Privacy Policy – i1scr2u

1. Who We Are

i1scr2u ("i1scr2u", "we", "us", "our") operates the online casino and sportsbook platform accessible at i1scr2u.asia (the "Platform"). For the purposes of this Privacy Policy, i1scr2u is the data controller responsible for the processing of personal data collected through the Platform.

This Privacy Policy applies to all current and former Members of i1scr2u, to visitors who browse the Platform without registering, and to any individual who contacts i1scr2u customer support. If you have any questions about how i1scr2u processes your personal data, please refer to the contact details in Section 14.

2. Personal Data We Collect

i1scr2u collects personal data that you provide directly, data generated through your use of the Platform, and data obtained from authorised third-party sources. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name
• Date of birth (to verify age eligibility — you must be 21 or older)
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor)
• Email address and mobile telephone number
• Username and encrypted password
• Government-issued identity document details (MyKad number, passport number) provided during KYC verification

2.2 Financial Data

• Payment method details, including bank account numbers, e-wallet identifiers (Touch n Go eWallet, Boost, GrabPay), and cryptocurrency wallet addresses where applicable
• Transaction history, including deposit amounts, withdrawal requests, and bonus credits
• Responsible gaming limit settings applied to your account

2.3 Technical and Usage Data

• IP address and approximate geolocation derived from IP data
• Device type, operating system, and browser version
• Session duration, login timestamps, and pages visited within the Platform
• Game play history, including titles played, bet sizes, and outcomes
• Sportsbook betting history, including markets bet on, stakes, and settlement results
• Communication logs with i1scr2u customer support (live chat transcripts, email correspondence)

2.4 Data from Third Parties

i1scr2u may receive personal data about you from authorised third-party sources including identity verification providers, fraud prevention agencies, and payment processors, to the extent necessary for account verification, fraud detection, and regulatory compliance.

3. How We Use Your Personal Data

i1scr2u uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your i1scr2u account, including processing your login credentials, managing your account balance, and applying your responsible gaming settings.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with our Know Your Customer (KYC) obligations.
• Payment Processing: To process deposits, withdrawals, and refunds via your chosen payment methods, including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, GrabPay, USDT TRC20, and 7-Eleven.
• Platform Operations: To provide access to casino games and sportsbook markets, to personalise your experience, to display your account history, and to ensure the technical functioning of the Platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited activities. i1scr2u processes login and transaction data for ongoing fraud monitoring.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion orders you have applied, and to facilitate outreach where responsible gaming concerns are identified.
• Customer Support: To respond to your enquiries, resolve complaints, and provide account assistance via live chat and email.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, licensing conditions, court orders, and requests from competent authorities.
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about i1scr2u offers and updates.

4. Legal Basis for Processing

i1scr2u processes your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you under the i1scr2u Terms & Conditions — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) checks, KYC verification, and tax reporting obligations.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights.
• Consent: Where you have given specific consent, such as for the receipt of marketing communications. You may withdraw consent at any time by contacting i1scr2u support or updating your account preferences.

5. Sharing Your Personal Data

i1scr2u does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

• Game Providers: Data necessary for the provision of games (such as a session token and account reference) may be passed to licensed game studios whose titles appear in the i1scr2u lobby. These providers are bound by data processing agreements and may not use your data for independent marketing purposes.
• Payment Processors: Financial data is shared with payment processors and financial institutions solely for the purpose of executing your deposit and withdrawal requests.
• Identity Verification Services: Where you are required to undergo KYC verification, your identity document data and a facial image may be transmitted to an authorised third-party identity verification provider operating under a strict data processing agreement.
• Fraud Prevention Agencies: i1scr2u participates in fraud prevention networks and may share transaction and behavioural data with such agencies to identify and prevent financial crime.
• Regulatory and Law Enforcement Authorities: i1scr2u will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of i1scr2u's business assets, personal data held about Members may be transferred to the acquiring entity, subject to equivalent privacy protections.

6. Cookies and Tracking Technologies

i1scr2u uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that maintain your logged-in state. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how Members use the Platform — pages visited, session durations, error events — to help i1scr2u identify areas for improvement.
• Functional Cookies: Store your preferences such as language settings and game lobby layout to provide a more personalised experience on subsequent visits.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the i1scr2u Platform, particularly login and session management features.

7. Data Retention

i1scr2u retains personal data for as long as necessary to fulfil the purposes described in this policy, and in any event for the minimum periods required by applicable law and gaming regulation. As a general guide:

• Account data and KYC documentation: retained for a minimum of 5 years following account closure, in accordance with anti-money laundering legislation.
• Transaction records: retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: retained for 2 years from the date of the interaction.
• Marketing preferences and consent records: retained until consent is withdrawn, plus a reasonable period thereafter for compliance evidence.

When personal data is no longer required and the applicable retention period has expired, i1scr2u will securely delete or anonymise it.

8. International Data Transfers

i1scr2u's operational infrastructure and some of its third-party service providers may be located outside Malaysia. Where personal data is transferred outside Malaysia to a country that does not provide an equivalent level of data protection, i1scr2u will implement appropriate safeguards — such as standard contractual clauses or equivalent contractual protections — to ensure that your personal data remains protected to an adequate standard.

9. Your Privacy Rights

As a Member of i1scr2u, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of Access: You may request a copy of the personal data i1scr2u holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to Erasure: You may request deletion of your personal data where i1scr2u no longer has a legal basis to retain it. Note that certain data must be retained for regulatory compliance purposes and cannot be erased on request alone.
• Right to Restrict Processing: You may request that i1scr2u restricts the processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that i1scr2u provides your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling. You may also withdraw consent to marketing communications at any time.

To exercise any of these rights, please contact i1scr2u using the details in Section 14. i1scr2u will respond within 30 days of receiving a valid request. Identity verification may be required before requests are fulfilled.

10. Children's Data

The i1scr2u Platform is strictly for adults aged 21 and above. i1scr2u does not knowingly collect personal data from individuals under the age of 21. If i1scr2u becomes aware that a minor has registered on the Platform or provided personal data, the relevant account will be immediately closed, all data will be deleted, and any funds will be returned to the payment source where possible.

If you believe that a minor has accessed or registered on the i1scr2u Platform, please contact our support team immediately.

11. Security Measures

i1scr2u implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit TLS encryption for all data in transit between your device and the i1scr2u Platform
• Encryption of sensitive data at rest, including passwords (hashed using industry-standard algorithms), payment method details, and identity documents
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrable operational need
• Rate limiting on login attempts to mitigate brute-force attacks against Member accounts
• Regular internal security reviews and penetration testing of the Platform
• Two-factor authentication (2FA) available to all Members as an optional additional security layer for their i1scr2u account

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. i1scr2u cannot guarantee absolute security of personal data transmitted to or stored on the Platform.

12. Third-Party Links and Services

The i1scr2u Platform may contain references to third-party services (such as payment providers and game studios accessed via the Platform interface). i1scr2u is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of i1scr2u.

13. Changes to This Privacy Policy

i1scr2u may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. Where material changes are made, we will notify registered Members via the email address on record or by displaying a prominent notice on the Platform prior to the changes taking effect.

The date at the top of this page indicates when the Privacy Policy was last revised. Your continued use of the i1scr2u Platform after any updates constitutes acceptance of the revised policy.

14. Contact Us and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way i1scr2u handles your personal data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the i1scr2u Platform

i1scr2u will acknowledge all privacy-related enquiries within 5 business days and provide a substantive response within 30 days. If you are not satisfied with i1scr2u's response to a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction.