Last updated: 12 June 2026 | Applies to all isama88 platform users
This Privacy Policy ("Policy") describes how isama88 ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "the User") who access and use the isama88 website, mobile applications, and related services (collectively, "the Platform").
isama88 acts as the data controller in respect of the personal data it processes directly. Where third-party service providers process personal data on behalf of isama88, those providers act as data processors under appropriate contractual obligations. isama88 operates the platform for users across Malaysia and internationally, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other locations.
This Policy should be read alongside the isama88 Terms & Conditions, which govern your use of the Platform and are incorporated by reference.
isama88 collects the following categories of personal data in the course of providing its services:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad / passport number | Account verification, KYC compliance, age verification |
| Contact Data | Email address, Malaysian mobile number, residential address | Account communications, OTP delivery, support |
| Financial Data | Bank account details, e-wallet identifiers (Touch n Go, Boost, GrabPay), transaction history | Processing deposits and withdrawals, fraud detection, AML compliance |
| Technical Data | IP address, device type, browser, operating system, session tokens | Security monitoring, fraud prevention, platform optimisation |
| Usage Data | Games played, bet history, login timestamps, pages visited, bonus activity | Responsible gaming monitoring, personalisation, platform improvement |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer support, dispute resolution, quality assurance |
| Marketing Preferences | Communication channel preferences, opt-in/opt-out records | Sending promotional communications where consented |
isama88 does not intentionally collect special category personal data (such as data relating to health, religion, or political views) except where strictly required for responsible gaming or legal compliance purposes and only with appropriate safeguards in place.
isama88 collects personal data through the following means:
isama88 processes your personal data on the following legal bases, depending on the nature of the processing activity:
isama88 uses the personal data we collect for the following purposes:
isama88 does not sell your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipients:
We share financial data with payment processors — including FPX, DuitNow, Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT processors — as strictly necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
We share identity data with KYC (know-your-customer) service providers and fraud detection platforms to verify your identity and to detect, prevent, and investigate fraudulent activity.
We share technical and usage data with cloud infrastructure, hosting, and analytics providers who process data on our behalf under strict data processing agreements.
To deliver games on the isama88 platform, limited user and session data is shared with our licensed game software providers (e.g., Pragmatic Play, Evolution, Hacksaw Gaming) as required for game delivery and RNG certification compliance.
We may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other public bodies where required by law, where we have a good faith belief that disclosure is necessary to protect the rights, safety, or property of isama88 or others, or where required under the conditions of our gaming licence.
isama88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable minimum retention periods imposed by law or our gaming licence. As a general guide:
When personal data is no longer required, isama88 will securely delete or anonymise it in accordance with our data retention and destruction procedures.
isama88 implements technical and organisational security measures appropriate to the risk level of the personal data we process. These measures include:
isama88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognise you between sessions, maintain your login state, and understand how the platform is being used.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the isama88 platform.
Subject to applicable law, you have the following rights in respect of your personal data held by isama88:
To exercise any of these rights, submit a written request to the isama88 support team at the contact details in Section 14. We will respond within thirty (30) days of receiving a valid request, subject to identity verification requirements. Where a request is complex or numerous, we may extend this period by a further sixty (60) days with notice.
The isama88 platform is strictly intended for users aged 21 years and above. isama88 does not knowingly collect personal data from individuals under the age of 21. We employ age verification measures during account registration and may request proof of age at any point.
If isama88 discovers that personal data has been collected from a user under the age of 21, the associated account will be suspended immediately, any balance will be handled in accordance with the Terms & Conditions, and the personal data will be deleted as promptly as practicable.
If you are a parent or guardian and believe that a minor has submitted personal data to isama88 without your knowledge, please contact us immediately using the details in Section 14.
Due to the global nature of our platform infrastructure and third-party service providers, your personal data may be transferred to, and processed in, countries outside of Malaysia. Where such transfers occur, isama88 takes steps to ensure that an adequate level of protection is afforded to your personal data, including through the use of standard contractual clauses or by transferring only to recipients in jurisdictions recognised as providing adequate data protection.
By using the isama88 platform, you acknowledge that your personal data may be processed in countries outside Malaysia, including countries whose data protection laws may differ from those in Malaysia. Where required, isama88 will obtain appropriate safeguards or your explicit consent before making such transfers.
isama88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated by updating the "Last Updated" date at the top of this page and, where appropriate, by email notification to registered users.
Your continued use of the isama88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the amended Policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.
For any queries, requests, or complaints relating to this Privacy Policy or the processing of your personal data by isama88, please contact our support team:
Six pillars of the isama88 privacy and data security commitment
All data exchanged between your device and isama88 is encrypted using industry-standard TLS/SSL — the same level of protection used by Malaysian banking platforms like Maybank2u and CIMB Clicks.
isama88 does not sell, rent, or trade your personal data to third-party marketers or data brokers, ever. Your data is used exclusively to operate and improve the platform and to meet legal obligations.
Role-based access controls limit which staff can access which data. Sensitive personal and financial data is accessed only by authorised personnel with a documented need.
isama88 commissions regular independent security audits and penetration tests to identify and address vulnerabilities before they can be exploited.
Access, rectification, erasure, portability — isama88 honours your data rights. Submit a request to our support team and we respond within 30 days with identity verification completed.
We keep your data only as long as necessary. Defined retention periods — aligned to our gaming licence AML requirements — ensure data is not held indefinitely without purpose.
Your data is protected. Your privacy is respected. Now experience Malaysia's premier online casino platform — download the isama88 app or explore our latest bonuses.