Privacy Policy i1scr –
Member Personal Data Protection

I1scr takes our responsibility to protect your personal data privacy and security seriously. This Privacy Policy explains in detail how we collect, use, disclose, and protect the personal information you provide when using the i1scr platform — whether through our website i1scr.fun or our official mobile app.

This document is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. By registering or continuing to use our platform, you agree to the collection and use of your information as described in this policy.

I1scr collects personal information from you through various means as you interact with our platform. Below are the types of information we collect and the purposes for which they are collected:

We only collect information that is strictly necessary for the stated purposes. Data that is no longer needed will be deleted or anonymised in accordance with our retention schedule.

All information collected by i1scr is used for specific, legitimate purposes. We will not use your data for any purpose other than those stated below without your prior consent:

• Account management: To create, verify, and maintain your account on the i1scr platform.
• Transaction processing: To securely verify and process deposits, withdrawals, and bonus payments.
• Identity verification (KYC): To verify that you meet the age requirements and to fulfil our anti-money laundering obligations.
• Customer support: To enable our team to assist you whenever questions or account-related issues arise.
• Platform security: To detect and prevent fraudulent activity, unauthorised access, and platform abuse.
• Service improvement: To analyse usage patterns in order to improve the user experience and platform performance.
• Important communications: To send you account-related notifications, security updates, or policy changes that affect you.
• Legal compliance: To comply with applicable legal and regulatory obligations.

If you have given your consent, we may also use your email address or phone number to send you promotional information and special offers from i1scr. You can opt out of marketing communications at any time via the unsubscribe link in our emails or by contacting our support team.

I1scr respects your privacy and will not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, there are limited situations where we need to share your data with certain parties in order to deliver a complete service:

• Payment providers: Information required to process your financial transactions is shared with payment processors and banks that partner with i1scr. All such providers are bound by strict confidentiality agreements.
• Game providers: Minimum technical data required to run game sessions is shared with our game software providers.
• Technical support services: Our technical infrastructure providers may access data solely for system maintenance and repair purposes.
• Legal authorities: We will disclose information when required by court order, law enforcement directive, or legitimate regulatory requirement.
• Fraud prevention: In cases of suspected fraud, money laundering, or serious terms violations, information may be shared with the relevant authorities.

Protecting your personal data is the highest priority for i1scr. We implement multiple layers of technical and organisational security to ensure your data remains protected at all times:

• 256-bit SSL Encryption: All communications between your device and i1scr servers are protected by industry-standard SSL encryption, ensuring your data cannot be intercepted in transit.
• Secure server infrastructure: Data is stored in data centres equipped with multi-layered firewalls, intrusion detection systems (IDS), and 24/7 security monitoring.
• Internal access controls: Only specifically authorised personnel may access user personal data, and every access is logged for audit purposes.
• Stored data encryption: Sensitive information such as bank details and verification documents is stored in encrypted form, even within our own databases.
• Regular security audits: The i1scr platform undergoes regular penetration testing and independent security audits.
• Two-factor authentication (2FA): You are encouraged to enable 2FA on your account as an added layer of protection.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. Should a data breach occur that affects your information, we will notify you within the timeframe required by applicable law.

I1scr uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance Cookies: Collecting information on how visitors use our website — such as the most frequently visited pages — to help us improve the platform.
• Functional Cookies: Saving your preferences such as language and display settings to provide a more personalised experience.
• Analytics Cookies: We use trusted third-party analytics tools to understand platform traffic and usage patterns for improvement purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and i1scr's policy, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the i1scr customer support team. We will process your request within 30 business days. Some requests may require identity verification beforehand to protect your account security.

In the course of platform operations, some of your personal data may be transferred to or processed in countries other than Malaysia. This occurs primarily when we use cloud infrastructure or technology service providers based outside Malaysia.

I1scr ensures that any international data transfers are carried out with adequate safeguards in place, including:

• Using standard data transfer agreements that comply with applicable data protection requirements.
• Ensuring that overseas data recipients are subject to equivalent or stricter data protection obligations.
• Implementing additional technical measures such as end-to-end encryption for data transferred across borders.

I1scr retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. Our data retention guidelines are as follows:

• Active account data: Retained for as long as your account remains active on the i1scr platform.
• Financial transaction records: Retained for a minimum of 7 years to meet financial and tax regulatory requirements.
• KYC documents: Retained for 5 years after account closure or the date of the last transaction, whichever is later.
• Security log: Retained for 2 years for investigation purposes if required.
• Marketing data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires or upon your request for deletion (subject to legal exemptions), your data will be permanently deleted or anonymised so it can no longer be associated with you.

I1scr reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

If the changes are significant and affect how we use your data, we will notify you via an in-account notification or email before the changes take effect. Continued use of the platform after the effective date of such changes constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically so you remain informed about how we protect your information. All previous versions of the Privacy Policy are available upon request from our customer support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. The i1scr Data Protection Officer (DPO) team is ready to assist you.

You can also reach our general customer support team via live chat, available 24/7 on the i1scr platform, for non-urgent privacy-related inquiries.