Privacy Policy
At imbajp, your privacy is treated as a fundamental right — not an afterthought. This policy explains exactly what personal data we collect, why we collect it, how it is used, and the rights available to you as a user of our platform.
Last Updated: 1 January 2026Our Privacy Principles
Six commitments that underpin every data decision made at imbajp.
Minimal Collection
We collect only the personal data that is strictly necessary for account management, regulatory compliance, payment processing, and service delivery. Nothing more.
Purpose Limitation
Your data is used solely for the purposes stated in this policy at the time of collection. It will not be repurposed or processed in ways incompatible with the original purpose without your explicit consent.
Security by Design
All personal data is protected using 256-bit SSL encryption in transit and AES encryption at rest. Access controls and audit logging are applied to all data processing systems.
User Control
You have the right to access, correct, export, and delete your personal data at any time by contacting our support team. We honour all such requests within the timeframes required by applicable law.
Retention Limits
We retain personal data only for as long as necessary to fulfil the stated purpose or comply with legal obligations. When data is no longer required, it is securely deleted or anonymised.
Full Transparency
This policy is written in plain language so that every imbajp user — whether in Kuala Lumpur, Penang, Johor Bahru, or elsewhere — can understand exactly what happens to their personal information.
1. Introduction
This Privacy Policy ("Policy") describes how imbajp ("we", "us", "our", "the Platform") collects, uses, stores, and protects personal data provided by or obtained from users ("you", "your", "the User") of the website located at https://imbajp.asia and all associated services.
imbajp is committed to processing personal data in accordance with applicable data protection legislation and international best practices for information security. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside our Terms & Conditions, which govern the overall legal relationship between you and imbajp. Both documents form part of the same contractual framework.
2. Definitions
For the purposes of this Policy, the following definitions apply:
- "Personal Data"
- Any information that relates to an identified or identifiable natural person, including name, identification number, contact details, location data, or online identifiers.
- "Processing"
- Any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.
- "Data Controller"
- imbajp, as the entity that determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor"
- A third party that processes personal data on behalf of imbajp in accordance with our instructions, such as payment processors or KYC service providers.
- "Consent"
- A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
- "KYC"
- Know Your Customer — the regulatory process of verifying the identity and eligibility of account holders, including age verification (21+ requirement).
- "Cookie"
- A small text file stored on a User's device by a web browser for the purpose of session management, preference storage, and analytics.
3. Data We Collect
imbajp collects personal data through several channels. The categories of data collected, along with the specific data points and collection source, are detailed in the table below:
| Data Category | Specific Data Points | Collection Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number (MyKad or passport number), photograph | Registration form, KYC document submission |
| Contact Data | Email address, mobile phone number, residential address | Registration form, account settings |
| Financial Data | Deposit and withdrawal history, payment method details (e-wallet ID, bank account reference), transaction amounts in MYR or cryptocurrency | Payment processing, cashier transactions |
| Gaming Activity Data | Bets placed, games played, win/loss history, session duration, bonus usage | Platform activity logging |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, geolocation (country/city level) | Automatic collection via server logs and cookies |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Customer support interactions |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data unless specifically required for identity verification by applicable law or regulatory mandate.
4. How We Process Your Data
Personal data collected by imbajp is processed for the following specific purposes:
Account Management
Creating, maintaining, and administering your account, including verifying your identity (KYC), processing login credentials, and managing account settings such as deposit limits and self-exclusion preferences.
Payment Processing
Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency channels (BTC, ETH, USDT, LTC), as well as processing withdrawal requests to verified recipient accounts.
Regulatory Compliance
Meeting our legal obligations in respect of anti-money laundering (AML), know-your-customer (KYC), age verification (21+), and responsible gambling requirements. Retaining records as required by applicable regulations.
Service Improvement
Analysing aggregated, anonymised usage data to understand how users interact with the Platform and improve the gaming experience, site performance, and customer support quality.
Marketing Communications
Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may opt out at any time by contacting support or updating your communication preferences in account settings.
Fraud Prevention & Security
Detecting and preventing fraudulent activity, account takeovers, money laundering attempts, and other prohibited conduct as defined in our Terms & Conditions.
5. Legal Basis for Processing
imbajp processes personal data on the following legal bases:
- Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management and payment processing.
- Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and age verification mandates.
- Legitimate Interests: Processing conducted for fraud prevention, security monitoring, and service improvement, where such interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and optional analytics, where you have provided explicit, freely given consent. You may withdraw consent at any time without detriment to your account.
6. Data Sharing & Disclosure
imbajp does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients only where strictly necessary:
- Payment Processors: Third-party payment service providers facilitating deposit and withdrawal transactions (e.g., DuitNow, FPX network banks, cryptocurrency network processors). These parties receive only the minimum data necessary to execute the transaction.
- KYC & Identity Verification Providers: Regulated third-party services engaged to verify your identity and age in compliance with applicable regulatory requirements.
- Regulatory Authorities: Government bodies, law enforcement agencies, or other competent authorities where disclosure is required by law, court order, or regulatory mandate.
- Technology Service Providers: Cloud infrastructure, cybersecurity, and platform support providers operating under strict data processing agreements that prohibit independent use of your data.
- Professional Advisors: Legal counsel, auditors, and compliance consultants where necessary for business operations, under professional confidentiality obligations.
All third-party data processors engaged by imbajp are contractually bound to process personal data only in accordance with our instructions, implement appropriate technical and organisational security measures, and not retain data beyond the period required for the stated purpose.
7. Cookies & Tracking Technologies
imbajp uses cookies and similar tracking technologies to ensure the Platform functions correctly, remember your preferences, and analyse aggregate usage patterns. The categories of cookies we use are as follows:
- Strictly Necessary Cookies: Essential for core Platform functionality — including session authentication, security tokens, and load balancing. These cannot be disabled without preventing you from using the Platform.
- Functional Cookies: Used to remember your preferences such as language settings, display preferences, and notification options across sessions.
- Analytics Cookies: Collect anonymised, aggregated data about how users navigate the Platform to help us improve performance and user experience. This data does not identify individual users.
- Security Cookies: Used to detect and prevent fraudulent behaviour, bot activity, and suspicious login patterns.
You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Platform. We do not use tracking cookies for advertising purposes or share cookie data with advertising networks.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
- Account Data: Retained for the duration of the account relationship and for a period of up to 5 years following account closure, in compliance with AML record-keeping requirements.
- Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required by applicable financial regulations.
- KYC Documents: Retained for the duration of the account and for up to 5 years after account closure.
- Customer Support Records: Retained for up to 2 years from the date of last interaction, unless subject to an ongoing dispute or legal proceeding.
- Technical / Log Data: Retained for up to 12 months and then anonymised or deleted.
Following the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.
9. Data Security
imbajp implements a multi-layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
- 256-bit TLS/SSL encryption for all data transmitted between your device and our servers.
- AES-256 encryption for data stored at rest in our database infrastructure.
- Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their function.
- Real-time intrusion detection and fraud monitoring systems.
- Regular internal security audits and penetration testing.
- Two-factor authentication (2FA) available for all user accounts.
While imbajp implements robust technical and organisational security measures, no system is completely immune to risk. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.
10. Your Rights
Subject to applicable data protection law, you have the following rights in relation to your personal data held by imbajp. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 14.
Right of Access
Request a copy of the personal data we hold about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the original purpose, subject to our legal retention obligations.
Right to Restrict Processing
Request that we limit how we use your data while a dispute regarding accuracy or legitimacy is being resolved.
Right to Data Portability
Receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Object
Object to processing carried out on the basis of legitimate interests, including direct marketing communications.
We will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.
11. International Data Transfers
Your personal data may be transferred to and processed in countries outside Malaysia where our technology service providers or data processors are located. Where such transfers occur, imbajp ensures that appropriate safeguards are in place — including contractual clauses that impose data protection obligations equivalent to those applicable in Malaysia — to protect your data in accordance with this Policy.
We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate legal safeguards.
12. Minors
The imbajp Platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all accounts.
If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete the data and close the associated account. If you believe a minor has registered an account on our Platform, please contact us immediately.
13. Policy Amendments
imbajp reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly.
Continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically. If you have concerns about any changes, please contact our support team before continuing to use the Platform.
14. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please reach out to our Data & Privacy team. We are committed to responding to all privacy-related enquiries within 5 business days.
Data & Privacy Enquiries
Contact us via 24/7 live chat on the Platform, or in writing at: [email protected] — displayed as plain text only, not a clickable link. Please include "Privacy Request" in the subject line along with your registered account email address to help us locate your data promptly.
For information about responsible gambling, deposit limits, and self-exclusion tools, visit our Responsible Gambling page. imbajp is committed to protecting the wellbeing of all players aged 21 and above.
Play with Confidence on imbajp
Now that you understand how we protect your privacy, explore what imbajp has to offer — from live casino tables and 500+ certified slots to Liga Super Malaysia and EPL betting markets — all with fast MYR payouts.
For players aged 21 and above only. Gamble responsibly. Entertainment purposes only.