i1m88 Privacy Policy – How We Handle Your Personal Data

1. Introduction

i1m88 ("we", "us", "our", "the Platform") operates the online casino and sportsbook platform accessible at i1m88.net. We are committed to protecting the privacy and personal data of every player who accesses our services. This Privacy Policy ("Policy") describes in detail how i1m88 collects, processes, stores, shares, and protects the personal data of users who register accounts, make transactions, or otherwise interact with the Platform.

This Policy applies to all personal data processed by i1m88 in connection with your use of the Platform, including data collected through the website, mobile web browser, customer support interactions, and payment processing systems. By creating an i1m88 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

If you have questions about how i1m88 handles your personal data, you may contact our Data Protection team at the email address published in the footer of this Policy at any time.

2. Personal Data We Collect

i1m88 collects the following categories of personal data in the course of providing our services to Malaysian players:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification documents submitted during KYC verification (e.g., MyKad, passport).
• Contact Data: Email address, mobile phone number, and country of residence provided at registration or subsequently updated in account settings.
• Financial Data: Details of payment methods used for deposits and withdrawals, including eWallet identifiers (Touch 'n Go, Boost, GrabPay), DuitNow account references, and FPX bank account information. i1m88 does not store complete payment card numbers.
• Transaction Data: Records of all deposits, withdrawals, bonus credits, casino wagers, and sportsbook bets processed through your i1m88 account, including amounts in MYR and timestamps.
• Technical Data: IP address, device type, operating system, browser type and version, session duration, and referring URL collected automatically when you access the Platform.
• Usage Data: Game history, betting activity, session frequency, feature engagement, and navigation patterns within the Platform.
• Communications Data: Records of your interactions with i1m88 customer support, including live chat transcripts, email correspondence, and support ticket history.
• Responsible Gaming Data: Records of deposit limits, session limits, self-exclusion elections, cooling-off periods, and any responsible gaming interventions applied to your account.

3. How We Collect Your Data

i1m88 collects personal data through the following mechanisms:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and similar technologies when you access the Platform.
• Third-party sources: Identity verification and fraud screening data received from KYC service providers, payment processors, and sanctions screening services as required under our licensing and anti-money laundering obligations.

4. Purpose of Processing

i1m88 processes your personal data for the following purposes:

• To establish and maintain your i1m88 account, including identity verification, age verification, and account security;
• To process deposits, withdrawals, and bonus transactions in MYR;
• To provide and improve the casino, sportsbook, and live gaming services available on the Platform;
• To comply with our obligations under international gaming licensing, anti-money laundering regulations, and applicable data protection law;
• To conduct responsible gaming monitoring, including detection of problem gambling indicators and application of player protection measures;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited conduct;
• To provide customer support and resolve disputes or complaints;
• To send you account-related notifications, transaction confirmations, and — where you have opted in — promotional communications from i1m88;
• To conduct internal analytics and platform improvement activities using aggregated, de-identified data.

5. Legal Basis for Processing

i1m88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have contracted for when registering an i1m88 account, including account management and payment processing.
• Legal obligation: Processing required to comply with KYC, AML, responsible gaming, and licensing obligations imposed on i1m88 as an internationally licensed gaming operator.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming analytics where such interests are not overridden by your fundamental rights.
• Consent: Processing for optional marketing communications and non-essential analytics cookies where you have given explicit, informed consent that may be withdrawn at any time.

6. Data Sharing

i1m88 does not sell, rent, or share your personal data with third parties for their independent marketing or commercial purposes. We share personal data only in the following limited circumstances:

• Service providers: KYC and identity verification providers, payment processing partners (including Touch 'n Go, Boost, GrabPay, DuitNow, and FPX infrastructure providers), cloud hosting providers, and customer support platform vendors. All such providers are contractually bound to process your data only for the purposes specified by i1m88 and to maintain appropriate security standards.
• Regulatory authorities: Gaming regulators, financial intelligence units, and law enforcement authorities where disclosure is required by law, court order, or our licensing conditions.
• Fraud prevention networks: Information may be shared with licensed fraud prevention and AML screening services to detect and prevent financial crime.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material part of the i1m88 business, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Data Retention

i1m88 retains your personal data for the following periods:

• Account and identity data is retained for the duration of your active account relationship and for a minimum of five (5) years following account closure, in compliance with AML and gaming licensing record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Technical and usage data collected via cookies and server logs is retained for up to 13 months.
• Data retained solely on the basis of consent will be deleted promptly upon withdrawal of that consent, unless a separate legal basis applies.

Where retention beyond these periods is required by applicable law or regulatory obligation, data will be retained for the minimum period necessary to satisfy that obligation before being securely deleted or anonymised.

8. Cookies & Tracking Technologies

i1m88 uses the following categories of cookies and similar technologies on the Platform:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication, and security tokens. These cookies cannot be disabled without disrupting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game lobby view, and responsible gaming limit configurations.
• Analytics cookies: Used — where you have consented — to collect aggregated, de-identified data about Platform usage patterns to help us improve performance and user experience. No personal betting or financial data is included in analytics reports.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional cookies may affect your Platform experience. i1m88 does not use third-party advertising or behavioural targeting cookies.

9. Security Measures

i1m88 implements the following technical and organisational security measures to protect your personal data:

• TLS 1.3 encryption for all data transmitted between your device and i1m88 servers;
• AES-256 encryption for personal and financial data stored at rest;
• Password hashing using bcrypt with per-user salting — i1m88 never stores plaintext passwords;
• Multi-factor authentication for internal staff access to systems containing personal data;
• Regular third-party penetration testing and security audits of Platform infrastructure;
• Role-based access controls limiting staff access to personal data on a need-to-know basis.

No data transmission over the internet or storage system can be guaranteed to be completely secure. While i1m88 takes all reasonable precautions, we cannot provide an absolute guarantee of security. Players are responsible for maintaining the security of their own i1m88 login credentials.

10. Your Data Rights

Subject to applicable law and our legal obligations, you have the following rights in respect of your personal data held by i1m88:

• Right of access: Request a copy of the personal data i1m88 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where retention is no longer necessary and no overriding legal obligation applies;
• Right to restrict processing: Request that i1m88 limit the processing of your data in certain circumstances;
• Right to data portability: Receive a machine-readable copy of personal data you have provided to i1m88;
• Right to withdraw consent: Withdraw consent for processing activities based solely on consent, including marketing communications, at any time without affecting prior processing.

To exercise any of these rights, contact i1m88 Data Protection via the email address in the contact section of this Policy. We will acknowledge receipt within 5 business days and respond in full within 30 calendar days. Where requests are complex or numerous, a 30-day extension may apply, of which you will be notified.

11. Children's Privacy

The i1m88 Platform is strictly prohibited for use by individuals under the age of 21. i1m88 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21 without age verification having been completed, we will immediately close the account and delete the associated personal data, with any deposited funds returned to the originating payment method.

If you believe that i1m88 may have inadvertently collected data from a person under 21, please contact our support team immediately.

12. Changes to This Privacy Policy

i1m88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email to the address on file, or by prominent notice on the Platform, at least 14 days prior to the change taking effect.

Continued use of the i1m88 Platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

13. Contact & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by i1m88, please contact our Data Protection team. Contact details are available in the Platform footer. Written requests are responded to within 5 business days of receipt.

For urgent security concerns — such as suspected unauthorised access to your i1m88 account — please use the 24/7 live chat support function available on the Platform for immediate assistance.