Imaju66 Privacy Policy – Personal Data Protection Commitment Our Malaysian Players

This Privacy Policy is published by imaju66 and applies to all individuals who interact with our platform — including website visitors, registered players, former players, and individuals who contact our support team.

This document explains:

• The types of personal data we collect from you.
• How we use, store, and protect that data.
• Which parties may receive your data and under what circumstances.
• Your rights over your personal data under Malaysian law.
• How you can contact us to exercise those rights.

This policy should be read alongside imaju66 Terms and Conditions and other relevant policy documents. In the event of any conflict, this Privacy Policy shall take precedence on all matters relating to personal data.

Imaju66 only collects data that is strictly necessary to provide our services. Below are the types of data we collect and the purposes for which they are used:

Imaju66 uses your personal data solely for the following lawful and transparent purposes:

• Account management — registration, identity verification, login processing and maintenance of your account.
• Transaction processing — verifying deposits, processing withdrawals and maintaining accurate financial records.
• Legal compliance (KYC/AML) — fulfilling legal compliance obligations including the Anti-Money Laundering Act 2001 and KYC requirements mandated by Malaysian law.
• Platform security — detecting and preventing fraud, hacking, unauthorised access and other illicit activities.
• Service improvement — analysing usage patterns to improve user experience and platform performance.
• Service communications — sending important notifications regarding your account, transactions and policy changes.
• Customer Support — processing and responding to your enquiries, complaints and support requests.
• Marketing — sending relevant offers and promotions, only if you have given your consent to receive marketing communications.

Imaju66 does not use your data to make automated decisions that have legal or significant effects on you without appropriate human intervention.

Under PDPA 2010, imaju66 processes your personal data on the following legal bases:

• Consent — for marketing activities and promotional communications. You may withdraw this consent at any time.
• Contract performance — to process transactions, manage your account and provide the services you request.
• Legal obligation — to meet compliance requirements including KYC, AML and financial reporting obligations mandated by Malaysian law.
• Legitimate interest — for platform security, fraud prevention and service improvement, where these interests do not override your fundamental rights.

Imaju66 does not sell, rent or trade your personal data to any third party. However, in certain situations, we may share your data with the following parties:

• Service providers — companies that help us deliver services such as payment processing, cloud computing, identity verification and customer support. All such providers are bound by strict data protection agreements.
• Game providers — gaming companies such as Evolution Gaming and Pragmatic Play may receive the minimum technical data required to run your games smoothly.
• Authorities — where required by law, court order or a competent Malaysian government authority.
• Business acquisition — in the event of a merger, acquisition or asset sale, you will be notified in advance.

Imaju66 implements a range of technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction:

• Encryption in transit — all communications between you and our platform are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Encryption of stored data — sensitive data such as financial information and identity documents are stored in encrypted format on secured servers.
• Access control — access to player data is restricted on a least-privilege basis — only staff who require access for their specific duties are authorised.
• Continuous monitoring — imaju66's security monitoring system operates 24 hours a day to detect suspicious activity and potential threats.
• Regular security audits — imaju66 conducts regular penetration testing and security audits by independent third parties.
• Staff training — all imaju66 staff undergo data protection and privacy training as part of their onboarding and annual training.

Imaju66 does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active account data — retained for the duration your account is active and up to 7 years after account closure, in accordance with financial and AML legal requirements.
• Transaction records — retained for 7 years in accordance with the Anti-Money Laundering Act 2001.
• KYC Documents — retained for the period required by law, typically 5–7 years after the business relationship ends.
• Technical logs — retained for 90 days for troubleshooting and security purposes, then automatically deleted.
• Support communication records — retained for 2 years for quality control purposes and reference in the event of a dispute.

When data is no longer needed, imaju66 will delete or anonymise it using secure, irreversible methods.

As an imaju66 player, you have the following rights regarding your personal data under Malaysia's PDPA 2010:

The imaju66 platform uses cookies and similar tracking technologies to enhance the user experience, ensure security, and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies — remembering your preferences such as language, currency and interface settings to personalise your experience.
• Analytics Cookies — used to understand how players interact with the platform, enabling us to improve design and functionality.
• Security Cookies — helps us identify suspicious activity, CSRF attacks and unauthorised access attempts.

You can manage cookies through your browser settings. However, disabling essential cookies may affect your ability to login or use certain features of the imaju66 platform.

In some cases, your personal data may be transferred to or processed in countries outside Malaysia — for example, when using cloud computing services or working with international game providers.

Whenever data transfers occur outside Malaysia, imaju66 ensures adequate protections are in place through:

• Data transfer agreements that establish protection standards equivalent to Malaysia's PDPA.
• Selection of providers operating in countries with a recognised equivalent or higher level of data protection.
• Use of standard contractual clauses approved by the relevant data regulatory authority.

Imaju66 is a platform permitted for users aged 18 and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

If we determine that a minor has registered an account without the knowledge or consent of a guardian, we will immediately suspend the account, delete the associated data and refund any deposits made during the active account period.

For any enquiries, complaints or requests relating to this privacy policy or the management of your personal data, you may contact the imaju66 Data Protection Officer (DPO) through the following channels:

Imaju66 reserves the right to update this Privacy Policy from time to time to reflect changes in practices, technology or legal requirements. Any material changes will be communicated to you via email or in-platform notification at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of those changes.