The market & privacy floor

Why a segment wallet, and why now

i-Saves' design rules trace to a $2B identity-verification company, a proven student-discount economy, candid research on the limits of anonymisation, Bank Negara's payments data, and the two Malaysian segments the market forgets — the evidence for a rewards platform built on trust.

What the record actually says

One identity-verification precedent, one discount-network economy, one honest privacy finding, two payments numbers, and the size of the audience itself.

$2B

Verify-once identity + group discounts is a proven model

ID.me built a nine-figure business on one idea: prove who you are once, then reuse that verified identity — including group affiliation as military, students, nurses, teachers and government employees — to unlock discounts at checkout. It is the exact shape of the Saves Pass. The precedent says the model scales; the gap it leaves is a single-segment, per-brand silo with no pooled demand signal.

ID.me · raised $340M at a $2B valuation (2025)

Free

Merchant-funded segment discounts already work at scale

Student-discount networks are free for members and paid by brands that want access to a verified audience. That is the flywheel's first two sides, proven across millions of users. But each is one segment, one verification, and no cross-cohort demand intelligence — the third side, the Aggregate Exchange, is what i-Saves adds.

UNiDAYS · Student Beans · SheerID

k + ε

Anonymisation alone is not enough — and the research says so

A k-anonymised record is indistinguishable from k−1 others — a floor, not a guarantee. Recent work is blunt that de-identification and even differential privacy 'have not taken off' commercially, effective in only a subset of use cases. i-Saves takes that seriously: cohorts are floored (k), noise-padded (ε), released only as aggregates, and never sold as people.

k-anonymity (Samarati/Sweeney) · Schneider et al., J. Consumption Policy 2025

RM43

Malaysians already trust an eWallet for daily life

The average e-money transaction rose to RM43 in 2024 from RM33 — BNM reads that as growing confidence for daily spend on transport, food and retail, not just top-ups. The rails i-Saves needs (a prepaid wallet, DuitNow QR) are not a behaviour to teach; they are a habit already formed.

Bank Negara Malaysia, Annual Report 2025

US$262B

The arena is enormous and moving to digital

Malaysia's payments market is measured in the hundreds of billions of dollars and shifting to digital wallets fast. A segment-rewards layer sitting on top of that flow — resolving the right price at the right till — is a thin wedge into a very large, very active market, not a niche coupon app.

Malaysia payments market, 2025 (Mordor Intelligence)

2.4M

The two segments are large, verifiable and under-courted

Malaysia employs roughly 1.3 million federal civil servants (about 1.7 million including the uniformed services) and enrols some 1.1 million local higher-education students. Both are creditworthy, both are digitally verifiable through HR and campus systems, and both are barely courted by commerce — the addressable audience of i-Saves at launch.

The Star (Nov 2025) · MOHE enrolment data

Finding → rule

So i-Saves is built this way

from: ID.me $2B

Verify once, reuse everywhere

The Saves Pass follows ID.me's core economy: a single, high-assurance verification becomes a credential reused at every merchant, re-checked silently each year and expiring with eligibility. Friction is paid once, at the source that actually knows the truth — the ministry or the registrar.

from: Free-to-member networks

Merchant-funded, never price-diluting

The discount is paid for by the merchant who wants the segment, billed on conversion — the model UNiDAYS and SheerID proved. Public pricing stays intact; a group gets a better price, everyone else pays the same, and the platform earns on the lift rather than on the member.

from: k + ε, Schneider 2025

Aggregate the cohort, protect the person

Because the research is honest that anonymisation is hard, i-Saves does not bet on a single technique: k-anonymity floors, differential-privacy noise, minimum cohort sizes, and a schema that cannot export PII. The demand signal is real because the privacy is real — not because a policy says so.

from: BNM RM43

Ride the rails people already use

RM43 average e-money transactions say the wallet habit is set. iWallet is built on the same DuitNow rails Antrex already ships in Masrif, adding payroll top-up and segment pricing — adoption is a distribution problem, not a behaviour-change one.

from: the US$262B arena

Aim with elasticity, not guesswork

A platform funding a students-only laptop campaign gets a demand index and an elasticity band first, so subsidies go where the marginal ringgit converts. The whole point of pooling consented cohort signal is that the deals that ship are the ones that work.

from: 2.4M under-courted

Serve the under-courted, keep their trust

1.3 million staff and 1.1 million students hold up the country and are the least courted by retail. Serving them at scale only works if the architecture refuses surveillance and data-sale outright — the refusals are the go-to-market, not a compliance afterthought.

Why here, why now

The Malaysian numbers

1.3M
federal civil servants (2025)

About 1.3 million on the federal establishment, nearer 1.7 million counting the uniformed services — a large, payroll-verifiable segment with stable income and daily spend.

1.1M
local higher-education students

MOHE records some 1.1 million Malaysian students enrolled across public and private institutions — campus-SSO verifiable, price-sensitive, and building savings habits before their first payslip.

RM43
average e-money transaction, 2024

Up from RM33 the year before — Bank Negara's own read is rising confidence in wallets for everyday spending. The rail i-Saves runs on is already trusted.

5,000
minimum cohort floor (k) per aggregate

No published cell describes fewer than thousands of people, and each carries differential-privacy noise on top. The number is a design floor, deliberately conservative, because anonymisation is known to be hard.

A pay-day week, honestly described

A teacher in Kuantan taps her Saves Pass at a pharmacy — the till knows she qualifies for the staff price and nothing else about her. A first-year student in Penang sees a laptop deal that exists only because a cohort demand index told a platform that students-only electronics weeks convert; his purchase never leaves an individual trace, only a floored, noised bump in a cohort curve. Payroll topped up her wallet before she thought about it; a round-up saved her the loose change. She can open the ledger and see every ringgit kept, and switch off contributing to aggregates in one tap. No coupon was clipped, no name was sold, no price outside the segment moved.

iWallet rides the same banking-grade rails Antrex ships in its flagship Islamic super-app.

See the eWallet engine it shares — Masrif→

Ready to build something intelligent?

Let's engineer your next product — from idea to launch.