i1scr Privacy Policy

1. Introduction

i1scr ("we," "our," "the Company") operates the online gaming platform accessible at i1scr.asia and is the data controller in respect of all personal data collected through the platform. This Privacy Policy ("Policy") is issued in compliance with applicable data protection laws and the personal data handling requirements of our international gaming authority licensing obligations.

This Policy applies to all personal data collected from Members, prospective Members, and visitors to the i1scr platform. It supplements our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of i1scr. By registering an i1scr account or continuing to use the platform after the effective date of this Policy, you acknowledge that you have read and understood its contents.

i1scr serves players primarily across Malaysia — including members in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Bangsar — and we recognise the importance of maintaining the trust of our Malaysian player community through transparent, responsible data practices.

2. Personal Data We Collect

i1scr collects personal data in the following categories, depending on your level of engagement with the platform:

2.1 Registration Data

When you create an i1scr account, we collect: full legal name; date of birth; residential address; email address; and mobile telephone number. This data is required to create and administer your account. Without it, account registration cannot be completed.

2.2 Identity Verification (KYC) Data

As required under our international gaming authority licensing obligations, i1scr conducts Know Your Customer ("KYC") verification for all Members. KYC data collected may include: copies of government-issued photo identification (such as a Malaysian MyKad or passport); proof of residential address; and, where required, documentation evidencing source of funds. This data is collected and processed solely for identity verification, age verification (21+ requirement), anti-money laundering compliance, and fraud prevention purposes.

2.3 Financial Transaction Data

We collect records of all deposits, withdrawals, and wagers made through your i1scr account. This includes transaction amounts in MYR, timestamps, payment method references (e.g., Touch n Go eWallet transaction IDs, FPX reference numbers), and account balance history. Payment card numbers or full bank account details are not stored by i1scr; payment processing is handled by our certified third-party payment service providers.

2.4 Technical & Usage Data

When you access the i1scr platform, we automatically collect: IP address; device type and operating system; browser type and version; session timestamps and duration; pages and game titles accessed; and geolocation data at the jurisdiction level (country/region, not precise GPS coordinates). This data is used for platform security, fraud detection, and service optimisation.

2.5 Support Interaction Data

When you contact i1scr customer support via live chat or email, we retain records of the conversation content, the date and time of contact, the nature of the query, and the resolution outcome. These records are maintained for quality assurance, training, and dispute resolution purposes.

3. How We Use Your Personal Data

i1scr uses the personal data described in Section 2 for the following purposes:

• Account administration: Creating, maintaining, and managing your i1scr account, including processing deposits and withdrawals to your registered Malaysian payment methods (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, FPX).
• Identity and age verification: Confirming that you are at least 21 years of age and that your identity matches the details provided during registration, as mandated by our international gaming authority licence.
• Regulatory compliance: Meeting our obligations under anti-money laundering ("AML"), counter-terrorism financing ("CTF"), and responsible gaming regulations imposed by our licensing authority.
• Fraud prevention and platform security: Detecting and preventing unauthorised account access, multi-accounting, payment fraud, money laundering, and other prohibited activities described in our Terms & Conditions.
• Service delivery and improvement: Providing the games, sportsbook, and features you access through i1scr; diagnosing and resolving technical issues; and developing new features based on aggregated usage patterns.
• Customer support: Responding to account queries, resolving disputes, and following up on responsible gaming concerns raised by Members.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Members who have not opted out of marketing communications. You may opt out at any time by contacting support.
• Responsible gaming monitoring: Identifying indicators of problem gambling behaviour and proactively offering responsible gaming tools — deposit limits, session timers, self-exclusion — to Members who may benefit from them.

i1scr does not use personal data for automated decision-making that produces solely machine-determined outcomes with significant consequences for Members, except for automated fraud detection alerts, which are subject to human review before any account action is taken.

4. Legal Basis for Processing

i1scr processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our obligations under the Member Agreement (Terms & Conditions), including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and our international gaming authority licensing conditions, including KYC, AML, CTF, and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and service optimisation, where our legitimate business interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have not opted out. You may withdraw consent to marketing at any time without affecting the lawfulness of prior processing or your continued access to the platform.

5. Data Sharing & Third Parties

i1scr does not sell, rent, or trade your personal data to any third party for their own independent marketing purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Game providers: Certified third-party game studios (e.g., Pragmatic Play, NetEnt) receive session tokens and anonymised player identifiers to enable game delivery. These providers do not receive your full identity or financial data.
• Payment service providers: Transaction data is shared with our certified payment processing partners (including Touch n Go eWallet, Boost, and FPX gateway operators) to process deposits and withdrawals. These providers are contractually bound to process data solely for payment purposes.
• KYC and identity verification services: KYC documents may be shared with certified identity verification service providers for automated document checking. These providers operate under strict data processing agreements.
• Regulatory authorities: We may disclose personal data and transaction records to our licensing authority, relevant law enforcement agencies, or financial intelligence units as required by law, court order, or regulatory obligation.
• Fraud prevention networks: Limited data (such as device fingerprints and IP addresses associated with confirmed fraudulent activity) may be shared with industry fraud prevention networks to protect the platform and other operators' Members.
• Professional advisers: Legal, audit, and compliance advisers engaged by i1scr may access personal data on a confidential, need-to-know basis in the course of providing professional services.

6. Cookies & Tracking Technologies

The i1scr platform uses cookies and similar tracking technologies (including web beacons and local storage objects) to support platform functionality, maintain your authenticated session, and collect the technical usage data described in Section 2.4.

6.1 Types of Cookies Used

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your i1scr account. These cannot be disabled without preventing platform access.
• Performance cookies: Collect anonymised data about how Members use the platform — which game categories are most accessed, where errors occur, page load performance — to inform product improvements.
• Security cookies: Support fraud detection and CSRF (cross-site request forgery) protection measures.

i1scr does not use advertising or cross-site tracking cookies. You may manage non-essential cookie preferences through your browser settings; however, disabling essential cookies will prevent you from accessing your i1scr account.

7. Data Retention

i1scr retains personal data for the periods specified in the table in Section 2, reflecting the minimum periods required by our regulatory and licensing obligations. KYC and transaction data must be retained for a minimum of five years following account closure under our international gaming authority licensing requirements — this obligation applies regardless of whether you request account deletion.

At the end of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data (e.g., platform-wide game popularity statistics) may be retained indefinitely for analytical purposes.

8. Data Security

i1scr implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data in transit between your device and i1scr servers
• Encryption at rest for sensitive personal data fields (including KYC documents) stored on i1scr infrastructure
• Role-based access controls limiting staff access to personal data to those with a documented need
• Multi-factor authentication required for all i1scr administrative system access
• Regular third-party penetration testing and security audits
• 24/7 automated intrusion detection and anomaly monitoring
• Documented incident response procedures covering data breach notification obligations

While i1scr maintains industry-standard security measures, no system is entirely immune to risk. In the event of a data breach that poses a risk to your rights and freedoms, i1scr will notify affected Members and relevant regulatory authorities in accordance with applicable legal obligations and within the timeframes required by our licensing authority.

9. Your Data Rights

Subject to applicable law and the regulatory retention obligations described in Section 7, you have the following rights in respect of your personal data held by i1scr:

• Right of access: You may request a copy of the personal data i1scr holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to our mandatory regulatory retention obligations — certain data cannot be deleted before the required retention period expires.
• Right to restrict processing: You may request that we restrict processing of your data in certain circumstances, such as during a dispute about data accuracy.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on our legitimate interests where you believe your rights override those interests.

To exercise any of these rights, contact the i1scr support team via live chat or email. We will respond within thirty (30) calendar days. We may request identity verification before processing a data rights request to ensure we do not disclose personal data to an unauthorised party.

10. Children's Privacy

The i1scr platform is strictly restricted to individuals aged 21 years and above. i1scr does not knowingly collect, process, or retain personal data from persons under the age of 21. Age verification is a mandatory component of the i1scr KYC process, enforced under our international gaming authority licensing obligations.

If i1scr becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all data associated with the underage account will be securely deleted (subject only to any mandatory legal hold obligations), and any deposits made will be returned to the original payment method.

If you believe a person under 21 has accessed the i1scr platform, please notify us immediately via the support team.

11. Cross-Border Data Transfers

Your personal data may be processed in countries outside Malaysia, including in the jurisdiction where i1scr's international gaming authority licence is held and where our infrastructure providers operate. Where such transfers occur, i1scr ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating standard data protection clauses — to maintain a level of protection for your data equivalent to that required under applicable Malaysian data protection standards.

By using the i1scr platform, you acknowledge and consent to the transfer of your personal data as described in this section. If you have questions about specific cross-border transfer mechanisms, please contact our support team.

12. Amendments to This Policy

i1scr reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. Material changes will be communicated to registered Members via notice on the i1scr platform and, where required by applicable law, by direct notification to the email address registered on your account, no less than seven (7) days before the revised Policy takes effect.

Your continued use of the i1scr platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage Members to review this Policy periodically.

13. Contact & Data Enquiries

For all privacy-related queries, data rights requests, or concerns about how i1scr processes your personal data, please contact our support team via the 24/7 live chat panel accessible from within your i1scr account, or via the platform's support email address below.