i1scr2u Privacy Policy

1. Introduction

i1scr2u ("we", "us", "our") operates the online gaming platform available at https://i1scr2u.win (the "Platform"). We are committed to protecting the personal data of all individuals who interact with our Platform, including registered players, prospective players, and visitors.

This Privacy Policy explains what personal data i1scr2u collects, the purposes for which it is used, how it is stored and protected, and the rights available to individuals in relation to that data. It applies to all personal data collected through the Platform, including via account registration, gameplay, deposit and withdrawal transactions, customer support interactions, and browsing activity.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By using the i1scr2u Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

2.1 Registration Data

When you create an i1scr2u account, we collect the information you provide, including your full name, date of birth, email address, mobile phone number, residential address, and chosen username. This data is required to establish and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify that players meet the minimum age requirement of 21 years, i1scr2u may request identity documents including a government-issued photo identity card (e.g., Malaysian MyKad or passport), proof of address, and documentation of the source of funds. These documents are processed securely and retained only for the period required by applicable regulation.

2.3 Transaction Data

We collect records of all financial transactions on your account, including deposits, withdrawals, bonuses credited, and wagering activity. This includes payment method identifiers (e.g., Touch 'n Go eWallet account reference, FPX bank code, DuitNow reference) but excludes full payment credentials such as card numbers, which are not stored on our systems.

2.4 Technical and Usage Data

When you access the i1scr2u Platform, we automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, referral URL, pages visited, and session duration. This data is collected via server logs and, where applicable, cookies and similar tracking technologies.

2.5 Customer Support Data

When you contact i1scr2u customer support via live chat or email, we retain a record of that interaction, including any personal data you provide during the communication. This data is used to manage your enquiry and to improve our support services.

3. How We Use Your Data

i1scr2u uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your i1scr2u account, including processing deposits and withdrawals in MYR, applying bonuses, and communicating account-related notices.
• Identity Verification & Fraud Prevention: To verify your identity and age as required by our operating obligations, and to detect, investigate, and prevent fraud, money laundering, and other prohibited activity.
• Legal Compliance: To comply with applicable laws, regulations, and regulatory obligations, including anti-money laundering (AML) requirements, data retention obligations, and responses to lawful requests from competent authorities.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and develop and improve the features, security, and performance of the i1scr2u Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account or technical issues.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to provide or enforce responsible gaming tools as requested by you or required by our policies.
• Marketing Communications: Where you have provided consent or where permitted by applicable law, to send you promotional communications about i1scr2u offers, new games, and platform updates. You may opt out of marketing communications at any time.

4. Legal Basis for Processing

i1scr2u processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the account agreement with you, including account administration and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML and KYC obligations.
• Legitimate Interests: Processing carried out for purposes of fraud prevention, Platform security, and improving the i1scr2u service, where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

i1scr2u does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: To facilitate deposits and withdrawals via Touch 'n Go, Boost, GrabPay, DuitNow, Maybank2u, CIMB Clicks, Public Bank, and FPX. These processors receive only the data required to execute the transaction.
• Identity Verification Providers: Third-party KYC service providers engaged to verify player identity and age. These providers are bound by data processing agreements and may not use your data for their own purposes.
• Game Software Providers: Game providers whose software is integrated into the i1scr2u Platform may receive a pseudonymised player identifier for the purposes of delivering game content and maintaining game integrity.
• Regulatory Authorities: Where required by applicable law or a lawful order from a competent authority, i1scr2u will disclose personal data to the extent legally required.
• IT and Infrastructure Providers: Hosting, security, and analytics service providers who process data on our behalf under contractual data processing obligations.

6. Cookies & Tracking Technologies

i1scr2u uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function, including session management and security. These cannot be disabled.
• Performance Cookies: Used to analyse how players navigate the Platform, which pages are most visited, and where technical errors occur. The data collected is aggregated and anonymised.
• Functional Cookies: Store your preferences (such as language settings and remembered login details if you opt in) to personalise your experience.
• Marketing Cookies: Used only where you have provided explicit consent. These may be used to display relevant promotional content within the i1scr2u Platform.

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the Platform.

7. Data Retention

i1scr2u retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention obligations:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, as required by applicable AML regulations.
• KYC documentation is retained for a minimum of five (5) years following the end of the business relationship or the completion of a transaction, whichever is later.
• Customer support communications are retained for two (2) years from the date of the last interaction.
• Technical log data is retained for no more than twelve (12) months unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

8. Security Measures

i1scr2u implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls limiting access to personal data to authorised personnel only.
• Regular third-party security audits and penetration testing of our Platform and infrastructure.
• Multi-factor authentication for internal systems that process personal data.
• Incident response procedures for the detection, containment, and notification of any data breach.

Notwithstanding the above, no system of data transmission or storage can be guaranteed to be completely secure. If you have reason to believe that your account has been compromised, please contact i1scr2u customer support immediately.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by i1scr2u:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that inaccurate or incomplete data be corrected.
• Right to Erasure: You may request the deletion of your personal data, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: Where technically feasible, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your data on the grounds of legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our customer support team. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing a request.

10. International Data Transfers

i1scr2u operates internationally and some of our service providers and infrastructure partners are located outside Malaysia. Where personal data is transferred to a third country, i1scr2u ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses or equivalent protections, to ensure that your data is protected to a standard consistent with this Policy.

11. Children's Privacy

The i1scr2u Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has provided personal data to i1scr2u, please notify us through our customer support channels immediately.

12. Changes to This Policy

i1scr2u reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is indicated at the top of this page. Where changes are material, we will notify registered players via their registered email address or through a prominent notice on the Platform. Your continued use of the Platform following any such notification constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Policy periodically to stay informed about how i1scr2u protects your data.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by i1scr2u, please contact our customer support team via live chat on the Platform, or in writing to the support email address displayed in the footer of this website. We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them fully within thirty (30) days.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the competent data protection authority in your jurisdiction.