iduit88 Privacy Policy

1. Data Controller

1.1  The data controller responsible for personal data processed through the iduit88 Platform at iduit88.one is the operator of the Platform, a company operating under international gaming authority licensing.

1.2  All references to "iduit88", "we", "us", or "our" in this Privacy Policy refer to the Platform operator in its capacity as data controller.

1.3  If you have questions about how your personal data is handled, you may contact our Data Protection Officer via live chat support on the Platform or by email at [email protected]

2. Personal Data We Collect

When you register and use the iduit88 Platform, we collect the following categories of personal data:

2.1 Registration Data

• Full legal name;
• Date of birth (for age verification — minimum 21 years);
• Email address;
• Malaysian mobile phone number;
• Username and encrypted password;
• Residential address within Malaysia.

2.2 Identity Verification Data

• Copy of government-issued photo identification (MyKad, passport);
• Proof of address documentation (utility bill, bank statement);
• Source of funds documentation where required for enhanced due diligence under anti-money laundering obligations.

2.3 Financial Data

• Deposit and withdrawal transaction records;
• Payment method details (masked card numbers, e-wallet account identifiers, bank account references);
• Account balance history and wagering records in Malaysian Ringgit.

2.4 Technical & Usage Data

• IP address and approximate geographic location at time of login;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features accessed;
• Game history, bet amounts, and outcomes.

2.5 Communications Data

• Live chat transcripts with support agents;
• Email correspondence with iduit88 staff;
• Feedback and complaint records.

3. How We Use Your Personal Data

iduit88 processes personal data for the following purposes:

• Account creation and management — to register your Account, verify your identity and age, and maintain Account records;
• Transaction processing — to facilitate deposits and withdrawals in MYR and maintain accurate financial records;
• Platform operation — to provide access to casino games, sportsbook, slots, and virtual casino services;
• Regulatory compliance — to fulfil anti-money laundering (AML), know-your-customer (KYC), and licensing obligations imposed by our gaming authority;
• Responsible gaming — to monitor account activity for indicators of problem gambling, enforce self-exclusion requests, and apply account-level restrictions;
• Customer support — to respond to queries, investigate complaints, and resolve account issues;
• Security and fraud prevention — to detect and prevent unauthorised account access, duplicate accounts, bonus abuse, and fraudulent transactions;
• Marketing communications — to send promotional offers and platform updates to Members who have not opted out, including Deepavali festival promotions and seasonal bonus campaigns;
• Platform improvement — to analyse usage patterns and technical performance in order to improve the iduit88 user experience.

4. Legal Basis for Processing

4.1  Contractual necessity: Processing your registration data, financial data, and gameplay records is necessary to perform the contract between you and iduit88 (the Terms & Conditions).

4.2  Legal obligation: Processing identity verification and transaction data is required to comply with AML and KYC obligations applicable to licensed gaming operators.

4.3  Legitimate interests: Processing technical and usage data for fraud prevention, security monitoring, and Platform improvement is based on iduit88's legitimate business interests, provided those interests are not overridden by your rights.

4.4  Consent: Processing your data for marketing communications is based on your consent, which you may withdraw at any time by opting out via Account settings or by contacting support.

5. Data Sharing & Third Parties

5.1  iduit88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2  We may share your data with the following categories of recipients where necessary:

• Payment processors — Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and online transfer processors, solely to facilitate your deposit and withdrawal transactions;
• Identity verification providers — third-party KYC service providers used to verify the authenticity of identification documents submitted by Members;
• Game content providers — licensed software providers whose games are hosted on the iduit88 Platform receive anonymised player session data for operational and audit purposes;
• Regulatory and law enforcement authorities — where required by law, court order, or as directed by our gaming licensing authority;
• Professional advisers — legal, accounting, and audit firms engaged by iduit88 under obligations of professional confidentiality.

5.3  All third-party processors engaged by iduit88 are bound by data processing agreements requiring them to handle your data only as instructed by iduit88 and in compliance with applicable data protection standards.

6. Data Retention

6.1  iduit88 retains personal data for as long as your Account remains active and for a minimum period of five (5) years following Account closure, in accordance with anti-money laundering and gaming licence record-keeping obligations.

6.2  Financial transaction records are retained for a minimum of seven (7) years from the date of each transaction in accordance with applicable financial record-keeping requirements.

6.3  After applicable retention periods have expired, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

7. Cookies & Tracking Technologies

7.1  The iduit88 Platform uses the following categories of cookies:

• Essential cookies: Required for the Platform to function — including login session management, security tokens, and load balancing. These cannot be disabled without impacting Platform functionality.
• Analytical cookies: Used to understand how Members navigate and use the Platform, enabling performance improvements. Data collected is aggregated and anonymised.
• Preference cookies: Used to remember your Platform preferences such as language and display settings across sessions.

7.2  Third-party advertising or behavioural tracking cookies are not deployed on the iduit88 Platform without your prior consent.

7.3  You may control cookie settings through your browser settings. Disabling essential cookies will affect your ability to log in and use core Platform features.

8. Security Measures

8.1  iduit88 implements technical and organisational security measures appropriate to the nature of the personal data processed, including:

• 256-bit TLS encryption for all data in transit between your device and the Platform;
• Encrypted storage of passwords — iduit88 staff cannot view your password in plaintext;
• Role-based access controls limiting internal access to personal data to personnel with a documented business need;
• Regular penetration testing and vulnerability assessments conducted by third-party security specialists;
• Automated fraud detection systems monitoring for unusual account activity patterns.

8.2  Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, iduit88 will notify affected Members without undue delay in accordance with applicable obligations.

9. Your Rights

As a registered Member, you have the following rights in relation to your personal data held by iduit88:

To exercise any of these rights, contact the iduit88 Data Protection Officer via live chat or at [email protected]. We will respond within thirty (30) days of a valid request. Identity verification may be required before requests are processed.

10. Children's Privacy

10.1  The iduit88 Platform is strictly intended for adults aged 21 years and above. 21+ We do not knowingly collect personal data from individuals under the age of 21.

10.2  If iduit88 becomes aware that personal data has been collected from a person under the minimum age, the relevant Account will be suspended immediately, the data will be deleted, and any deposits will be returned.

10.3  If you believe that a minor has registered on the Platform, please contact us immediately at [email protected]

11. International Data Transfers

11.1  The iduit88 Platform serves Members primarily in Malaysia. Certain operational functions — including game content delivery, payment processing, and customer support infrastructure — may involve the transfer of data to servers or processors located outside Malaysia.

11.2  Where personal data is transferred internationally, iduit88 ensures that appropriate safeguards are in place, including contractual data protection clauses and — where applicable — adequacy assessments consistent with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

12. Changes to This Privacy Policy

12.1  iduit88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Members via the registered email address on file, with a minimum of fourteen (14) days' notice before the revised policy takes effect.

12.2  The current version of this Privacy Policy is always accessible at iduit88.one/privacy-policy. Continued use of the Platform after the effective date of any revision constitutes your acknowledgment of the updated policy.

13. Contact Us

For all privacy-related enquiries, data subject requests, or complaints regarding iduit88's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the iduit88 Platform;
• Email: [email protected] (please include "Privacy" in your subject line);
• Response Time: We aim to acknowledge all privacy-related contact within 48 hours and provide a full response within 30 days.

If you are not satisfied with how iduit88 has handled your privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.