1. Introduction
isac88 ("we", "us", or "our") operates the online casino and sports betting platform accessible at isac88.cam. This Privacy Policy applies to all personal information collected and processed in connection with the registration, use, and management of an isac88 account, including all interactions with our website, support services, payment facilities, promotional programmes, and responsible gambling tools.
By registering for or continuing to use isac88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. If you do not agree, please do not create or continue using an isac88 account.
2. Definitions
In this Privacy Policy, "personal data" means any information that identifies or could reasonably identify a living individual. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion. "Account holder" means a registered isac88 player. "Third party" means an entity other than isac88 and the account holder. "Consent" means a freely given, specific, informed, and unambiguous indication of agreement.
3. Data We Collect
isac88 collects only the personal data that is necessary for the purposes described in this policy. Categories of personal data we may collect include:
3.1 Registration and Identity Data
Full legal name, date of birth, nationality, residential address (including Malaysian city and postcode), email address, telephone number, username, and password. This data is required to create and manage an isac88 account, verify your identity, and confirm age eligibility.
3.2 Identity Verification Documents
A copy of a government-issued identity document (such as a Malaysian MyKad or passport), proof of address, and — where required — payment ownership documentation or source-of-funds evidence. These documents are requested where necessary to satisfy identity and payment verification obligations.
3.3 Financial and Transaction Data
Details of deposits and withdrawals including payment method, transaction reference, amount in MYR, date, processing time, and associated e-wallet or bank account identifiers. Accepted payment providers include Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20.
3.4 Gameplay and Betting Records
Details of casino games played, sports wagers placed (including Liga Super Malaysia, EPL, UFC, and live football), bonus redemptions, win and loss records, session durations, and responsible gambling tool usage. This data supports account management, dispute resolution, and compliance obligations.
3.5 Technical and Device Data
IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, session timestamps, and approximate geographic location derived from IP address. This data is collected automatically when you access the isac88 platform.
3.6 Communications Data
Records of support chat transcripts, email correspondence, WhatsApp messages, feedback submissions, and other communications exchanged with isac88. These records are retained for quality assurance, dispute resolution, and compliance purposes.
4. How We Process Your Data
isac88 processes personal data for the following clearly defined purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Registration data, identity documents, contact details |
| Identity and age verification | Identity documents, date of birth, address, payment data |
| Payment processing | Financial data, payment method identifiers, transaction records |
| Fraud prevention and security | Device data, IP address, transaction records, gameplay records |
| Responsible gambling compliance | Gameplay records, session data, limit settings, self-exclusion records |
| Customer support | Communications data, account data, transaction records |
| Legal and regulatory compliance | All categories as required by applicable law or authority |
| Platform improvement and analytics | Technical data, anonymised usage data |
5. Legal Basis for Processing
isac88 processes personal data on one or more of the following legal bases: (a) performance of a contract — processing necessary to provide the platform services you have requested as an account holder; (b) legal obligation — processing required to comply with applicable legal, regulatory, or court requirements; (c) legitimate interests — processing reasonably necessary for fraud prevention, security, responsible gambling compliance, and platform integrity, where those interests are not overridden by the rights and interests of account holders; and (d) consent — where we have obtained your specific agreement for optional processing activities such as marketing communications.
Consent may be withdrawn at any time for activities where it is the stated basis, by contacting isac88 support. Withdrawal of consent does not affect any processing carried out before withdrawal or processing carried out on another legal basis.
6. Data Sharing and Disclosure
isac88 does not sell, rent, or trade your personal information. We may share personal data only in the following circumstances:
- Payment service providers: Processors such as banking partners, FPX network operators, and Malaysian e-wallet providers receive transaction data necessary to process your deposits and withdrawals.
- Identity and fraud verification services: Third-party KYC, identity verification, and anti-fraud service providers receive limited personal data to carry out verification checks where required.
- Legal and regulatory authorities: isac88 may disclose personal data to relevant authorities where required to do so by law, court order, or enforceable regulatory directive.
- Service and technology providers: Hosting, security, analytics, and customer support technology providers who process data strictly on behalf of isac88 under data processing agreements.
- Business transfers: In the event of a corporate restructuring, merger, or acquisition, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.
7. Cookies and Tracking Technologies
isac88 uses cookies and similar technologies to maintain your login session, remember preferences, detect fraud, measure platform performance, and support responsible gambling tools. Cookies may be categorised as:
- Strictly necessary cookies: Required for core platform functions such as authentication, security, and session management. These cannot be disabled without affecting platform usability.
- Functional cookies: Store preferences such as language settings, display options, and responsible gambling tool configurations.
- Analytics cookies: Collect aggregated, anonymised information about how users navigate the platform to help us improve features and performance.
You may manage or disable non-essential cookies through your browser settings. Disabling cookies may affect certain platform functions. Continued use of isac88 following acknowledgement of this policy constitutes acceptance of our use of strictly necessary cookies.
8. Data Retention
isac88 retains personal data for the period necessary to fulfil the original collection purpose or as required by applicable legal, regulatory, and contractual obligations. Key retention considerations include:
- Account data is retained for the duration of the active account relationship and for a defined period thereafter to enable dispute resolution, respond to regulatory enquiries, and satisfy record-keeping requirements.
- Transaction and payment records are retained for the period required by applicable financial record-keeping and anti-money laundering rules.
- Responsible gambling records, including self-exclusion and limit history, are retained for the applicable exclusion or restriction period and for a reasonable period thereafter to prevent circumvention.
- Communications and support records are retained for quality assurance and dispute resolution purposes.
When personal data is no longer required for any retained purpose, isac88 will securely delete or irreversibly anonymise it in accordance with our data disposal procedures.
9. Security Measures
isac88 implements and maintains technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the isac88 platform.
- Restricted internal access to personal data on a need-to-know basis, with access logging and controls.
- Regular security reviews, vulnerability assessments, and infrastructure monitoring to detect and respond to threats.
- Secure storage for identity documents and payment records with access limited to authorised verification and compliance personnel.
While isac88 maintains rigorous security practices, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials. If you suspect unauthorised access to your isac88 account, contact our support team immediately.
10. Your Rights
Subject to applicable law, you have the following rights in respect of your personal data held by isac88:
- Right of access: You may request a copy of the personal data isac88 holds about you, together with information about how it is processed.
- Right to rectification: You may request correction of inaccurate or incomplete personal data. Certain corrections may require submission of supporting documentation.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected and no overriding legal obligation requires its retention.
- Right to restriction: You may request that isac88 restrict processing of your personal data in certain circumstances, such as while accuracy is being verified.
- Right to object: You may object to processing carried out on the basis of legitimate interests where you have grounds related to your particular situation.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing.
To exercise any of these rights, contact isac88 support through the channels listed in Section 13. We will aim to respond to verified requests within a reasonable period. We may need to verify your identity before acting on a data rights request.
11. Minors and the 21+ Requirement
isac88 is strictly an adult platform. Registration and participation are permitted only for individuals aged 21 years and above. isac88 does not knowingly collect personal data from anyone below the age of 21. If we identify that an account has been created by a person below the minimum age, we will promptly close the account, retain only the data necessary for legal compliance purposes, and handle any remaining funds in accordance with applicable requirements.
If you become aware that a person under the age of 21 has created an isac88 account, please notify us immediately through support channels.
12. Policy Updates and Notifications
isac88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, regulatory guidance, platform features, or responsible gambling requirements. The effective date at the top of this document will be updated each time a revision is published.
For material changes that significantly affect how your personal data is processed, isac88 will notify registered account holders through the primary contact email address associated with the account or through a notice displayed upon login. Continued use of isac88 after the notified effective date constitutes acceptance of the revised policy.
13. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the personal data isac88 holds about you, please contact our support team:
24/7 Live Support: Available through the Live Chat and WhatsApp channels displayed on the isac88 platform.
Email enquiries: [email protected]
Data rights requests: Contact support with your registered account details, the right you wish to exercise, and a description of your request. We may verify your identity before proceeding.
Further information: Visit our FAQ page for answers to common privacy and account questions.