Privacy Policy isama –
Your Personal Data Protection

Isama values the privacy of every member. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information you share with us when using the isama platform.

This document applies to all services offered through the isama.win website, the isama mobile app, and any official isama communication channels. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles.

Any enquiries regarding this privacy policy may be directed to the isama support team via the in-platform live chat. We are always ready to help you understand how your data is managed.

Isama collects only the personal data necessary for legitimate purposes. The types of data we collect are as follows:

We does not collect sensitive data such as health information, political views, or religious beliefs unless you voluntarily provide it in the context of responsible gaming.

Collected personal data is used solely for lawful and necessary purposes in operating the isama platform. The following are the primary purposes for which your data is used:

• Account Management: Creating and maintaining your member account, including the required identity verification (KYC) process.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments securely and efficiently.
• Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and other security threats.
• Customer Support: Providing technical support and resolving your complaints or inquiries effectively.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate self-control tools.
• Legal Compliance: Fulfilling reporting obligations to regulatory authorities, anti-money laundering bodies, and relevant law enforcement agencies.
• Service Improvement: Analyzing platform usage patterns in aggregate to improve the member experience.
• Marketing Communications: Sending you promotional information and exclusive offers, subject to the communication preferences you have set.

Isama processes your personal data on valid legal grounds in accordance with the PDPA 2010. The legal bases we rely on are:

• Contract Performance: Processing required to provide the services you have requested, including account management and transaction processing.
• Legal Obligations: Processing required to comply with legal requirements such as anti-money laundering (AML) and KYC obligations.
• Legitimate Interests: Processing for fraud detection, platform security, and service improvement purposes based on legitimate business interests.
• Consent: Processing for direct marketing purposes based on the explicit consent you provided at registration or at a later time.

You may withdraw consent for consent-based processing at any time without affecting the validity of processing that occurred prior to that withdrawal.

Isama does not sell members' personal data. However, we may share data with the following parties under limited and controlled circumstances:

• Payment Service Providers: Payment processors and e-wallet providers that handle your financial transactions, subject to strict confidentiality agreements.
• Game Software Providers: Game development companies that provide content on the isama platform, strictly within the scope required for technical operations.
• Identity Verification Providers: Third-party companies that assist with the KYC process and document verification.
• Regulatory Authorities: Government agencies, regulatory bodies, and law enforcement where required by law or upon lawful request.
• Technical Infrastructure Providers: Server hosting and cloud service providers that store our data in a secure, certified environment.

All third parties who receive personal data from isama members are required to sign a data protection agreement and may only use that data for the purposes specified in the agreement.

The isama platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The types of cookies we use:

• Essential Cookies: Required for core platform functions such as session login and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve our services. Data is collected in aggregate and anonymized form.
• Functional Cookies: Saving your preferences such as language, display settings, and game configurations to deliver a more personalized experience.
• Analytical Cookies: Used to understand platform usage patterns for internal improvement purposes.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. For cookie management instructions, refer to your web browser's documentation.

Isama continuously invests in the latest security infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction.

While we take comprehensive security measures, no system is entirely perfect. In the event of a data breach involving your information, isama will notify you within the timeframe required by law via your registered email.

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by isama:

To submit any request relating to your rights, please contact the isama support team via the in-platform live chat. We will process your request within 21 business days.

Isama retains your personal data for as long as your account is active or as long as necessary to provide services to you. However, certain data must be kept for a longer period to comply with legal requirements:

• Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years following account closure or the end of the business relationship.
• Communication Logs: Retained for 3 years for complaint resolution and compliance purposes.
• Gaming Data: Retained for 2 years for audit and dispute resolution purposes.
• Marketing Data: Deleted after you withdraw consent or close your account, unless otherwise required by law.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.

Isama reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services offered.

When a significant amendment occurs, we will:

• Sending a notification to your registered email address at least 14 days before any amendment takes effect.
• Displaying a clear notice on the platform homepage regarding privacy policy updates.
• Updating the "Last Updated" date at the top of this document.

Continued use of the isama platform after the effective date of any amendment will be considered acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how your data is protected.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon in the platform corner
• Support Email: [email protected]
• FAQ: Visit page FAQ us for a quick response

We are committed to responding to all privacy-related enquiries within 5 business days. For matters requiring further investigation, the response period may take up to 21 business days.