Privacy Policy

1 Introduction

i7malaysia ("we", "us", "our", or "the Platform") is committed to protecting the personal data of every registered user across Malaysia — from players in Kuala Lumpur and Petaling Jaya to members based in Penang, Johor Bahru, Shah Alam, and beyond. We operate the online casino and sports betting platform accessible at https://i7malaysia.cam and process personal data in connection with the provision of our gaming, betting, payment, and support services.

This Privacy Policy ("Policy") sets out in transparent terms the categories of personal data we collect, the purposes for which we process that data, the legal grounds on which processing is based, the parties with whom data may be shared, the rights available to you as a data subject, and the measures we take to keep your data secure.

This Policy applies to all personal data collected via the Platform, including data submitted during account registration, identity verification (KYC), deposit and withdrawal transactions, customer support interactions, and passive data collected through cookies and analytics tools.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Controller" means i7malaysia, the entity that determines the purposes and means of processing your personal data.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed — in this context, you as a registered User.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, location data, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, alteration, or deletion.
• "Third Party" means any person or entity other than the Data Subject and i7malaysia who processes personal data under an arrangement with i7malaysia.
• "KYC" means Know Your Customer — the process by which i7malaysia verifies your identity and the legitimacy of your account activity.
• "Cookies" means small data files placed on your device by the Platform to facilitate functionality, analytics, and session management.

3 Personal Data We Collect

i7malaysia collects personal data that is necessary for the operation of the Platform and the provision of our services. We collect no more data than is required for the stated purposes. The categories of personal data we may collect include:

3.1 Registration & Account Data

• Full legal name
• Date of birth (to verify that you are aged 21 or above)
• Email address and phone number
• Residential address (including city, state, and postcode)
• Preferred username and encrypted password
• Account preferences and communication settings

3.2 Identity Verification (KYC) Data

• Copy of government-issued identity document (MyKad, passport, or equivalent)
• Proof of residential address (utility bill or bank statement)
• Proof of payment method (where required for fraud prevention)
• Selfie or liveness verification (where applicable)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., DuitNow reference, FPX transaction ID, Touch 'n Go eWallet alias, Boost account reference, Maybank or CIMB account last-four digits)
• Betting history, wager amounts, game outcomes, and balance movements
• Bonus claims and wagering activity

3.4 Technical & Usage Data

• IP address and geolocation data
• Browser type, operating system, and device identifiers
• Session timestamps, duration, and navigation paths on the Platform
• Referring URLs and traffic source data

3.5 Communication Data

• Records of live chat interactions with our support team
• Email correspondence sent to or received from our support address
• Feedback, complaint records, and dispute documentation

4 How We Collect Your Data

i7malaysia collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any form on the Platform.
• Automatically — through cookies, tracking pixels, session logs, and analytics tools when you browse or use the Platform.
• From third-party payment processors — when you transact via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or other payment channels integrated with the Platform.
• From identity verification services — third-party KYC providers may share verified identity data with us as part of the onboarding process.
• From fraud prevention services — shared data relating to known fraudulent activity patterns may be received from third-party risk management partners.

5 How We Use Your Personal Data

We process your personal data for the following specific and legitimate purposes:

6 Legal Basis for Processing

i7malaysia processes personal data on the following legal grounds, depending on the nature of each processing activity:

• Contractual necessity: Processing required to perform the contract with you — including account management, payments, and game provision — is carried out on the basis that it is necessary for the performance of our agreement with you as a registered User.
• Legal obligation: Certain processing activities — particularly KYC verification, anti-money laundering (AML) record-keeping, and regulatory reporting — are required by applicable legal and regulatory obligations.
• Legitimate interests: We process certain categories of data (such as usage analytics and fraud prevention signals) on the basis of our legitimate interests in maintaining platform security, improving services, and preventing abuse, provided such interests do not override your fundamental rights and freedoms.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

i7malaysia does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

7.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary transaction data with payment processors including FPX gateway operators, DuitNow service providers, Touch 'n Go eWallet, Boost, GrabPay, and partner banks (Maybank, CIMB, Public Bank, Hong Leong Bank). These providers are bound by their own data protection obligations and are prohibited from using your data for any purpose other than processing your transaction.

7.2 Identity Verification Providers

We engage certified third-party KYC service providers to assist with identity verification. Your identity documents are shared with these providers solely for verification purposes and are handled in accordance with their respective data protection policies.

7.3 Game Software Providers

Our live casino, slots, and sports betting products are powered by certified third-party game providers. Minimal session and account identifier data may be shared with these providers to facilitate game delivery and record-keeping of game outcomes.

7.4 Regulatory Authorities

We may be required to disclose personal data to competent regulatory authorities, law enforcement agencies, or judicial bodies where required to do so by law, court order, or applicable regulatory obligation. We will notify you of such disclosures where legally permissible.

7.5 Fraud Prevention & Risk Management

We may share data with fraud prevention organisations and risk management service providers for the purpose of preventing financial crime, detecting fraudulent account activity, and protecting the integrity of the Platform and its users.

8 Cookies & Tracking Technologies

i7malaysia uses cookies and similar tracking technologies to deliver, maintain, and improve our Platform. Cookies are small text files placed on your device when you access the Platform. They allow us to recognise your browser, maintain your session, remember your preferences, and gather analytics data.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, language settings, and display options to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised data about how visitors use the Platform — including pages visited, session duration, and device types — to help us improve performance and user experience.
• Marketing Cookies: Used, with your consent, to measure the effectiveness of our promotional campaigns. You may opt out of marketing cookies at any time via your Account settings or browser controls.

8.2 Managing Cookies

You may adjust your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform. Detailed cookie preferences can be managed through the consent tool presented on your first visit to the Platform.

9 Data Retention

i7malaysia retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by applicable regulatory guidance.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for a minimum of three (3) years from the date of the interaction.
• Technical and analytics data: Retained in aggregated, anonymised form for up to two (2) years for platform improvement purposes.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

10 Data Security

i7malaysia implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive personal data including KYC documents and financial records stored on our infrastructure.
• Role-based access controls ensuring that personal data is accessible only to authorised i7malaysia personnel with a legitimate operational need.
• Multi-factor authentication (MFA) for administrative access to production systems handling personal data.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Incident response procedures to detect, contain, and remediate any personal data breach, with notification to affected users and regulators in accordance with applicable obligations.

11 Your Data Rights

As a data subject, you have the following rights with respect to the personal data held by i7malaysia. You may exercise any of these rights by contacting our Data Protection team via live chat or email at [email protected]. We will respond to your request within a reasonable timeframe, and no later than thirty (30) days of receipt.

• Right of Access: You have the right to request confirmation of whether we hold personal data about you, and to receive a copy of that data together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or direct marketing purposes. Where objection relates to marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

Please note that certain rights are subject to limitations. For example, we cannot erase personal data that we are legally required to retain for regulatory compliance purposes. We will inform you of any applicable limitations when responding to your request.

12 Protection of Minors

i7malaysia implements mandatory age verification as part of the account registration process. All accounts are subject to KYC procedures that verify date of birth. If we become aware that personal data has been collected from a person under the age of 21 — including as a result of a misrepresentation during registration — we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has registered an account on our Platform, please contact us immediately at [email protected] and we will investigate and act without delay.

13 Third-Party Links & Services

The i7malaysia Platform may contain references to or integrations with third-party payment service providers and certified game software providers. This Privacy Policy applies solely to personal data processed by i7malaysia. We are not responsible for the privacy practices of third-party organisations, including payment processors, game providers, or identity verification services.

Where we share your data with third-party processors for the purposes described in this Policy, we ensure that such processors are bound by appropriate data processing agreements that require them to protect your data in accordance with applicable standards. However, we recommend that you review the privacy policies of any third-party services you interact with directly.

14 Changes to This Privacy Policy

i7malaysia reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Users via email or a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this document will be updated upon each revision. Your continued use of the Platform after the revised Policy takes effect constitutes your acknowledgement of the updated terms. We encourage you to review this Policy periodically to stay informed about how we protect your information.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by i7malaysia, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. The fastest way to reach us for urgent data-related queries.
• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing.

We will acknowledge all privacy-related enquiries within 24 hours and aim to provide a full response within 30 days. For requests involving data access, rectification, or erasure, we may need to verify your identity before processing the request to ensure your data is not disclosed to, or altered by, an unauthorised party.