Ini188 Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy is published by ini188 ("Company", "We", "Platform") and applies to all users who access or use the ini188 online betting platform at ini188.my, including the website, mobile app, and related services.

We understand that Malaysian players' trust in us depends on how we handle their personal information. That is why we treat data protection not merely as a legal obligation, but as a moral responsibility we take seriously.

This Privacy Policy explains:

• The types of personal information we collect from you.
• How and why we collect that information.
• Who may access or receive your information.
• Your rights in relation to your personal data.
• How to contact us regarding privacy matters.

This policy is governed by Malaysia's Personal Data Protection Act (PDPA) 2010 and any other data protection legislation in force in Malaysia from time to time.

Ini188 only collects personal data that is strictly necessary to provide Malaysian players with a safe, seamless, and legally compliant service. The following are the categories of data we collect:

Ini188 collects personal data through several key channels when you interact with our platform:

• Account Registration: When you register a new account with ini188, you are required to provide basic information such as your name, email, phone number, and date of birth.
• Identity Verification (KYC): To comply with anti-money laundering (AML) requirements and verify player age, we require a copy of an official Malaysian identity document such as a MyKad or passport.
• Financial Transactions: Data is collected automatically when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), or when you request a withdrawal to your bank account.
• Platform Usage: Technical data such as IP addresses, device types, and usage patterns are collected automatically through cookies and similar tracking technologies when you browse or play on the ini188 platform.
• Support Communications: When you contact the ini188 customer support team via live chat or email, records of those conversations are retained for quality assurance and reference purposes.
• Third-Party Sources: In certain circumstances, we may receive information about you from third-party identity verification providers or fraud prevention agencies to meet our compliance obligations.

Ini188 uses collected personal data solely for legitimate, clearly stated purposes. We will not use your data for any other purpose without first informing you. These primary purposes are as follows:

• Account Management: Creating, maintaining, and managing your player account, including login, identity verification, and personal settings.
• Transaction Processing: Processing deposits, withdrawals, bonus payments, and all financial transactions related to your ini188 account.
• Legal Compliance: Fulfilling legal obligations such as KYC requirements, AML reporting, and compliance with directives from relevant authorities in Malaysia.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, or misuse of the platform.
• Service Improvement: Analysing usage patterns and feedback to improve platform quality, user interface, and overall gaming experience.
• Service Communications: Sending important notifications regarding your account, transactions, policy updates, and critical security information.
• Responsible Gaming: Monitoring betting patterns to identify players who may need additional support or protection.
• Marketing (with consent): Sending promotional information, the latest bonuses, and special ini188 offers — only with your explicit consent, which you may withdraw at any time.

Ini188 does not sell or trade player personal data. However, under certain limited circumstances, we may need to share your data with carefully selected third parties:

• Payment Providers: Required transaction information is shared with payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and banks via FPX solely to process your deposits and withdrawals.
• Game Software Providers: Game platform providers (such as slots or live casino providers) may receive limited session data necessary to deliver games to you.
• Technology Service Providers: Companies that support our platform's operations — including server hosting, analytics, and cybersecurity — all bound by strict confidentiality agreements.
• Authorities & Law Enforcement: We may be required to disclose certain data to government agencies, enforcement bodies, or courts when mandated by Malaysian law.
• Anti-Fraud Agency: In cases of suspected fraud or money laundering, relevant information may be shared with the appropriate agencies for investigation purposes.

Ini188 continuously invests in the latest security infrastructure to ensure Malaysian players' personal data remains protected at all times. Our security measures include:

• Data Encryption: All data transmitted between your device and the ini188 platform is encrypted using industry-standard 256-bit TLS/SSL protocols.
• Internal Access Controls: Access to player data is restricted to staff who genuinely require it to perform their duties, based on the principle of least privilege.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect any unauthorised access attempts or suspicious activity.
• Multi-Layer Firewall: ini188's data servers are protected by multiple firewall layers and intrusion detection systems (IDS/IPS) that are regularly updated.
• Regular Security Audits: Independent security assessments and penetration testing are conducted regularly to identify and address any vulnerabilities.
• Staff Training: All ini188 staff who handle player data receive comprehensive and ongoing data protection training.

While we take all reasonable precautions, no system can guarantee absolute 100% security. In the event of a data breach that affects you, we are committed to notifying you within 72 hours of becoming aware of it.

Ini188 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled as they are critical to the website's operation.
• Performance Cookies: Collects anonymised data on how players use the platform to help us improve speed, usability, and overall performance.
• Functional Cookies: Saving your preferences such as language, account settings, and login information to make repeat visits more convenient.
• Analytics Cookies: Helps us understand aggregated platform usage patterns for continuous improvement purposes.

You can manage or disable cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the ini188 platform. For more information on how to manage cookies, refer to your web browser's documentation.

Under Malaysia's PDPA 2010, you as an ini188 player have the following rights regarding your personal data. ini188 fully respects and facilitates the exercise of these rights:

To exercise any of the rights above, please contact the ini188 privacy team by email at privacy@ini188.my or via our live chat platform. We will verify your identity before processing any request to ensure the security of your account.

Ini188 only retains your personal data for as long as is necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law.

• Active Account Data: Retained for as long as your account remains active, plus any applicable statutory limitation periods.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian financial and taxation legal requirements.
• KYC Records: Retained for a minimum of 5 years from the date of the last transaction, in accordance with Malaysia's AMLA (Anti-Money Laundering Act) requirements.
• Security Data Logs: Retained for 12 months for security incident investigation purposes.
• Support Communication Records: Retained for 3 years for service quality and dispute resolution purposes.

When your personal data is no longer needed, ini188 will securely dispose of it using industry-approved methods, ensuring it cannot be recovered or accessed by any party.

In the context of operating an online betting platform, some of the technology or service providers we work with may store or process data outside Malaysia. Where this occurs, ini188 ensures that:

• Data transfers are only carried out to countries or entities that provide a level of data protection equivalent to or exceeding Malaysia's PDPA standards.
• Comprehensive, legally binding data processing agreements are established with all parties that receive data outside Malaysia.
• You will be informed of any material international data transfers that affect your privacy.

As a Malaysian user, your rights under PDPA 2010 remain unchanged regardless of where your data is physically processed.

Ini188 takes the protection of children and young persons very seriously. This platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that we have inadvertently collected personal data from minors, we will take immediate action to:

• Suspending the relevant account immediately.
• Deleting all associated personal data from our systems.
• Refunding any deposited funds upon successful identity verification.

If you become aware that someone under the age of 18 has registered an account on ini188, please contact us immediately at support@ini188.my so that we may take the appropriate action.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ini188 handles your personal data, we encourage you to reach out to us directly.

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex data subject rights requests, the response period may take up to 14 business days.

If you believe ini188 has violated your privacy rights and we have been unable to resolve your complaint to your satisfaction, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia which is the regulatory authority for data protection matters in Malaysia.

Ini188 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated to you via your registered email or in-platform notification before they take effect.