Official Privacy Document

Isama Privacy Policy – Your Personal Data Protection

Your privacy is not merely a legal obligation for isama — it is our genuine commitment. This document clearly explains how we collect, process, store and protect your personal information every time you use the isama platform.

Last Updated: January 2026
Compliant with Malaysia PDPA

Note: This Privacy Policy applies to all users of the isama platform, including the isama.vip website and our official mobile app. By using any isama service, you agree to the terms stated here.

1 Introduction and Scope of This Privacy Policy

Isama takes user privacy very seriously. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, and protection of personal information you provide to us or that we collect automatically when you use the isama platform.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We are committed to ensuring that your personal data is handled responsibly, transparently, and securely at all times.

This policy applies to all information collected through the isama.vip website, our Android and iOS mobile apps, customer support interactions, and any other official isama communication channels. If you use isama services on behalf of another person, you are responsible for ensuring that person is aware of and agrees to this policy.

2 Types of Personal Data We Collect

Isama only collects data that is strictly necessary to deliver our services safely and efficiently. The data we collect falls into two main categories:

Data you provide directly:

  • Identity information: full name, date of birth, national ID number (MyKad) or passport.
  • Contact information: email address, phone number and postal address.
  • Account information: username, password (stored in encrypted hash form) and security questions.
  • KYC verification documents: copies of identity documents, proof of address, and source of funds information where required.
  • Financial information: payment method details used for deposits and withdrawals.

Data collected automatically:

  • Technical data: IP address, browser type, operating system, and app version used.
  • Usage data: pages visited, time spent, games played, and wagering records.
  • Device data: unique device identifiers, location data (with your permission), and network information.
  • Cookie and tracker data: session information, user preferences, and platform usage analytics.
isama never collects information that is irrelevant to the provision of our services. We do not collect sensitive data such as medical information, political views, or religious beliefs.

3 Purposes for Using Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. isama uses your personal information for the following purposes:

Purpose of Use Data Type Used Legal Basis
Registration and account management Name, email, password Contract fulfillment
Identity verification (KYC) Identity documents, date of birth Legal obligation
Payment processing Financial information, IP address Contract fulfillment
Fraud prevention & security Technical data, activity records Legitimate interest
Communication & customer support Email, phone number Contract fulfillment
Marketing & promotions (with consent) Email, game preferences User consent
Analytics & platform improvement Usage data, cookies Legitimate interest

Isama will not use your data for any purpose other than those stated above without first obtaining your explicit consent.

4 Data Sharing and Disclosure to Third Parties

Isama does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain limited situations, we may need to share your information with the following parties:

  • Payment service providers: to process your deposit and withdrawal transactions securely and promptly.
  • KYC service providers: to verify your identity in compliance with gambling laws and anti-money laundering requirements.
  • Cloud and IT infrastructure service providers: that help us operate the platform securely and reliably.
  • Regulatory authorities and law enforcement: when required by law or a valid court order.
  • Audit and compliance partners: to ensure our operations meet the standards of the online gambling industry.

All third parties we engage are bound by strict confidentiality agreements and are only permitted to use your data for the agreed purposes. isama remains fully accountable for the security of your data even when third parties are involved.

5 Data Encryption and Security Measures

Isama continuously invests in the latest security technologies to ensure your personal data is always protected against unauthorized access, loss, or accidental disclosure.

  • 256-bit SSL encryption: All data transmitted between your device and the isama servers is protected by the highest-grade SSL/TLS encryption protocols — the same standard used by leading banks in Malaysia.
  • Hashed password storage: Your password is never stored in plain text. We use a strong hashing algorithm (bcrypt) so that no one — including isama staff — can read your password.
  • Two-factor authentication (2FA): isama supports two-factor authentication for an added layer of protection on your account.
  • 24/7 security monitoring: Our systems are continuously monitored to detect any suspicious access attempts or cyberattacks.
  • Regular security audits: isama conducts regular penetration testing and security audits by independent cybersecurity experts.
While we take all reasonable measures, no security system is entirely impenetrable. We encourage you to also protect your account by using a strong password and never sharing your login credentials.

6 Cookies and Tracking Technologies

Isama uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and understand how users interact with our platform.

Types of cookies we use:

  • Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
  • Performance cookies: Collects information on how users interact with our site to help us improve the experience.
  • Functionality cookies: Remembers your preferences and settings such as language and display options.
  • Analytics cookies: Helps us understand aggregate usage patterns for continuous platform improvement.

You can control or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the isama platform. For more information on managing cookies, refer to your browser's documentation.

7 User Rights Regarding Personal Data

As an isama user, you have certain rights regarding your personal data under Malaysia's PDPA and our own policy. We are committed to respecting and facilitating the exercise of these rights:

Right to Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request an immediate correction.

Right to Erasure

You can request the deletion of your data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You can request your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

Under certain circumstances, you can request that we restrict how we process your data.

To exercise any of the rights above, please contact our Data Protection Officer team. We will respond within 14 business days of receiving your request.

8 Data Retention Period

Isama retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. The following are general guidelines for our retention periods:

  • Active account data: Retained for the duration your account remains active and in use.
  • Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
  • KYC records: Retained for 5 years after account closure in accordance with anti-money laundering requirements.
  • Support communication logs: Retained for 2 years from the date of last interaction.
  • Cookie and analytics data: Retained between 30 days and 2 years depending on the cookie type.

Once the applicable retention period has ended, your data will be securely deleted or anonymized so it can no longer be personally associated with you.

9 Third-Party Links and External Content

The isama platform may contain links to third-party services or content related to our games. Please note that this Privacy Policy applies exclusively to the isama platform.

  • Isama is not responsible for the privacy practices or content of third-party websites that may be accessible through our platform.
  • We encourage you to read the privacy policy of any third-party website or service before providing them with your personal information.
  • Third-party game providers operating within the isama platform are bound by strict privacy agreements, though they maintain their own privacy policies that apply to direct interactions with their games.

Isama does not guarantee the level of privacy protection provided by third parties. Any interaction you have with external entities is at your own risk and subject to their respective privacy policies.

10 Contact Our Data Protection Officer

Isama has appointed a Data Protection Officer responsible for ensuring our compliance with applicable privacy laws and handling all personal data-related inquiries.

If you have any questions, concerns, or complaints regarding how we handle your personal data, or if you wish to exercise any of the rights set out in this policy, please contact us via:

  • Email: [email protected] (please state "Privacy Inquiry" in the email subject line)
  • Live Chat: Available 24/7 via the isama platform
  • FAQ Section: Visit our FAQ page for answers to frequently asked questions

We are committed to responding to all privacy enquiries within 14 business days. For more complex complaints, we will provide regular progress updates until the matter is fully resolved.

isama reserves the right to amend this Privacy Policy from time to time to reflect changes in law, technology, or our operations. Any significant changes will be communicated to you via in-platform notifications or email at least 14 days before taking effect.

Why Your Data Is Safe with isama

Our six tangible commitments to protecting the privacy of every platform user

Bank-Grade Encryption

The same 256-bit SSL technology used by leading banking institutions in Malaysia protects all data transmitted between your device and the isama servers. No sensitive information is ever sent unencrypted.

Secure KYC Process

Your identity verification is carried out through an integrated, secure KYC system. Documents you upload are processed in a protected environment and are never exposed to unrelated parties.

No Sale of Data to Third Parties

Isama has never and will never sell, rent, or trade your personal data to any third party for commercial purposes. Your data belongs to you — not to us as a business asset.

24/7 Security Monitoring

Our cybersecurity team monitors the isama infrastructure around the clock to detect and neutralize any threats before they can affect your data. Independent security audits are conducted on a regular basis.

Full Malaysia PDPA Compliance

Every aspect of data management at isama is designed to comply with Malaysia's Personal Data Protection Act 2010. Our Data Protection Officer ensures our operations consistently meet the latest legal requirements.

Full Control in Your Hands

You can access, correct, or request deletion of your data at any time. Privacy settings and marketing preferences can be managed directly through your account without waiting for approval.


Isama's Privacy Commitment to Malaysia Users

We understand that trust is the foundation of our relationship with you. Every decision we make regarding your data — from how we collect and store it to how we delete it when it is no longer needed — is made with your best interests as our priority.

Isama believes the best gaming experience starts with peace of mind. When you know your data is protected, you can focus entirely on your entertainment experience.

Compliant with Malaysia PDPA 2010
256-bit SSL encryption active
No sale of data to third parties
Periodic independent security audits
24/7 privacy complaint support

Join isama Today

Your Data Is Protected — Time to Start Playing

Create a free account and enjoy a safe, fair, and exciting online entertainment experience alongside over 500,000 isama members who have already trusted our platform.

256-bit SSL data protection Compliant with Malaysia PDPA 24/7 support in Bahasa Malaysia
Bahasa Melayu