ikaya Privacy Policy

1. Definitions and Scope of Application

In this Privacy Policy, the following terms carry the meanings defined below:

• "ikaya" or "we" — refers to the entity operating the ikaya platform under international licensing.
• "User" or "you" — refers to any individual who accesses, registers or uses ikaya services.
• "Personal Data" — any information that can be used to identify an individual directly or indirectly, including but not limited to name, identity card number (MyKad), mobile phone number, email address and financial information.
• "Processing" — any operation carried out on personal data, including collection, storage, use, disclosure and deletion.
• "Platform" — the ikaya website accessible via ikaya.app together with all related subdomains and applications.

This policy applies to all users of the ikaya platform regardless of the method of access, whether via web browser, mobile application or any other digital interface provided by ikaya.

2. Personal Data We Collect

ikaya collects users' personal data through various channels based on the requirements of our services:

2.1 Data Provided Directly

When you register an account, make a deposit, request a withdrawal or contact our support team, you may provide the following information:

• Full name as stated on your MyKad or valid identification document
• MyKad number or passport number
• Active email address
• Mobile phone number registered in Malaysia
• Date of birth for age verification purposes (21 years and above)
• E-wallet or bank account information for processing deposits and withdrawals
• Account password stored in encrypted hash format

2.2 Automatically Collected Data

While you use the ikaya platform, we automatically collect technical data for operational and security purposes:

• IP address and geographic location information
• Device type, operating system and web browser version
• Login session records, including date, time and session duration
• Betting history and game activity on the ikaya platform
• Deposit and withdrawal transaction records
• User interaction data with the platform interface

2.3 Data From Third-Party Sources

In certain circumstances, we may receive your personal data from payment service providers such as Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay or cryptocurrency wallet providers for identity verification and financial transaction processing purposes.

3. Purpose of Using Personal Data

ikaya uses users' personal data solely for legitimate and defined purposes:

• Account management — creating, verifying and maintaining your user account on the ikaya platform
• Financial transaction processing — processing your minimum deposit of RM50 and minimum withdrawal of RM100 via your chosen payment method
• Identity verification — complying with Know Your Customer (KYC) requirements under our international licensing obligations
• Fraud prevention — detecting and preventing fraud, money laundering and platform misuse
• Customer support — providing effective technical assistance and customer service via live chat and email
• Service improvement — analysing usage patterns to improve platform quality and user experience
• Legal compliance — fulfilling applicable legal and regulatory obligations
• Service communications — sending notifications related to your account, transactions and platform updates

ikaya does not use your personal data for any purpose beyond those listed above without first obtaining additional consent from you.

4. Data Sharing and Disclosure

ikaya holds firmly to the principle that users' personal data is not sold to any party. However, in certain circumstances, we may share data with the following parties:

4.1 Payment Service Providers

To process your financial transactions, required information is shared with authorised payment providers including Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay and USDT, BTC and ETH transaction providers. This sharing is limited to the minimum data necessary to complete the transaction.

4.2 Technology Partners

Our game software and technology infrastructure providers receive the technical data required for platform operations. All these partners are bound by strict confidentiality agreements.

4.3 Legal Requirements

ikaya may disclose personal data when required by a court, law enforcement authority or regulatory body with valid jurisdiction, or when such disclosure is necessary to protect our legitimate rights.

4.4 Business Transfers

In the event of a merger, acquisition or sale of business assets, user data may be transferred to a new entity. In such circumstances, users will be notified in advance.

5. Cookies and Tracking Technologies

The ikaya platform uses cookies and related tracking technologies to improve user experience and maintain platform security:

5.1 Essential Cookies

These cookies are required for the basic operation of the platform, including verifying your login session, security management and language preferences. The platform does not function properly without these cookies.

5.2 Performance Cookies

These cookies help us understand how users interact with the platform, allowing us to identify areas for improvement and enhance platform speed and responsiveness.

5.3 Cookie Storage Duration

Session cookies are deleted automatically when you close your web browser. Persistent cookies are stored for a set period to enable the "Remember Me" feature and retain user preferences.

You can manage or disable cookies through your web browser settings. However, doing so may affect certain functions of the ikaya platform.

6. Data Security and Protection Measures

ikaya invests in comprehensive technical and organisational security measures to protect users' personal data:

• Encryption of data in transit and data at rest using the latest industry standards to ensure data cannot be read by unauthorised parties
• Role-based access controls ensuring that only authorised staff can access users' personal data, based solely on the requirements of their role
• Continuous security monitoring through threat detection systems and regular security audits by independent third parties
• Incident response plan prepared to address any security breaches promptly and notify affected users within the stipulated timeframe
• Regular staff security training conducted to ensure all employees understand and comply with data protection protocols

7. User Rights Regarding Personal Data

As an ikaya user, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you at any time
• Right of rectification — you may request correction of any personal data that is inaccurate or incomplete
• Right of erasure — in certain circumstances, you may request deletion of your personal data, subject to our legal obligations
• Right to restriction of processing — you may request that we limit how your data is processed in specified circumstances
• Right to data portability — you may request your personal data in a machine-readable format
• Right to object — you may object to the processing of your personal data for certain purposes
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time

To exercise any of the above rights, please contact the ikaya support team, available 24/7 via live chat or email. We will process your request within a reasonable timeframe. ☑️

8. International Data Transfers

As ikaya operates under an international licence, your personal data may be transferred to and stored on servers located outside Malaysia. In all cases of international transfer, ikaya ensures:

• Adequate data protection exists in the recipient country or through contractual protection mechanisms
• Transfers are carried out on a valid legal basis, including standard data transfer agreements
• Data recipients are bound by confidentiality and security obligations equivalent to our own standards

By using the ikaya platform, you agree to the transfer of your personal data as described in this section, subject to the protections stated.

9. Data Retention and Deletion

ikaya retains users' personal data for as long as your account is active or as long as needed to provide services to you. After account closure, we may retain certain data for an additional period based on the following requirements:

• Legal obligations — financial and transaction records may need to be retained to meet applicable financial and tax legal requirements
• Dispute resolution — data may be retained for the period required to resolve any outstanding disputes or claims
• Fraud prevention — certain information is retained to prevent banned users from re-registering

When data is no longer needed, ikaya will ensure its safe deletion or destruction using industry-approved methods to ensure the data cannot be recovered.

10. Amendments to This Privacy Policy

ikaya reserves the right to amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When material amendments are made:

• The "Updated" date at the top of this policy will be updated
• Active users will be notified via email or in-platform notification
• For significant amendments, we will request your renewed consent where required
• We recommend reviewing this policy periodically to stay informed about how we protect your information

Continued use of the ikaya platform after amendments take effect is considered your acceptance of the amended terms. If you do not agree with any amendment, you have the right to close your account.

11. How to Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the use of your personal data, you may contact ikaya through the following channels:

• Live chat — available 24 hours a day, 7 days a week through the ikaya platform in Malay and English
• Email — [email protected]

Our team will endeavour to respond to all privacy-related enquiries within a reasonable time. For requests that require identity verification, you may be asked to provide additional information for security purposes before your request is processed.