This Privacy Policy explains how i1rm collects, uses, stores and shares your personal information when you use our website at i1rm.cam, our mobile app, or any of our gaming services. Please read it alongside our Terms & Conditions. By registering or continuing to use i1rm, you confirm that you have read and understood this policy.
Who We Are
i1rm is an online casino and sports-betting platform serving players in Malaysia. We operate the website i1rm.cam and the i1rm Android app (version 2.1.1). For the purposes of data protection, i1rm is the data controller responsible for your personal information. If you have questions about how we handle your data, our Privacy Team is available via 24/7 Live Chat.
Data We Collect
We collect the minimum data needed to operate a safe, fair gaming environment and to meet our legal obligations. The table below summarises what we collect and why.
| Category | Examples | When Collected |
|---|---|---|
| Identity | Full name, date of birth, National ID Card / Passport / Driving Licence number | Account registration and KYC verification |
| Contact | Phone number, preferred language | Account registration |
| Financial | Bank account details, Touch 'n Go eWallet reference, DuitNow ID, FPX transaction IDs | Deposits and withdrawals |
| Usage | Games played, bet amounts, session duration, device type, IP address | Automatically, during gameplay |
| Technical | Browser type, operating system, app version, crash logs | Automatically, via app and browser |
| Communications | Live Chat transcripts, support tickets | When you contact our support team |
We do not collect your email address for marketing or store it on our platform. We do not collect sensitive personal data such as race, religion or health information.
How We Use Your Data
Running Your Account
We use your identity and contact details to create and maintain your i1rm account, verify your age (you must be 18 or older), and process deposits and withdrawals. Minimum deposit is RM45; minimum withdrawal is RM70. Without this data, we cannot provide the service.
Fraud Prevention and Compliance
Financial transaction data and device fingerprints help us detect and prevent fraudulent activity, money laundering and underage gambling. KYC documents are reviewed within 12 hours of submission and are required before your first withdrawal.
Improving Our Platform
Anonymised usage data helps us understand which games from providers like Red Tiger, Habanero, JILI, PG Soft and Sexy Gaming are most popular, how the app performs, and where we can reduce friction in the registration or deposit flow.
Responsible Gambling Tools
We analyse betting patterns to flag potentially harmful behaviour and offer deposit limits, cool-off periods, or self-exclusion. This processing is in your interest and forms part of our duty of care. Visit our Responsible Gaming page for more details.
Customer Support
Live Chat transcripts are stored so that our 24/7 support team can follow up on open issues and maintain continuity when you return to a conversation.
Legal Basis for Processing
Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your data on the following bases:
- Contract performance — processing necessary to deliver the gaming service you signed up for.
- Legal obligation — identity verification, fraud checks and anti-money-laundering obligations.
- Legitimate interests — platform security, fraud detection and improving our service, where these interests do not override your rights.
- Consent — where we ask you to opt in (for example, for bonus notifications via Live Chat).
When We Share Your Data
i1rm does not sell your personal data. We share it only in these limited circumstances:
- Payment processors — Touch 'n Go eWallet, DuitNow, FPX and bank partners need transaction data to process your deposits and withdrawals.
- Game providers — Red Tiger, Habanero, JILI, PG Soft and Sexy Gaming receive a session token to load games; they do not receive your full identity details.
- KYC / identity verification services — your ID documents are passed to our verified identity-check partner for review.
- Legal authorities — if required by Malaysian law, a court order, or to prevent serious harm, we will disclose data to the appropriate authority.
- Business transfers — in the event of a merger or acquisition, data may transfer to the acquiring entity, subject to the same privacy protections.
All third-party partners are contractually required to handle your data securely and use it only for the stated purpose.
Cookies and Tracking
Our website uses cookies and similar technologies to keep you logged in, remember your preferences, and collect anonymised analytics. We use three categories of cookies:
- Strictly necessary — session cookies that make the site function. These cannot be disabled.
- Functional — remember your language preference and game filters.
- Analytics — aggregated, anonymised data on page visits and feature usage to guide product decisions.
You can control non-essential cookies through your browser settings. Disabling analytics cookies will not affect your ability to play or withdraw.
How Long We Keep Your Data
We keep your account data for as long as your account is active, plus a period of five years after closure to meet our anti-money-laundering obligations under Malaysian law. KYC documents are retained for six years. Anonymised usage data may be kept indefinitely for statistical analysis. Live Chat transcripts are retained for two years.
Your Rights Under Malaysian Law
Under the Personal Data Protection Act 2010, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Withdraw consent — where processing is based on your consent, you can withdraw it at any time without affecting prior lawful processing.
- Prevent processing for direct marketing — opt out of any promotional messages.
- Raise a complaint — contact Malaysia's Personal Data Protection Commissioner if you believe we have breached the PDPA.
To exercise any of these rights, reach our Privacy Team via 24/7 Live Chat. We will acknowledge your request within two business days and resolve it within 21 calendar days.
Protecting Minors
i1rm is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we discover that a minor has registered, we will close the account immediately and delete all associated data. If you believe a minor is using our platform, please contact us via Live Chat without delay.
Security Measures
We use industry-standard security measures to protect your personal data, including TLS encryption for all data in transit, encrypted storage for financial records and KYC documents, access controls limiting which staff can view sensitive data, and regular security audits. No system is perfectly secure; if a breach occurs that is likely to affect your rights, we will notify you and the relevant authority as required by law.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements. When we make a material change, we will post the updated policy on this page with a revised "Last updated" date. We encourage you to check this page periodically. Continued use of i1rm after a change is posted constitutes acceptance of the revised policy.
Contact the Privacy Team
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, please reach us through our 24/7 Live Chat at i1rm Help Centre. We do not publish an email address; Live Chat is the fastest way to reach us and leaves a documented record of your request.
Governing Law: Personal Data Protection Act 2010 (Malaysia)
Support: 24/7 Live Chat via the Help Centre
KYC Review: Within 12 hours of document submission