Privacy Policy – i1kfc4u Platform

1. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for personal data processed in connection with the i1kfc4u Platform is i1kfc4u and its affiliated operating entities ("i1kfc4u", "we", "us", "our"). The i1kfc4u Platform is accessible at i1kfc4u.org and comprises the website, mobile-optimised site, live casino, sportsbook, virtual casino, and slots services offered thereunder. All data processing activities described in this Privacy Policy are carried out by or on behalf of i1kfc4u in connection with the provision of these services to registered members.

Questions or requests relating to data protection and privacy may be directed to i1kfc4u's support team at the contact details set out in Section 13 of this Policy.

2. Data We Collect

2.1 Registration Data

When you register an account on the i1kfc4u Platform, we collect the personal information you provide, which typically includes your full name, date of birth, nationality, Malaysian mobile number, email address, and residential address. This information is required to create your account, verify your identity, and comply with i1kfc4u's Know Your Customer (KYC) obligations.

2.2 KYC and Verification Documents

To verify your identity and comply with applicable compliance requirements, i1kfc4u may collect copies of government-issued identity documents (such as your Malaysian MyKad or passport), proof of address documentation, and proof of payment method. These documents are processed and stored securely and are used solely for identity verification and fraud prevention purposes.

2.3 Financial Data

i1kfc4u collects transaction data related to deposits and withdrawals made on the Platform, including the payment method used, transaction amounts in Malaysian Ringgit (MYR), transaction timestamps, and payment reference numbers. i1kfc4u does not store full card numbers or eWallet credentials — financial transactions are processed by i1kfc4u's licensed third-party payment processors.

2.4 Gaming Activity Data

i1kfc4u records all gaming activity conducted on the Platform, including game session data, bet amounts, game outcomes, bonus transactions, and sportsbook wager history. This data is used for account management, dispute resolution, responsible gaming monitoring, and compliance reporting.

2.5 Technical and Device Data

When you access the i1kfc4u Platform, we automatically collect technical data including your IP address, device type, operating system, browser type and version, session duration, pages visited, and referring URL. This data is used for platform security, fraud detection, and service optimisation purposes.

3. How We Use Your Data

i1kfc4u uses the personal data it collects for the following primary purposes:

• Account Management — creating, maintaining, and administering your i1kfc4u member account, including processing your i1kfc4u login credentials and authenticating your identity on each session.
• Service Delivery — providing access to casino games, sportsbook markets, live dealer tables, and all other Platform features in accordance with our Terms & Conditions.
• Financial Processing — processing deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other accepted Malaysian payment methods, and processing withdrawal requests to verified payment instruments.
• KYC & Compliance — fulfilling identity verification, age verification (21+), anti-money laundering, and responsible gaming monitoring obligations under applicable compliance frameworks.
• Security & Fraud Prevention — detecting and preventing unauthorised access, fraudulent transactions, account takeover, and other security threats to the Platform and its members.
• Responsible Gaming — monitoring gaming patterns to identify potential problem gambling indicators, enforcing self-imposed limits set by members, and administering cooling-off periods and self-exclusion requests.
• Customer Support — responding to enquiries submitted via live chat or email, resolving disputes, and maintaining support interaction records.
• Platform Improvement — analysing anonymised usage patterns to improve Platform performance, user interface, game selection, and feature development.
• Marketing Communications — with your consent where required, sending promotional offers, bonus notifications, and Platform updates to your registered email address or mobile number.

4. Legal Basis for Processing

i1kfc4u processes personal data on the following legal bases as applicable to each processing activity:

• Contractual Necessity — processing required to perform the member services contract, including account creation, service delivery, and financial processing.
• Legal Obligation — processing required to comply with applicable compliance obligations, including KYC, age verification, anti-money laundering monitoring, and responsible gaming requirements.
• Legitimate Interests — processing for fraud prevention, Platform security, and service improvement where these interests are not overridden by the Member's data protection rights.
• Consent — direct marketing communications where consent is required under applicable law. Consent may be withdrawn at any time by contacting i1kfc4u support or using the unsubscribe function in marketing emails.

5. Data Sharing

i1kfc4u does not sell, rent, or trade personal data to third parties for their own marketing purposes. i1kfc4u may share personal data with the following categories of third parties strictly as necessary for the purposes described in this Policy:

• Payment Processors — licensed financial technology and payment gateway providers facilitating deposits and withdrawals via Malaysian eWallet and banking channels. These processors are contractually bound to process data only as instructed by i1kfc4u and to maintain equivalent security standards.
• Game Studios — providers of live casino, slot, and sportsbook technology whose platforms are integrated into i1kfc4u. Data shared is limited to that required to operate the respective game session.
• Identity Verification Services — third-party KYC and document verification providers used to process and authenticate identity documentation submitted during registration and at subsequent KYC checkpoints.
• Fraud Prevention & Security Providers — third-party services used to detect fraudulent account activity, suspicious transactions, and Platform security threats.
• Regulatory & Law Enforcement Authorities — where i1kfc4u is under a legal obligation or receives a lawful request from a competent authority to disclose personal data.
• Responsible Gaming Organisations — where a Member initiates a self-exclusion request, their details may be shared with responsible gaming registries operated by international gaming authority bodies, where applicable, to enforce cross-platform exclusions.

6. Cookies & Tracking Technologies

The i1kfc4u Platform uses cookies and similar tracking technologies to operate core Platform functionality, maintain authenticated member sessions, and gather anonymised analytics data. The categories of cookies used on the Platform include:

• Strictly Necessary Cookies — required for Platform operation, including session management, authentication state, and security token validation. These cookies cannot be disabled without preventing Platform access.
• Functional Cookies — used to remember member preferences such as language settings, game lobby layout preferences, and responsible gaming limit configurations.
• Analytics Cookies — used to collect anonymised data on how members navigate and use the Platform, informing improvements to user experience and performance optimisation. No personally identifiable information is transmitted via analytics cookies.
• Security Cookies — used to detect fraudulent login attempts, account takeover patterns, and unusual device or location activity associated with a member's session.

Members may manage non-essential cookie preferences through their browser settings. Disabling strictly necessary cookies will impair or prevent access to i1kfc4u Platform services.

7. Data Retention

i1kfc4u retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: retained for the duration of the member relationship and for a minimum of 5 years following account closure, in accordance with compliance obligations.
• KYC and identity verification documentation: retained for a minimum of 5 years following the date of verification, or longer where required by applicable law or regulatory instruction.
• Financial transaction records: retained for a minimum of 5 years following the date of the transaction.
• Gaming activity logs: retained for a minimum of 3 years, or longer where required for dispute resolution or compliance purposes.
• Customer support communications: retained for a minimum of 2 years following closure of the relevant support case.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with i1kfc4u's data destruction procedures.

8. Data Security

i1kfc4u implements technical and organisational measures appropriate to the risk profile of the data processed on the Platform. These measures include 256-bit SSL/TLS encryption for all data transmitted between member devices and i1kfc4u's servers; encryption at rest for sensitive personal and financial data stored in i1kfc4u's databases; role-based access controls limiting internal access to personal data to those with a legitimate operational need; regular third-party penetration testing and security assessments of the Platform infrastructure; and incident response procedures governing the detection, containment, and notification of data security incidents.

Whilst i1kfc4u takes all reasonable precautions to protect member data, no system is entirely immune from risk. Members are responsible for maintaining the security of their own i1kfc4u login credentials and for notifying i1kfc4u immediately in the event of suspected unauthorised access to their account.

9. Your Rights

Subject to applicable law, registered members of i1kfc4u have the following rights in relation to their personal data:

• Right of Access — to request a copy of the personal data i1kfc4u holds about you.
• Right to Rectification — to request correction of inaccurate or incomplete personal data.
• Right to Erasure — to request deletion of your personal data where i1kfc4u no longer has a legitimate basis for retaining it, subject to legal retention obligations that may override this right.
• Right to Restriction — to request that i1kfc4u restrict its processing of your data in defined circumstances.
• Right to Data Portability — to receive your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object — to object to processing based on legitimate interests, including direct marketing communications.
• Right to Withdraw Consent — where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact i1kfc4u's support team at the contact details in Section 13. i1kfc4u will respond to data rights requests within 30 days of receipt, subject to identity verification of the requestor.

10. Children & Minors

The i1kfc4u Platform is strictly restricted to individuals who are 21 years of age or older. i1kfc4u does not knowingly collect personal data from individuals under the age of 21. Where i1kfc4u identifies or is notified that personal data has been collected from an underage individual, the associated account will be suspended, any balance forfeited in accordance with i1kfc4u's Terms & Conditions, and the data deleted as promptly as practicable. Parents or guardians who believe their child has registered an account on the i1kfc4u Platform should contact i1kfc4u's support team immediately.

11. Cross-Border Data Transfers

As an online platform operating across international game studio and payment processing infrastructure, i1kfc4u may transfer personal data to third-party processors located outside Malaysia. Where such transfers occur, i1kfc4u ensures that adequate safeguards are in place to protect the transferred data, including contractual data processing agreements incorporating recognised data transfer clauses. Members whose data is transferred internationally retain the same data rights described in Section 9 of this Policy.

12. Policy Changes

i1kfc4u reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered members via email to their registered address or via a prominent Platform notice at least 14 days prior to the effective date of the change. Continued use of the i1kfc4u Platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy. The current version of this Policy, including its effective date, is always accessible at i1kfc4u.org/privacy-policy.

13. Contact

For data protection enquiries, privacy rights requests, or any concern regarding the handling of your personal data by i1kfc4u, please contact us through the following channels:

• Live Chat: available 24/7 within the Platform post i1kfc4u login.
• Email: [email protected]

i1kfc4u aims to acknowledge all data protection enquiries within 2 business days and to provide a substantive response within 30 days. Where a request is complex or involves a high volume of data, i1kfc4u may extend this period by a further 30 days with notice to the requestor.