Privacy Policy

Privacy Policy indocair — Malaysian User Data Protection

Your privacy is our priority. This policy clearly explains how indocair collects, uses, stores, and protects your personal information every time you use our platform.

Effective Date: 1 January 2026
Version: 2.5
256-bit SSL Encryption No Data Sales Malaysia PDPA Compliant
Our Privacy Commitment

Six Ways indocair Protecting Your Data

From data encryption to user rights — these are the privacy protection fundamentals we guarantee to every indocair member.

Advanced Data Encryption

All data transmitted between your device and indocair's servers is protected with 256-bit SSL encryption — the same security standard used by major banks in Malaysia. Your data is never transmitted in plain text.

No Data Sales to Third Parties

Indocair never sells, rents, or discloses users' personal information to advertising companies or any third party without your explicit consent. Your data belongs to you — it is not our business commodity.

Full Control in Your Hands

Every indocair user has the right to access, update, and request deletion of their personal data at any time. We provide a simple and transparent process for users to manage their own information without unnecessary hassle.

Malaysia Personal Data Protection Act Compliance

The indocair Privacy Policy is fully aligned with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010. We undergo regular compliance reviews to ensure our data handling practices consistently meet current legal requirements.

Secure Servers with Data Segregation

User personal data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and network segment isolation. Access to user data within our internal systems is granted only to authorised personnel.

Prompt Data Breach Notification

In the unlikely event of a data breach that may affect your personal information, indocair is committed to notifying affected users within 72 hours of the breach being detected, in line with industry best practices.

By registering and using the indocair platform, you agree that your personal information will be collected and used in accordance with this Privacy Policy. Please read this document carefully and contact us if you have any questions.

1

Introduction and Scope of This Privacy Policy

Indocair ("we", "our platform") respects the privacy of every individual who uses our services. This Privacy Policy explains how we collect, process, store, and protect your personal information when you register, log in, make deposits, make withdrawals, or interact with any part of the indocair platform — whether via the website or mobile app.

This policy applies to all registered users and visitors of the indocair platform regardless of the access method used. By using our platform, you acknowledge that you have read and fully understood this Privacy Policy.

This Privacy Policy should be read together with Terms and Conditions indocair. Both documents together form the entire agreement between you and indocair regarding use of the platform.
2

Types of Personal Data We Collect

Indocair collects various types of personal information depending on how you interact with our platform. Information collected is limited strictly to what is necessary for the purposes stated in this policy.

Information you provide directly:

  • Full name as stated on your identity card or passport.
  • Date of birth for age verification purposes (18 years and above).
  • Active mobile number and email address.
  • Bank account or digital wallet details for deposit and withdrawal purposes.
  • Identity verification documents (KYC) such as copies of MyKad, passport, or utility bills when required.

Information collected automatically:

  • IP address and device information (device type, operating system, browser version).
  • Activity log data including pages visited, access times, and actions performed.
  • Cookie data and similar tracking technologies (see Section 6 for more details).
  • Geographic location information (city/state level, not precise coordinates) based on IP address.
indocair does not directly collect credit card numbers or sensitive financial information. All financial transactions are processed through secure third-party payment gateways that comply with PCI-DSS standards.
3

How We Use Your Personal Data

All personal information we collect is used solely for legitimate, stated purposes. indocair does not use user data for any purpose unrelated to the provision of platform services.

  • Identity verification and KYC: Verifying that you are who you claim to be and that you meet the minimum age requirement of 18 years.
  • Transaction processing: Verifying and processing deposits, withdrawals, and bets securely and accurately.
  • Account security: Detecting and preventing fraudulent activity, money laundering, or platform abuse.
  • Service communications: Sending transaction notifications, account updates, and important security alerts.
  • Platform improvement: Analyzing usage patterns to improve user experience, platform performance, and product offerings.
  • Legal compliance: Complying with reporting and record-keeping requirements set by applicable laws and regulatory authorities.
  • Marketing (with consent): Sending promotional information, special offers, and the latest indocair news — only to users who have consented to receive marketing communications.
4

Data Sharing with Third Parties

Indocair upholds the principle that users' personal data should not be freely shared. We only share personal information under the limited circumstances set out below, and only to the extent necessary for those purposes.

  • Payment service providers: Payment gateways used to process deposits and withdrawals receive only the necessary transaction information, subject to strict confidentiality agreements.
  • Identity verification service providers: Third-party KYC partners who assist us in verifying user identity documents, with access strictly limited to the information required.
  • Authorities and regulatory bodies: When required by Malaysian law, court order, or direction from a lawful authority, we will disclose the necessary information without prior notice to you.
  • Technical infrastructure providers: Hosting and cloud computing service providers that support our platform operations, subject to comprehensive data protection agreements.
indocair has never sold, rented, or traded users' personal data to advertising companies, data brokers, or any third party for commercial purposes. This is our absolute commitment to your privacy.
5

Data Retention and Security Measures

Indocair retains users' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Standard retention periods are as follows:

  • Active account information: Retained for as long as your account remains active on the indocair platform.
  • Financial transaction records: Minimum 7 years from the transaction date, in accordance with accounting and anti-money laundering legal requirements.
  • KYC Documents: Up to 5 years after account closure.
  • Platform activity log: Retained for 90 days on a rolling basis for security and investigation purposes.

On the technical security front, indocair implements multiple layers of protection including encryption at rest, role-based access control (RBAC), 24/7 security monitoring, and periodic penetration testing by independent security experts.

6

Cookies and Tracking Technologies

The indocair platform uses cookies and similar tracking technologies to enhance user experience, maintain login sessions, and understand platform usage patterns. The following types of cookies are used:

  • Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
  • Performance Cookies: Collecting anonymized data on how users interact with the platform for analytics and improvement purposes.
  • Functional Cookies: Storing user preferences such as language and display settings to deliver a more personalized experience.

You can manage or disable non-essential cookies through your browser settings. However, disabling essential cookies may affect the functionality of the indocair platform.

7

User Rights Regarding Personal Data

As an indocair user, you have the following rights regarding the personal data we hold about you. Each request will be processed within 14 business days of receipt.

User Rights Description How to Apply
Right of Access Requesting a copy of the personal data we hold about you. Support email or live chat
Right to Rectification Requesting correction of inaccurate or incomplete data. Account settings or customer support
Right to Erasure Requesting deletion of personal data, subject to legal obligations. Support email with identity verification
Right to Object Objecting to the processing of your data for marketing purposes. Unsubscribe via email or account settings
Right to Data Portability Requesting your data in a structured, machine-readable format. Support Email
Some deletion requests may not be fully fulfilled if the data in question is required for legal compliance, dispute resolution, or enforcement of an active agreement.
8

Children's Privacy and Age Restrictions

The indocair platform is not designed or intended for use by individuals under the age of 18. We do not knowingly collect or process personal data of minors. Should we discover that personal data of someone under 18 has been collected, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and become aware that your child has registered an account on indocair, please contact our support team immediately via email or live chat for prompt action.

9

Links to External Websites

The indocair platform may contain links to third-party websites or services in certain contexts. indocair is not responsible for the privacy practices or content of those third-party websites. We encourage you to read the privacy policy of each website you visit separately.

The presence of links to external websites on the indocair platform does not mean we endorse or verify the content, products, or services offered by those websites.

10

Changes to This Privacy Policy

Indocair reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform service improvements. Users will be notified of any significant changes via in-platform notifications or registered email at least 14 days before the changes take effect.

The "Effective Date" at the top of this document will be updated each time this Privacy Policy is revised. Continued use of the indocair platform after the new effective date constitutes your acceptance of the updated version of the policy.

11

Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding how indocair handles your personal data, our privacy team is ready to assist. We are committed to addressing every inquiry seriously and within a reasonable timeframe.

Our privacy team aims to respond to all personal data inquiries within 3 business days. For more complex cases such as data deletion requests or formal complaints, the response period is up to 14 business days.
FAQ

FAQ About indocair Privacy

Answers to the most frequently asked questions by users regarding personal data protection at indocair.

Absolutely not. indocair does not sell, rent, or share users' personal data with advertising companies or third-party data brokers. Your data is used solely for platform operations and legal compliance purposes as outlined in this Privacy Policy.

Yes, you have the right to request deletion of your personal data by contacting the indocair support team via email or live chat. However, certain data may need to be retained for a specified period to fulfil legal obligations, such as financial transaction records required under Malaysian law.

Upon account closure, your personal information will be retained only for the period required by law — typically up to 7 years for financial records and 5 years for KYC documents. After that period, data will be securely deleted or anonymised from our systems.

indocair does not directly store your bank card details or bank account numbers in our systems. All financial transactions are processed through secure third-party payment gateways that comply with PCI-DSS security standards. indocair only stores masked account numbers for withdrawal reference purposes.

Yes, you can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link found at the bottom of any promotional email we send, or by updating your communication preferences in your indocair account settings. Unsubscribe requests will be processed within 5 business days.
Your Privacy Protected, Your Bets at Ease

Your Data is Safe. Now is the Time to Bet with Confidence.

Indocair ensures your personal information is fully protected. Register an account today and enjoy a safe, transparent, and enjoyable betting experience alongside millions of users in Malaysia.

Bahasa Melayu