Privacy Policy
Istana8899

This Privacy Policy (hereinafter referred to as the "Policy") is issued by Istana8899 (hereinafter referred to as the "Company", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at istana8899.cam (the "Platform").

This Policy describes how the Company collects, processes, stores, shares, and protects the personal data of individuals ("Users", "Members", or "you") who access or use the Platform — including when you register an account, make a deposit, participate in games or betting markets, contact our support team, or simply browse the site.

By using the Istana8899 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data in the manner described herein. If you do not agree with any part of this Policy, please discontinue your use of the Platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the Platform. In the event of any inconsistency between the two documents, the Terms & Conditions shall prevail except where this Policy expressly addresses a data protection matter.

For the purposes of this Policy, the following definitions apply:

Istana8899 collects the following categories of personal data depending on how you interact with the Platform:

We do not collect sensitive categories of personal data (such as health, racial origin, religious beliefs, or political opinions) unless strictly required for legal or regulatory compliance purposes, in which case your explicit consent will be obtained separately.

Istana8899 collects your personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team via live chat, WhatsApp, or email, or update your account profile.
• Automatically: Through cookies, pixel tags, and server log files when you access the Platform — capturing technical and usage data including your IP address, device identifiers, session duration, and pages visited.
• From third-party payment providers: When you transact using Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, or other supported payment methods, relevant transaction confirmation data is shared with us by those providers.
• From identity verification services: Third-party KYC and anti-fraud service providers may supply us with the results of identity checks conducted on your behalf.
• From analytics providers: Aggregated, anonymised usage data from analytics tools helps us understand how the Platform is used and how it can be improved.

Istana8899 processes your personal data only for clearly defined, legitimate purposes. We do not process your data in any manner incompatible with those purposes. The specific purposes for which we process your data include:

• Account Administration: To create, maintain, and manage your Istana8899 Account, including authentication, account balance management, and profile updates.
• Identity & Age Verification (KYC): To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years, in accordance with our regulatory obligations.
• Transaction Processing: To process deposits, withdrawals, and bonus credits accurately and securely in MYR via your chosen payment method.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, WhatsApp, and email in English, Bahasa Melayu, and Chinese.
• Platform Improvement: To analyse usage patterns and feedback in order to improve the Platform's features, game selection, performance, and user experience.
• Regulatory Compliance: To fulfil our legal and regulatory obligations, including record-keeping requirements, anti-money laundering (AML) checks, and responses to lawful requests from authorities.
• Responsible Gambling: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply the responsible gambling tools requested by Members, such as deposit limits and self-exclusion.
• Direct Marketing (with consent): Where you have opted in to receive marketing communications, to send you information about promotions, bonuses, new games, and Platform updates. You may withdraw this consent at any time.

The Company processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and Istana8899 — specifically, to provide the gaming and betting services described in our Terms & Conditions.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including KYC requirements, anti-money laundering regulations, and data retention laws.
• Legitimate Interests: Processing is necessary for the Company's legitimate interests in operating a secure, fair, and commercially viable gaming platform — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Where we rely on your consent — such as for direct marketing communications — we will request it explicitly and separately. You may withdraw your consent at any time without penalty by contacting support or adjusting your account communication preferences.

Istana8899 does not sell your personal data to any third party. We do not share your personal data with third parties for their own independent marketing purposes. However, we may share your data in the following limited and controlled circumstances:

• Payment Processors: To process your deposits and withdrawals, we share necessary financial and identity data with our supported payment providers, including DuitNow, FPX gateway operators, and digital wallet services such as Touch 'n Go eWallet, Boost, and GrabPay.
• KYC & Identity Verification Providers: We engage regulated third-party providers to conduct identity and age verification checks. These providers process your identity documents under a strict data processing agreement with the Company.
• Fraud Prevention & AML Services: We may share data with specialist anti-fraud and anti-money laundering screening services to comply with our regulatory obligations.
• Game Studio Partners: Our licensed game studio partners may receive limited gameplay data necessary to operate their games correctly and to ensure RNG integrity. No personally identifiable information is shared with game studios beyond what is technically necessary.
• Regulatory & Legal Authorities: We may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where we are required to do so by law, by court order, or in connection with legal proceedings.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the Company's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights in relation to it.

Istana8899 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or regulation.

The following general retention periods apply:

• Account Data: Retained for the duration of your Account and for a minimum period of five (5) years following permanent Account closure, to comply with AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial and gaming regulatory requirements.
• KYC Documents: Retained for a minimum of five (5) years following Account closure or the completion of the KYC process, whichever is later.
• Support Communications: Retained for a period of three (3) years from the date of the last communication, unless they are relevant to a pending legal matter.
• Marketing Consent Records: Retained for as long as you remain opted in to receive marketing communications, plus a further twelve (12) months following withdrawal of consent for evidential purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

The security of your personal data is a matter we take seriously. Istana8899 implements a comprehensive range of technical, physical, and organisational security measures to protect your data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS). Look for the padlock symbol in your browser address bar when accessing istana8899.cam.
• Secure Data Storage: Personal data is stored on secure, access-controlled servers. Access is restricted to authorised personnel only and is governed by role-based access controls.
• Regular Security Audits: Our infrastructure undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Two-Factor Authentication (2FA): 2FA is available to all Members to add an additional layer of protection to their Account login process.
• Data Minimisation: We collect only the minimum personal data necessary for each specific processing purpose and do not retain data beyond its useful life.

While we implement rigorous security protocols, no internet-based system can guarantee absolute security. You acknowledge and accept this inherent risk when using any online platform. If you suspect your Account has been compromised, please contact our support team immediately.

Istana8899 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit a website. They help us recognise returning visitors, maintain session states, and understand how users interact with our Platform.

The following categories of cookies are used on istana8899.cam:

• Strictly Necessary Cookies: Essential to the functioning of the Platform — including session management, authentication, and security. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings, and to personalise your experience on the Platform.
• Analytics Cookies: Help us understand how visitors use the Platform by collecting aggregated, anonymised data on page visits, session duration, and navigation paths. This data is used solely to improve the Platform and is not linked to any individual user.
• Performance Cookies: Used to monitor Platform load times, error rates, and server performance to ensure a smooth experience for all users.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled via browser settings as they are fundamental to Platform operation.

Subject to applicable data protection law and the specific circumstances of your request, you have the following rights in relation to your personal data held by Istana8899:

To exercise any of these rights, please contact our Data Protection team via the support email address listed in Section 15 of this Policy. We may require you to verify your identity before processing your request. We will respond to all valid requests within thirty (30) calendar days. Where a request is particularly complex or numerous, we may extend this period by a further sixty (60) days, in which case we will inform you of the extension and the reasons for it.

The Istana8899 Platform is strictly intended for persons who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21.

Age verification is a mandatory component of our KYC process. Where we discover or have reason to suspect that a registered User is under the age of 21, we will immediately suspend the relevant Account, void any gameplay activity, and process a refund of any outstanding Real Money Balance to the payment method used for deposit. Any winnings associated with a minor's Account will be forfeited.

If you are a parent or guardian and believe that a person under your care may have created an account on Istana8899, please contact our support team immediately so we can investigate and take appropriate action.

The Istana8899 Platform may integrate third-party services, including payment gateways, KYC verification tools, and analytics platforms. Each of these third-party services operates under its own privacy policy. Istana8899 is not responsible for the data practices of third-party service providers, though we do ensure that any provider handling your data on our behalf is bound by a data processing agreement meeting applicable data protection standards.

The Platform does not contain links to external third-party websites for marketing or general browsing purposes. Where we reference support services for responsible gambling (such as Talian Kasih or GamCare), these references are informational only. Please consult the respective organisation's website directly for the most current information on their services.

Istana8899 reserves the right to revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. When material changes are made, we will notify active Members by posting a prominent notice on the Platform and updating the "Last Updated" date at the top of this document.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the Platform and contact support to close your Account.

The most current version of this Privacy Policy will always be available at istana8899.cam/privacy-policy. We encourage you to review this page periodically to stay informed about how we are protecting your information.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights outlined in Section 11, please contact our support team through any of the following channels. Please mark your communication as "Privacy / Data Request" to ensure it is directed to the appropriate team promptly.

We aim to acknowledge all privacy-related correspondence within two (2) business days and to resolve substantive data requests within thirty (30) calendar days of receipt.