Privacy Policy isenang

Isenang ("we", "Platform") is fully committed to protecting the privacy of every individual who uses our services. This Privacy Policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This policy applies to all users who access the isenang website at https://isenang.app, the isenang mobile app, and all services we offer to registered members. It covers how we collect your personal information, how it is used, who it may be shared with, and how you can control your own data.

By using the isenang Platform — whether via web browser or app — you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you are advised not to continue using our Platform.

We may update this Privacy Policy from time to time in line with changes in law, technology, or our business practices. Any material changes will be clearly displayed on the Platform and the latest effective date will be updated at the top of this document.

Isenang collects various types of personal information depending on how you interact with our Platform. Below are the categories of data we collect and their purposes:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data categories such as medical information, religious beliefs, or political views unless required by law.

The personal data we collect is used solely for lawful and stated purposes. isenang will not use your data for any other purpose without obtaining your consent first. The primary purposes for which data is used are as follows:

• Account Management: Create, verify, and maintain your member account on the isenang platform.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions related to your account.
• Identity Verification (KYC): Meet anti-money laundering (AML) compliance requirements and Know Your Customer (KYC) policy obligations.
• Customer Support: Resolve enquiries, handle complaints, and provide the technical assistance you need.
• Platform Security: Detect and prevent fraud, hacking, unauthorised access, and other suspicious activities.
• Experience Personalisation: Personalise game recommendations and promotions based on your history and preferences.
• Marketing Communications: Send promotional information, exclusive offers, and platform updates — you may unsubscribe at any time.
• Legal Compliance: Comply with legal obligations, court orders, or requests from lawful authorities.

All data processing is carried out on a valid legal basis, whether that is your consent, contractual necessity, a legal obligation, or isenang's legitimate interest in operating its business safely and responsibly.

Isenang does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are certain situations where we may need to share your data with trusted parties:

• Service Providers: Technical partners who assist us in operating the platform, processing payments, and providing support — bound by strict confidentiality agreements.
• Payment Processors: Financial institutions and e-wallet providers required to process your deposit and withdrawal transactions.
• Regulatory Authority: Government agencies, law enforcement authorities, or regulatory bodies when required by law or a valid court order.
• KYC Verification: Registered and recognised third-party identity verification service providers to ensure the accuracy of identity checks.
• Business Transfer: If isenang is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

Isenang invests seriously in security infrastructure to protect your personal data from unauthorized access, loss, misuse, or accidental disclosure. The security measures we implement include:

• 256-bit SSL/TLS data encryption for all communications between your device and isenang servers.
• Encryption at rest for all sensitive information stored in our databases.
• Two-factor authentication (2FA) for account access and internal systems containing personal data.
• 24/7 security monitoring with an always-on automated intrusion detection system.
• Strict role-based access controls — only staff who genuinely require access to specific data are permitted to do so.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Data security awareness training for all isenang staff who handle personal information.

While we take all reasonable measures, no system can guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify the relevant authorities and you within the timeframe required by law.

The isenang platform uses cookies and similar tracking technologies to enhance the user experience, understand usage patterns, and ensure the security of your session. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance Cookies: Collect anonymised data on how users interact with the platform to help us improve the experience.
• Functional Cookies: Save your preferences such as language, display theme, and account settings so you do not need to reconfigure them each time.
• Analytics Cookies: Help us understand which games are most popular and which parts of the platform are most frequently used, for improvement purposes.

You can control and manage cookies through your web browser settings at any time. Please note that disabling certain cookies may affect platform functionality and your gaming experience.

Under Malaysia's PDPA and the data protection standards we adhere to, you have the following rights regarding your personal data held by isenang:

Isenang retains your personal data only for as long as it is needed for the purpose it was collected, or as required under applicable Malaysian law.

• Active account data is retained for the duration your account remains active, plus a minimum of seven (7) years for AML compliance purposes.
• Financial transaction records are retained for a minimum of seven (7) years in accordance with Malaysia's accounting and tax legal requirements.
• Customer support communication logs are retained for two (2) years from the date of the last interaction.
• Cookie and platform analytics data is retained for a maximum of 24 months before being deleted or anonymised.
• After an account is closed, personal data will be deleted or anonymised upon expiry of the mandatory retention period.

Once the retention period has expired, your data will be securely deleted using methods that ensure it cannot be recovered.

The isenang platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If you are a parent or guardian and discover that your underage child has registered or provided information to isenang, please contact us immediately. We will take prompt action to delete all related information and close the account.

If you have any enquiries, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, isenang's Data Protection Officer (DPO) team is ready to assist you.

• Email: [email protected] (use the subject line "Privacy Enquiry")
• Live Chat: Available 24/7 via the isenang Platform
• Response time: Within 14 business days from the date the enquiry is received

We take every privacy enquiry seriously and will endeavour to resolve any issues you raise transparently and fairly. If you are not satisfied with how we have handled your complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia.