At ijaya, your privacy is a fundamental commitment — not an afterthought. This policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over that data.
Plain-language summary — the full legal text is set out in the sections below
ijaya collects personal data strictly necessary to operate your account, process transactions, satisfy KYC requirements, and improve the platform. We do not collect information for its own sake.
Your personal information is never sold, rented, or traded to third-party advertisers or data brokers. Period. What you share with ijaya stays with ijaya and its vetted service partners.
All data transmitted between your device and the ijaya Platform is protected by 256-bit SSL/TLS encryption — the same standard used by banks and financial institutions across Malaysia.
You have the right to access, correct, port, or request deletion of your personal data at any time. Submit a request to our support team and we will respond within the timeframes set out in this policy.
Where data is shared with third parties — such as payment processors like DuitNow, FPX, or Touch 'n Go eWallet — it is limited to what those partners strictly require to perform their services, under binding confidentiality obligations.
We do not keep your data indefinitely. Retention periods are defined based on legal requirements, operational necessity, and the nature of the data. When data is no longer needed, it is securely deleted or anonymised.
Last updated: 1 January 2026
This Privacy Policy ("Policy") describes how ijaya ("we", "us", "our") — the operator of the online casino and sports betting platform accessible at https://ijaya.cam — collects, uses, stores, discloses, and otherwise processes the personal data of players and visitors ("you", "your", "Data Subject") who interact with our Platform, services, and communications.
ijaya is committed to protecting your privacy and handling personal data in a transparent, lawful, and responsible manner. This Policy is designed to give you a clear and complete picture of our data practices, consistent with applicable data protection legislation.
By registering an account on, or otherwise using, the ijaya Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with our Terms & Conditions, which govern your use of the Platform and are incorporated herein by reference.
If you have any questions about this Policy or our data practices, please refer to Section 15 (Contact Us) for our support contact details.
For the purposes of this Policy, the following terms have the meanings stated:
We collect the following categories of personal data, depending on your interaction with the Platform:
3.1 Identity & Contact Data
3.2 Financial & Transaction Data
3.3 Gaming & Activity Data
3.4 Technical & Device Data
3.5 Communications Data
ijaya does not knowingly collect sensitive personal data (such as health information, religious beliefs, or political opinions) as part of normal account operations. Where KYC verification incidentally reveals such information, it is handled with the highest level of care and is not used for any purpose other than identity confirmation.
We collect personal data through the following means:
We process personal data for the following defined purposes:
| Purpose | Description | Required? |
|---|---|---|
| Account Management | Creating, maintaining, and managing your registered account, including authentication and security. | Yes |
| Transaction Processing | Processing deposits and withdrawals via Malaysian payment methods (Maybank, CIMB, DuitNow, Touch 'n Go, Boost, FPX, etc.) and issuing correct payment to verified accounts. | Yes |
| KYC & Compliance | Verifying identity, satisfying anti-money laundering (AML) obligations, age verification (21+ requirement), and other regulatory compliance duties. | Yes |
| Fraud Prevention | Detecting and preventing fraudulent activity, bonus abuse, account takeover, and other security threats. | Yes |
| Responsible Gambling | Administering self-exclusion requests, deposit limits, session controls, and monitoring for indicators of problem gambling behaviour. | Yes |
| Customer Support | Responding to account queries, complaints, and disputes through live chat, email, and other support channels. | Yes |
| Platform Improvement | Analysing aggregate usage patterns, technical performance, and player behaviour to improve platform quality and user experience. | No — opt-out available |
| Marketing | Sending promotional communications, bonus offers, and VIP updates to players who have consented to receive such communications. | No — consent-based |
Where processing is not strictly necessary for account operation, it will only occur where you have provided explicit consent, or where ijaya has a legitimate interest that does not override your privacy rights.
ijaya relies on the following legal bases when processing your personal data:
ijaya does not sell, rent, or trade your personal data. We may, however, share data with the following categories of third party, strictly limited to the data required for each party's function:
All third-party service providers engaged by ijaya are contractually bound to process personal data only for the purposes specified and to maintain confidentiality and appropriate security measures. We conduct due diligence on all data processors before engagement.
The ijaya Platform is operated with infrastructure that may be physically located in data centres outside Malaysia. Where personal data is transferred to or processed in a jurisdiction outside Malaysia, ijaya ensures that equivalent protections apply through one or more of the following mechanisms:
Players in Malaysia retain all rights described in Section 12 regardless of where their data is processed.
ijaya implements a layered security programme to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:
No data transmission over the internet can be guaranteed to be 100% secure. While ijaya takes all commercially reasonable precautions, we cannot warrant absolute security. Players can reduce risk by using strong, unique passwords and enabling any available two-factor authentication on their accounts.
ijaya retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention guidelines apply:
Upon expiry of the applicable retention period, data is either securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.
ijaya uses cookies and similar technologies on the Platform to support functionality, security, and analytics. The following types of cookies may be in use:
You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to use some features of the Platform. You may also withdraw consent for non-essential cookies at any time.
Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by ijaya. To exercise any of these rights, contact our support team using the details in Section 15. We will respond within thirty (30) days of a valid request, and within extended timeframes for complex requests.
Request a copy of the personal data we hold about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your Account or our records.
Request deletion of your personal data where it is no longer necessary, where consent is withdrawn, or where processing is unlawful — subject to legal retention obligations.
Request that we limit the processing of your data in defined circumstances — for example, while a rectification request is under review.
Receive a copy of your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests, including direct marketing. Objections to marketing will be actioned immediately.
Withdraw consent for any consent-based processing at any time, without affecting the lawfulness of processing prior to withdrawal.
Where decisions affecting you are made solely by automated means, you have the right to request human review of that decision.
We will not charge a fee for exercising your rights in ordinary circumstances. Where requests are manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or decline to action the request, with written explanation. We will always endeavour to verify your identity before actioning a data rights request to protect against unauthorised access to another person's data.
ijaya's Platform and services are strictly intended for adults. We enforce a minimum age requirement of 21 years for all registered Players and implement KYC age verification as part of the registration process.
We do not knowingly collect personal data from individuals under the age of 21. If we discover that an Account has been registered by a person under 21, we will immediately suspend that Account, void all associated bets, and delete the personal data collected in connection with that Account to the extent not required for legal compliance purposes.
If you have reason to believe that a minor has registered on the Platform, please contact our support team immediately using the contact details in Section 15.
ijaya reserves the right to update or amend this Privacy Policy from time to time to reflect changes in legal requirements, business operations, or data processing activities. Material changes will be communicated to registered Players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect, where reasonably practicable.
Your continued use of the Platform after any revised Policy takes effect constitutes your acknowledgement of the updated terms. We encourage you to periodically review this page to stay informed of our current data practices.
The "Last Updated" date at the top of the Table of Contents reflects when this Policy was most recently revised. Prior versions of this Policy may be obtained by contacting our support team.
For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the ijaya Data Privacy team through the following channels:
We aim to respond to all privacy-related correspondence within ten (10) business days. For complex data subject access requests, the response period is up to thirty (30) days from receipt of a valid, identity-verified request.
If you have concerns about how we have handled your personal data that are not resolved to your satisfaction by our support team, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We encourage you to contact us first, as we are committed to resolving all privacy concerns directly.
Your privacy matters to us at every step. If you have questions about your data rights or how ijaya protects your information, our support team is available 24/7.
🔞 For players aged 21 and above only. Gamble responsibly.