I7malaysia Privacy Policy – How We Safeguard & Protect Your Personal Data

i7malaysia collects various types of information from players to ensure the platform operates securely and efficiently. The categories of information we collect are as follows:

Data collected by i7malaysia is used solely for legitimate and stated purposes as follows:

• Account Management: Creating, verifying, and maintaining your player account on the i7malaysia platform.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), and withdrawals to your Malaysian account.
• Security & Fraud Prevention: Identifying and preventing suspicious activity, identity fraud, or money laundering.
• Legal Compliance: Fulfils the requirements of PDPA 2010, anti-money laundering (AML) regulations, and mandatory reporting obligations.
• Customer Support: Handling enquiries, complaints, and support requests from players.
• Platform Improvement: Analysing usage patterns (in anonymised form) to improve the gaming experience on i7malaysia.
• Marketing Communications: Sending information about promotions, bonuses, and new features — only if you have consented to receive them.
• Responsible Gaming: Monitoring playing patterns to identify signs of problem gambling and provide appropriate assistance.

i7malaysia will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

i7malaysia exercises great care in determining when and with whom player data is shared. Under normal circumstances, we do not share your personal data with any third parties. However, there are a limited number of situations where sharing becomes necessary:

• Payment Service Providers: Transaction information that must be shared with Malaysian payment providers (such as the DuitNow system and FPX network) to process deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Providers: Game performance data required by game providers (such as Pragmatic Play and Evolution Gaming) to ensure game integrity. Data shared is kept to a minimum and does not include full identity information.
• Legal Requirements: When required by a court order, regulatory directive, or applicable Malaysian law. In such situations, i7malaysia will endeavour to notify players in advance, unless prohibited by law.
• Fraud Prevention: Sharing the minimum necessary information with recognised fraud prevention agencies to protect platform integrity and the safety of all players.

Your personal data is stored by i7malaysia only for as long as necessary for the stated purposes or as required by Malaysian law:

• Active Account Data: Retained for the duration that your account remains active and in use.
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's financial regulatory requirements and anti-money laundering standards.
• Support Communication Data: Customer support interaction records are retained for 3 years for dispute resolution purposes.
• Identity Verification Data (KYC): KYC documents are retained for 5 years after account closure, in line with compliance requirements.
• Cookies & Analytics Data: Retained for a maximum of 12 months before being deleted or anonymised.

Once the retention period expires or a player requests deletion, data is securely erased using methods that ensure it cannot be recovered.

Website i7malaysia uses cookies and similar tracking technologies to enhance your experience. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and account verification. Cannot be disabled.
• Functional Cookies: Saving your preferences — such as language, layout, and game settings — for a better experience.
• Analytics Cookies: Helps us understand how players use the platform (in anonymised form) for continuous improvement.
• Session Cookies: Automatically deleted when you close your browser. Used to maintain login status during an active session.

You can manage cookie settings through your browser, but please note that disabling certain cookies may affect platform functionality. i7malaysia.

i7malaysia implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or deletion:

• Transmission Encryption: All data in transit is protected by TLS 1.3 with 256-bit SSL certificates that are renewed on a regular basis.
• Storage Encryption: Sensitive data such as financial details and identity verification information is stored in AES-256 encrypted format within the database.
• Multi-Level Access Control: A role-based access control (RBAC) system ensures that staff can only access data relevant to their specific duties.
• Two-Factor Authentication (2FA): All internal access to data systems requires 2FA. Players are also encouraged to enable 2FA on their accounts.
• 24/7 Monitoring: An automated threat detection system continuously monitors all platform activity to identify and respond to cyber threats in real time.
• Regular Penetration Testing: Regular third-party penetration testing is conducted by independent parties to identify and patch any vulnerabilities.

Platform i7malaysia is strictly prohibited for individuals under the age of 18. We do not knowingly collect or process personal data from minors. Measures we have in place include:

• Strict age verification during registration.
• Identity document verification (MyKad / passport) for all players.
• Immediate account closure if the account holder is found to be underage.

If you become aware that someone under the age of 18 has registered an account on i7malaysia, please contact our team immediately by email at support@i7malaysia.ws so that immediate action can be taken.

In the course of operating the platform, i7malaysia may need to transfer your personal data to entities outside Malaysia — particularly to international game providers whose platforms we integrate with. In such cases:

• Data transfers are only carried out to recipients who can ensure a level of data protection equivalent to or greater than Malaysia's PDPA.
• Data transfer agreements incorporating standard protection clauses will be executed with all recipients outside Malaysia.
• Data transferred is kept to a minimum — only what is strictly necessary for the stated purpose.

To exercise any of your privacy rights outlined in this Policy, you may contact the Data Protection Officer i7malaysia through the following channels:

• Email: support@i7malaysia.ws with the subject "Privacy Rights Request"
• Live Chat: Via the live chat icon on the i7malaysia website — state that you wish to make a privacy rights request.
• In-Account: Certain rights (such as updating your contact information) can be exercised directly through your i7malaysia account profile settings

Every privacy rights request will be acknowledged within 3 business days and resolved within 14 business days. If we require additional time, we will notify you with the reason and an estimated completion date.

i7malaysia reserves the right to update this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or new platform features. When significant amendments are made:

• A notification will be sent to your registered email address at least 14 days before any amendments take effect.
• A prominent notice will be displayed on the i7malaysia website.
• The "Updated" date at the top of this document will be revised.

Continued use of the platform i7malaysia following the amendments taking effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any amendments, you have the right to close your account before they take effect.