Privacy Policy Istana2000 – Your Information is Safe With Us

1 Introduction

Istana2000 is an online wagering platform fully dedicated to ensuring every member's experience — including data security and privacy — meets the highest standards. We understand that your trust cannot be bought; it must be earned through concrete actions and transparent policies.

This Privacy Policy applies to all users who access the Istana2000 website, use our mobile app, and all interactions that take place through our customer support channels. It covers how we collect, store, use, and occasionally share your personal information in accordance with legitimate operational needs and legal obligations.

We want you to know that privacy is not merely a technical matter to us — it is a core value that shapes how we design our systems, train our staff, and make business decisions every day. As an Istana2000 member, you have the right to know clearly what happens to your data, and that is why this document is written in plain, easy-to-understand language.

2 Information We Collect

2.1 Information You Provide Directly

When you register as an Istana2000 member or interact with our platform, you actively provide us with information. This includes:

• Identity information: Full name as per identification card, date of birth, Malaysian identity card number (MyKad) or passport.
• Contact information: Active mobile number, email address, and current residential address.
• Financial information: Malaysian bank account number, bank name, and e-wallet details registered in your name.
• KYC verification documents: Copies of identification documents and proof of address for mandatory identity verification purposes.
• Login information: Your chosen username and encrypted password.

2.2 Information Collected Automatically

Every time you use the istana2000 platform, our system automatically logs certain technical information for security and service improvement purposes:

• Device information: Device type, operating system, phone model, and web browser version in use.
• Network information: IP address, approximate location based on IP, internet service provider (ISP) name.
• Activity data: Login records, pages visited, games played, total bets placed, and session duration.
• Cookie data: Session cookies and preference cookies that help us remember your chosen settings.

Data Type	Purpose of Collection	Retention Period
Personal Identity	Account registration, KYC verification, legal compliance	Throughout the active account period + 7 years
Financial Information	Deposit & withdrawal processing, fraud prevention	5 years after last transaction
Technical Data	Account security, fraud detection, service improvement	90 rolling days
Activity Records	Customer support, dispute resolution, internal audits	2 years after last activity
Support Communications	Historical reference, quality control	3 years

3 How We Use Your Data

All information we collect is used for specific and legitimate purposes. istana2000 never uses your data for any purpose not stated here without first obtaining your consent.

3.1 Platform Operations

Your data is used to operate Istana2000's core services – processing account registration and verification, executing deposit and withdrawal transactions securely, providing access to all games and betting categories, and ensuring every gaming session runs smoothly without interruption.

3.2 Security & Fraud Prevention

The istana2000 security monitoring system uses technical data to detect suspicious login patterns, identify unauthorised access attempts, prevent identity fraud and money laundering, and ensure every financial transaction is legitimate and authorised by the true account owner.

3.3 Legal Compliance

As a responsible operator, istana2000 retains certain records to fulfil legal obligations related to anti-money laundering (AML) prevention, Know Your Customer (KYC) compliance, and cooperation with competent authorities as required under Malaysian law.

3.4 Service Improvement

Aggregated and anonymised activity data helps the Istana2000 technology and product teams understand user needs, identify technical issues early, and continuously improve the platform interface and overall experience over time.

3.5 Marketing Communications

With your consent, we use your contact information to send notifications about the latest promotions, exclusive VIP member offers, and platform updates that may interest you. You may withdraw this consent at any time through the notification settings in your account.

4 Information Sharing

Istana2000 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. This is our absolute commitment to every member.

However, there are limited situations where we may need to share certain information with trusted parties:

• Payment processors: Transaction information is shared with licensed payment processors such as FPX and DuitNow providers solely to facilitate your financial transactions. These parties are bound by strict confidentiality agreements.
• IT service providers: Server infrastructure and cloud computing service providers that help us run the platform. They only access data required for their technical tasks and are not permitted to use it for any other purpose.
• Competent authorities: When required by Malaysian law or a valid court order, we will disclose the necessary information to the relevant authorities.
• Regulatory body: For audit purposes and compliance with the relevant gaming regulatory bodies.

5 Data Encryption and Security

Istana2000 continuously invests in the latest security infrastructure to ensure your data is always protected against increasingly sophisticated cyber threats. Below are the key security layers we employ:

• 256-bit SSL/TLS Encryption: All communications between your device and the istana2000 servers are encrypted using the highest encryption standards, equivalent to international banking protocols.
• bcrypt password storage: Your password is never stored in plain text. We use the bcrypt hashing algorithm, which is irreversible.
• Two-factor authentication (2FA): We support and encourage the use of 2FA to protect your account from unauthorised access even if your password is compromised.
• 24/7 security monitoring: Our information security team monitors suspicious activity around the clock using real-time threat detection systems.
• Regular penetration testing: Our platform undergoes regular security testing by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

6 Cookies and Tracking Technologies

Istana2000 uses cookies — small text files stored on your device — to enhance your experience on our platform. Below are the types of cookies we use:

6.1 Essential Cookies

These cookies are required for core platform functions such as maintaining your login session and remembering your language preferences. Without them, certain parts of the platform will not function correctly. Essential cookies cannot be disabled.

6.2 Performance Cookies

These cookies collect information about how you use the platform — the most frequently visited pages, error messages received, and so on. All such information is collected anonymously and used solely to improve platform performance.

6.3 Functional Cookies

These cookies allow the platform to remember your preferences such as your username, preferred language, and display settings, providing a more personalised experience and saving you time.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the Istana2000 platform.

7 Your Rights Regarding Personal Data

As an istana2000 member and data subject, you have the following rights regarding your personal information held by us:

8 Data Storage and Deletion

Istana2000 retains your personal information for as long as necessary to fulfil the purpose for which it was collected, including meeting any legal, accounting, or reporting requirements. Retention periods vary by data type as specified in the table in Section 2.

When the retention period expires or you submit a valid deletion request, your data will be securely erased from our systems using permanent deletion methods that ensure the information cannot be recovered. For data stored on physical servers, we apply deletion procedures that comply with recognised information security standards.

Please note that in certain cases, we may be legally required to retain specific records even after account closure. In such situations, retained data will be used solely for legal compliance purposes and not for any other operational use.

9 Amendments to the Privacy Policy

Istana2000 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or our business practices. Any changes made will be accompanied by a clearly stated update date at the top of this document.

For changes deemed significant and directly affecting how we handle your data, Istana2000 will provide advance notice via your registered email or through a prominent in-platform notification at least 14 days before the changes take effect.

Continued use of the istana2000 platform after any changes take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us. Our data protection team is ready to assist you promptly and professionally.