iDompet Privacy Policy

1. Introduction and Scope

This Privacy Policy governs personal information processed through iDompet. It applies to visitors, registered players, former account holders and persons who communicate with iDompet customer support. It also covers information generated through sportsbook, live casino, slot, payment, loyalty and responsible gambling activity.

For the purposes of this policy, personal information means information that identifies, relates to, describes or may reasonably be connected with an identifiable person. Aggregated or irreversibly anonymised data that cannot reasonably identify a person is not treated as personal information.

2. Information iDompet Collects

The information collected by iDompet depends on how you use the platform. The principal categories include:

• Identity data: legal name, date of birth, nationality, identification document details, photograph and verification results.
• Contact data: residential address, email address, Malaysian mobile number and communication preferences.
• Account data: username, encrypted password records, security settings, account status and login history.
• Financial data: deposit and withdrawal records, payment method identifiers, bank or e-wallet ownership evidence and transaction references.
• Gaming data: sports selections, stakes, odds, casino sessions, wins, losses, bonus activity and account balance movements.
• Technical data: IP address, browser type, operating system, device identifiers, approximate location, language setting and diagnostic logs.
• Communication data: live chat records, support messages, complaint details, survey responses and responsible gambling requests.

iDompet does not request your complete online banking password, Touch 'n Go eWallet password, Boost password, GrabPay password or card security PIN. You should never provide those credentials through iDompet live chat or email.

3. How Information Is Collected

iDompet collects information directly when you register, update your profile, upload a verification document, make an MYR transaction, contact support or activate an account control. Other information is created automatically as you use iDompet, including login events, gameplay records and security logs.

Information may also be received from payment providers, identity verification services, fraud-prevention partners, game studios and sports data providers. For example, iDompet may receive confirmation that an FPX transfer through Maybank or CIMB succeeded without receiving your complete online banking credentials.

If you provide information concerning another person, you must have a lawful and legitimate reason to do so. You must not use an iDompet account to upload another person's identity document or payment details.

4. Purposes of Data Processing

iDompet processes personal information where necessary to provide requested services, administer the player agreement, protect users, meet compliance obligations and pursue legitimate operational interests. Specific purposes include:

• Creating, verifying and maintaining an iDompet account.
• Processing deposits, withdrawals, refunds and account balances in MYR.
• Accepting and settling Liga Super Malaysia, EPL, UFC and other sports wagers.
• Operating live casino, slot, promotion and loyalty features.
• Detecting account takeover, fraud, collusion, payment abuse and unlawful activity.
• Enforcing age restrictions, self-exclusion requests and responsible gambling limits.
• Resolving support requests, payment enquiries, complaints and disputed settlements.
• Improving platform stability, mobile performance and service usability.

Where consent is used for a particular processing activity, you may withdraw that consent for future processing. Withdrawal does not invalidate processing that occurred while valid consent was in effect.

5. Payments, KYC and Financial Information

iDompet may process payment information connected with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong or supported digital assets. The exact information available to iDompet depends on the payment method and transaction.

Identity and payment ownership checks help iDompet confirm that funds belong to the registered player. iDompet may request a MyKad, passport, proof of address, account statement or source-of-funds evidence. Sensitive document access is restricted to authorised personnel and service providers involved in verification, security or compliance.

Payment records may be retained after account closure where necessary to investigate fraud, respond to a dispute, preserve transaction history or satisfy applicable record-keeping obligations.

6. When Information May Be Shared

iDompet does not disclose personal information without a legitimate purpose. Information may be shared with carefully selected service providers that support payment processing, identity verification, hosting, cybersecurity, customer service, game delivery, sports settlement and technical maintenance.

Service providers may process information only for authorised functions and are expected to maintain suitable confidentiality and security measures. iDompet may also disclose information where reasonably necessary to comply with a valid legal requirement, investigate suspected crime, defend legal rights, protect a person from harm or enforce the iDompet Terms & Conditions.

If the business or relevant platform assets are reorganised or transferred, protected information may form part of that transaction. Appropriate confidentiality controls will apply during any such review or transfer.

7. International Data Processing

Because iDompet uses international hosting, payment, verification and gaming infrastructure, personal information may be processed outside Malaysia. Privacy and data protection rules may differ between countries.

Where international processing occurs, iDompet uses reasonable contractual, organisational and technical measures intended to protect information consistently with this policy. International processing does not permit a service provider to use player information for unrelated purposes.

8. Data Security

iDompet applies layered safeguards intended to protect personal information against unauthorised access, accidental loss, alteration, disclosure and misuse. These measures may include encryption in transit, access controls, account monitoring, network protection, staff confidentiality requirements, secure backups and incident response procedures.

No internet service can guarantee absolute security. Players also have an important role in protecting their iDompet accounts. Use a strong and unique password, keep security codes private, sign out on shared devices and contact support promptly if account activity appears unfamiliar.

9. Data Retention

iDompet keeps personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate security, contractual, dispute-resolution and compliance requirements. Retention periods vary according to the type of information and the status of the account.

Basic account, KYC, transaction, responsible gambling and complaint records may remain necessary after an iDompet account is closed. When information is no longer required, it may be securely deleted, de-identified or restricted from routine operational access.

10. Cookies and Device Technologies

iDompet may use cookies and similar local storage technologies to maintain secure sessions, remember preferences, balance website traffic, detect suspicious logins and understand how platform features perform. Some technologies are essential for account authentication and cannot be disabled without affecting service functionality.

You may manage non-essential cookies through available browser settings. Blocking all cookies may prevent iDompet from remembering your session or may interfere with login, payment and gameplay functions. Device logs may still be processed where necessary for platform security and fraud prevention.

11. Marketing and Communication Preferences

Where permitted and selected by the user, iDompet may send information about platform features, sports offers, casino promotions or loyalty rewards. Marketing preferences may be changed through available account controls or by contacting support.

Operational messages are different from promotional communications. iDompet may still send essential notices about account security, payments, policy updates, responsible gambling controls or service interruptions even when marketing has been declined.

iDompet does not use self-excluded accounts for direct gambling promotion during an active exclusion period.

12. User Rights and Requests

Subject to applicable requirements and appropriate identity verification, you may ask iDompet to provide information about personal data associated with your account. You may also request correction of inaccurate information, object to certain processing, withdraw consent-based preferences, or request deletion where continued retention is not required.

Some requests cannot be completed immediately or in full. For example, iDompet may need to retain transaction, KYC, fraud-prevention, self-exclusion or dispute records. Deleting information required to operate an active account may also require the account to be closed first.

To protect players from impersonation, iDompet may request identity confirmation before responding. A privacy request should include the registered username, the nature of the request and enough information to locate the relevant account. Never include your complete password.

13. Age Restrictions and Vulnerable Persons

iDompet is intended only for persons aged 21 and above. The platform does not knowingly permit minors to maintain gambling accounts. iDompet may request age verification at registration, before a withdrawal or whenever account information indicates a potential eligibility concern.

If information has been submitted by or about a person under 21 in connection with an attempted account, contact iDompet support. The platform may restrict the account, investigate the circumstances and delete information that is not required for security, prevention or record-keeping purposes.

14. Changes to This Privacy Policy

iDompet may update this Privacy Policy when platform features, payment methods, data practices, security procedures or operational requirements change. The revised policy becomes effective when published unless another effective date is stated.

Material revisions may be highlighted through a website or account notice. Users should review the iDompet Privacy Policy periodically. Continued use after a revision indicates acknowledgement of the updated information practices, subject to any consent that may be required for a specific activity.

15. Contact Us

Questions about this Privacy Policy, an iDompet account or a personal information request may be sent to customer support. Provide a clear description of the request and the username associated with the account. Do not send complete passwords, one-time codes or online banking credentials.

iDompet will review privacy requests using available account information and may ask for verification before disclosing, correcting or deleting data. Complex requests may require additional time where payment, security or archived account records must be examined.