Privacy Policy

1.1 This Privacy Policy ("Policy") describes how imuss ("we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "your") who access or use the imuss Platform, including the website at imuss.io, any associated mobile applications, and all related services (collectively, the "Platform").

1.2 This Policy applies to all persons who interact with the Platform, whether as registered account holders, visitors browsing without an account, or individuals who contact our customer support team. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein.

1.3 This Policy forms part of the imuss Terms & Conditions, available at /terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

1.4 The Platform is intended for adult users aged 21 and above, located in or accessing the Platform from Bangladesh. imuss does not knowingly provide services to persons under the age of 21. If you are under 21, you must not use the Platform.

2.1 imuss collects the following categories of personal data from users of the Platform:

2.2 imuss does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification documents (e.g., a national ID card) incidentally contain such information and where collection is strictly necessary to fulfil our age and identity verification obligations.

3.1 Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, place a bet, contact customer support, or interact with any feature of the Platform that requires you to submit information.

3.2 Automatically: When you visit the Platform, our servers and analytics tools automatically record technical and usage data, including your IP address, device identifiers, browser type, and session activity. This data is collected using cookies and similar tracking technologies — see Section 9 (Cookies & Tracking) for full details.

3.3 From third-party providers: imuss may receive data about you from trusted third parties, including:

• Identity verification and anti-fraud service providers who help us confirm your identity and screen for fraudulent activity;
• Payment processors (bKash, Nagad, Rocket, Upay) who confirm transaction completion and provide transaction reference numbers;
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) who report game round outcomes and associated wager amounts to facilitate accurate account settlement.

3.4 imuss does not purchase personal data from data brokers or third-party list providers.

4.1 imuss uses your personal data only for the purposes set out below. We will not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing a separate legal basis for the new use.

• Account creation and management: To register your account, verify your identity, manage your account settings, and communicate important account-related information to you.
• Payment processing: To process deposits and withdrawals, reconcile transaction records, and investigate disputed transactions.
• Service delivery: To provide you with access to betting markets, casino games, slots, and all other features of the Platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, match-fixing, and other forms of abuse of the Platform.
• Regulatory compliance: To fulfil our age verification, know-your-customer (KYC), and anti-money-laundering (AML) obligations.
• Responsible gaming: To administer deposit limits, session time-outs, self-exclusion requests, and reality-check notifications you have elected to use.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes.
• Marketing communications: To send you promotional offers and bonus notifications by SMS or email, where you have consented to receive such communications. You may withdraw consent at any time by contacting support.
• Platform improvement: To analyse usage patterns and improve the design, functionality, and content of the Platform.
• Legal obligations: To comply with any legal obligation, court order, or regulatory request to which imuss is subject.

5.1 imuss processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with age verification, KYC, AML, and other applicable legal obligations.
• Legitimate interests: Processing carried out for imuss's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 imuss does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank): to process your deposit and withdrawal transactions.
• Identity verification providers: to confirm your identity, verify your age, and screen against fraud and sanctions watchlists.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): to facilitate game round delivery and settlement data.
• Customer support platforms: to manage live chat, email, and ticketing systems through which you contact our support team.
• Analytics and security providers: to analyse Platform usage and maintain Platform security. These providers process technical and usage data only and do not receive identity or financial data.
• Legal and regulatory authorities: where imuss is required by applicable law, court order, or regulatory direction to disclose personal data.

6.2 All third-party service providers who process personal data on behalf of imuss are required to maintain confidentiality and implement security standards at least equivalent to those applied by imuss. imuss remains responsible for the security of your data even where processing is carried out by a third party on our behalf.

7.1 imuss retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The table below sets out our standard retention periods by data category:

7.2 Once the applicable retention period has expired, imuss will securely delete or anonymise your personal data so that it can no longer be associated with you. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical purposes.

8.1 imuss employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the imuss Platform;
• Encryption at rest for stored personal and financial data using industry-standard algorithms;
• Access controls that restrict access to personal data to authorised personnel only, on a strict need-to-know basis;
• Multi-factor authentication for internal systems that process sensitive personal data;
• Continuous security monitoring and intrusion detection systems that flag and investigate anomalous access patterns in real time;
• Regular security audits and penetration testing conducted by qualified third-party security professionals;
• Employee training on data protection and information security best practices for all staff who handle personal data.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, imuss will notify affected users as soon as reasonably practicable and will take all necessary steps to contain the breach and mitigate any potential harm.

8.3 You also have a role to play in keeping your data secure. You should choose a strong, unique password for your imuss account, never share your login credentials with anyone, and contact support immediately if you suspect unauthorised access to your account. imuss will never ask for your password, bKash PIN, Nagad PIN, or any other security credential via email, SMS, or live chat.

9.1 The imuss Platform uses cookies and similar tracking technologies (collectively, "Cookies") to enhance your experience, maintain your session, and analyse Platform usage. Cookies are small text files stored on your device by your browser when you visit the Platform.

9.2 imuss uses the following categories of Cookies:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These Cookies enable core functions such as session management, login state, and security features. They cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences (such as language, display settings, and responsible gaming tool configurations) to provide a personalised experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform (pages visited, session duration, error encounters) to help imuss improve the Platform. These Cookies do not identify you personally.
• Marketing Cookies: Used to track promotional campaign performance and, where you have opted in, to deliver relevant promotional content during your session. These Cookies require your consent before being set.

9.3 You can manage your Cookie preferences through your browser settings at any time. Blocking Strictly Necessary Cookies may affect the functionality of the Platform. Blocking Analytics or Marketing Cookies will not affect your ability to place bets or manage your account.

9.4 imuss does not use Cookies to track your browsing activity on websites other than the imuss Platform itself.

10.1 As a user of the imuss Platform, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal data imuss holds about you, together with information about how it is processed. We will respond to access requests within 30 days.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held about you. You can update most account information directly via your account settings or by contacting support.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations (see Section 7).
• Right to Restriction: You have the right to request that imuss restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and that objection is under consideration.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to imuss, for the purpose of transmitting it to another controller.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing carried out on the basis of legitimate interests, subject to imuss demonstrating compelling grounds for the processing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

10.2 To exercise any of the rights listed above, please contact imuss through our 24/7 live chat support or by emailing [email protected] (plain text — not a clickable link). We may need to verify your identity before processing your request.

10.3 imuss will respond to all data rights requests within 30 calendar days. Where a request is complex or imuss receives a large number of requests simultaneously, this period may be extended by a further 60 days. You will be notified of any such extension within the initial 30-day period.

11.1 The imuss Platform is strictly for adults aged 21 and above. imuss does not knowingly collect, process, or store personal data from any person under the age of 21. If you are under 21, you must not use the Platform, register an account, or submit any personal data to imuss.

11.2 If imuss becomes aware that it has collected personal data from a person under the age of 21, it will immediately close the relevant account, delete the data, return any deposited funds, and forfeit any winnings in accordance with the Terms & Conditions.

11.3 Parents and guardians are encouraged to use parental control software and filtering tools to prevent underage access to online gambling websites, including the imuss Platform. If you believe your child has accessed the Platform or provided personal data to imuss, please contact our support team immediately so that appropriate action can be taken.

12.1 The imuss Platform integrates with a number of third-party services to deliver its full feature set. Where you interact with these services through the Platform, those providers' own privacy policies may also apply to the processing of your data by those providers in their own right.

12.2 The principal third-party services integrated into the imuss Platform are:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank. These providers process payment transaction data in accordance with their own privacy policies and applicable financial services regulations.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi. Game round data is transmitted to and from these providers to facilitate game delivery and settlement. imuss does not share your identity or contact data with game providers beyond what is strictly necessary for game delivery.
• Identity Verification: Third-party KYC and AML screening services. These providers process identity documents and biographic data solely for the purpose of verifying your identity and age.

12.3 imuss is not responsible for the privacy practices of third-party providers operating in their own right. We recommend reviewing the privacy policies of any third-party service provider whose services you use in connection with the Platform.

13.1 imuss may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, imuss will provide advance notice via the Platform, by email to your registered address, or by an in-app notification, at least seven days before the revised Policy takes effect.

13.2 The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13.3 If you do not agree with any changes to this Policy, you should stop using the Platform and contact our support team to arrange the closure of your account and return of any remaining balance.

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by imuss, please contact us through any of the following channels:

• Live Chat: Available 24/7 on Bangladesh Standard Time (BST, UTC+6) directly through the Platform — the fastest way to reach us.
• Email: [email protected] (plain text — not a clickable link). We aim to respond to all email enquiries within 24 hours.
• WhatsApp: +880 1700 000000 (plain text — not a clickable link).
• Office: Dhaka, Bangladesh.

14.2 If you are not satisfied with imuss's response to a privacy-related complaint, you have the right to escalate the matter through applicable legal or regulatory channels in your jurisdiction. imuss will cooperate fully with any such process.

14.3 imuss takes all privacy complaints seriously and commits to acknowledging receipt of formal privacy complaints within 48 hours and resolving them within 14 business days. Where a complaint requires extended investigation, you will receive regular progress updates.