ipayung44 Privacy Policy

This Privacy Policy ("Policy") is issued by ipayung44 ("ipayung44", "we", "us", "our"), the operator of the online gaming and sports-betting platform accessible at https://ipayung44.cam (the "Platform"). This Policy explains how ipayung44 collects, uses, discloses, stores, and protects the personal data of individuals ("Users", "Players", "you", "your") who register for an account, access the Platform, or otherwise interact with ipayung44's services.

By creating an account or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must refrain from using the Platform.

For the purposes of this Policy, the following terms have the meanings set out below:

ipayung44 collects personal data through several channels: directly from you during registration and account use, automatically through Platform interaction, and from third-party verification services. The categories of data collected are described in the table below.

ipayung44 processes your personal data only for the following specific and legitimate purposes:

• Account Administration: To register your account, verify eligibility, maintain accurate account records, and manage login credentials.
• KYC and Age Verification: To confirm your identity, verify that you are aged 21 or above, and satisfy regulatory due-diligence requirements.
• Payment Processing: To facilitate MYR deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and other supported methods. Payment-method details are shared with the relevant payment processor strictly for transaction completion.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited activities.
• Regulatory Compliance: To comply with anti-money laundering, counter-terrorism financing, and other applicable legal obligations, including responding to lawful requests from regulatory or law-enforcement authorities.
• Customer Support: To respond to account queries, resolve complaints, and provide technical assistance.
• Responsible Gambling: To administer deposit limits, loss limits, self-exclusion requests, and session-time tools selected by you.
• Platform Improvement: To analyse usage patterns in aggregate or pseudonymised form in order to improve Platform functionality, navigation, and content.
• Legal Claims: To establish, exercise, or defend legal claims arising from or in connection with your use of the Platform.

ipayung44 does not use personal data for direct marketing or advertising profiling without a separate, explicit consent mechanism.

Each category of processing activity carried out by ipayung44 rests on one or more of the following legal grounds:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted — including account registration, payment facilitation, and support.
• Legal obligation: Processing required for compliance with applicable law, including KYC, anti-money-laundering, and tax-reporting obligations.
• Legitimate interests: Processing necessary for ipayung44's legitimate interests in maintaining platform security, preventing fraud, improving services, and defending legal claims, provided those interests are not overridden by your fundamental rights.
• Consent: Where ipayung44 relies on your consent as the legal basis for a specific processing activity, you may withdraw that consent at any time by contacting support. Withdrawal does not affect the lawfulness of prior processing.

ipayung44 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment service providers: Transaction data is shared with the relevant payment processor (for example, the DuitNow network, FPX banking partners, Touch 'n Go eWallet, Boost, GrabPay, or USDT exchange infrastructure) to execute your deposit or withdrawal request.
• KYC and identity-verification partners: Identity documents and biometric selfies may be transmitted to certified third-party KYC service providers under strict data-processing agreements for age and identity verification.
• IT and hosting service providers: Infrastructure partners that host the Platform and process data on ipayung44's behalf, subject to binding confidentiality and security obligations.
• Legal and regulatory authorities: Where ipayung44 is required by law, court order, or regulatory direction to disclose personal data, it will do so and will, where legally permissible, notify you.
• Business transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

Some of ipayung44's service providers — including KYC verification and cloud infrastructure partners — may process data in jurisdictions outside Malaysia. Where personal data is transferred internationally, ipayung44 implements appropriate safeguards to ensure an equivalent level of protection, including contractual data-protection clauses that impose obligations consistent with applicable personal-data protection standards.

Transfers are conducted only with entities that have demonstrated adequate data-protection practices. You may request details of the specific safeguards applicable to a particular transfer by contacting our support team.

ipayung44 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ipayung44's internal data-disposal procedures.

ipayung44 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security programme includes, but is not limited to:

• Encryption at rest: All stored personal data is encrypted using AES-256 standards.
• Encryption in transit: All communications between your device and the Platform are secured via TLS 1.2 or higher.
• Access controls: ipayung44 personnel are granted access to personal data on a strict need-to-know basis. All access is logged and subject to regular audit.
• Two-factor authentication: Available and recommended for all player accounts to prevent unauthorised login.
• Penetration testing and vulnerability management: Regular security assessments are conducted to identify and remediate potential weaknesses.
• Incident response: ipayung44 maintains a documented data-breach response procedure, including notification obligations where applicable.

The ipayung44 Platform uses cookies and similar technologies (including web beacons and local storage) to support core platform functionality, maintain your session, and collect aggregated analytics data. The types of cookies we deploy are as follows:

• Strictly necessary cookies: Essential for the Platform to function. They manage your authenticated session and security tokens. These cannot be disabled without preventing core functionality.
• Functional cookies: Remember your preferences — such as language settings and responsible-gambling tool configurations — so they persist between sessions.
• Analytics cookies: Collect pseudonymised data about how the Platform is used (pages visited, session duration, navigation paths) to help us improve the Platform experience. This data is aggregated and cannot be used to identify you individually.
• Fraud-detection cookies: Assist ipayung44 in identifying and preventing potentially fraudulent activity by comparing device fingerprints and session patterns.

ipayung44 does not deploy third-party advertising, retargeting, or social-media tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

Subject to applicable law and any overriding legal obligations, you hold the following rights with respect to your personal data held by ipayung44. Requests may be submitted to [email protected].

ipayung44 will respond to all valid data-rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days with prior notice. We may require verification of your identity before processing a request.

The Platform is strictly intended for adults aged 21 and above. ipayung44 does not knowingly collect, process, or store personal data belonging to persons under the age of 21. Age verification is conducted as part of the KYC process for all accounts prior to the processing of any withdrawal request.

If ipayung44 becomes aware that personal data of an individual under 21 years of age has been collected without appropriate parental or guardian consent, that data will be promptly deleted and the associated account will be permanently closed. If you are a parent or guardian and suspect that a minor has registered with ipayung44, please contact us immediately at [email protected].

ipayung44 may update this Privacy Policy from time to time to reflect changes in law, technology, our services, or our data-handling practices. The revised Policy will be posted on the Platform with an updated "Last Reviewed" date. Where changes are material, we will provide additional notice via email to your registered address or via a prominent in-Platform notification.

Your continued use of the Platform following the posting of any amendment constitutes acceptance of the revised Policy. If you do not agree with a material amendment, you should cease using the Platform and request account closure.

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how ipayung44 handles your personal data, please contact our support team using the details below. All privacy-related requests must be submitted in writing by email.