i1scr Privacy Policy

1. Introduction

This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") is issued by i1scr (hereinafter referred to as "i1scr", "the Platform", "we", "us", or "our"), the operator of the online sports betting and live casino services accessible at https://i1scr.cam (the "Website").

This Policy describes how i1scr collects, receives, stores, uses, processes, discloses, and protects personal data provided by users (hereinafter referred to as "you", "the Player", or "the User") when they access or use the i1scr Website, create and operate a player account, place wagers, communicate with our support team, or otherwise interact with our services.

By accessing the i1scr Website, registering an account, or submitting any personal data to us, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., a person who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, i1scr.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "Cookies" means small text files stored on a user's device by a web browser, used to retain information about user sessions and preferences.
• "KYC" means Know Your Customer — identity and age verification procedures carried out to confirm a Player's identity before account activation or withdrawal processing.
• "MYR" means Malaysian Ringgit, the base currency used for all financial transactions on the i1scr Platform.

3. Data Controller

i1scr operates as the Data Controller in respect of all personal data collected through the Website. As Data Controller, i1scr is responsible for determining the purposes for which and the manner in which personal data is processed, and for ensuring that such processing complies with applicable data protection obligations.

For all data protection enquiries, rights requests, or complaints, players may contact i1scr's designated privacy contact at: [email protected]. All correspondence will be acknowledged and responded to within a reasonable timeframe, and in any event within thirty (30) days of receipt.

4. Personal Data We Collect

i1scr collects personal data across several categories depending on how you interact with our platform. The following table sets out the categories of data we collect and the primary purpose for which each category is collected:

5. How We Collect Personal Data

i1scr collects personal data through the following channels and methods:

5.1 Direct Submission

Data you provide directly when completing the i1scr registration form, submitting KYC documentation, making a deposit or withdrawal request, completing a responsible gambling self-assessment, or contacting customer support via live chat or email.

5.2 Automated Collection

Technical data collected automatically when you access the Website, including IP addresses, device identifiers, browser characteristics, and session activity data. This data is collected via server logs, cookies, and similar technologies.

5.3 Payment Service Providers

i1scr receives transaction reference data from our integrated Malaysian payment providers — including DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, Public Bank, and Hong Leong Connect — to confirm deposit and withdrawal status. We do not retain full payment account credentials.

5.4 Third-Party KYC and Fraud Prevention Services

Where required by our compliance obligations, i1scr may utilise third-party identity verification services to cross-reference the identity documents you provide. These services may return verification results or fraud risk scores that inform our KYC decision-making.

6. Data Processing & Legal Basis

i1scr processes personal data only where a valid legal basis exists. The following table sets out the primary legal bases on which we rely for different categories of processing activity:

7. Data Sharing & Disclosure

i1scr does not sell, rent, or trade personal data to third parties for commercial purposes. We may share personal data with third parties only in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers acting as Data Processors on our behalf — including payment gateway operators (processing MYR transactions via DuitNow, FPX, and Malaysian e-wallets), KYC verification service providers, cloud hosting infrastructure providers, and customer support technology vendors. All such providers are contractually required to process data solely in accordance with our instructions and to maintain appropriate data security standards.

7.2 Legal and Regulatory Obligations

i1scr may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful governmental request. We will, to the extent permitted by law, notify affected players of any such disclosure unless prohibited from doing so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of i1scr's business, personal data held by i1scr may be transferred to the acquiring entity. Players will be notified of any such transfer and of any material change to the applicable privacy terms in advance, where reasonably practicable.

7.4 Fraud Prevention and Platform Integrity

Where i1scr has reasonable grounds to suspect fraudulent activity, money laundering, underage gambling, or other integrity violations, we may share relevant data with fraud prevention networks, responsible gambling bodies, or other gaming operators for the purpose of protecting the platform and other players.

8. Data Retention

i1scr retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, and accounting obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account's active status, plus a minimum of five (5) years following account closure, to satisfy anti-money laundering recordkeeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years following the date of the transaction, in accordance with applicable financial recordkeeping requirements.
• Responsible gambling records (self-exclusion, limit settings): Retained for the duration of the exclusion or limit period, and for a minimum of five (5) years thereafter to support re-registration screening.
• Customer support communications: Retained for a minimum of two (2) years from the date of last communication for quality assurance and dispute resolution purposes.
• Marketing preference records: Retained until withdrawn or account closure, whichever occurs first.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data destruction procedures.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by the i1scr Website when you visit or interact with our platform. Cookies enable the Website to recognise your device between sessions, maintain your login state, remember your preferences, and collect usage statistics.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for core platform functions — including maintaining your authenticated session, processing transactions, and operating security features. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data on how players use the i1scr Website — including page views, session durations, and navigation paths — to help us improve the platform experience for Malaysian players.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred payment methods, and display configurations.
• Marketing Cookies: Used to track activity for the purpose of delivering relevant promotional content to consenting players. These cookies are only placed where the Player has given explicit consent.

9.3 Managing Cookie Preferences

You may manage cookie preferences through your browser settings, which allow you to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the i1scr platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in your browser's help documentation.

10. Data Security

i1scr implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in transit: All data exchanged between your device and i1scr's servers is encrypted using industry-standard 256-bit SSL/TLS protocols;
• Encryption at rest: Sensitive personal data stored in our databases is encrypted at rest using current cryptographic standards;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations;
• Security monitoring: Our infrastructure is subject to continuous security monitoring, intrusion detection, and regular penetration testing;
• Incident response: i1scr maintains a documented data breach response procedure. In the event of a confirmed personal data breach presenting a risk to affected players, we will notify those players without undue delay.

While i1scr takes all reasonable measures to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their i1scr accounts and to enable two-factor authentication where available.

11. Your Rights as a Data Subject

As a registered player, you hold the following rights with respect to your personal data processed by i1scr. These rights may be exercised by contacting our support team at [email protected].

i1scr will acknowledge all data rights requests within five (5) business days and will endeavour to resolve them within thirty (30) days. Where a request cannot be fulfilled (e.g., due to conflicting legal obligations), we will explain the reason in writing.

12. Protection of Minors

The i1scr platform is strictly intended for persons aged 21 years and above. i1scr does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of our mandatory KYC process, and any account found to have been registered by an underage individual will be immediately suspended, with all associated data handled in accordance with our minor protection procedures.

If a parent or guardian believes that their minor child has provided personal data to i1scr, they should contact our support team immediately at [email protected]. We will investigate promptly and take all necessary remedial action.

13. International Data Transfers

In the course of providing our services, personal data may be transferred to and processed by i1scr's infrastructure providers, KYC service partners, or other Data Processors located outside of Malaysia. Where such transfers occur, i1scr ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that afforded under applicable data protection obligations. Such safeguards may include the use of standard contractual clauses, binding corporate rules, or transfer to jurisdictions recognised as providing an adequate level of data protection.

Players who wish to obtain further information about the specific safeguards applied to international data transfers from their account may contact i1scr's privacy contact at [email protected].

14. Changes to This Privacy Policy

i1scr reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where material changes are made, i1scr will endeavour to notify registered players via email or a prominent notice on the Website prior to the change taking effect.

The effective date of the current version of this Policy is stated at the top of this page. Players are encouraged to review this Policy periodically to remain informed of how their personal data is being handled. Continued use of the i1scr platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by i1scr, please contact us through the following channels:

• Email: [email protected] — for data subject rights requests, privacy complaints, or enquiries about our data practices. We respond within 2 business hours for general queries and within 30 days for formal rights requests.
• Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the Website. Suitable for general privacy enquiries and initial rights request submissions.

For enquiries specifically relating to responsible gambling or self-exclusion — including data associated with self-exclusion records — please visit our Responsible Gambling page or raise the matter directly with our support team.