This Privacy Policy applies to all members and users of the Istana2000 platform, including the website istana2000.onl and our official mobile app. By using our platform, you agree to the practices described in this policy.
1 Introduction and istana2000's Commitment
Istana2000 takes the protection of your personal data extremely seriously. As an online gaming platform trusted by over 250,000 active members in Malaysia, we understand how much trust you place in us when submitting your personal information during registration and platform use.
This Privacy Policy is formulated in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. It details the types of information we collect, the purposes for collection, how we protect it, and the rights you hold as the owner of that data.
We have never, and will never, sell your personal data to third parties for marketing or any other commercial purpose without your explicit consent. This is not merely a promise — it is a commitment embedded in every layer of our operations and technology.
2 Types of Information We Collect
To provide a secure, personalized, and high-quality service, istana2000 collects several categories of information from our users. All data collection is carried out transparently, and only information that is genuinely necessary is collected.
A. Information You Provide Directly
- Full name as shown on your official identification document
- Date of birth for age verification purposes (members must be 18 years of age or older)
- Email address for communications and account verification
- Mobile phone number for two-factor authentication and transaction notifications
- Current residential address and postcode
- Registered payment method details (bank account number, bank name, account holder name)
- Identity documents such as a national ID card (MyKad) or passport for the KYC process
- Proof of address such as a utility bill or bank statement no older than three months
B. Information Collected Automatically
- IP address and estimated geographic location
- Device type, operating system, and web browser version used
- Game session data including date, time, game type, and wagering amount
- Complete financial transaction records including deposits and withdrawals
- In-platform activity logs and usage patterns
- Cookie data and device identifiers to enhance the user experience
C. Information from Third-Party Sources
In certain situations relating to regulatory compliance, we may receive additional information from trusted identity verification agencies, financial institutions for payment verification purposes, or relevant regulatory bodies. All information received in this manner is handled with the same high level of confidentiality as information you provide directly.
| Data Category | Example | Primary Purpose |
|---|---|---|
| Identity | Name, date of birth, MyKad | KYC and age verification |
| Contact | Email, phone number | Communication and verification |
| Financial | Banking details, transaction records | Deposit and withdrawal processing |
| Technical | IP address, device type | Platform security and improvement |
| Behavior | Game history, wagering patterns | Responsible gaming and personal experience |
3 How We Use Your Personal Data
Every piece of information we collect is used for a specific, legitimate purpose that has been disclosed to you. We do not use your data for purposes beyond the stated scope without first obtaining your consent.
- Account management: Creating, verifying, and maintaining your member account while ensuring secure access to it.
- Transaction processing: Processing all deposits and withdrawals securely and efficiently using your preferred payment method.
- KYC and AML compliance: Meeting legal requirements related to customer identity verification and anti-money laundering.
- Platform security: Identifying and preventing fraud, unauthorised access, and suspicious activity on your account.
- Customer support: Providing relevant, personalised assistance when you contact our support team.
- Responsible gaming: Monitoring gameplay patterns to identify potential gambling issues and offer appropriate assistance to members who need it.
- Service improvement: Analysing usage patterns in aggregate to improve platform performance, interface, and overall user experience.
- Marketing communications: Sending you information about the latest promotions, bonuses, and offers — only if you have given consent to receive such communications.
You may withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team. Withdrawing this consent will not affect the core services you receive.
4 Information Sharing and Disclosure
Istana2000 does not share, sell, or disclose your personal information to third parties for independent marketing or commercial purposes. However, there are limited situations where sharing information is necessary and legally justified:
Trusted Third-Party Service Providers
We work with approved service providers to support platform operations, including payment processors, identity verification service providers, cloud computing infrastructure providers, and gaming software vendors. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for specific purposes in support of our services.
Legal Requirements and Compliance
Istana2000 will disclose your personal information to the relevant authorities if required by law, court order, or directive from a regulatory body. This includes investigations related to money laundering, fraud, or other illegal activities.
Business Transfer
In the event of a merger, acquisition, or transfer of company assets, member data may be transferred to the successor entity as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.
Istana2000 has never shared your personal data with third-party advertisers, data brokers, or any entity not directly involved in delivering our services to you.
5 Security and Data Protection
We continuously invest in the latest cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, loss, or misuse. The technical and organisational security measures we implement include:
- Data encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption — the same security standard used by leading banking institutions.
- Two-factor authentication (2FA): An additional security layer requiring verification through your registered device each time you log in from a new location or device.
- 24/7 monitoring: A round-the-clock threat detection system that identifies and responds to any suspicious activity in real time.
- Secure password storage: Your password is never stored in plain text — we use strong cryptographic hashing algorithms with random salting.
- Data segregation: Members' financial data and sensitive information are stored in isolated server environments with strict access controls.
- Regular security audits: Our platform undergoes penetration testing and security audits by recognized independent firms on a regular basis.
While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. You are encouraged to also take personal precautions, such as using a strong, unique password and not sharing your login details.
6 Cookies, Tracking Technologies, and Your Choices
Istana2000 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device that help us recognise you across sessions and tailor the platform experience to your preferences.
Types of Cookies We Use
- Essential cookies: Required for core platform functions such as login session authentication and security. Cannot be disabled without affecting platform functionality.
- Performance cookies: Collecting statistical information on how you interact with the platform to help us improve performance and user experience.
- Functional cookies: Saving your preferences such as language, display settings, and game choices to deliver a more personalised experience.
- Analytics cookies: Helping us understand platform usage patterns in aggregate using our internal analytics tools.
You can manage your cookie preferences through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and user experience of the Istana2000 platform.
7 Your Rights as a Data Owner
Under applicable data protection laws, you hold certain rights regarding the personal data we hold about you. We fully respect and facilitate the exercise of these rights.
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct any inaccurate or incomplete information.
Right to Erasure
Request deletion of your data when it is no longer needed.
Right to Object
Object to the processing of your data for direct marketing purposes.
Right to Restriction
Restrict how we use your data under certain circumstances.
Right to Portability
Receive your data in a structured, machine-readable format.
To exercise any of the above rights, please contact our data protection team through the customer support section. We will process your request within 30 business days from the date we receive your complete request.
Some data deletion requests may not be fully processed where there is a legal obligation to retain certain records, such as financial transaction records for AML compliance purposes.
8 Data Retention Period
Istana2000 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. Once the data is no longer needed, we will securely delete or anonymise it.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | Throughout active account | Continuous service delivery |
| Financial transaction records | 7 years after transaction | AML/tax legal requirements |
| KYC Documents | 5 years after account closure | Financial regulatory compliance |
| Support communication logs | 3 years | Dispute resolution |
| Game session data | 2 years | Responsible gaming and audits |
9 Changes to This Privacy Policy
Istana2000 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. The effective date of the latest version is always displayed at the top of this document.
When significant changes are made to this policy, we will notify you through one or more of the following methods: a prominent notice displayed on our platform, an email to the address registered to your account, or a push notification via the Istana2000 mobile app. We encourage you to review this page periodically to stay informed about how we protect your information.
Your continued use of the istana2000 platform after any changes to this policy take effect constitutes your acceptance of the updated policy.
10 Contact Our Data Protection Officer
If you have any questions, concerns, or wish to exercise your rights regarding personal data, the istana2000 Data Protection Officer (DPO) team is ready to assist you.
You can reach us through our customer support section, available 24 hours a day, 7 days a week. Our experienced team ensures every privacy-related enquiry is handled with full confidentiality and professionalism.
For complaints that cannot be resolved directly through us, you have the right to lodge a complaint with the relevant data protection regulatory authority in your jurisdiction.
We are committed to responding to all privacy-related enquiries within 5 business days. For more complex cases requiring in-depth investigation, we will keep you informed of progress within that timeframe.