Introduction and Scope
This Privacy Policy applies to personal data processed by itugol when you visit the website, register an account, verify your identity, make a deposit, request a withdrawal, place a sports wager, play a casino game, claim a promotion, use responsible gambling tools, or contact customer support.
itugol recognises that privacy is particularly important in online gambling. Account records may contain identity information, financial activity, gaming history, security data, and responsible gambling indicators. itugol handles these records for defined operational, safety, compliance, and player-support purposes.
This policy applies to players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian locations. It should be read with the itugol Terms and Conditions. If you do not agree with this policy, you should not create an account or continue using services that require personal data.
Definitions
In this Privacy Policy, the following expressions have the meanings given below:
- “Personal data” means information that identifies an individual or can reasonably be linked to an identifiable individual.
- “Processing” includes collecting, recording, organising, storing, reviewing, using, transferring, restricting, deleting, or otherwise handling personal data.
- “Account data” means registration, profile, verification, transaction, betting, casino, communication, and preference records connected with an itugol account.
- “Device data” means technical information relating to a browser, device, connection, session, or interaction with itugol.
- “Service provider” means an organisation engaged to support payments, verification, hosting, security, game delivery, analytics, communications, or another legitimate itugol function.
Personal Data Collected by itugol
The categories of personal data collected by itugol depend on how you use the platform. itugol seeks to collect data that is relevant and proportionate to the service, account risk, payment activity, and applicable obligations.
Identity and Profile Data
itugol may collect your full legal name, date of birth, gender where required, nationality, residential address, username, account identifiers, and copies or details of identity documents. A facial image or verification result may be processed where necessary to confirm that a document belongs to the account holder.
Contact and Communication Data
Contact data may include your email address, mobile number, preferred language, communication choices, and support correspondence. When you contact itugol, records may include chat transcripts, submitted screenshots, complaint details, payment references, and the actions taken to resolve your request.
Financial and Transaction Data
itugol may process deposit and withdrawal amounts, MYR account balances, transaction dates, payment references, masked account details, payment ownership evidence, and risk-review results. Depending on your selected method, this may relate to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, cards, bank transfers, or supported digital assets.
Gaming and Behavioural Data
itugol records sports selections, accepted odds, stake amounts, wins and losses, bonus use, slot sessions, live dealer activity, loyalty progress, account limits, and session patterns. This information is needed to settle wagers, maintain account histories, investigate disputes, identify unusual activity, and support responsible gambling reviews.
Technical and Security Data
Technical records may include IP address, browser type, device type, operating system, approximate location, login times, session identifiers, language settings, referral source, error logs, and security events. itugol uses such information to maintain platform performance and protect accounts from unauthorised access.
How Personal Data Is Collected
itugol receives personal data directly when you register, complete verification, update a profile, use account controls, deposit funds, withdraw winnings, place bets, play games, opt into promotions, or communicate with support.
Some data is generated automatically through account activity. For example, itugol records a confirmed EPL wager, a Liga Super Malaysia market selection, a live casino round, a payment request, or a failed login attempt so that the service can operate accurately and securely.
itugol may also receive information from payment providers, identity verification services, fraud-prevention systems, game suppliers, banks, e-wallet providers, or other parties involved in a transaction. Data received from these sources is used only for relevant operational, security, compliance, or support purposes.
Purposes and Legal Grounds for Processing
itugol processes personal data where necessary to provide requested services, administer the user agreement, meet lawful obligations, protect legitimate interests, obtain valid consent where required, or defend the rights of itugol and its players.
Personal data may be processed to:
- create, administer, secure, and verify an itugol account;
- confirm that a player is aged 21 or above and eligible to use gambling services;
- accept, record, settle, and display sports wagers and casino transactions;
- process deposits, withdrawals, refunds, bonuses, cashback, and loyalty rewards;
- detect fraud, duplicate accounts, payment abuse, collusion, suspicious patterns, and unauthorised access;
- respond to support requests, payment enquiries, complaints, and account disputes;
- apply deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls;
- maintain platform stability, analyse errors, and improve the Malaysian user experience; and
- send service notices or promotional communications where permitted and consistent with player preferences.
Payments, Identity Verification, and Financial Reviews
To protect players and maintain account integrity, itugol may verify identity, age, address, payment ownership, and source of funds. Requested evidence may include an identity document, address record, bank or e-wallet statement, transaction receipt, or another record reasonably necessary for verification.
Payment information is handled according to the selected transaction method. itugol generally does not need to display complete card or bank credentials within ordinary account records. Payment providers may independently process information under their own legal and security responsibilities.
itugol may compare registration details with payment ownership information and account activity. If details do not match, a deposit or withdrawal may be delayed while itugol requests clarification. These checks help prevent identity theft, third-party payments, financial abuse, and unauthorised transactions.
Cookies, Analytics, and Device Information
Cookies and similar technologies are small records used to support website functions and remember session information. Essential technologies help itugol maintain secure login sessions, recognise account preferences, balance traffic, prevent fraud, and preserve navigation choices.
itugol may use performance and analytics data to understand page loading, device compatibility, navigation patterns, and common errors. This helps itugol improve access for mobile users in Malaysia and maintain dependable performance during popular EPL, UFC, and live football events.
Browser settings may allow you to restrict certain cookies. However, blocking essential technologies can prevent login, payment, security, or account functions from operating correctly. itugol does not use a cookie setting to override a self-exclusion or responsible gambling restriction.
When Personal Data May Be Shared
itugol does not sell personal data. Information may be disclosed only where a legitimate operational, security, contractual, or legal reason applies. Where service providers process data for itugol, they are expected to handle it according to appropriate confidentiality and security requirements.
Relevant recipients may include:
- payment processors, banks, e-wallet services, and transaction monitoring providers;
- identity, age, address, fraud-prevention, and account verification services;
- hosting, security, technical support, analytics, and communications providers;
- sports data, casino, live dealer, and game service providers where necessary to deliver or settle activity;
- professional advisers, auditors, insurers, or dispute specialists acting under confidentiality duties;
- regulators, courts, law-enforcement bodies, or public authorities where disclosure is lawfully required; and
- a successor organisation involved in a legitimate restructuring, merger, acquisition, or transfer of relevant operations.
itugol limits shared information to what is reasonably needed for the relevant purpose. A service provider is not authorised to use itugol player data for unrelated independent marketing merely because it receives information to complete a transaction.
International Data Processing
Some providers supporting itugol may operate infrastructure or personnel outside Malaysia. As a result, personal data may be processed in another jurisdiction for hosting, verification, payments, security, game delivery, or customer support.
Where international processing occurs, itugol seeks to apply appropriate contractual, organisational, and technical safeguards having regard to the nature of the data and service. Different countries may have different privacy laws, but itugol continues to require relevant providers to protect the information entrusted to them.
Data Security and Account Protection
itugol uses layered technical and organisational measures intended to protect personal data against accidental loss, unauthorised access, alteration, disclosure, and misuse. Measures may include encrypted connections, access controls, authentication processes, monitoring, logging, staff confidentiality, provider reviews, and incident-response procedures.
No internet service can guarantee absolute security. Players also have an important role. You should use a strong and unique password, keep verification codes private, avoid shared devices where possible, and sign out after using itugol on a public or borrowed device.
If you believe your account or personal data has been compromised, contact itugol promptly. itugol may temporarily restrict account access, require renewed verification, invalidate active sessions, or review recent payment and gaming activity to reduce further risk.
Data Retention and Secure Deletion
itugol retains personal data only for as long as reasonably necessary for the purposes described in this policy, including account administration, transaction records, legal compliance, dispute handling, security, fraud prevention, and responsible gambling protection.
Retention periods differ by record type. A routine technical log may be needed for a shorter period than an identity, payment, self-exclusion, complaint, or transaction record. Account closure does not always require immediate deletion where itugol must preserve information to meet a lawful obligation or prevent a restricted player from opening another account.
When data is no longer required, itugol may securely delete, anonymise, or aggregate it. Anonymous statistical information that no longer identifies a player may be retained to support security analysis, product performance, and responsible gambling research.
Your Privacy Rights and Choices
Subject to applicable law, verification, and relevant limitations, you may request information about the personal data held by itugol. You may also ask itugol to correct inaccurate information, review certain processing, restrict eligible uses, or delete data that is no longer required.
Some requests cannot be completed exactly as submitted. For example, itugol may need to retain transaction, fraud-prevention, legal, or self-exclusion records after an account is closed. itugol may also request proof of identity before disclosing personal data so that information is not released to an unauthorised person.
You may change eligible communication preferences and withdraw marketing consent without affecting essential account notices. Security alerts, policy changes, payment updates, and responsible gambling messages may still be sent where necessary to operate or protect the account.
Responsible Gambling and Sensitive Account Indicators
itugol may review deposit patterns, losses, session duration, repeated limit changes, failed payments, support messages, and account behaviour to identify indicators of possible gambling harm. Such reviews support player communication, account limits, cooling-off measures, self-exclusion, and other appropriate interventions.
Information relating to a responsible gambling concern is handled with particular care. itugol limits access to personnel and providers who need the information for player protection, compliance, risk management, or support. Responsible gambling records are not used to encourage a player to increase betting activity.
itugol is intended only for adults aged 21 and above. If itugol reasonably suspects that a minor has submitted personal data or accessed gambling services, the account may be restricted while age is investigated. Information may be retained where necessary to prevent repeated underage access.
Policy Changes and Contact Us
itugol may revise this Privacy Policy to reflect changes in services, technology, security practices, payment arrangements, legal requirements, or data-processing activities. Material changes may be communicated through the platform. The revised version applies from its stated effective date.
Questions, correction requests, privacy concerns, or data access enquiries may be directed to itugol Customer Support. The website email is displayed as plain text: support@itugol.cam.
When contacting itugol, provide enough information to identify the relevant account and explain the request, but never send your password, complete card number, authentication code, or unnecessary identity information. itugol may request secure verification before acting on a privacy request.