Idompet Privacy Policy – Your Data Security is Our Priority

idompet ("kami", "Platform") takes your privacy seriously. We understand that personal data is a sensitive matter and you have the right to know exactly how your information is managed.

This Privacy Policy describes the types of personal data we collect when you use the idompet platform, how that data is used, who it may be shared with, and your rights as the data owner. It applies to all users who access the website, mobile app, and all services provided by idompet.

We operate in accordance with internationally recognised data protection principles, including consent, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality. Every decision concerning your personal data is made with your best interests and security as the priority.

Idompet collects several categories of personal data depending on the type of interaction you have with our platform. Below is a summary of the data types collected:

We do not collect sensitive data categories such as health information, religious beliefs or political views, unless required by law in specific circumstances.

Your personal data is collected through several key channels as you interact with the idompet platform:

• Account Registration: Basic information you provide during the new account registration process, including name, email and phone number.
• KYC Verification: Identity documents submitted during the identity verification process to enable fund withdrawals to be processed.
• Financial Transactions: Details collected when you make a deposit or withdrawal through the various supported payment methods.
• Platform Usage: Data collected automatically via cookies, server logs, and tracking technologies as you browse and use the platform.
• Support Communications: Information you share when contacting our customer support team via live chat or email.
• Promotions and Contests: Data you voluntarily provide when participating in any promotional programmes or contests we organise.

We do not purchase or obtain your personal data from third-party data brokers. All data we hold is either provided directly by you or generated automatically through your use of the platform.

Every piece of data we collect has a clear and legitimate purpose. idompet uses your personal data for the following purposes:

• Service Provision: Creating and managing your account, processing financial transactions and ensuring you can enjoy all platform features seamlessly.
• Identity Verification: Conducting the KYC process required to comply with anti-money laundering (AML) requirements and applicable legal obligations.
• Platform Security: Detecting and preventing fraud, account abuse, hacking and other illegal activities that could compromise platform security and other members.
• Service Communications: Sending important notifications relating to your account, transactions, changes to terms and relevant security information.
• Platform Improvements: Analysing usage patterns to understand user needs and improve platform features, performance and overall experience.
• Customer Support: Enabling our team to provide accurate and effective assistance whenever you need help.
• Legal Compliance: Meeting reporting and compliance obligations to the relevant authorities when required by law.
• Marketing Communications: Sending promotional information and attractive offers – only to members who have consented to receive such communications.

Idompet does not sell or trade your personal data. However, in the course of operating the platform, there are limited situations where data may need to be shared with certain parties:

• Payment Service Providers: Required transaction data is shared with authorised payment processors to enable deposits and withdrawals to be processed securely.
• Game Providers: Basic account information required for operations is shared with game software providers integrated with the idompet platform.
• KYC Verification Services: Identity data is shared with trusted third-party identity verification service providers to facilitate the KYC process.
• Legal Authorities: When required by a court order, regulatory directive, or legitimate legal obligation, relevant data will be disclosed.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the transaction with appropriate notice given to users.

All third parties we work with are required to comply with strict data security and privacy standards. We do not permit them to use your data for any purpose other than those specified in our mutual service agreements.

Protecting your personal data is the top priority of idompet. We implement comprehensive technical and organisational security measures to ensure your data is always protected:

• Data in transit is encrypted using 256-bit TLS/SSL protocols for all communications between your device and our servers.
• Data at rest is encrypted for all sensitive information stored in our databases.
• Role-based access control ensuring that only authorised personnel can access user data.
• 24/7 continuous system monitoring to detect and respond swiftly to any security threats.
• Penetration testing and periodic security audits conducted by independent security experts.
• Data security awareness training for all staff involved in handling user data.

The idompet platform uses cookies and similar tracking technologies to enhance user experience and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform (e.g. most frequently visited pages) to help us improve the user experience.
• Functional Cookies: Remembering your preferences and settings, such as preferred language and display format, to deliver a more personalised experience.
• Analytics Cookies: Used to understand overall usage patterns and help us make data-driven decisions in platform development.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the idompet platform.

As the owner of your personal data, idompet recognises and respects the following rights you hold:

To exercise any of the above rights, please contact our customer support team. We will process your request within 30 days of receipt.

In operating the idompet platform digitally, your personal data may be processed or stored on servers located outside Malaysia. When cross-border data transfers occur, we ensure:

• The recipient country or region has an adequate or equivalent level of data protection.
• Appropriate data transfer agreements, including recognised standard contractual clauses, have been implemented.
• All data transfer partners adhere to privacy policies consistent with the idompet Privacy Policy.
• You will be informed of such data transfers where relevant through updates to this Privacy Policy.

Idompet consistently strives to process and store the personal data of Malaysia members in an environment that meets or exceeds local data protection standards.

Idompet retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

• Active Account Data: Retained for the duration your account remains active, plus any period required for legal compliance following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with financial reporting and anti-money laundering requirements.
• KYC Documents: Retained for the period stipulated by applicable compliance regulations, typically five (5) to seven (7) years.
• Support Communication Logs: Retained for two (2) years from the date of last interaction for reference and service improvement purposes.
• Analytics Data: Anonymised data may be retained for longer periods for trend analysis and platform improvement purposes.

Once the retention period expires and there is no legal requirement to retain the data further, your personal data will be securely deleted or anonymised in accordance with our established data deletion procedures.

Idompet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. When amendments are made:

• The "Last Updated" date at the top of this document will be revised accordingly.
• For material amendments, we will notify members via an in-platform notice or their registered email.
• Continued use of the idompet platform after amendments are published constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. If you disagree with any amendments, you have the right to close your account by contacting our customer support.

If you have any questions, concerns, or complaints regarding how idompet handles your personal data, do not hesitate to contact us:

• Live Chat: The fastest way to reach us — our support team is available 24 hours a day, 7 days a week.
• Privacy Email: [email protected] – for complaints or requests related to personal data that require a written response.
• FAQ: Review FAQ page us for answers to commonly asked privacy-related questions.

We are committed to handling all privacy-related inquiries and complaints with seriousness and professionalism. Every request received will be acknowledged within two (2) business days and resolved within a reasonable timeframe depending on the complexity of the case.

We value your trust in idompet and will continue to ensure that your privacy and personal data security are maintained at all times.