ibosport Privacy Policy

ibosport ("we", "us", "our") operates the online sports betting and gaming platform accessible at https://ibosport.cam (the "Platform"). This Privacy Policy ("Policy") sets out how ibosport collects, uses, stores, shares, and protects the personal data of individuals ("you", "Member", "User") who access or use our Platform and Services.

ibosport is committed to protecting the privacy and personal data of all Members, particularly those based in Malaysia — including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We recognise our responsibilities under applicable data protection principles and are guided by standards consistent with Malaysia's Personal Data Protection Act 2010 (PDPA) in our approach to personal data management.

By creating an ibosport Account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

If you have questions or concerns about this Policy, or wish to exercise any of your data rights, please contact us at [email protected]. Our team is available 24/7 via live chat for urgent data-related queries.

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

ibosport collects only the Personal Data that is necessary and proportionate to the purpose for which it is collected. The categories of Personal Data we collect include, but are not limited to, the following:

Registration & Identity Data

• Full legal name (as per Malaysian identification documents);
• Date of birth (used for 21+ age verification);
• Gender (optional, for personalisation purposes);
• Residential address in Malaysia (street, city, state, postcode);
• Nationality and country of residence;
• Account username and encrypted password.

Contact Data

• Email address (primary channel for account notifications and correspondence);
• Malaysian mobile phone number (used for OTP authentication and account security).

Financial & Transaction Data

• Deposit and withdrawal transaction records, including method, amount (MYR/RM or cryptocurrency equivalent), date, and status;
• Payment method identifiers — e-wallet account numbers (e.g., Touch 'n Go, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong, RHB), or cryptocurrency wallet addresses;
• Betting history, game play records, win/loss data, and wagering patterns.

KYC & Verification Data

• Copy of Malaysian identity document (MyKad — front and back, or Passport, or Driver's License);
• Proof of residential address (utility bill, bank statement issued within 3 months);
• Selfie photograph holding the submitted identity document;
• Source of funds documentation (requested only in specific compliance or AML scenarios).

Technical & Usage Data

• IP address and geolocation data (country/city level);
• Device type, operating system, and browser type;
• Session timestamps, login frequency, and pages visited within the Platform;
• Referral source data (if you arrived via a partner link).

ibosport collects Personal Data through the following channels:

• Direct submission: Information you provide when you register for an Account, complete KYC verification, contact our support team, participate in promotions, or update your Account settings.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, session data, and browsing behaviour within the Platform — primarily via cookies and server logs.
• Transaction data: Financial and payment information generated when you make a deposit, request a withdrawal, or place a bet — sourced from both your actions and our payment processing partners.
• Third-party verification services: Identity and address verification data returned by our KYC and fraud prevention service providers following document verification checks.
• Public sources: In limited AML/compliance scenarios, we may supplement Member information with publicly available data such as sanctions lists, politically exposed person (PEP) registries, or adverse media sources.

We process your Personal Data for specific, clearly defined purposes. The table below outlines those purposes and the legal basis on which we rely for each:

ibosport processes Personal Data on secure servers using industry-standard encryption and access control measures. All Personal Data processing activities are governed by documented internal procedures designed to ensure data integrity, confidentiality, and availability.

Automated Decision-Making: Certain processes on the Platform — including fraud scoring, unusual betting pattern detection, and responsible gambling alert triggers — involve automated processing of your transaction and behaviour data. Where automated decisions have significant consequences for your Account (such as temporary Account suspension pending review), you retain the right to request human review of any automated decision. Please contact [email protected] to exercise this right.

Profiling: ibosport may process your betting history and platform usage data to build a behavioural profile for the purpose of detecting problem gambling indicators and identifying potential AML risks. This profiling is conducted in your interests and in furtherance of our legal obligations — not for commercial advertising purposes.

ibosport does not sell, rent, or trade your Personal Data. We share Personal Data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Transaction data is shared with Malaysian payment processors and financial institutions — including those underpinning Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency exchange services — solely for the purpose of processing deposits and withdrawals.
• KYC & Identity Verification Providers: Identity documents and verification selfies are shared with our contracted KYC service providers for the purpose of conducting identity checks. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.
• Fraud Prevention & AML Service Providers: We may share data with fraud detection platforms and sanctions screening services for the purpose of detecting and preventing money laundering, fraud, and other financial crimes.
• Regulatory & Law Enforcement Authorities: ibosport may disclose Personal Data to competent regulatory authorities or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction — without requiring your prior consent in such circumstances.
• Professional Advisers: Legal counsel, auditors, and compliance consultants may access Personal Data on a strictly need-to-know basis and subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ibosport's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and your data rights will be preserved.

All third parties with whom ibosport shares Personal Data are contractually required to maintain appropriate security standards and to use the data solely for the agreed purpose.

Know Your Customer (KYC) verification is a mandatory process for all ibosport Members prior to the processing of any withdrawal request. KYC data — including your Malaysian identity document (MyKad, Passport, or Driver's License), proof of address, and verification selfie — is handled with the highest level of care given its sensitive nature.

How ibosport handles your KYC documents:

• Documents are uploaded exclusively through the ibosport Platform's secure, HTTPS-encrypted upload portal. We strongly advise against sharing identity documents via email, WhatsApp, Telegram, or any other unsecured channel.
• KYC documents are stored in encrypted form on access-controlled servers. Only trained compliance team members with a documented business need may access these files.
• KYC documents are shared with our contracted identity verification service provider solely for the purpose of conducting the verification check. The provider is prohibited from retaining or using your documents for any other purpose.
• ibosport staff will never ask for your full identity document via live chat, email, or any communication channel outside the secure Platform upload portal.
• Following successful verification, the verification status is recorded. Physical copies of documents may be retained for a period consistent with our regulatory record-keeping obligations (see Clause 10: Data Retention).

ibosport uses cookies and similar tracking technologies on the Platform to deliver a functional, secure, and personalised user experience. Cookies are small data files stored on your browser or device when you visit the Platform.

ibosport does not place third-party advertising cookies or tracking pixels. You may control cookie settings through your browser's privacy or settings menu. Disabling functional or analytics cookies may affect some non-essential features of the Platform but will not prevent you from using core services.

ibosport retains Personal Data only for as long as is necessary for the purposes for which it was collected, or for as long as is required to comply with applicable legal, regulatory, tax, or AML record-keeping obligations.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where retention is extended due to ongoing legal proceedings or regulatory investigations, you will be notified where practically possible.

ibosport implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your browser/app and ibosport's servers is encrypted using TLS 1.2 or higher (HTTPS). The padlock icon visible in your browser address bar confirms this protection is active.
• Encryption at rest: Sensitive Personal Data — including KYC documents, identity numbers, and financial account details — is stored in encrypted form on secured servers.
• Access controls: Access to Personal Data is restricted on a role-based, need-to-know basis. Staff with access to Member data undergo background checks and are bound by confidentiality obligations.
• Two-factor authentication (2FA): ibosport supports 2FA via OTP for Member Account login to reduce the risk of unauthorised account access.
• Penetration testing & vulnerability assessments: ibosport conducts periodic security assessments to identify and remediate vulnerabilities in Platform infrastructure.
• Incident response: In the event of a Personal Data breach that is likely to result in risk to Data Subjects, ibosport will notify affected Members promptly and take all reasonable steps to contain and remediate the breach.

As an ibosport Member, you hold specific rights over your Personal Data. ibosport respects these rights and will respond to verified requests in a timely manner, ordinarily within 30 calendar days of receipt. To exercise any of the rights below, please contact us at [email protected] with your registered email address, a brief description of your request, and any supporting information.

ibosport will not charge a fee for the exercise of data rights unless requests are manifestly unfounded, excessive, or repetitive. In such cases, a reasonable administrative fee may be levied, and you will be informed in advance.

The ibosport Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store Personal Data of individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered Members.

If ibosport becomes aware that Personal Data has been collected from an individual under 21 years of age, we will promptly close the associated Account, void all activity on that Account, and securely delete the relevant Personal Data — except where retention is required for AML or legal purposes.

If you are a parent or guardian and have reason to believe that a minor under your care has created an ibosport Account, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

ibosport reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Where material changes are made to this Policy — particularly changes that affect the purposes for which your data is processed, the categories of third parties with whom data is shared, or your data rights — ibosport will provide advance notice to active Members via email to their registered email address, or by way of a prominent in-Platform notification, prior to the changes taking effect.

Your continued use of the ibosport Platform following the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms. We encourage you to review this Policy periodically. The current version is always available at https://ibosport.cam/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a data protection concern, please contact the ibosport Data Protection team using the details below. All data-related communications are handled in English.

For formal data subject access requests or right-to-erasure requests, please submit your request in writing via email with your full name, registered email address, Member ID, and a clear description of the data right you wish to exercise. ibosport may request additional information to verify your identity before processing a data rights request.

This Privacy Policy was last reviewed and updated on 1 January 2026. The authoritative version of this Policy is published at https://ibosport.cam/privacy-policy.