Privacy Policy ibc003 – Personal Data Protection for Malaysian Players

Ibc003 (referred to as "we", "the Platform", or "ibc003") is an operator of an online betting and casino platform accessible at ibc003.click. We are committed to protecting the privacy and security of the personal data of every user who registers and uses our services, particularly players from Malaysia.

This Privacy Policy explains how ibc003 collects, uses, stores, protects, and in certain circumstances, shares your personal information. It applies to all users of the ibc003 platform, including visitors who browse the site without registering, registered players, and anyone who contacts our support team.

By registering an ibc003 account or using any of our services, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of the ibc003 platform and contact us to request deletion of any data we may have collected.

Ibc003 collects the following categories of personal data from players:

Ibc003 does not collect sensitive personal data such as health information, religious beliefs, or sexual orientation. Any additional data that may be required for enhanced identity verification (KYC) purposes — such as a copy of your MyKad or bank statement — will be explicitly requested and used solely for that purpose.

Ibc003 collects personal data through several channels:

• Account Registration: You provide identity and contact information directly during the ibc003 new account registration process.
• KYC Process: When you submit identity verification documents to fulfill Know Your Customer requirements, we retain a record of those documents.
• Financial Transactions: Payment method details — whether through Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks — are automatically recorded for every deposit and withdrawal you make.
• Platform Activity: Game data, betting history, and usage patterns are collected automatically as you use the ibc003 platform.
• Device & Browser: Technical information such as IP address, device type, operating system, and browser version is automatically collected by our systems when you visit the ibc003 website.
• Customer Support: When you contact the ibc003 support team via live chat or email, those communications are recorded for service quality purposes and future reference.

Ibc003 uses the personal data collected solely for the following legitimate and reasonable purposes:

• Account Management: Creating, verifying, and managing player accounts, including the registration process, login, and identity verification.
• Transaction Processing: Processing deposits via available Malaysian payment methods and facilitating the withdrawal of winnings to a player's bank account or eWallet.
• KYC Verification: Meeting identity verification requirements for anti-money laundering and financial protection purposes.
• Platform Security: Detect and prevent fraud, multi-account usage, bonus abuse, and any activity that violates ibc003's Terms & Conditions.
• Service Improvement: Analysing usage patterns on an aggregate (not individual) basis to improve user experience, platform design, and game offerings.
• Customer Support: Handling enquiries, complaints, and assistance requests submitted by players.
• Marketing Communications: Sending promotional information, new bonuses, and platform updates — only to players who have consented to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support related to responsible gaming.
• Legal Compliance: To fulfil reporting obligations and comply with legal requirements applicable to the operation of the platform.

Ibc003 does not use players' personal data for any purpose not stated above without first obtaining explicit consent from the player.

Ibc003 does not sell or trade players' personal data to any party. However, in the course of operating the platform, we share certain information with the following categories of third parties, strictly on a need-to-know basis and within defined limits:

• Payment Gateway Providers: Transaction information required to process deposits and withdrawals is shared with authorized payment providers, including Touch 'n Go, GrabPay, DuitNow, and FPX integration providers. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Game session information required to operate live casino, slots, and lottery games is shared with game software providers. Shared data does not include players' full identity information.
• Cloud Services & Infrastructure: Data is stored on servers managed by cloud infrastructure providers that comply with international security standards and are bound by strict data processing agreements.
• Legal Authority: ibc003 will disclose the required information to legal authorities where mandated by a court order, directive from an enforcement body, or any other applicable legal obligation.

In all data-sharing scenarios described above, ibc003 ensures that the relevant third parties are bound by confidentiality and data security obligations equivalent to, or stricter than, our own. ibc003 is not liable for the privacy practices of third parties who assist us in delivering our services, provided they comply with the data processing agreements we have entered into with them.

Ibc003 continuously invests in technical and organizational security measures to protect players' personal data against unauthorized access, disclosure, modification, or destruction. Key security practices we maintain include:

• 256-Bit SSL Encryption: All communications between a player's browser and ibc003's servers are encrypted using Transport Layer Security (TLS) with 256-bit key strength.
• Password Encryption: Player passwords are stored in hashed form using a strong one-way algorithm – ibc003 staff cannot view your original password.
• Two-Factor Authentication (2FA): Players can enable 2FA for an additional layer of account security via the security settings page.
• Internal Access Controls: Access to player data within ibc003 systems is restricted on a "minimum privilege" basis — staff can only access data that is necessary for their specific role.
• Continuous Monitoring: ibc003 systems are monitored 24/7 for suspicious activity, intrusion attempts, and traffic anomalies that may indicate a cyberattack.
• Regular Security Audits: ibc003 conducts regular security assessments and penetration testing to identify and address system vulnerabilities.

While ibc003 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. In the event of a data security breach that may affect your personal information, ibc003 is committed to notifying you within a reasonable timeframe via the email address registered to your account.

Ibc003 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit the ibc003 website. We use the following categories of cookies:

• Essential Cookies: Required for core platform functions such as login session management, security, and platform stability. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance Cookies: We collect aggregated information about how players use the platform – such as the most frequently visited pages and time spent – to help us improve platform performance and design. This data does not identify individual players.
• Functional Cookies: Saving your preferences such as interface language, display settings, and other customisations so you do not need to reconfigure them each time you log in.
• Security Cookies: Used to detect suspicious login activity and protect your account from unauthorised access.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the ibc003 platform and your overall experience. ibc003 does not use third-party cookies for targeted advertising based on your activity on other websites.

As an ibc003 player and an individual whose personal data we process, you have the following rights, which you may exercise at any time by contacting us:

• Right of Access: You have the right to request and receive a copy of the personal data we hold about you. ibc003 will provide this copy within 14 business days of receiving a valid request.
• Right to Rectification: If you believe any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Most personal information can be updated directly through your account settings page.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you may request that we delete your personal data. However, this right may be limited by mandatory data retention requirements, such as financial transaction records that must be kept for a specified period under applicable law.
• Right to Withdraw Consent: For data we process based on your consent (such as marketing communications), you may withdraw that consent at any time by clicking the "Unsubscribe" link in our emails or by contacting customer support.
• Right to Object: You may object to the processing of your personal data for specific purposes, such as automated assessment or profiling for marketing purposes.
• Right to Data Portability: You may request your personal data in a machine-readable format so that it can be transferred to another service provider should you choose to do so.

To exercise any of the rights above, please send a written request to support@ibc003.click with the subject line "Data Privacy Rights Request", along with your full name and account number for identity verification. ibc003 will respond to your request within 30 business days.

Ibc003 retains players' personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, subject to any legal requirements that may mandate longer retention periods.

General guidelines on data retention periods are as follows:

• Active Account Data: Retained for as long as your account remains active on ibc003 and for a period of 2 years following your last activity.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with legal requirements governing financial records and anti-money laundering.
• KYC Documents: Retained for a minimum of 5 years after account closure in accordance with compliance requirements.
• Support Communication Records: Retained for 2 years for service quality purposes and reference in the event of a dispute.
• Technical Data (Logs, IP): Retained for a maximum of 12 months unless a security or legal requirement necessitates a longer retention period.

Once the retention period expires and there is no legal requirement to keep the data, ibc003 will securely delete or anonymize the relevant personal data. Data that has been securely deleted cannot be recovered.

If you have any questions, concerns, or complaints regarding how ibc003 handles your personal data, please reach out to us through:

• Privacy Email: support@ibc003.click (please mark the subject line as "Privacy Policy Inquiry")
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the ibc003 platform

Our privacy team is available in Bahasa Malaysia and will respond to your enquiry within 3 business days. For formal requests relating to personal data rights, a response will be provided within up to 30 business days as required by applicable law.

Ibc003 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or privacy protection enhancements. Significant amendments will be communicated to all registered players via email at least 7 days before taking effect. Minor updates that do not affect players' fundamental rights will be applied directly to this page without prior notice.

The "Updated" date at the top of this page reflects when the latest revision was made. Your continued use of the ibc003 platform after any amendments are published constitutes acceptance of the revised policy.