Privacy Policy imaju — Malaysia User Data Protection

Imaju ("we", "Platform") is an online entertainment platform committed to protecting the privacy of every user who uses our services. This Privacy Policy is drafted to clearly and transparently explain how we collect, use, store, and protect your personal information.

This document takes effect from 1 January 2026 and supersedes all previous versions of the Privacy Policy. We encourage you to review this document periodically as it may be updated to reflect changes in privacy practices or applicable legal requirements.

This Privacy Policy forms part of the overall imaju platform usage agreement and should be read together with Terms and Conditions us. If you do not agree with any part of this policy, you may contact us for further clarification before continuing to use the platform.

Imaju collects various types of information depending on how you interact with our platform. The following is a summary of the data we collect:

We only collect information that is strictly necessary to provide a safe and quality service. No sensitive data such as PIN numbers or full passwords is stored in our systems.

The data we collect is used responsibly for the following purposes:

• Account Management: Registers, verifies, and maintains your account, including the KYC process required by industry regulations.
• Transaction Processing: Processes deposits, withdrawals, and all financial transactions securely and efficiently through supported payment gateways.
• Service Provision: Provides access to all games, platform features, and 24/7 customer support.
• Security & Fraud Prevention: Identifies and prevents unauthorised activities, fraud, or violations of the terms of use.
• Responsible Gaming: Monitors playing habits to identify signs of problem gambling and provide appropriate assistance when needed.
• Communications: Sends important notifications related to your account, promotions (with your consent), and platform updates.
• Platform Improvement: Analyses usage data in aggregate and anonymous form to improve the overall user experience.
• Legal Compliance: Fulfils legal obligations, regulations, and directives from relevant authorities.

Imaju does not sell your personal data to any party. However, in certain situations, we may need to share information with the following parties:

• Payment Providers: Data required to process deposits and withdrawals is shared with approved payment gateway providers bound by strict confidentiality agreements.
• Identity Verification Providers: For the KYC process, identity information may be shared with trusted and registered third-party verification services.
• Authorities: imaju will disclose data to law enforcement authorities, regulatory bodies, or enforcement agencies when required by law or court order.
• Selected Business Partners: In very limited cases and only with your consent, data may be shared with partners who provide additional platform-related services.

All third parties that receive imaju users' personal data are bound by data protection agreements that ensure your information is handled to a standard equal to or higher than our own.

Imaju uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the platform.

Imaju takes comprehensive technical and organisational measures to ensure your personal data is always kept secure:

• All data is stored on servers protected with AES-256 encryption and multi-layered firewalls.
• Access to the user database is restricted to authorised personnel only and is continuously monitored.
• Independent security tests and audits are conducted regularly to identify any vulnerabilities.
• Automated data backup ensures your information is never lost under any circumstances.
• A ready incident response protocol ensures that any data breach is addressed swiftly and effectively.

Data Retention Period: imaju retains your personal data for as long as your account is active. After account closure, basic data is retained for seven (7) years to meet legal and financial audit requirements. Data that is no longer needed will be securely deleted or anonymised.

As a registered imaju user, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, please contact the imaju support team via live chat on the platform. We will process your request within 14 business days. In some cases, we may require identity verification before processing the request.

The imaju platform may contain links to third-party websites or services in certain contexts. imaju's Privacy Policy does not apply to any such external websites or services.

We do not control and are not responsible for the content, privacy policies, or practices of third-party websites. We recommend reading the Privacy Policy of every website you visit before providing any personal information.

The presence of links to third-party websites on the imaju platform does not imply that we endorse or recommend those websites.

Imaju reserves the right to update this Privacy Policy at any time. Every change will reflect a new "Updated" date at the top of this document. For material changes, we will notify you via:

• In-account notifications on the imaju platform.
• Push notifications via the imaju mobile app.
• Notification via the email address registered to your account (where applicable).

We encourage you to review this Privacy Policy page periodically to ensure you are always informed about how we protect your information. Continued use of the imaju platform after any amendments are published constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the imaju Privacy team is ready to assist you.

You can reach us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the imaju platform.
• Email: [email protected] (displayed as plain text for security purposes).
• Help Centre: Visit page FAQ us for answers to frequently asked questions.

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex complaints, processing may take up to 14 business days.