ikea888 Privacy Policy

2 Personal Data We Collect

ikea888 collects the following categories of personal data in connection with your use of the Platform:

Where ikea888 is required by law or by its licensing authority to collect specific categories of personal data and you fail to provide such data when requested, ikea888 may be unable to fulfil its obligations to you, including processing deposits or withdrawal requests.

3 How We Collect Your Data

ikea888 collects personal data through the following methods:

• Direct collection: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, and server logs as you interact with the Platform. See Section 6 for details of our cookies policy.
• Third-party sources: Data received from payment processors (for transaction verification), identity verification service providers (for KYC purposes), and fraud prevention databases (for security purposes). ikea888 only receives data from third-party sources where there is a lawful basis for doing so.
• Publicly available sources: In limited circumstances, ikea888 may cross-reference data against publicly available information for identity verification or fraud prevention purposes.

4 Purpose and Legal Basis for Processing

ikea888 processes your personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which we process your data and the corresponding legal basis:

• Contract performance: Processing necessary to register your account, process deposits and withdrawals, deliver game services, and fulfil our obligations to you under the Terms and Conditions.
• Legal obligation: Processing required by applicable law, including anti-money laundering obligations, age verification requirements, tax reporting obligations, and compliance with instructions from regulatory authorities.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of the Platform, where such processing does not override your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications, personalised recommendations, and non-essential cookies, where you have provided explicit prior consent. You may withdraw consent at any time by contacting support or adjusting your account preferences.

ikea888 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where expressly required by applicable law or where you have provided explicit consent.

5 Data Sharing and Disclosure

ikea888 does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. ikea888 may share your personal data with the following categories of third parties, solely for the purposes described:

• Payment processors: FPX-connected banks (Maybank, CIMB, Public Bank, RHB, Hong Leong), Touch n Go eWallet, and Boost — for the purpose of processing deposits and withdrawals. Payment processors receive only the data necessary to process the relevant transaction.
• Identity verification providers: Third-party KYC and age verification service providers engaged by ikea888 to verify player identity in accordance with regulatory requirements.
• Fraud prevention services: Third-party fraud detection and prevention platforms that assist ikea888 in identifying and preventing fraudulent activity on the Platform.
• Game content providers: Game studios and live casino operators who deliver game content through the Platform. These providers may process technical data (such as session identifiers) to deliver their services, subject to their own data protection obligations.
• Regulatory and law enforcement authorities: Where ikea888 is required by law, regulation, court order, or the instruction of a competent regulatory authority to disclose personal data, it will do so. ikea888 will, where legally permissible, notify affected players of such disclosure.
• Professional advisers: Legal, audit, and compliance advisers engaged by ikea888, subject to obligations of professional confidentiality.

All third parties with whom ikea888 shares personal data are contractually required to process such data in accordance with applicable data protection law and ikea888's data security requirements. ikea888 does not permit third parties to use your personal data for their own purposes beyond those specified above.

6 Cookies and Tracking Technologies

The ikea888 Platform uses cookies and similar tracking technologies to operate and improve the Platform, to ensure security, and — with your consent — to deliver personalised content and measure the effectiveness of marketing activities.

ikea888 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your login session and ensuring secure access. These cookies cannot be disabled without impairing core Platform functionality.
• Performance cookies: Collect anonymised data on how players use the Platform (pages visited, time spent, error messages) to help ikea888 improve the user experience. These cookies do not identify you personally.
• Functionality cookies: Remember your preferences (such as language settings and display preferences) to provide a more personalised experience.
• Analytics cookies: Used with your consent to analyse aggregated usage patterns for internal reporting and Platform development purposes.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the operation of the Platform, including your ability to maintain a logged-in session.

7 Data Retention

ikea888 retains your personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction data: Retained for a minimum of seven (7) years following the relevant transaction date, in accordance with applicable financial record-keeping requirements.
• Support communications: Retained for a minimum of two (2) years from the date of the relevant interaction, for quality assurance and dispute resolution purposes.
• Technical and usage data: Retained in anonymised or aggregated form for up to three (3) years for analytical purposes. Raw technical logs are typically retained for a shorter period not exceeding twelve (12) months.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ikea888's data disposal procedures.

8 Data Security

ikea888 implements appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption on all data transmissions between your device and ikea888's servers;
• PCI DSS-compliant payment data processing — ikea888 does not store full payment card numbers or CVV codes;
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Regular security assessments and penetration testing of the Platform;
• Incident response procedures for the detection, investigation, and notification of personal data breaches.

While ikea888 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are encouraged to use the two-factor authentication feature available on all ikea888 accounts to further protect your account from unauthorised access.

9 Your Rights as a Data Subject

Subject to applicable data protection legislation, you have the following rights in relation to the personal data ikea888 holds about you:

• Right of access: The right to obtain confirmation as to whether ikea888 processes personal data about you and, if so, to receive a copy of that data.
• Right to rectification: The right to have inaccurate personal data corrected and incomplete personal data completed without undue delay.
• Right to erasure: The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ikea888's legal retention obligations.
• Right to restriction of processing: The right to request that ikea888 restrict the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller, where processing is based on consent or contract performance and is carried out by automated means.
• Right to object: The right to object to processing based on legitimate interests, including profiling for marketing purposes. ikea888 will cease such processing unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact ikea888 support via Live Chat or by email at [email protected]. ikea888 will respond to all verified requests within thirty (30) days. We may require proof of identity before processing your request.

10 International Data Transfers

ikea888's servers and those of its principal service providers are located within jurisdictions selected for their data protection standards. Where personal data is transferred to a jurisdiction outside of Malaysia or the jurisdiction in which ikea888 is licensed, ikea888 will ensure that appropriate safeguards are in place to protect the transferred data, including the use of standard contractual clauses or equivalent data transfer mechanisms recognised under applicable law.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside of Malaysia. In all cases, such transfers are conducted in compliance with applicable data protection legislation and are limited to the data necessary for the specified processing purpose.

11 Children's Privacy

The ikea888 Platform is strictly intended for individuals aged 21 years and above. ikea888 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process, and any account found to have been registered by a person under the age of 21 will be immediately suspended and all associated data will be deleted.

If you believe that ikea888 has inadvertently collected personal data from a minor, please contact us immediately at [email protected] so that we may take appropriate remedial action without delay.

12 Changes to This Privacy Policy

ikea888 reserves the right to update or amend this Privacy Policy at any time. Material changes will be notified to registered players via a notice posted on the Platform and, where reasonably practicable, via email to the address registered on your account, at least fourteen (14) days before the change takes effect.

Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised Privacy Policy, you should cease using the Platform and may request account closure in accordance with the procedure described in the Terms and Conditions.

The version of this Privacy Policy displaying the most recent "Last Updated" date supersedes all prior versions.

13 Contact and Complaints

For all data protection enquiries, requests to exercise your rights, or complaints regarding the handling of your personal data by ikea888, please contact our support team through the following channels:

• Live Chat: Available 24/7 from within the ikea888 Platform — the fastest way to reach our team for urgent data matters.
• Email: [email protected] — for written data subject access requests, rectification requests, erasure requests, and formal complaints.

ikea888 is committed to resolving all data protection complaints promptly and fairly. If you are not satisfied with our response to a complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body with jurisdiction over our data processing activities.

When contacting us regarding a data matter, please include your registered username or email address and a description of your request or concern so that we can identify your account and respond efficiently.