I1scr Privacy Policy – Our Commitment to Protecting Your Data

This Privacy Policy explains in detail how i1scr ("we", "Platform" or "i1scr") collects, uses, stores, protects and, in certain circumstances, shares your personal data when you use the i1scr platform at https://i1scr.vu.

This Policy applies to all users who visit our website, register an account, use gaming services, make deposits or withdrawals, and interact with our platform in any way. By using the i1scr platform, you acknowledge that you have read, understood and agreed to the terms set out in this Privacy Policy.

We take our responsibility to your privacy seriously. Not only as a legal obligation under Malaysia's Personal Data Protection Act 2010 (PDPA), but also as the foundation of trust that builds a lasting relationship between i1scr and each of our members. Your trust in us is valued, and we do not take that responsibility lightly.

I1scr only collects data that is genuinely necessary to provide you with a safe, efficient, and responsible service. The following are the categories of data we collect and their purposes:

We never collect sensitive data such as medical information, political views, or religious beliefs unless specifically required and you have given explicit consent. Biometric data such as fingerprints is collected only through your own device for more secure login purposes and is not stored on our servers.

Every use of your data at i1scr is based on a legitimate justification and a clear purpose. We never use your data for purposes you would not expect or that are unrelated to your gaming experience. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and maintaining your member account, including the KYC process and two-factor authentication (2FA).
• Transaction Processing: Processing deposits and withdrawals securely through your chosen payment methods such as DuitNow, FPX, Touch 'n Go, and Boost.
• Legal Compliance: Meeting AML/CFT (Anti-Money Laundering/Counter-Terrorism Financing) compliance requirements and reporting obligations to the relevant authorities.
• Platform Security: Detecting and preventing fraudulent activity, multiple account use, cyberattacks, and platform abuse.
• Service Communications: Sending important notifications related to your account, changes to terms, transaction confirmations, and customer support responses.
• Marketing (with consent): Sending promotional information, bonuses, and exclusive offers to members who have consented to receive marketing communications.
• Platform Improvement: Analyzing usage patterns in aggregate (not individually) to improve user experience, interface design, and the variety of games offered.
• Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and offering appropriate support to members who need it.

I1scr does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a core principle we have never compromised on. However, in the course of operating a safe and legitimate platform, there are limited situations where we may need to share your data:

• Payment Processor: We share the necessary transaction information with licensed payment processors such as DuitNow, FPX, and e-wallets to process your deposits and withdrawals.
• Identity Verification Provider: Licensed third-party KYC services are used to verify your identity documents — all such providers are bound by strict data protection agreements.
• Game Provider: Required game session information is shared with licensed game providers to ensure a smooth gaming experience and accurate result recording.
• Legal Authority: We will disclose data when required by law, court order, or direction from a legitimate law enforcement authority.
• Technical Service Provider: The cloud computing, hosting, and analytics services we use are subject to legally binding data confidentiality agreements.

Every third party we work with is required to comply with data protection standards equal to or higher than those we apply ourselves. We conduct regular reviews of all third-party partners to ensure ongoing compliance.

I1scr invests seriously in the latest security infrastructure to ensure your personal and financial data remains protected at all times from cyber threats, unauthorised access, and data breaches. The security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and i1scr servers is encrypted using TLS 1.3 protocol with AES-256 encryption — the same standard used by major banking institutions.
• Stored Data Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using strong encryption algorithms.
• Two-Factor Authentication (2FA): We fully encourage and support the use of 2FA on every user account as an important additional layer of security.
• 24/7 Security Monitoring: Our automated threat detection system operates 24/7 to identify and respond to any suspicious activity in real time.
• Strict Access Controls: Access to user data within i1scr is restricted to staff who require it for their job duties only, with all access logged and audited.
• Regular Penetration Testing: We conduct regular security testing with independent third parties to identify and address vulnerabilities before they can be exploited.

I1scr uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and understand how our platform is used. The following are the categories of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management, security and page navigation. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how pages are used — for example, the most frequently visited pages and error messages — to help us improve the platform. All data is anonymized.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you do not have to reconfigure them every time.
• Marketing Cookies (with consent): Used to display relevant content and promotions based on your interests. You may opt out via your cookie settings.

You can manage cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience of the i1scr platform. We do not use cookies to track your activity on other websites outside the i1scr platform.

Under Malaysia's Personal Data Protection Act 2010 and our commitment to best privacy practices, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, please contact our data protection team by email at [email protected], stating the right you wish to exercise along with your account information for identity verification.

I1scr retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active on the i1scr platform.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction occurs, in accordance with financial and tax compliance requirements.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends, in accordance with AML legal requirements.
• Support Communication Records: Retained for 3 years for reference and dispute resolution purposes.
• Analytics Data: Aggregated usage data is retained for 2 years for trend analysis and platform improvement purposes.
• After Account Closure: Personal data that is no longer required will be deleted or anonymised within 90 days of account closure.

I1scr is a platform exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. All registration and KYC verification processes are designed to confirm that users meet the minimum age requirement.

I1scr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any material amendments will be communicated to you via:

• In-platform notification on i1scr when you next log in.
• Emailed to your registered address at least 7 days before the changes take effect.
• Update the "Last Updated" date at the top of this Privacy Policy page.

Continued use of the i1scr platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. You are encouraged to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the i1scr Data Protection Officer (DPO) team is ready to assist you:

• Email: [email protected] (please indicate subject: "Data Privacy Enquiry")
• Live Chat: Available 24/7 on the i1scr platform
• Response Time: We commit to responding to all privacy inquiries within 5 business days
• Official Complaints: May be submitted to the Department of Personal Data Protection Malaysia if you are not satisfied with our response

We treat every privacy inquiry with the utmost seriousness and are committed to providing clear, accurate, and helpful responses in the shortest time possible.