At Istana2000, protecting your personal data is not a compliance exercise — it is a fundamental part of how we operate. This Privacy Policy explains in plain, structured terms exactly what data we collect from Malaysian players, why we collect it, how it is used, who it is shared with, and what rights you hold over your own information.
Our Privacy Commitments
These six commitments summarise the most important aspects of how Istana2000 handles your personal data. They complement — but do not replace — the full Privacy Policy detailed below.
All personal data held by Istana2000 — including registration details, KYC documents, and payment information — is stored using AES-256 encryption at rest and transmitted exclusively over TLS-secured (HTTPS) connections. Your data is never held in plain text.
We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Data shared with third parties is limited strictly to what is necessary for payment processing, identity verification, and regulatory compliance.
Istana2000 collects only the personal data that is genuinely necessary for the lawful operation of the platform, identity verification, fraud prevention, and regulatory compliance. We do not collect data for speculative or future undisclosed purposes.
You have the right to request a complete copy of the personal data we hold about you, to correct inaccurate data, and — subject to our legal retention obligations — to request deletion. We will action verified requests within 30 calendar days.
We use cookies strictly for platform functionality, session management, fraud detection, and analytics. We do not use tracking cookies to build advertising profiles. Our Cookie Policy is incorporated within this Privacy Policy and explains every cookie category in use.
In the event of a personal data breach that presents a risk to your rights and freedoms, Istana2000 will notify affected users and relevant authorities within 72 hours of becoming aware of the incident, in accordance with applicable data protection obligations.
This Privacy Policy ("Policy") is issued by Istana2000 ("we", "us", "our", "the Operator", "the Platform") and applies to all personal data collected from users ("you", "the User", "the Player") through the Istana2000 website at https://istana2000.cam and any associated mobile interfaces, communications, or services provided by the Platform.
Istana2000 operates as an online casino and sports betting platform serving players in Malaysia, including users based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and throughout Peninsular and East Malaysia. In providing these services, we necessarily collect, process, and store personal data relating to our registered users. This Policy sets out, in full and unambiguous terms, exactly how that data is handled.
By registering an account on the Istana2000 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into our Terms & Conditions. If you do not agree to the terms of this Policy, you must not use the platform.
Regulatory Context: Istana2000 is committed to responsible data handling in line with internationally recognised data protection principles. We apply standards consistent with those applicable to licensed gaming operators, including data minimisation, purpose limitation, storage limitation, and data subject rights.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Istana2000 collects the following categories of personal data from users during registration, verification, account operation, and use of platform services:
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / Passport / Driver's License number and copy, selfie photograph with identity document | Registration & KYC |
| Contact Data | Email address, Malaysian mobile phone number, residential address | Registration |
| Financial Data | Deposit and withdrawal transaction records, payment method identifiers (e-wallet account references, bank account name for verification), transaction amounts in MYR | Transactional |
| Account Activity Data | Login timestamps, session durations, game and betting history, bonus usage, responsible gambling tool settings, support interaction logs | Ongoing use |
| Technical Data | IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, time zone | Automated collection |
| Communications Data | Live chat transcripts, email correspondence, complaint submissions, and any other written or recorded communications with our support team | Support interactions |
Data Minimisation Commitment: Istana2000 does not collect sensitive personal data beyond what is described above. We do not collect or process data relating to racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation. Any data collected is limited to what is strictly necessary for the lawful purposes described in this Policy.
Istana2000 collects personal data through the following mechanisms:
Data provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or submit any form on the platform. This includes identity documents, contact details, and payment information.
Data collected automatically when you interact with the platform, including through cookies, log files, and similar tracking technologies. This includes IP addresses, device identifiers, browser characteristics, and session activity data. This data is collected regardless of whether you are logged in to your account at the time.
In limited circumstances, we may receive data about you from third parties, including identity verification service providers engaged to conduct KYC checks, fraud detection services that cross-reference transaction patterns, and payment processors who confirm payment method ownership. All such third-party data sources are contractually bound to handle data in accordance with applicable data protection standards.
Istana2000 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases applicable to our processing activities are as follows:
Istana2000 uses the personal data we collect for the following specific purposes, each tied to the legal basis identified in Section 5:
No Behavioural Advertising: Istana2000 does not use your personal data to build advertising profiles, to serve targeted third-party advertisements, or to share data with social media platforms for advertising purposes. We do not engage in automated profiling that produces legal or similarly significant effects on individual users.
Istana2000 does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the limited circumstances set out below, and only to the extent necessary for the specific purpose stated:
We engage trusted third-party service providers who process personal data on our behalf under written data processing agreements, including identity verification providers for KYC services, payment gateway and e-wallet processing partners (including providers of Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and banking partners such as Maybank, CIMB, Public Bank, Hong Leong, and RHB Bank), fraud detection and cyber-security services, cloud hosting and infrastructure providers, and customer support platform providers. All processors are contractually required to process data only on our instructions and to maintain appropriate technical and organisational security measures.
We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, by court order, or in connection with any legal obligation applicable to Istana2000 as a gaming operator. Where legally permissible, we will endeavour to notify you of such disclosures.
In the event of a merger, acquisition, restructuring, or sale of all or part of Istana2000's assets, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer that materially changes the terms under which their data is processed.
Istana2000 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and KYC documents | 5 years following account closure | AML and regulatory compliance |
| Financial transaction records | 7 years from date of transaction | Financial record-keeping obligations |
| Account activity and gameplay logs | 3 years following last account activity | Fraud prevention and dispute resolution |
| Customer support correspondence | 3 years from closure of support ticket | Dispute resolution and quality assurance |
| Technical and session data | 12 months from collection | Security monitoring and analytics |
| Cookie and tracking data | Per cookie expiry periods (see Section 9) | Platform functionality |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes.
Istana2000 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate and improve the platform. The following categories of cookies are in use:
No Advertising Cookies: Istana2000 does not use third-party advertising cookies, social media tracking pixels, or retargeting technologies. We do not share cookie-derived data with advertising networks or data brokers.
Most web browsers provide controls to manage cookies, including the ability to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Istana2000 platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.
Istana2000 has implemented a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
While we employ robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the security of your own account credentials and for notifying our support team immediately if you suspect unauthorised access to your account.
As a data subject, you hold the following rights in respect of your personal data held by Istana2000. To exercise any of these rights, please contact us using the details set out in Section 15. We will respond to verified requests within 30 calendar days.
Request a copy of all personal data we hold about you, along with information about how it is processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary, subject to our legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as where you contest its accuracy.
Receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests where your particular circumstances override our interests.
Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Not to be subject to solely automated decisions that produce significant legal effects, except where necessary for contract performance or with your explicit consent.
Identity Verification for Rights Requests: To protect against fraudulent requests, we will require you to verify your identity before actioning any data subject rights request. This typically requires confirmation of account credentials and, for high-sensitivity requests such as erasure, additional identity verification steps.
The Istana2000 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in our account registration and KYC process, and we apply document-based verification to enforce this requirement.
If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, return any deposits (net of withdrawals already made), void all bonus funds and winnings, and delete the personal data collected, subject to any legal obligations to retain records of the incident for compliance purposes.
If you are a parent or guardian and believe that your child has registered an account on the Istana2000 platform, please contact our support team immediately at the contact details in Section 15.
As an online platform serving Malaysian users, Istana2000 primarily processes personal data using infrastructure located in jurisdictions that maintain appropriate data protection standards. In some cases, personal data may be transferred to or accessible by our service providers in other countries, including KYC verification providers and cloud infrastructure partners operating in multiple regions.
Where personal data is transferred outside Malaysia to a jurisdiction that does not provide an equivalent level of data protection, we implement appropriate safeguards, including contractual data transfer mechanisms, to ensure that your data continues to be protected to the standard described in this Policy.
By using the Istana2000 platform, you acknowledge and consent to the international transfer of your personal data where necessary for the provision of the platform's services, subject to the safeguards described above.
Istana2000 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. Where changes are material — meaning they affect the purposes for which we process data, the categories of data collected, or your rights as a data subject — we will provide reasonable advance notice to registered users via email or in-platform notification.
The effective date at the top of this page will be updated to reflect the date of any material revision. Your continued use of the Istana2000 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you have the right to close your account and request deletion of your personal data in accordance with Section 11.
We recommend reviewing this page periodically, particularly prior to providing any new categories of personal data in connection with account updates or verification processes.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Istana2000, please contact us through the following channels:
Privacy Enquiries & Data Subject Rights Requests:
Please use the subject line: "Privacy Request — [Your Account Username]" when submitting data subject rights requests by email.
Live Support:
Available 24/7 via the live chat function on the platform. For privacy-specific matters, please request escalation to our data protection team.
If you are dissatisfied with our response to a privacy-related complaint or data subject rights request, you have the right to escalate your complaint to a competent supervisory authority or data protection body with jurisdiction over your matter. We will endeavour to resolve all complaints internally within 28 calendar days of receipt. Where internal resolution is not achieved, we will provide written reasons for our decision and information about escalation options available to you.
Istana2000 is built on transparency — in our odds, our bonus terms, and how we handle your personal data. If you have questions about your privacy rights or how your data is processed, our support team is available 24/7. For the full picture on responsible use of our platform, visit our Responsible Gambling page.
For players aged 21 and above only. Please gamble responsibly.