Privacy Policy ibc22 — Our Commitment to Protecting Malaysian Players' Data

Ibc22 collects your personal information through various channels when you register, use the platform, and interact with our services. Below are the categories of data we collect and their purposes:

Ibc22 uses the personal data collected solely for the following legitimate and stated purposes. We do not use your data for any other purpose without notifying you in advance and obtaining your consent where required:

• Providing ibc22 services: Managing your account, processing Sports Betting and Live Casino wagers, handling deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, and others, as well as administering bonus and promotional programmes.
• Identity verification and KYC: Verifying your identity during registration and before processing withdrawals that exceed certain limits, in compliance with applicable anti-money laundering legal requirements.
• Security and fraud prevention: Detecting and preventing unauthorised access to your ibc22 account, identifying fraudulent activity, bonus abuse, or platform manipulation before it causes harm to you or the platform.
• Service communications: Sending transaction notifications, account security alerts, ibc22 service updates, and responses to your customer support enquiries.
• Platform improvements: Analysing usage patterns on an aggregate (not individual) basis to understand how the ibc22 platform can be improved, what new features should be added, and what technical performance needs to be optimised.
• Responsible gambling: Monitoring usage patterns to identify early signs of problem gambling and proactively reaching out to members when needed, as part of ibc22's commitment to member wellbeing.
• Legal compliance: Complying with legal and regulatory obligations imposed on ibc22 as a licensed betting platform operator, including mandatory transaction reporting to the appropriate authorities.

Ibc22 does not sell, rent, or trade members' personal data. However, there are limited circumstances where ibc22 may need to share certain information with carefully selected third parties, and this is done solely for legitimate platform operational purposes:

• Payment service providers: Information required to process your deposits and withdrawals is shared with licensed payment providers we work with — including DuitNow operators, FPX gateway providers, and approved eWallet providers in Malaysia. All these providers are bound by strict confidentiality agreements with ibc22.
• Casino game providers: For live casino and slots games on ibc22, betting information required for game settlement is shared with providers such as Evolution Gaming and Pragmatic Play. This data is limited strictly to what is necessary for game operations.
• Law enforcement authorities: ibc22 may disclose data when required to do so by a valid court order, a directive from Malaysian law enforcement authorities, or reporting obligations under applicable anti-money laundering laws. In such cases, ibc22 will notify you of the disclosure unless prohibited by law from doing so.
• Technical service providers: Companies that provide ibc22's technical infrastructure — such as server hosting services and analytics tools — may process some of your data in their capacity as data processors. All such providers are contractually bound to process data solely in accordance with ibc22's instructions and not for their own purposes.

All third parties involved in processing ibc22 member data have undergone a rigorous vetting process by our team to ensure they meet privacy and security standards that are equivalent to, or exceed, those of ibc22 itself.

Ibc22 invests seriously in data security infrastructure to ensure your personal and financial information is protected at all times. The following are the key security measures we have in place:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and ibc22's servers are encrypted using TLS 1.3 protocol with 256-bit keys — the same technology used by banking institutions in Malaysia. No data travels in plain text that could be intercepted.
• Layered access controls: Access to member data at ibc22 is restricted to staff with a legitimate operational need only. All access is logged and monitored, and all staff undergo background checks and regular data security training.
• Two-factor authentication (2FA): ibc22 supports and encourages the use of two-factor authentication for all member accounts as an additional layer of security that protects your account even if your password is compromised.
• 24/7 security monitoring: ibc22's security team continuously monitors the platform to detect suspicious activity, intrusion attempts, or anomalies that could compromise member data security.
• Data segregation: ibc22 members' financial and personal data are stored in segregated systems with separate access controls, minimising the risk of widespread data exposure in the event of a security incident.
• Incident response plan: ibc22 has clear, tested procedures in place to respond to any data security incident. In the event of a data breach involving your personal data, ibc22 will notify you and the relevant authorities within the timeframe prescribed by law.

Ibc22 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential session cookies: These cookies are essential for the core functionality of the ibc22 platform — they maintain your login session, keep your account secure, and ensure that bet processing and payments function correctly. Without these cookies, the ibc22 platform cannot operate. This type of cookie cannot be disabled.
• Preference cookies: Remembering your preferences such as display language, frequently used betting limits, and other display settings, so you do not have to reconfigure them each time you use ibc22.
• Analytics cookies: ibc22 uses aggregated analytics data — not data at the individual level — to understand how members use the platform, which pages are visited most frequently, and where technical issues need to be addressed. This data helps ibc22 improve the experience for all members.
• Local storage: Certain session information and preferences are stored in your browser's local storage to improve the speed and responsiveness of the ibc22 platform, particularly during live betting sessions that require very low latency.

You can manage your cookie settings through your web browser's preferences. However, disabling essential cookies may affect the functionality of the ibc22 platform. For guidance on managing cookies in your specific browser, please refer to that browser's official documentation.

Ibc22 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Malaysian law. Below are our key data retention guidelines:

• Active account data: For as long as your ibc22 account is active, we retain all personal data and activity history necessary to provide services to you.
• Data after account closure: After an ibc22 account is closed, certain records — including financial transaction and identity records — are retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering and accounting laws. This is a legal obligation that cannot be shortened at an individual's request.
• Log and security data: Access and security logs are retained for 12 months for the purposes of security incident investigation and fraud detection.
• Support communication data: Communication records with the ibc22 support team are retained for 3 years to assist in resolving any future disputes.
• Marketing data: If you have consented to receive marketing communications, this data is retained until you withdraw your consent. You may opt out of marketing communications at any time.

When data is no longer needed and there is no legal obligation to retain it, ibc22 will securely delete or anonymise that data to ensure it cannot be recovered or identified.

As an ibc22 member and data subject, you have the following rights regarding the personal information we hold about you. ibc22 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, contact the ibc22 privacy team at support@ibc22.click, stating the right you wish to exercise and the relevant details. ibc22 will respond to your request within 30 business days. If your request is complex or involves multiple rights, we may extend this period and will notify you in advance.

Ibc22 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect, process, or store personal information from individuals under the age of 18.

Should ibc22 discover that personal data belonging to someone under the age of 18 has been collected without our knowledge — whether through registration using a false identity or by any other means — we will take immediate action to delete that data and close the account in question.

If you believe ibc22 may have inadvertently collected personal information from a child, please contact us immediately at support@ibc22.click so we can take the appropriate corrective action without delay.

Ibc22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, changes to the services we offer, or technological developments that affect how we process data.

When material changes are made to this Privacy Policy — changes that may significantly affect your rights or how your data is used — ibc22 will:

• Sending email notifications to all registered ibc22 members at least 30 days before any changes take effect.
• Displaying a clear notice on the ibc22 platform's main page regarding upcoming changes.
• Maintaining an archive of previous versions of the Privacy Policy, available upon request for your reference.

Your continued use of the ibc22 platform after the effective date of any Privacy Policy amendment will be taken as your acceptance of the revised policy. If you do not agree with the proposed changes, you have the right to close your ibc22 account before the amendment takes effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or ibc22's processing of your personal data, please reach out to us through the following channels:

• Email: support@ibc22.click — for general privacy enquiries, data subject rights requests, and data-related complaints
• Live Chat: Available 24/7 in Bahasa Malaysia via the ibc22 platform — for quick enquiries about privacy or account security

The ibc22 team is committed to taking every privacy-related enquiry seriously and responding within a reasonable timeframe. For formal data subject rights requests, please clearly state the type of request in your email and provide sufficient information for us to verify your identity before processing — this is a security measure that protects you from unauthorised third parties attempting to access your data.

Ibc22 also accepts complaints relating to data processing through the channels above. We will investigate each complaint thoroughly and keep you informed of the outcome. If you are not satisfied with how ibc22 has handled your privacy complaint, you have the right to escalate the matter to the relevant data protection authority under applicable law.