Inside the platform

Eight pieces, one flywheel

i-Saves is a three-sided platform in private beta with two ministries and three campus pilots. Here is every component, honestly tagged: what is already in beta, what is being built, and what is still only designed — and the loop that makes the whole thing compound.

The platform, piece by piece

Private beta means running with named pilot ministries and campuses; in build means engineered against real rails and owed a rollout; in design means specified and honest about not existing yet.

Private beta

The Saves Pass

A digital membership credential carrying your verified segment and tier. It rotates a payment QR, survives a phone change, and expires with your employment or enrolment — so a benefit can never outlive the eligibility behind it or leak outside the group.

Private beta

Verification rails

Prove you are a government servant or an enrolled student once — through your ministry HR directory or campus SSO — and reuse it everywhere. The rails return a yes/no token, never your identity; the same verify-once posture that made ID.me a $2B company, tuned to Malaysian segments.

Private beta

iWallet, on real rails

A prepaid wallet purpose-built for your segment: payroll-deduction top-up, DuitNow QR & ID, bills and transit reloads, student spend controls and staff savings round-ups. It rides the same banking-grade engine Antrex already ships in Masrif — not a new payment stack to trust.

In build

Till-side discount engine

Segment pricing resolves at payment time across online and in-store checkouts, before you confirm. Stack rules are explicit, caps are visible, and every ringgit kept is itemised in your ledger — the whole value of a group discount is that you never hunt for it.

In build

The merchant console

A merchant defines the segment, the discount, the budget and the conversion cap; i-Saves handles verification at the till, settles through iWallet, and bills only on completed sales. Pilot one outlet, scale when repeat-rate proves it — no giveaway dilution of public pricing.

In design

Deal drops & flash windows

Segment-only flash sales — students-only evening drops on electronics, staff-only fuel-rebate weeks. Your group is notified; the crowd outside it never sees the price and never resells it. Scarcity and eligibility do the work a blanket discount cannot.

In design

The Aggregate Exchange

The B2B data layer: category demand indices, elasticity bands and campaign-readiness scores, derived per cohort and published only as k-anonymous aggregates to vetted commerce platforms — so the deals that ship are the ones projected to convert.

In design

Privacy & consent layer

Verification is pass/fail; aggregates carry k-anonymity floors and differential-privacy noise; no individual profile is ever exported, sold or purchasable. Members can see exactly which aggregates describe their cohort and opt out of contributing at any time.

Why it compounds

The three-sided flywheel

Verified members attract merchants; merchant budgets fund deeper discounts; and the aggregate demand signal makes every next campaign cheaper to aim — which funds yet better deals.

Verified member

one Saves Pass, reused everywhere

Merchant budget

funds the segment it wants

Auto-applied savings

resolved at the till

Aggregate demand signal

cohort-level, never personal

Better-aimed campaigns

deeper discounts, less waste

…and the loop closes: better campaigns deepen discounts, which recruit more verified members.
Under all of it

Three families of rails

i-Saves invents the segment flywheel, not the plumbing — it reuses verification, payment and privacy primitives that already exist and are already trusted.

Verification

ministry HR directory · campus SSO — returns yes/no, not identity

Payment

DuitNow QR & ID · payroll top-up · cards & contactless

Data output

k-anonymous aggregates · differential-privacy noise · opt-out

The rule that keeps a merchant-funded discount safe to join: verification tells a till only that you qualify, never who you are; and the only thing the Aggregate Exchange ever publishes is cohort behaviour — floored, noised, and with an opt-out a member can pull at any time.

The plumbing above is what any rewards platform needs. The intelligence that makes it fair and private — and the three refusals above it — live on the frontier page.

See the intelligence behind the savings→

Ready to build something intelligent?

Let's engineer your next product — from idea to launch.