Privacy Policy

Introduction

iwallet99 ("Platform", "we", "us" or "our") operates the website located at https://iwallet99.cam. The Platform is an English-language online entertainment information service designed for adult users in Malaysia, covering sports betting, live casino games, Malaysian Ringgit (MYR) payment options, bonus guidance and responsible gambling resources.

This Privacy Policy ("Policy") explains what personal data we may collect from you when you use the Platform, why we collect it, how it is processed and the rights you hold in relation to that data. This Policy applies to all Users who access, browse or register on the Platform, regardless of the device or location from which access occurs.

By accessing or using the iwallet99 Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request deletion of any data previously submitted.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, device identifiers and usage data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means iwallet99, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Subject" means any individual whose Personal Data is processed by the Platform — in most cases this refers to a registered User.
• "Third Party" means any natural or legal person other than the User and iwallet99, including Operators, payment service providers, analytics vendors and advertising partners.
• "Operator" means a third-party licensed gambling service provider whose products or services may be described or referenced in Platform content.
• "Cookies" means small data files stored on your device by your browser when you visit a website, used to record session preferences and behaviour.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, which governs the collection, processing and handling of personal data in Malaysia.

Data We Collect

Depending on how you interact with the Platform, iwallet99 may collect the following categories of Personal Data:

We collect only the minimum data reasonably necessary to provide the Platform's services and maintain account security. We do not collect sensitive personal data — such as racial or ethnic origin, political opinions or health data — except where strictly required by applicable law or regulatory obligation.

Data Processing

iwallet99 processes Personal Data for the following purposes:

• Account administration: Creating, maintaining and securing your registered account, including identity and age verification.
• Platform delivery: Personalising content, saving preferences and ensuring the Platform functions correctly across devices.
• Security and fraud prevention: Detecting, investigating and preventing fraudulent activity, unauthorised account access, money laundering and other illegal conduct.
• Regulatory compliance: Meeting obligations under the Personal Data Protection Act 2010 (Malaysia) and any other applicable laws, including responding to lawful requests from Malaysian authorities.
• Platform improvement: Analysing usage patterns to improve content quality, navigation and overall user experience.
• Communication: Responding to support enquiries, processing feedback, and sending service-related notifications such as account security alerts or policy change notices.
• Responsible gambling: Supporting self-exclusion requests, deposit limit settings and any safeguarding measures necessary to protect vulnerable users.

Legal Basis for Processing

iwallet99 processes Personal Data only where a valid legal basis exists under applicable Malaysian data protection law. The legal bases we rely on are as follows:

• Contractual necessity: Processing required to perform the agreement between you and iwallet99, including account registration and the delivery of Platform services.
• Legal obligation: Processing required to comply with applicable laws including the PDPA, anti-money laundering regulations and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out in pursuit of iwallet99's legitimate business interests, including fraud prevention, Platform security, analytics and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, informed and unambiguous consent, particularly in relation to optional marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

iwallet99 does not sell, rent or trade your Personal Data to third parties for their own commercial purposes. We may, however, share your data in the following limited circumstances:

• Service providers: Trusted third-party vendors engaged to support Platform operations — including cloud hosting providers, analytics platforms, customer support tools and fraud detection services — who are contractually bound to process data only as instructed by iwallet99 and in compliance with applicable law.
• Operators: Where you choose to access an Operator platform referenced on iwallet99, you may be subject to that Operator's own data collection and privacy practices. iwallet99 is not responsible for the privacy conduct of third-party Operators. Review the relevant Operator's privacy policy before proceeding.
• Regulatory authorities: Malaysian government agencies, law enforcement bodies or regulatory authorities where disclosure is required by law, court order or mandatory regulation.
• Business transfers: In the event of a merger, acquisition, reorganisation or sale of assets, your Personal Data may be transferred to the acquiring entity subject to equivalent data protection obligations.
• Consent-based sharing: Where you have provided explicit prior consent for data to be shared with a specific identified third party.

When sharing data with service providers, iwallet99 implements appropriate contractual safeguards to ensure that your data is processed securely and for the agreed purpose only.

Cookies & Tracking Technologies

The iwallet99 Platform uses cookies and similar technologies to improve your browsing experience, remember your preferences and gather aggregate usage data. The types of cookies used on the Platform include:

• Essential cookies: Required for the Platform to function correctly. These include session management, authentication tokens and security identifiers. These cannot be disabled without impacting Platform functionality.
• Analytical cookies: Used to collect anonymised data about how users navigate the Platform — such as pages visited, time spent and referral sources — to help us improve content and structure.
• Preference cookies: Store your settings and choices, such as language preferences and display configurations, so they persist between sessions.
• Marketing cookies: Used only where you have provided explicit consent, to deliver relevant content and measure engagement with promotional material.

You may manage cookie preferences through your browser settings at any time. Disabling certain cookies may limit the functionality of parts of the Platform. For detailed cookie management instructions, refer to the help documentation of your browser provider.

Data Retention

iwallet99 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your active relationship with the Platform.
• Inactive account data: Accounts showing no activity for an extended period may be subject to a review and, following reasonable notice, data may be anonymised or deleted in accordance with Platform policy.
• Transactional and audit records: Retained for a minimum period as required under Malaysian financial, tax and anti-money laundering regulations, typically up to seven years.
• Support correspondence: Retained for a reasonable period to resolve disputes and for quality assurance, typically not exceeding three years from the date of last correspondence.
• Self-exclusion records: Retained for the duration of the exclusion period and for a further reasonable period to prevent re-registration during the exclusion window.

Upon expiry of applicable retention periods, Personal Data is securely deleted, anonymised or pseudonymised so that it can no longer be used to identify you.

Data Security

iwallet99 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption for data transmitted between your device and Platform servers.
• Access controls and authentication mechanisms limiting data access to authorised personnel on a need-to-know basis.
• Regular security reviews of Platform infrastructure and third-party service provider contracts.
• Incident response procedures to address and notify affected parties of data breaches where required under applicable law.
• Secure credential storage practices including hashing and salting of user passwords.

User Rights

Under applicable Malaysian data protection law, including the Personal Data Protection Act 2010, you hold the following rights in relation to your Personal Data held by iwallet99. To exercise any of these rights, please contact us using the details in Section 15.

iwallet99 will respond to all verifiable rights requests within a reasonable timeframe. In some cases, we may need to verify your identity before processing a request to ensure data is not disclosed to or deleted at the request of an unauthorised party.

Children & Minors

The iwallet99 Platform is intended exclusively for adults aged 21 and above. We do not knowingly collect, store or process Personal Data belonging to individuals under the age of 21.

If we become aware that Personal Data has been collected from a person under 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at the address provided in Section 15.

Third-Party Links

The Platform may contain informational references to third-party Operators and services, including platforms accepting Malaysian payment methods such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX. Where you choose to follow a reference and access a third-party Operator platform, you leave the iwallet99 environment.

iwallet99 has no control over the privacy practices, content or data handling procedures of third-party Operators or other external websites. We strongly encourage you to review the privacy policy of any third-party platform before providing personal information or engaging in financial transactions on that platform.

This Policy applies solely to the iwallet99 Platform at https://iwallet99.cam. References to third-party brands, payment providers or Operators do not imply endorsement of their data practices.

Cross-Border Data Transfers

In the course of providing Platform services, Personal Data may be processed by service providers or stored on infrastructure located outside Malaysia. Where such transfers occur, iwallet99 takes appropriate steps to ensure that equivalent data protection standards are maintained.

Where Personal Data is transferred to a jurisdiction that does not offer equivalent data protection protections to those applicable in Malaysia, iwallet99 will implement appropriate safeguards — such as contractual data processing agreements — to protect your data during and after the transfer.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to countries other than Malaysia where necessary for the provision of Platform services, provided that such transfers are subject to appropriate safeguards as described above.

Policy Amendments

iwallet99 reviews this Privacy Policy periodically and may update it to reflect changes in applicable law, Platform functionality or data processing practices. The "Last Reviewed" date at the top of this Policy will be updated when material changes are made.

Where amendments are significant — particularly those that affect your rights or the categories of data we collect — we will use reasonable efforts to notify registered users via their registered email address prior to the changes taking effect. For minor or clarificatory changes, continued use of the Platform following publication will constitute acceptance.

We encourage you to review this Policy periodically. If you disagree with any updated provision, you should discontinue use of the Platform and submit a data deletion request in accordance with Section 10.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data by iwallet99, you may contact our data team using the details below. All data-related requests and privacy enquiries should be submitted in writing via email.

Platform: iwallet99
Website: https://iwallet99.cam
Data enquiries email: [email protected]

Please include your registered username and a clear description of your request when contacting us. We aim to acknowledge all data-related requests within a reasonable period and to resolve them in accordance with applicable legal timeframes under Malaysian law.

For responsible gambling concerns including self-exclusion and account closure requests, please visit our dedicated Responsible Gambling page, where priority processing procedures are described.