Privacy Policy

1. Who We Are

1.1 This Privacy Policy is issued by the operator of the ijaya platform ("ijaya", "We", "Us", or "Our"), accessible at https://ijaya.co. ijaya is operated under an international gaming authority licence.

1.2 ijaya acts as the data controller in respect of personal data collected from Users of the Platform. Any reference in this Policy to "You" or "Your" refers to any individual who accesses, registers on, or interacts with the ijaya Platform.

1.3 This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. By registering an Account or using the Platform, You confirm that You have read and understood this Privacy Policy.

2. Data We Collect

2.1 Registration & Identity Data. When You create an ijaya Account, we collect: full legal name; date of birth; residential address; email address; mobile telephone number; and, where applicable, username and password (stored in encrypted form).

2.2 Verification (KYC) Data. To comply with international gaming authority licence requirements and anti-money laundering obligations, We collect copies of government-issued identity documents (Malaysian IC / MyKad or passport), proof of address documents, and biometric data in the form of selfie or liveness-check photographs used solely for identity matching purposes.

2.3 Financial Data. We collect transaction records including deposit amounts, withdrawal amounts, payment method identifiers (such as e-wallet account references or masked bank account numbers), and transaction timestamps. We do not store full payment card numbers on our servers.

2.4 Gaming & Activity Data. We collect records of all bets placed, games played, session durations, win and loss history, bonus usage, and responsible gaming tool activations on the Platform.

2.5 Technical & Device Data. We automatically collect IP address, browser type and version, operating system, device identifiers, screen resolution, referring URLs, and page interaction data when You access the Platform.

2.6 Communication Data. Records of communications between You and ijaya's support team, including live chat transcripts, email correspondence, and any attachments You provide.

2.7 Marketing Preferences. Your stated preferences regarding receiving promotional communications from ijaya.

3. How We Collect Data

We collect personal data through the following means:

• Directly from You — when You register an Account, complete KYC verification, make deposits or withdrawals, place bets, contact support, or update your account settings.
• Automatically — through cookies, web beacons, and similar tracking technologies when You access and interact with the Platform.
• From third parties — including payment service providers who process your transactions, identity verification providers who assist with KYC, and fraud prevention services, in each case subject to their own privacy policies and only to the extent necessary.

4. Legal Basis for Processing

4.1 ijaya processes your personal data on the following legal bases:

• Contractual necessity — processing required to operate your Account, execute transactions, and provide the gaming services you have requested.
• Legal obligation — processing required to comply with our international gaming authority licence conditions, anti-money laundering obligations, and applicable regulatory requirements, including KYC verification.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests are not overridden by your privacy rights.
• Consent — where You have given explicit consent, for example to receive marketing communications. You may withdraw consent at any time by updating your communication preferences in Account settings.

5. How We Use Your Data

5.1 ijaya uses the personal data we collect for the following purposes:

• Creating and managing your Account, authenticating your identity at login, and processing deposits and withdrawals in MYR.
• Verifying your age (21+) and identity in compliance with our international gaming authority licence obligations.
• Providing, personalising, and improving the Platform's casino, sportsbook, and gaming services.
• Processing and recording all betting and gaming transactions for audit and regulatory purposes.
• Detecting, preventing, and investigating fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct.
• Monitoring for responsible gaming indicators and applying self-imposed limits or regulatory limits where applicable.
• Communicating with you about your Account, transactions, security alerts, and Platform updates.
• Sending promotional communications where you have opted in to receive them.
• Complying with legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.
• Conducting internal analytics to understand Platform usage patterns and improve the user experience.

6. Sharing Your Data

6.1 ijaya does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment service providers — to process your deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and other accepted payment methods.
• Identity verification providers — to assist with KYC verification, age checks, and fraud screening.
• Game content providers — limited technical identifiers are shared with certified game studios to facilitate game sessions and record results.
• Regulatory and law enforcement authorities — where required by our international gaming authority licence or applicable law, or in response to a valid legal request.
• Professional advisers — legal, accounting, and auditing firms, under strict confidentiality obligations.
• Business transfers — in the event of a merger, acquisition, or sale of the Platform operator, your data may be transferred to the successor entity, subject to equivalent privacy protections.

6.2 All third parties with whom we share data are contractually required to process it only for the specified purpose and to maintain appropriate security standards.

7. Cookies & Tracking Technologies

7.1 The ijaya Platform uses cookies and similar technologies to operate the Platform, maintain your login session, remember your preferences, prevent fraud, and analyse Platform performance.

7.2 Strictly necessary cookies are required for the Platform to function. You cannot opt out of these without disabling your browser's ability to use the Platform.

7.3 Analytics cookies help us understand how Users interact with the Platform. These are used in aggregate, anonymised form.

7.4 Preference cookies remember your settings and choices to improve your experience on return visits.

7.5 You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

8. Data Retention

8.1 ijaya retains personal data for as long as your Account is active and for a minimum period of five (5) years after Account closure, in order to comply with our international gaming authority licence obligations, anti-money laundering regulations, and to resolve any disputes that may arise.

8.2 KYC documentation and transaction records are retained for a minimum of five (5) years from the date of the relevant transaction or Account closure, whichever is later.

8.3 Communication data is retained for two (2) years from the date of the communication unless it forms part of an ongoing dispute or legal matter.

8.4 Where data is no longer required for any lawful purpose, it is securely deleted or anonymised.

9. Your Rights

9.1 Subject to applicable law and our legitimate processing grounds, You have the following rights in respect of your personal data held by ijaya:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your data where we no longer have a lawful basis to retain it (subject to our regulatory retention obligations).
• Right to restrict processing — to request that we limit how we use your data in certain circumstances.
• Right to data portability — to receive a copy of certain data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, please contact us via live chat or at [email protected]. We will respond within thirty (30) days.

10. Data Security

10.1 ijaya employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage of account credentials, multi-factor authentication options for account access, and regular security assessments of the Platform infrastructure.

10.2 Despite these measures, no system is completely immune to breach. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ijaya will notify affected Users without undue delay and take appropriate remediation steps.

10.3 You are responsible for maintaining the confidentiality of your Account credentials. Do not share your password or OTP codes with anyone, including ijaya support staff (who will never ask for your password).

11. International Data Transfers

11.1 As ijaya operates under an international gaming authority licence, your personal data may be processed in jurisdictions outside Malaysia. Where such transfers occur, ijaya ensures that appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards, to protect your data during and after any cross-border transfer.

12. Children's Privacy

12.1 The ijaya Platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If We become aware that personal data has been collected from a person under 21, We will immediately close the associated Account, delete the data, and, where required, report the matter to relevant authorities.

12.2 If You believe a minor has accessed the Platform or provided their data to ijaya, please contact us immediately at [email protected].

13. Changes to This Policy

13.1 ijaya reserves the right to update this Privacy Policy at any time. The revised Policy will be published on this page with an updated "Last updated" date. Where changes are material, We will notify registered Users by email or via a Platform notification prior to the changes taking effect.

13.2 Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact & Complaints

14.1 For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the ijaya Data Privacy team via the 24/7 live chat available on the Platform, or by email at [email protected].

14.2 If You are not satisfied with our response to a privacy-related complaint, You may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.