Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by imbagacor ("we", "us", "our", or "the Platform"), the operator of the online gaming website accessible at https://imbagacor.cam. It describes how imbagacor collects, processes, stores, discloses, and protects the personal data of individuals who access, register on, or interact with the Platform ("Members", "Users", or "you").

By using the imbagacor Platform — including visiting the Website, creating an account, or making a deposit — you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to request account closure.

This Policy should be read in conjunction with imbagacor's Terms & Conditions and Responsible Gambling Policy, which together govern your use of the Platform.

Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, contact number, date of birth, financial details, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and erasure.
• "Data Controller" — imbagacor, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third party engaged by imbagacor to process personal data on its behalf and in accordance with imbagacor's written instructions.
• "Consent" — freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" — Know Your Customer; the identity and address verification process required before withdrawal processing.
• "Platform" — the imbagacor website at https://imbagacor.cam, its subdomains, and mobile-optimised interfaces.
• "Cookie" — a small text file placed on a user's device by a website for session management, analytics, or personalisation purposes.

Data We Collect

imbagacor collects the following categories of personal data from Members and Platform visitors:

How Data Is Collected

imbagacor collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser information, and session activity logs via server records and cookies.
• Payment Processors: Transaction confirmation data received from our integrated payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong.
• Third-Party Verification Services: Identity verification data returned from KYC service providers engaged to confirm the authenticity of documentation submitted by Members.
• Fraud Prevention Services: Device fingerprinting and behavioural analytics data from fraud and AML screening partners used to protect the integrity of the Platform.

Legal Basis for Processing

imbagacor processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to enter into and perform our contract with you — including account management, transaction processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements — including anti-money laundering (AML) obligations, KYC requirements, and tax reporting duties.
• Legitimate Interests: Processing for purposes including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where these interests are not overridden by your rights and interests.
• Consent: Processing for non-essential marketing communications or optional analytics features, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

How We Use Your Data

imbagacor uses the personal data collected for the following purposes:

1. To create, manage, and maintain your Member account on the Platform.
2. To process deposits and withdrawals via supported Malaysian payment channels and verify the ownership of linked payment instruments.
3. To verify your identity and age (21+) in accordance with our KYC procedures prior to withdrawal processing.
4. To detect and prevent fraud, money laundering, account abuse, and other prohibited conduct as described in our Terms & Conditions.
5. To administer bonuses, promotions, the VIP loyalty tier programme (including birthday bonuses and referral rewards), and responsible gambling tools.
6. To provide multilingual customer support in English, Bahasa Melayu, and Chinese through live chat, WhatsApp, and email channels.
7. To monitor gameplay activity for responsible gambling purposes, including identifying patterns consistent with problem gambling behaviour.
8. To communicate with you regarding account activity, security alerts, transaction confirmations, and material policy updates.
9. To fulfil legal and regulatory obligations, including the retention of records required under applicable AML and gaming regulations.
10. To improve the Platform's features, user experience, and game offering through aggregated, anonymised analytical data.

Data Sharing & Disclosure

imbagacor does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your data in the following limited and controlled circumstances:

• Payment Processors: Data shared with payment partners (Touch 'n Go, DuitNow, FPX, Maybank, CIMB, Public Bank, and others) solely to execute deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Identity documentation shared with contracted verification service providers operating under confidentiality and data processing agreements with imbagacor.
• Fraud and AML Screening Partners: Transaction and device data shared with fraud prevention and anti-money laundering screening services to protect the integrity of the Platform.
• Game and Technology Providers: Limited technical and gameplay data shared with licensed game providers to facilitate game delivery and resolve technical disputes.
• Legal and Regulatory Authorities: Personal data disclosed to law enforcement agencies, regulators, or courts where required by applicable law or a valid legal order. imbagacor will endeavour to notify you of any such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity subject to equivalent privacy protections.

All third parties to whom imbagacor discloses personal data are required to maintain appropriate confidentiality and security standards and to use the data solely for the purpose for which it was shared.

Data Retention

imbagacor retains personal data for as long as is necessary for the purposes described in this Policy or as required by applicable legal, regulatory, or contractual obligations. Indicative retention periods are as follows:

• Account Data: Retained for the duration of your active membership and for a minimum period of five (5) years following account closure, to satisfy regulatory record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of the relevant transaction in accordance with applicable financial crime compliance standards.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the Member relationship or such longer period as required by applicable law.
• Communication Records: Support transcripts and correspondence retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and Log Data: Server logs and session data retained for up to ninety (90) days unless extended where required for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures. Where data cannot be immediately deleted due to technical or operational constraints, it is isolated from active systems and restricted from further processing until deletion is completed.

Data Security

imbagacor implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers.
• Encryption of sensitive data stored at rest, including financial information and identity documentation.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a specific, documented need to access it.
• Two-factor authentication (2FA) available for all Member accounts and required for all internal administrative access.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Segregation of player funds from operational balances to protect Member deposits.
• Incident response procedures for timely identification, containment, and notification of any data security breach.

Cookies & Tracking Technologies

imbagacor uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication, security tokens, and fraud prevention. These cannot be disabled without affecting core Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how Members use the Platform — pages visited, session duration, feature interaction — to help us improve the user experience.
• Functional Cookies: Used to remember your preferences such as language setting, last logged-in state, and display options for a more personalised experience.

imbagacor does not deploy third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in or use core Platform features.

Minors & Age Verification

The imbagacor Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect, store, or process the personal data of individuals under 21 years of age.

imbagacor applies active age verification procedures during the KYC process to confirm that all Members meet the minimum age requirement. Where we become aware that personal data of an individual under 21 has been collected — whether through misrepresentation or otherwise — we will immediately suspend the relevant account, void all associated wagers and balances, and permanently delete the data without further notice.

If you believe that a minor has registered on the Platform using falsified information, please notify our support team immediately so that we can investigate and take appropriate action.

Your Rights as a Data Subject

Subject to applicable legal limitations, you have the following rights in respect of your personal data held by imbagacor:

• Right of Access: You may request a copy of the personal data we hold about you. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections may be made directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where imbagacor no longer has a lawful basis for retention. Please note that certain data must be retained for the periods specified in Section 8 to comply with legal obligations.
• Right to Restrict Processing: You may request a temporary restriction on processing in specific circumstances, such as where you contest the accuracy of data or have lodged a complaint regarding its processing.
• Right to Data Portability: You may request an export of your personal data in a structured, machine-readable format where processing is based on consent or contract and carried out by automated means.
• Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. We will cease such processing upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Privacy team through live chat or by emailing [email protected]. We may request verification of your identity before processing any data rights request.

International Data Transfers

In the course of providing our services, imbagacor may transfer personal data to service providers or infrastructure located outside Malaysia. Where such transfers occur, imbagacor ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy.

Safeguards applied to international transfers may include: contractual data processing agreements incorporating standard privacy protection clauses; transfer to jurisdictions recognised as providing an adequate level of data protection; or other legally recognised transfer mechanisms as applicable.

All third-party data processors engaged by imbagacor are subject to written data processing agreements that bind them to handle personal data only as instructed by imbagacor and in accordance with applicable privacy standards.

Amendments to This Policy

imbagacor reserves the right to update or revise this Privacy Policy at any time. The "Last Updated" date at the top of this page reflects the most recent revision.

Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — imbagacor will notify registered Members by email and/or by posting a prominent notice on the Platform prior to the changes taking effect. For non-material changes, the updated Policy will be posted on this page without individual notification.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, please cease using the Platform and request account closure.

Contact & Complaints

If you have questions, concerns, or complaints relating to this Privacy Policy or the processing of your personal data by imbagacor, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform. Average response time 3–5 minutes. Support available in English, Bahasa Melayu, and Chinese.
• Email (plain text, not a link): [email protected]
• Registered Address: 18 Jalan Ampang, Kuala Lumpur, Malaysia.

All formal privacy complaints will be acknowledged within five (5) business days and substantively addressed within thirty (30) calendar days. Where a complaint cannot be resolved internally within this period, we will inform you of the reasons for any delay and the expected resolution timeline.