Privacy Policy

The Company collects Personal Data through the following means:

• Direct provision by you: Data provided voluntarily during account registration, KYC verification, payment processing, support interactions, completion of preference settings, and participation in promotions.
• Automated collection: Technical and behavioural data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you interact with the Platform.
• Third-party payment processors: Transaction confirmation data received from payment service providers including but not limited to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners (Maybank, CIMB, Public Bank, RHB, Hong Leong).
• Identity verification services: Identity and document verification data returned by third-party KYC service providers engaged by the Company to meet its regulatory compliance obligations.
• Fraud prevention and AML monitoring services: Risk assessment data returned by third-party fraud detection and anti-money laundering screening services.
• Publicly available sources: Information available from public records or databases where relevant to identity verification or fraud prevention.

The Company processes your Personal Data only for the specific, legitimate purposes set out below. We do not process your data for purposes incompatible with those stated in this Policy.

1. Account Creation and Management: To create, maintain, and administer your i8bet account, including identity verification, authentication, and account security.
2. Service Delivery: To provide access to the full suite of gaming and betting services, process deposits and withdrawals via supported Malaysian payment methods, credit bonuses, and maintain accurate account balance records.
3. Regulatory Compliance: To meet the Company's obligations under its international gaming licence, including KYC verification, age verification (21+ enforcement), anti-money laundering (AML) screening, counter-terrorism financing (CTF) checks, and transaction monitoring.
4. Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via live chat, email, and other support channels in Bahasa Melayu, Chinese, and English.
5. Responsible Gambling: To administer responsible gaming tools including deposit limits, cooling-off periods, reality checks, and self-exclusion arrangements. To identify patterns of play that may indicate problem gambling and take appropriate protective action.
6. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, abuse, money laundering, multi-accounting, and other prohibited conduct on the Platform.
7. Marketing and Promotions (where consented): To send you relevant promotional offers, bonus notifications, and personalised content where you have provided explicit consent. You may withdraw consent at any time through your account settings or by contacting support.
8. Platform Improvement: To analyse usage patterns, conduct internal research, test new features, and improve the performance, security, and user experience of the Platform.
9. Legal Obligations: To comply with applicable laws, court orders, regulatory requests, and other legal obligations as they arise.

The Company processes your Personal Data on the following legal bases, which correspond to the processing purposes set out in Section 05:

• Contractual Necessity: Processing required to perform the contract between you and the Company (i.e., to provide the Services you have registered for) — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with the Company's obligations under its international gaming licence, AML regulations, KYC requirements, and other applicable legal frameworks.
• Legitimate Interests: Processing carried out in the Company's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing, personalised content delivery, and non-essential cookie deployment — where your explicit consent has been obtained and can be withdrawn at any time without affecting the legality of prior processing.

The Company does not sell your Personal Data to third parties. We do not share your Personal Data with any party for their independent marketing purposes without your explicit consent. We may share your Personal Data with the following categories of recipients, strictly to the extent necessary for the stated purposes:

• Payment Service Providers: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong, and cryptocurrency networks. Only the minimum data necessary to initiate and confirm the transaction is shared.
• Identity Verification & KYC Providers: To conduct identity document verification and age confirmation in compliance with the Company's licensing obligations.
• Fraud Detection and AML Screening Services: To screen transactions and user profiles against AML, CTF, and sanctions databases as required under the Company's compliance programme.
• IT Infrastructure and Cloud Service Providers: To host Platform data and provide supporting technical infrastructure, under binding data processing agreements that require equivalent data protection standards.
• Customer Support Technology Providers: To provide live chat, ticketing, and communication platforms used to deliver customer support services.
• Regulatory and Law Enforcement Authorities: Where required by the Company's licensor, a court of competent jurisdiction, or other applicable legal authority. Disclosures to law enforcement are made only where legally compelled or where necessary to prevent serious harm.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to binding confidentiality obligations.

As an internationally operated Platform, the Company may transfer your Personal Data to servers and processors located outside of Malaysia. Such transfers may occur in connection with cloud hosting, KYC processing, payment gateway operations, or the use of globally deployed technology services.

Where Personal Data is transferred to jurisdictions outside Malaysia or the jurisdiction of the Company's licensor, the Company takes appropriate measures to ensure that such transfers are subject to adequate safeguards, including:

• Standard contractual clauses (SCs) or equivalent contractual mechanisms with data recipients;
• Transfer only to jurisdictions that have been assessed as providing an adequate level of data protection by the relevant regulatory authority;
• Binding corporate rules where applicable within the Company's corporate group.

By using the i8bet Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions other than Malaysia. Such transfers are undertaken with the appropriate safeguards described above.

The Company retains Personal Data for no longer than is necessary for the purposes for which it was collected, taking into account the Company's legal, regulatory, and operational requirements. The following retention schedule provides a general guide to our data retention practices:

Upon expiry of the applicable retention period, the Company will securely delete or anonymise your Personal Data in accordance with its data disposal procedures. In the event of an ongoing investigation, legal proceedings, or regulatory inquiry, retention may be extended for the duration of such proceedings.

The Company takes the security of your Personal Data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include, without limitation:

• Encryption in Transit: All data transmitted between your device and the i8bet Platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. This applies to all Platform interfaces including web and mobile browsers.
• Encryption at Rest: Sensitive Personal Data, including identity documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to Personal Data within the Company is restricted to authorised personnel on a strict need-to-know basis. All access is subject to role-based access controls, authentication requirements, and audit logging.
• Intrusion Detection and Monitoring: The Company's infrastructure is monitored continuously for anomalous activity, intrusion attempts, and security incidents, using automated detection systems and security team oversight.
• Third-Party Security Audits: The Company engages independent security consultants to conduct periodic penetration testing and vulnerability assessments of the Platform and its supporting infrastructure.
• Staff Training: All employees and contractors with access to Personal Data undergo regular data protection and security awareness training.

The i8bet Platform uses cookies and similar tracking technologies to provide, maintain, and improve the Platform experience. A cookie is a small data file placed on your device when you visit a website.

The Company uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, language settings, and personalisation choices to enhance your experience on return visits.
• Analytics Cookies: Used to collect aggregate, anonymised data about how users interact with the Platform, enabling the Company to identify usability issues, optimise content, and improve overall performance. Analytics data does not identify individual users.
• Marketing Cookies (Consent Required): Used to deliver relevant promotional content and track the effectiveness of marketing communications. These are deployed only where you have provided explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality and user experience of the Platform. For persistent marketing cookie opt-out, please contact our support team or manage your preferences through your account settings.

Subject to applicable law and the Company's legal obligations, you have the following rights in respect of your Personal Data. You may exercise these rights at any time by contacting our support team or data protection contact (see Section 15).

The Company will respond to all valid data subject requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, with notice provided to you within the initial thirty-day period. The Company reserves the right to verify your identity before processing a data subject request.

The i8bet Platform and its Services are strictly restricted to individuals aged twenty-one (21) years and above. The Company does not knowingly collect Personal Data from individuals under the age of 21.

Age verification is conducted as part of the mandatory KYC process for all Accounts. Where the Company discovers or has reasonable grounds to believe that an Account is operated by a minor, it will:

• Immediately suspend access to the Account and all associated Services;
• Return any deposited funds (net of any withdrawals already made) to the registered payment method;
• Permanently close the Account and securely delete the minor's Personal Data to the extent permitted by applicable law and retention obligations;
• Where required under applicable law, notify the relevant regulatory authority.

Parents and guardians who believe their child may have accessed or registered on the i8bet Platform should contact our support team immediately via live chat or at the email address listed in Section 15.

The Company reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, the Company's data processing practices, or the nature of the Services provided.

Where amendments are material — meaning they significantly affect your rights or how your Personal Data is processed — the Company will endeavour to provide advance notice via a notification on the Platform or by email to your registered address, no less than fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates the most recent revision. We recommend that you review this Policy periodically to remain informed of how your Personal Data is being managed. Prior versions of this Policy are available upon request.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree to the revised terms, you may exercise your right to request Account closure as described in Section 12.

If you have any questions, concerns, or requests relating to this Privacy Policy or the Company's data processing practices, please contact us through the following channels: