Official Documents

IPaYung Privacy Policy – Protection
Your Personal Data in Malaysia

At iPaYung, your privacy is more than a legal obligation — it is our genuine commitment. This policy clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: January 2026  |  Applicable to users in Malaysia

Introduction

IPayung is an online entertainment platform that operates with full integrity for members across Malaysia. We understand that your personal information is a trust we hold in the highest regard, and we do not take this responsibility lightly. This Privacy Policy is crafted to give you a clear and transparent picture of how we handle your data — from the moment you register to every time you use our platform.

By accessing or using iPaYung's services, you agree to the terms set out in this Privacy Policy. If you do not agree, you are advised not to continue using the platform. We encourage you to read this document in full at least once so you are aware of your rights as a user.

PDPA Compliance: This policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010. We continually update our practices to meet the latest regulatory requirements.


1. Information We Collect

We only collect information that is strictly necessary to deliver the best service to you. The types of data we collect include:

Data Category Example Information Purpose of Collection
Identity Data Full name, date of birth, IC / passport number Identity verification (KYC) and legal compliance
Contact Data Email, phone number, address Account communications, notifications, and customer support
Financial Data Bank account details, deposit & withdrawal records Payment processing and fraud prevention
Technical Data IP address, device type, web browser, activity logs Platform security and user experience improvement
Usage Data Game history, game preferences, betting records Personalise your experience and deliver relevant promotional offers

We never collect sensitive information such as biometric data, religious beliefs, or medical records unless required by law.


2. How We Use Your Data

Every piece of information you provide is used for a specific and responsible purpose. We do not use your data beyond the scope stated below:

  • Verify member identity and eligibility through a secure KYC process.
  • Process deposits, withdrawals, and other financial transactions efficiently.
  • Send important notifications related to your account, promotions, and platform updates.
  • Detect and prevent fraudulent activity, money laundering, or security threats.
  • Improve service quality through aggregated and anonymised usage data analysis.
  • Comply with applicable legal and regulatory obligations.
  • Provide responsive and effective customer support.

Marketing: We may send you promotional communications via email or in-app notifications. You can unsubscribe at any time through your account settings.


3. Sharing Data With Third Parties

IPayung does not sell, rent, or trade your personal data to any third party for their marketing purposes. However, there are limited situations where we may need to share your data with trusted partners, including:

  • Integrated payment providers — to securely process your deposits and withdrawals.
  • Technical service providers — such as server hosting and cybersecurity systems we utilize.
  • Legal authorities — when required by court order or applicable regulations.
  • Fraud prevention agency — to safeguard platform integrity and protect all members.

All third parties we engage are required to meet data protection standards equal to or higher than our own. Strict confidentiality agreements are signed before any data sharing takes place.


4. Data Security

The security of your data is our highest priority. iPaYung implements multiple layers of technical and operational safeguards to keep your information secure at all times:

  • 256-bit SSL encryption for all data transmitted between your device and our servers.
  • Two-factor authentication (2FA) to protect access to your account.
  • 24/7 system monitoring by our internal security team.
  • Data stored on servers protected with strict access controls and storage-level encryption.
  • Regular security audits by independent third parties to identify and address any vulnerabilities.
  • Strong password policy with periodic change requirements.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach affecting you, we will notify you in a timely manner as required by law.


5. Data Retention Period

We retain your personal data for as long as your account is active or as long as it is needed for the purposes stated in this policy. In general:

  • Active account data is retained for the duration of your membership with iPaYung.
  • After account closure, core data is retained for five (5) years for legal compliance and financial audit purposes.
  • Anonymous technical logs and usage data are retained for twelve (12) months.
  • Financial transaction records are retained for the period required under Malaysian law.

Once the retention period expires, your data will be securely deleted or disposed of using methods that ensure it cannot be recovered.


6. Use of Cookies

The iPayung website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our site. The types of cookies we use:

  • Essential Cookies: Required for core website functions such as login and session security. These cookies cannot be disabled.
  • Performance Cookies: Collect anonymous information about how visitors use the site to help us improve it.
  • Functional Cookies: Remember your preferences such as language and display settings for your convenience.
  • Analytics Cookies: Help us understand usage patterns for platform improvement purposes.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of our platform.


7. Cross-Border Data Transfers

In certain circumstances, your data may be processed or stored outside Malaysia, particularly when we use international server services or technologies. Where such transfers occur, we ensure that an equivalent level of data protection is applied at the destination, and we comply with all applicable legal requirements under Malaysia's PDPA regarding cross-border data transfers.


8. Privacy Policy Updates

IPayung reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform enhancements. Any material changes will be communicated to you via a prominent notice on our website or through your registered email. The date of the latest update will always be displayed at the top of this document. We encourage you to review this page periodically.

Your Rights as an iPaYung User

Under Malaysia's PDPA, you have certain rights regarding your personal data. iPaYung fully respects and upholds these rights.

1

Right of Access

You may request a copy of the personal data we hold about you at any time through your account.

2

Right to Rectification

If any of your information is inaccurate or outdated, you have the right to request that we correct it.

3

Right to Erasure

You may request the deletion of your personal data, subject to legal obligations that prevent full erasure.

4

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

5

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service provider.

6

Right to Complain

If you believe your privacy rights have been violated, you have the right to file a complaint with the relevant authority.

How iPaYung Protects Your Data

We invest in the best technologies and processes to ensure your privacy is protected at every stage of your platform experience.

End-to-End Encryption

All data transmitted between your device and iPayung's servers is protected with 256-bit SSL encryption. No third party can intercept or read your information in transit.

Secure KYC Verification

Our KYC process uses an internationally certified identity verification platform. Your documents are stored in an encrypted environment and accessible only by authorised personnel.

Data Minimisation Principle

We only collect data that is strictly necessary to provide our services to you. No excessive information is gathered, and no data is retained beyond the required period.

Regular Security Audits

Our security systems are regularly audited by independent third-party auditors. Any identified vulnerabilities are addressed promptly to ensure your data remains protected at all times.

No Data Sales

IPayung has never and will never sell your personal data to any third party for marketing purposes. Your data belongs to you — we are simply its custodian.

Full PDPA Compliance

All our data handling practices comply with Malaysia's Personal Data Protection Act 2010. We have a designated Data Protection Officer (DPO) responsible for ensuring ongoing compliance.

Trusted Platform

Join iPayung with Full Confidence

Your privacy and security are always our top priority. Register now and enjoy the best gaming experience in Malaysia with complete peace of mind.

Bahasa Melayu