Privacy Policy IJP88 — Malaysia User Data Protection

This Privacy Policy ("Policy") describes how IJP88 ("we", "Platform") collects, uses, discloses, and protects the personal information you provide when using our platform — whether through our official website at ijp88.win or the ijp88 mobile app.

We understand that personal information is sensitive. For Malaysian users in particular, trust is the foundation of the relationship between an online platform and its users. That is why we have written this Policy in clear, straightforward language — so you know exactly what happens with your data, rather than simply accepting terms without understanding them.

This Policy applies to all registered IJP88 users, website visitors, and anyone who interacts with our platform in any capacity. By using the IJP88 platform, you agree to the collection and use of information as described in this Policy.

We collect information from you through various means — directly when you register or use the platform, and automatically through industry-standard tracking technology. The following are the categories of information we collect:

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any purpose other than those stated below:

• Account management: Creating, maintaining, and securing your account at IJP88.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Identity verification (KYC): Fulfilling legal obligations and preventing fraud and money laundering.
• Personalize your experience: Personalising promotions, game recommendations, and the interface based on your preferences.
• Customer support: Addressing inquiries, resolving complaints, and improving service quality.
• Platform security: Detecting and preventing fraudulent activity, hacking, and system abuse.
• Platform communications: Sending important notifications relating to your account, security, and policy updates.
• Legal compliance: Complying with the requirements of regulatory bodies, court orders, or requests from legitimate authorities.
• Product improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the platform.

We do not use your data to make automated decisions that materially affect your rights without human review. If our algorithm flags an activity as suspicious, our team will manually review it before any action is taken.

IJP88 does not sell your personal information. However, in the course of operating the platform, we may share your data with a limited number of third parties in the following circumstances:

• Payment service providers: To process deposits and withdrawals via FPX, local banks, and approved e-wallets. They only receive data required for transaction purposes.
• Game software providers: Game studios and Live Casino providers that supply content on our platform may receive minimal technical data to ensure games run smoothly.
• Identity verification service: Third parties used for KYC processing receive your identification documents in a secure, encrypted environment.
• Legal authority: We will disclose information if required by a court order, directive from a regulatory body, or a legitimate national security investigation.
• Business transfer: In the event of a merger or acquisition, users will be notified in advance and given the option to close their accounts.

The security of your data is IJP88's top priority. We continuously invest in the latest security infrastructure to ensure your information does not fall into the wrong hands. Key security measures we implement:

• Data in transit encryption: All communications between your device and ijp88 servers are protected by TLS 1.3 protocol with 256-bit SSL encryption.
• Data at rest encryption: Sensitive information such as bank account numbers and KYC documents is stored in encrypted form using AES-256.
• Role-based access control: Only staff with a legitimate business need may access user data, and every access is logged automatically.
• Two-factor authentication (2FA): User accounts are protected with two-factor authentication via SMS or an authenticator app.
• Regular security audits: Our platform is regularly audited by independent cybersecurity firms to identify and close any vulnerabilities.
• Incident response plan: In the event of a data breach, we are committed to notifying affected users within 72 hours of confirming the incident.

IJP88 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your preferred settings such as language, time zone, and interface layout.
• Analytics Cookies: Helping us understand how users interact with the platform in aggregate — no individually identifiable information is collected through these cookies.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies may cause some platform features to not function properly. We do not use third-party cookies for external advertising purposes.

As an ijp88 user, you have the following rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

We retain your personal data only for as long as necessary for the purposes stated in this Policy or as required by applicable law. Retention periods vary by data type:

• Active account data: Retained for the duration your account remains active at IJP88.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and AML legal requirements.
• KYC documents: Retained for 5 years after account closure, in accordance with compliance requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics data (non-personal): Can be retained indefinitely as it has been fully anonymised.

Once the specified retention period has ended, your data will be securely deleted or permanently anonymized so that you can no longer be identified from it. Our deletion process complies with NIST standards for secure data disposal.

The ijp88 platform is strictly for users aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

If we discover that information from a minor has been collected without knowledge or without proper age verification, we will immediately take the following steps:

• Closing the relevant account without prior notice.
• Deleting all collected personal data within 48 hours.
• Returning any remaining balance to the original payment method.
• Reporting to the relevant authorities if required.

IJP88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to all registered users via email at least 14 days before the changes take effect.
• Displaying a clear notice on the platform's home page for 7 days.

Continued use of the IJP88 platform after the date the changes take effect will be considered acceptance of the amended Policy. If you do not agree with the changes, you have the right to close your account before that date without any penalty.

Previous versions of this Privacy Policy may be requested through our customer support for reference purposes.