Irm1 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") describes how irm1 ("Platform", "we", or "irm1") collects, uses, stores, shares, and protects personal data provided by registered members and visitors of the irm1 platform in Malaysia.

This Policy applies to all individuals who interact with irm1 — including registered members, users in the process of registering, and anyone browsing the irm1 platform via the website or mobile app. By using irm1's services, you agree to the data management practices described in this Policy.

Irm1 is the data controller for all personal data collected through our platform. We take full responsibility for ensuring that such data is processed lawfully, fairly, and transparently in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection legislation.

Irm1 collects various types of personal data from our members and users depending on the nature of your interaction with the platform. The following are the main categories of data we collect:

Registration & Identity Data

When you register an irm1 account, we collect information such as your full name, mobile number, and the account verification details required. All such information is collected directly from you and is necessary to create and maintain your irm1 account securely.

Financial Transaction Data

To process deposits and withdrawals, irm1 collects information related to the payment method you use — including your eWallet account name (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow number, or FPX account details (Maybank2u, CIMB Clicks). irm1 does not store full credit or debit card numbers in our systems. All payment processing is handled through approved, secure payment gateways.

Platform Usage Data

Irm1 collects technical data about how you use the platform — including login records, betting and gaming activity, transaction history, language preferences and settings, as well as device and browser information. This data is used to improve the user experience, detect fraudulent activity, and ensure the security of your account.

Communications Data

When you contact the irm1 support team via live chat, email, or other channels, we retain records of those communications for complaint resolution, staff training, and service improvement purposes. All support communications are handled by irm1 Malaysia's Bahasa Melayu-speaking support team.

Irm1 uses collected personal data solely for the stated and legitimate purposes. We do not use your data for any other purpose without first notifying you and, where required, obtaining your fresh consent.

Platform Operations Purpose

• Creating and maintaining your irm1 account and verifying your identity in accordance with regulatory requirements.
• Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and handling your winnings withdrawals quickly and securely.
• Maintaining betting and gaming transaction records for accountability and dispute resolution purposes.
• Providing effective and personalised customer support in Bahasa Melayu.
• Sending important operational communications such as transaction confirmations, security notices, and notifications of changes to terms.

Security & Compliance Purposes

• Detecting and preventing fraud, money laundering, terrorism financing, and other illegal activities conducted through the irm1 platform.
• Ensuring compliance with applicable legal and regulatory requirements, including Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
• Maintaining records required for audit, investigation, and responding to lawful requests from authorities.
• Protecting the safety of other members and the overall integrity of the irm1 platform.

Service Improvement Purpose

• Analysing usage patterns to improve the design, performance, and features of the irm1 platform.
• Personalising your experience by displaying content, promotions, and recommendations that are more relevant to your interests and activity on irm1.
• Conducting market research and statistical analysis in aggregated, anonymised form for business planning purposes.

Irm1 understands that member trust depends greatly on how we handle data sharing. We do not share members' personal data with third parties except in limited, legitimate circumstances as outlined below.

Trusted Service Providers

Irm1 shares only the minimum necessary personal data with third-party service providers who assist us in operating the platform — including payment gateway providers for processing eWallet and FPX transactions, cloud and data hosting service providers, and technical support service providers. All such service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific agreed purposes.

Legal Requirements & Authorities

Irm1 may be required to disclose members' personal data to relevant authorities — such as the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or the courts — when mandated by law or a valid court order. In all such cases, we will disclose only the minimum data necessary and, where permitted by law, will notify the relevant member of the disclosure.

What irm1 Does NOT Do

• Selling or renting members' personal data to any party for marketing or commercial purposes.
• Sharing data with related or affiliated companies for purposes unrelated to irm1's operations without member consent.
• Using member data to build profiles that are then sold or shared with third-party advertisers.

The security of members' personal data is among irm1's highest operational priorities. We continually invest in cybersecurity infrastructure and staff training to ensure your data remains protected at all times.

Irm1's Technical Security Measures

• 256-bit SSL Encryption: All communications between your browser or app and irm1's servers are encrypted using the latest TLS protocol, preventing third parties from intercepting your data in transit.
• Role-Based Access Controls: irm1's systems apply strict access controls, ensuring each staff member can only access the data they need to perform their specific duties — nothing more.
• Two-Factor Authentication (2FA): irm1 supports and encourages all members to enable 2FA on their accounts for an additional layer of protection against unauthorised login attempts.
• Continuous Security Monitoring: irm1's automated monitoring system operates 24 hours a day to detect unusual or suspicious activity on the platform and take immediate action where necessary.
• Regular Security Audits: irm1 conducts regular security assessments and penetration testing through independent cybersecurity firms to identify and address any potential vulnerabilities.

Data Retention Period

Irm1 retains members' personal data for as long as your account remains active and for a reasonable period after account closure to meet legal obligations, resolve any outstanding disputes, and comply with record retention requirements under Malaysian law. Data that is no longer needed will be securely deleted using approved data disposal procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as an irm1 member have several important rights regarding your personal data held by us. irm1 is committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact the irm1 support team via in-platform live chat or by emailing support@irm1.com. Include sufficient identifying information so we can process your request accurately and securely.

The irm1 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns in aggregate.

Types of Cookies Used by irm1

• Essential Cookies: These cookies are required for the core functionality of the irm1 platform — including maintaining your login session, remembering your language preferences, and processing transactions securely. They cannot be disabled without affecting the platform's basic functionality.
• Performance Cookies: Used to collect anonymous information about how visitors use the irm1 platform — such as the most frequently visited pages and error messages encountered. This information helps irm1 improve platform performance.
• Functional Cookies: Enabling the irm1 platform to remember your preferences — such as username, language, or region — to deliver a more personalised and consistent experience across every session.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and user experience of the irm1 platform. irm1 does not use third-party cookies for advertising purposes.

Irm1 may send marketing communications to members who have given their consent — including information on the latest promotions, bonuses, upcoming sports tournaments (such as the IPL season, Thomas Cup final, and Malaysia Super League), and new irm1 platform features.

How to Opt Out of Marketing Communications

You can opt out of receiving marketing communications from irm1 at any time through the following methods:

• Click the "Unsubscribe" link found at the bottom of any marketing email you receive from irm1.
• Update your communication preferences in your irm1 account settings under the "Notification Preferences" section.
• Contact irm1's support team via live chat or email support@irm1.com with a request to be removed from our marketing list.

Please note that withdrawing consent for marketing communications will not affect your receipt of essential operational communications such as transaction confirmations, security notices, or alerts regarding changes to irm1's terms, which form part of the platform's core services.

Irm1 services are restricted to individuals aged 18 and above. irm1 does not knowingly collect or process personal data belonging to children under the age of 18. Should irm1 discover that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

If you believe a child has registered an irm1 account without authorisation, please notify us immediately at support@irm1.com so we can take the appropriate steps to protect that child's wellbeing.

Irm1 may update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform developments. The "Last Updated" date at the top of this page will always reflect the date of the most recent amendment.

For amendments involving material changes to members' privacy rights, irm1 will provide advance notice through:

• Notices prominently displayed within the irm1 platform when members log in.
• Email notification to the email address registered with your irm1 account.

Continued use of the irm1 platform after any Privacy Policy amendments take effect will be considered acceptance of the updated terms. If you disagree with the changes made, you have the right to close your account and request the deletion of your personal data in accordance with the rights outlined in Section 6 above.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how irm1 handles your personal data, please contact us through the following channels:

• Privacy Email: support@irm1.com — include "Privacy Inquiry" in the email subject line for faster processing.
• Live Chat: Available 24/7 on the irm1 platform — select the "Privacy & Data" category when starting a chat session.
• Response Time: Privacy-related enquiries will receive a response within 3 business days of receipt.
• Support Languages: Bahasa Malaysia and English — all irm1 support agents are native Bahasa Malaysia speakers.

Irm1 is committed to handling all privacy-related enquiries and complaints seriously, transparently, and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Personal Data Protection Act 2010.