ibayar takes the privacy of its players seriously. This Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information as a Malaysian player on our platform.
Six core commitments that underpin how ibayar handles every piece of personal information you share with us.
ibayar does not sell, rent, or license your personal information to third parties for their own marketing or commercial purposes, under any circumstances.
All data transmitted between your device and ibayar's servers is protected by industry-standard 256-bit TLS/SSL encryption, keeping your information private in transit.
You have the right to access, correct, restrict, and — where applicable — request deletion of the personal data we hold about you at any time by contacting our support team.
We collect only the data strictly necessary to operate our services, verify your identity, process payments, and comply with our international licensing and AML obligations.
We share your data only with vetted third-party processors operating under contractual data protection obligations — never for undisclosed commercial gain or without a lawful basis.
In the unlikely event of a data breach that poses a significant risk to your rights, ibayar will notify affected players promptly and take all reasonable steps to contain and remediate the incident.
This Privacy Policy ("Policy") describes how ibayar ("ibayar", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("Player", "you", "your") of the ibayar online gaming and sports betting platform accessible at ibayar.cam ("Platform").
ibayar is committed to handling your personal data with transparency, integrity, and in accordance with applicable international data protection standards. We have designed our data practices to give you meaningful control over your information while allowing us to deliver a secure, compliant, and high-quality platform experience.
This Policy applies to all personal data collected from Players who register for an Account, visit the Platform, contact our support team, or otherwise interact with ibayar's services — regardless of whether those Players are located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location.
By creating an Account or using the Platform, you acknowledge that you have read and understood this Policy. Please also review our Terms & Conditions, which govern the overall use of the ibayar Platform. In the event of any inconsistency between this Policy and the Terms & Conditions regarding data matters, this Policy shall prevail.
Malaysian Players: Malaysia's Personal Data Protection Act 2010 (PDPA) governs the processing of personal data in commercial transactions in Malaysia. Where ibayar's data processing activities engage Malaysian residents, we apply data handling standards consistent with the principles of the PDPA alongside our international licensing obligations. You are encouraged to read this Policy in full to understand your rights.
For the purposes of this Policy, the following terms carry the meanings set out below:
ibayar collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:
What We Do Not Collect: ibayar does not intentionally collect Special Category Data, government tax identification numbers beyond those required for KYC, or precise real-time location data from your device. Full payment card numbers are not stored by ibayar — card processing is handled by PCI-DSS-compliant third-party payment gateways.
ibayar collects Personal Data through the following primary channels:
The majority of your Personal Data is collected directly when you: register an Account on the Platform; complete KYC verification by submitting identity documents; make deposits or request withdrawals; contact our customer support team; or voluntarily submit feedback, survey responses, or participation in promotional activities.
When you access and use the ibayar Platform, we automatically collect Technical & Device Data through server logs, session tracking technologies, and cookies (as described in Section 8). This data is collected regardless of whether you are a registered Player or a guest visitor to the Platform.
ibayar may receive Personal Data about you from the following categories of third parties:
ibayar processes your Personal Data on the following lawful bases, consistent with internationally recognised data protection principles:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (the Terms & Conditions you agreed to) |
| Processing deposits and withdrawals in MYR | Performance of a contract |
| KYC identity and age verification (21+ enforcement) | Legal obligation (AML and licensing requirements) |
| AML monitoring and fraud prevention | Legal obligation and legitimate interests |
| Responsible gambling tools and self-exclusion | Legal obligation and legitimate interests (player welfare) |
| Customer support communications | Performance of a contract and legitimate interests |
| Platform analytics and technical improvement | Legitimate interests (improving the Platform) |
| Marketing and promotional communications | Consent (where explicitly given and withdrawable at any time) |
| Compliance with regulatory requests and court orders | Legal obligation |
ibayar uses the Personal Data we collect strictly for the following purposes:
ibayar does not use your Personal Data to make purely automated decisions that produce significant legal effects on you without human review, unless expressly authorised by applicable law. KYC decisions are always subject to human oversight before any Account action is taken.
ibayar does not sell your Personal Data. We share your data only where strictly necessary and only with the following categories of recipients operating under contractual or legal data protection obligations:
We share transactional data with our payment gateway partners to process deposits and withdrawals. These include the operators of FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and the card processing infrastructure. Each payment provider operates under their own data protection and PCI-DSS obligations.
We engage specialist third-party KYC and identity verification providers to process identity documents and conduct sanctions screening. These providers act as Data Processors under written data processing agreements that restrict their use of your data to the specific services they provide to ibayar.
Our third-party game studio partners receive limited session data (game session identifiers, wager amounts) necessary to operate the games you play. They do not receive your full identity information and are bound by contractual restrictions on data use.
We may be required to disclose your Personal Data to our licensing authority, financial intelligence units, or law enforcement agencies in response to lawful requests, court orders, or our mandatory AML reporting obligations. ibayar will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of ibayar's business or assets, your Personal Data may be transferred to the acquiring entity subject to equivalent data protection commitments. You will be notified of any such transfer in advance where practicable.
No Third-Party Marketing: ibayar does not share your Personal Data with third parties for their own direct marketing purposes. If you receive unsolicited marketing from a third party claiming to be affiliated with ibayar, please contact us immediately at [email protected].
ibayar uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device that allows the Platform to recognise your browser and store certain information about your session and preferences.
You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect Platform functionality. For guidance on cookie management specific to your browser, please refer to your browser's help documentation.
ibayar retains your Personal Data only for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal, regulatory, and licensing obligations. The following standard retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and KYC identity data | Duration of Account plus 5 years post-closure (AML obligation) |
| Transaction and financial records (MYR deposits, withdrawals) | Minimum 5 years from date of transaction |
| Betting and gaming activity records | Duration of Account plus 2 years post-closure |
| Customer support communications | 3 years from last interaction |
| Technical and device logs (IP, session data) | 12 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 2 years evidential record |
| Self-exclusion records | Duration of exclusion plus 7 years (safeguarding purposes) |
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with ibayar's data disposal procedures. Where data is required for an ongoing legal proceeding or regulatory investigation, it will be retained until the matter is fully resolved.
ibayar implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security controls include:
Your role in data security: While ibayar takes all reasonable technical precautions, the security of your Account also depends on you maintaining a strong, unique password and keeping your login credentials private. We recommend enabling two-factor authentication (2FA), available in your Account settings. If you suspect your Account has been compromised, contact our support team immediately.
ibayar operates as an international online gaming platform. This means that your Personal Data may be processed and stored on servers or by Data Processors located in jurisdictions outside of Malaysia, including jurisdictions where ibayar's licensing authority is based.
Where Personal Data is transferred internationally, ibayar takes appropriate measures to ensure that such transfers are conducted with an adequate level of data protection, including:
By using the ibayar Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia in the manner described above.
Subject to applicable law and ibayar's legal obligations, you hold the following rights in respect of your Personal Data processed by ibayar. To exercise any of these rights, please contact our support team at [email protected].
ibayar will respond to all verifiable rights requests within 30 calendar days of receipt. We may request additional information to verify your identity before acting on a rights request. Where a request is complex or numerous, we may extend this period by a further 60 days with notice.
The ibayar Platform is strictly for persons aged 21 years and over. ibayar does not knowingly collect, process, or store Personal Data from any individual under the age of 21.
All Account registrations are subject to age verification as part of our mandatory KYC process. If ibayar determines or reasonably suspects that an Account has been registered by a person under 21, the Account will be immediately suspended and any associated Personal Data will be deleted or rendered anonymous in accordance with applicable data retention law.
If you are a parent or guardian and believe that a minor has submitted Personal Data to ibayar without your knowledge or consent, please contact us immediately at [email protected] and we will take prompt action.
ibayar reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features. Where a proposed change is material — for example, a new category of data collection or a change to how we share data with third parties — ibayar will provide at least 14 days' advance notice via email to your registered address and/or a prominent notice on the Platform before the change takes effect.
Minor amendments, such as corrections of typographical errors or clarifications of existing provisions, may be made without prior notice. All updates will be reflected in a revised "Last Updated" date at the top of this page.
Your continued use of the ibayar Platform after the effective date of any amendment to this Policy constitutes your acknowledgement of the revised terms. If you do not agree with a revised Policy, you should close your Account before the amendment takes effect.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by ibayar, please contact us through the following channels:
ibayar is committed to acknowledging all privacy-related communications within 5 business days and resolving substantive requests within 30 calendar days of receipt.
If you are not satisfied with ibayar's response to a privacy concern, you may have the right to lodge a complaint with the data protection authority in your jurisdiction. For Malaysian residents, the relevant authority is the Department of Personal Data Protection (JPDP) under the Ministry of Digital, Malaysia.
Plain text contact only: The email address above is displayed as plain text and is not a clickable link. Please copy it manually into your email client: [email protected]
We built ibayar to be transparent, fair, and secure — for Malaysian players who deserve a platform they can genuinely trust. Visit our homepage to discover everything ibayar has to offer, or review our other policies for the full picture.
For players aged 21 and above only. Please also review our Terms & Conditions. Online gambling involves financial risk — play responsibly.