Isama's Privacy Commitment to You
Six core principles that shape how we manage your data every day.
Multi-Layer Protection
All information you provide is protected with 256-bit SSL encryption and stored on servers that comply with international security standards.
No Disclosure Without Consent
Your personal data will not be shared, sold, or transferred to any third party without your consent, except as required by law.
Control Is in Your Hands
You may request access to, correction of, or deletion of your personal data at any time through the isama customer support team.
Responsible Data Storage
Data is retained only for as long as required for service purposes and legal obligations. After that period, data is securely disposed of.
Immediate Breach Notification
Should any security incident occur that affects your data, isama will notify you and the relevant authorities within the prescribed timeframe.
Malaysia Regulatory Compliance
Isama fully complies with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations.
1Introduction and Scope of This Policy
Welcome to the isama Privacy Policy. This document is written to provide you — members, prospective members, and site visitors — with full clarity on how the isama platform handles every piece of personal data you entrust to us.
Isama is an online gaming platform designed specifically for the Malaysian market. We fully understand that your trust is our most valuable asset, and that trust can only be maintained when we are honest and transparent about our privacy practices.
This Privacy Policy applies to all information collected through the isama website, the isama mobile app, and any of our official communication channels. It also covers information you provide directly during registration, account verification (KYC), deposits, withdrawals, and when contacting our customer support.
2Types of Information We Collect
Isama collects only the information genuinely required to provide a safe, seamless service that meets regulatory requirements. We do not request information that is excessive or irrelevant to the purpose of our service.
Personal Identification Information
Full name, date of birth, MyKad or passport number, nationality, and current address.
Contact Information
Email address, mobile phone number, and the communication platforms you registered with.
Financial Information
Bank account number, bank name, account holder name, and digital wallet details for deposit and withdrawal transactions.
Platform Usage Data
Wagering records, game history, session duration, game types played, and transaction records.
Device Technical Data
IP address, web browser type, operating system, device model, and access log data.
Support Communications
Live chat records, emails, and any communications you have sent to our customer support team.
3Purpose of Data Collection and Use
Every piece of data we collect has a clear and legitimate purpose. isama does not use your data for purposes unrelated to the services you have joined.
- Account management: Securely creating, verifying, and managing your member account, including KYC and identity verification processes.
- Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately and promptly.
- Regulatory compliance: Meeting legal obligations including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
- Platform security: Detecting and preventing fraud, bot usage, and other suspicious activities that could compromise the security of other members.
- Service improvement: Analyzing usage patterns to improve the user experience, platform performance, and game offerings.
- Service communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
- Customer support: Resolving inquiries, complaints, and disputes efficiently using relevant communication records.
- Responsible gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.
4Third-Party Data Sharing and Disclosure
Isama takes a highly cautious approach to data sharing. We do not sell, rent, or trade your personal information to any party for commercial purposes.
However, there are limited situations where isama needs to share data with certain parties to ensure the service operates properly and complies with the law:
- Approved payment providers: Major Malaysian banks, FPX, Touch 'n Go eWallet, and GrabPay require minimum transaction details to process your deposits and withdrawals.
- Technical support service providers: Companies that help us maintain the platform, servers, and security systems — subject to strict confidentiality agreements.
- Legal authorities: Law enforcement agencies or regulatory bodies when required by court order or applicable Malaysian law.
- Gaming software providers: Third-party gaming companies that provide game content on our platform may receive anonymised statistical data.
All third parties working with isama are required to sign data protection agreements that prohibit them from using your data for any purpose beyond what is specified, and they are subject to periodic security audits by isama.
5Data Security and Protection Measures
Isama continually invests in the latest security infrastructure to ensure your data is always protected from unauthorised access, theft, or damage.
- 256-bit SSL Encryption: All data transmitted between your device and isama servers is fully encrypted using the latest TLS protocol.
- Encrypted passwords: Account passwords are not stored in plain text — we use a robust hashing algorithm with a unique salt for each account.
- Two-factor authentication (2FA): An additional security layer recommended for all accounts to protect against unauthorized access, even if your password is compromised.
- 24/7 Monitoring: Our systems are monitored around the clock by a cybersecurity team to detect any suspicious or abnormal activity in real time.
- Internal access controls: isama staff are only granted access to the data they need to perform their duties — the principle of least privilege is fully applied.
- Secure backups: Your data is regularly backed up to a separate location to ensure fast recovery in the event of an unexpected incident.
6Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by isama. We fully respect and facilitate the exercise of these rights:
Right of Access
You have the right to request and receive a copy of all personal data that isama holds about you. We will provide this information within 21 business days from the date the request is received.
Right to Rectification
If any information we hold about you is inaccurate or out of date, you have the right to request an immediate correction. Basic information updates can be made directly through your account profile settings.
Right to Erasure
You may request the deletion of your personal data, subject to legal obligations that require us to retain certain records (for example, financial transaction records for periods prescribed by law).
Right to Object to Processing
You may object to the processing of your data for direct marketing purposes at any time. Such requests will be actioned within 14 business days.
Right to Data Portability
You have the right to request your personal data in a machine-readable format for transfer to another service provider of your choice.
Right to Restrict Processing
In certain circumstances, you may request that isama restrict how we process your data while a dispute or correction request is being resolved.
7Cookie and Tracking Technology Policy
Isama uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and understand how visitors use our website. The following are the types of cookies we use:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Essential Cookies | Login sessions, account security, transaction verification | Session / 24 hours | No — required for core functionality |
| Preference Cookies | Saving your language preference, theme, and display settings | 1 year | Yes |
| Analytics Cookies | Understanding usage patterns to improve the platform | 90 days | Yes |
| Security Cookies | Detecting suspicious login attempts and automated bots | 7 days | No — critical for security |
You can manage your cookie settings through your web browser. Please note that disabling essential cookies may affect account functionality and session security on the isama platform.
8Children's Privacy and Protection of Young Users
Isama is a gaming platform strictly restricted to individuals aged 18 years and above. We do not intentionally collect, store, or process any personal data from individuals below the stipulated minimum age.
- Registration by minors is strictly prohibited and constitutes a serious violation of isama's Terms and Conditions.
- If we find that an account was registered by a minor, it will be terminated immediately and all associated data will be deleted.
- All registration processes require date of birth verification, and the KYC process requires a valid identity document to confirm age.
- Parents or guardians who suspect a child or teenager under their care has accessed the isama platform should contact our customer support immediately.
9Privacy Policy Amendments and Updates
Isama reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or relevant technological developments.
When we make significant amendments to this policy, we will:
- Updating the "Last Updated" date displayed at the top of this page.
- Displaying a clear notice on the isama platform homepage at least 7 days before any changes take effect.
- Notifying all registered members of the amendment via email or in-account notification.
- Maintaining an archive of previous versions of the Privacy Policy, available to any member upon request.
Continued use of the isama platform after the effective date of any policy amendment constitutes your acceptance of the updated terms. If you disagree with any amendment, you have the right to close your account and discontinue use of our platform.
10Contact Us About Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or how isama handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.
- Privacy Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the isama platform.
- Response Time: Privacy-related inquiries will be answered within 3 business days; data rights requests within 21 business days.
- Formal Complaint: If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.
Isama values every piece of feedback and privacy-related enquiry. We are committed to resolving every issue raised with full professionalism and transparency. Your trust is the foundation of our service, and we will continue to work hard to uphold it every day.