 to identify and resolve performance issues and improve the user experience.
• Functional cookies: Used to remember your preferences, such as language settings and display options.
• Marketing cookies: Used only where you have consented, to deliver relevant promotional content within the Platform.

9.3 You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of the isac88 Platform, including your ability to remain logged in during a session.

10. Your Data Rights

10.1 Subject to applicable law, you have the following rights in relation to your personal data held by isac88:

• Right of access: To request a copy of the personal data isac88 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data, subject to isac88's legal retention obligations.
• Right to restriction: To request that isac88 restricts the processing of your personal data in certain circumstances.
• Right to data portability: To receive your personal data in a structured, commonly used, machine-readable format where the processing is based on contract or consent.
• Right to object: To object to processing of your personal data based on legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: To withdraw any consent you have given to the processing of your personal data at any time, without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, please contact the isac88 Data Protection team at the email address provided in Section 14. isac88 will respond to verified requests within thirty (30) days. We may require proof of identity before processing a data rights request.

11. Children's Privacy

11.1 The isac88 Platform is strictly for persons aged 21 years and above. isac88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, that data will be promptly deleted and the associated Account closed.

11.2 If you are a parent or guardian and believe that a person under 21 in your care has registered an isac88 Account, please contact isac88 support immediately so that we can take appropriate action.

12. Data Security

12.1 isac88 implements technical and organisational security measures appropriate to the sensitivity of personal data processed on the Platform. These measures include:

• TLS encryption for all data transmitted between your device and the isac88 Platform.
• AES-256 encryption for personal and financial data stored at rest.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures for the detection, containment, and notification of data security incidents.

12.2 While isac88 takes all reasonable precautions to protect your personal data, no method of internet transmission or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your isac88 Account credentials and for enabling available security features such as two-factor authentication.

13. Changes to This Policy

13.1 isac88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the structure of the Platform. Material changes will be communicated to you via email to your registered address or by a prominent notice on the Platform, with a reasonable period of notice before the updated Policy takes effect.

13.2 The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the isac88 Platform after the effective date of an updated Policy constitutes your acceptance of the revised terms.

14. Contact Us

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by isac88, please contact our Data Protection team:

Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 30 days for data rights requests; sooner for general enquiries via live chat.

14.2 For urgent account security concerns — such as suspected unauthorised access to your isac88 Account — please use the live chat function on the Platform for the fastest response.