Privacy Policy

1 Introduction

ikfcu ("we", "us", "our", "the Company") operates the online gaming and sports betting platform accessible at https://ikfcu.cam ("Platform"). We are committed to protecting and respecting the privacy and personal data of all individuals who interact with our Platform, including registered players, prospective users, and visitors ("you", "your", "Data Subject").

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.

By registering an Account, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy. If you do not agree with the terms of this Policy, please do not use the Platform.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means ikfcu, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of ikfcu pursuant to a written data processing agreement.
• "KYC Data" means identity verification documents and information collected in the course of Know Your Customer verification procedures, including government-issued identification, proof of address, and biometric selfie images.
• "Consent" means any freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Platform" means the website, mobile interface, and all associated services operated by ikfcu at https://ikfcu.cam.

3 Personal Data We Collect

ikfcu collects the following categories of personal data in the course of providing the Platform and its associated services. We collect only the minimum data necessary for the stated purposes.

4 How We Collect Personal Data

ikfcu collects personal data through the following means:

4.1 Data Provided Directly by You

This includes data you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting our support team via live chat or email, or completing any other form or interaction on the Platform.

4.2 Data Collected Automatically

When you access or use the Platform, we automatically collect certain Technical Data and Usage Data through cookies, web beacons, log files, and similar tracking technologies. This data is collected to ensure platform security, detect fraud, and improve the user experience. Please refer to Section 8 of this Policy for more information on our use of cookies.

4.3 Data Received from Third Parties

We may receive personal data from third-party service providers in the course of identity verification (KYC), fraud prevention, payment processing, and compliance screening. Such third parties may include identity verification agencies, payment processors (such as those facilitating Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow, and FPX transactions), and anti-money laundering (AML) screening providers. Data received from third parties is handled in accordance with this Policy.

5 Purposes of Data Processing

ikfcu processes your personal data for the following specific, explicit, and legitimate purposes:

• Account Creation and Management: To register your Account, authenticate your identity, and maintain your Account in accordance with our Terms & Conditions.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with applicable anti-money laundering (AML) and Know Your Customer (KYC) regulatory obligations.
• Payment Processing: To process deposits, withdrawals, and refunds via your chosen Malaysian payment method, including e-wallets (Touch 'n Go, Boost, GrabPay), bank transfers (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency transactions.
• Service Delivery: To provide access to casino games, live dealer tables, sportsbook markets (including Liga Super Malaysia, EPL, UFC), and all other Platform features.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Responsible Gambling: To monitor gambling behaviour, enforce self-exclusion requests, apply deposit and loss limits, and fulfil our responsible gambling obligations in accordance with our Responsible Gambling policy.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and licensing requirements, including retention of financial records and transaction data.
• Platform Improvement: To analyse usage patterns, improve game selection, and enhance the Platform's technical performance and user experience.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and newsletters — subject to your opt-in consent and in accordance with Section 6 of this Policy. You may withdraw consent at any time.

6 Legal Basis for Processing

ikfcu processes your personal data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and ikfcu (i.e., your Account and the Terms & Conditions). This applies to Account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with a legal or regulatory obligation, including KYC, AML screening, and financial record retention requirements.
• Legitimate Interests: Processing is necessary for the purposes of ikfcu's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and business analytics, provided such interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent as the legal basis — such as for marketing communications and non-essential cookies — we will obtain your explicit, informed consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7 Disclosure and Data Sharing

ikfcu does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We disclose personal data only in the following circumstances and only to the extent necessary:

7.1 Service Providers and Data Processors

We engage third-party service providers to assist in operating the Platform, processing payments, verifying identities, and providing customer support infrastructure. These providers act as Data Processors and are contractually bound to process your data only on our instructions, implement appropriate security measures, and not use your data for any other purpose. Categories of service providers include:

• Payment processing partners facilitating Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and cryptocurrency processors)
• KYC and identity verification technology providers
• Fraud detection and AML screening service providers
• Cloud infrastructure and hosting providers
• Customer support platform providers
• Game software providers and live casino studio operators

7.2 Regulatory and Law Enforcement Authorities

We may disclose personal data to relevant governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, legal process, or regulatory direction. Such disclosures will be limited to the minimum data necessary and will be conducted in accordance with applicable legal requirements.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of ikfcu's business assets, personal data held by ikfcu may be transferred to the relevant successor entity as part of that transaction. Where such a transfer occurs, you will be notified via in-platform notification or email, and the successor entity will be required to adhere to the terms of this Policy or a materially equivalent privacy policy.

8 Cookies & Tracking Technologies

ikfcu uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform for the purposes described in this section. A cookie is a small text file placed on your device by a web server when you visit a website.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies (particularly strictly necessary cookies) may affect the functionality of the Platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

9 Data Retention

ikfcu retains your personal data for as long as necessary to fulfil the purposes described in this Policy, and in any event for the minimum period required by applicable law and regulatory obligations. The following general retention principles apply:

• Account Data and KYC Documents: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, in compliance with applicable AML and financial record-keeping regulations.
• Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of five (5) years for regulatory compliance purposes.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the interaction.
• Marketing Data: Retained until you withdraw your consent to marketing communications, after which your data is removed from marketing lists within a reasonable period.
• Technical and Log Data: Server logs and technical access data are retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or archived in a manner that prevents its further use in identifiable form, unless a longer retention period is required by law.

10 Data Security

ikfcu implements appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including financial information and KYC documents, is stored in encrypted form on secure servers.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Fraud Monitoring: Continuous automated monitoring for suspicious activity, including unusual login patterns, multiple account creation attempts, and anomalous transaction behaviour.
• Penetration Testing: Regular security assessments and vulnerability testing are conducted on the Platform infrastructure.

Notwithstanding the above, no method of data transmission over the internet or electronic storage is entirely secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ikfcu will notify you without undue delay in accordance with applicable legal requirements.

11 Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by ikfcu:

To exercise any of the above rights, please contact us using the details provided in Section 15. We will respond to all valid requests within thirty (30) days. We may require you to verify your identity before processing your request. Please note that certain rights are subject to exceptions and limitations under applicable law, particularly where data retention is required for regulatory compliance or the prevention of fraud.

12 Children & Minors

The ikfcu Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data relating to persons under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete such data and close the relevant Account.

If you are a parent or guardian and believe that a person under 21 has registered an Account on the Platform or provided us with personal data, please contact our support team immediately at [email protected] (plain text, not a clickable link) so that we can investigate and take appropriate action.

13 Third-Party Websites

The Platform does not contain links to third-party websites for browsing purposes. However, in the course of processing payments, you may be directed to the secure payment interfaces of third-party payment providers (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, or DuitNow). These providers operate their own privacy policies, which govern the handling of any personal data you provide directly to them during a payment transaction.

ikfcu is not responsible for the privacy practices or content of third-party payment interfaces. We encourage you to review the privacy policy of any third-party service you use in connection with Platform transactions.

14 Amendments to This Policy

ikfcu reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or operational changes. The updated Policy will be published on this page with a revised effective date.

Where material changes are made to this Policy — particularly changes that affect how we process your personal data or that may require your re-consent — we will provide notice via in-platform notification or email. Your continued use of the Platform following the publication of an amended Policy constitutes your acknowledgement of the changes.

We recommend reviewing this page periodically, particularly if you are an active player on the Platform.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest way to reach us for urgent data requests.
• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all data-related requests within 3 business days and respond in full within 30 calendar days.

When submitting a data request, please include your full name, registered email address, and Account username to allow us to verify your identity and process your request efficiently. Our support team serves Malaysian players across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all regions of Malaysia.