Privacy Policy — i8bet Platform

1.1 i8bet is the data controller in respect of personal data collected directly through the i8bet Platform. As data controller, i8bet determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection obligations arising from our international gaming authority licence.

1.2 This Policy covers data processed through the i8bet website and all associated service interfaces, including the sportsbook, live casino, slots, Plinko, promotions hub, customer support chat, payment facilities, and account management functions.

1.3 Where i8bet engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, and customer support platforms — those providers act as data processors under binding contractual agreements that restrict their use of your data to the specific purpose for which it was shared.

2.1 i8bet collects personal data through several means: directly from you when you register or interact with the Platform, automatically through your use of the website, and from third-party verification and payment services. The categories of data collected include:

2.2 i8bet does not knowingly collect sensitive personal data (as defined under applicable data protection law) beyond what is strictly necessary for KYC and responsible gaming compliance purposes. Where such data is collected, it is processed under the specific legal bases set out in Section 4 below.

3.1 i8bet processes your personal data for the following purposes:

• Account Management: To register and maintain your i8bet account, verify your identity and age (21+ requirement), and manage your account settings and preferences.
• Service Delivery: To provide access to all gaming products (live casino, sportsbook, slots, Plinko), process bets and calculate outcomes, and display personalised account information.
• Payment Processing: To facilitate deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and any other approved Malaysian payment methods. Transaction data is processed to complete payments and maintain financial records.
• Legal & Regulatory Compliance: To fulfil our obligations under our international gaming authority licence, including KYC verification, anti-money laundering checks, responsible gaming monitoring, and cooperation with relevant regulatory authorities.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, multi-accounting, and other prohibited conduct outlined in i8bet's Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide account assistance through live chat and email.
• Responsible Gaming: To monitor gaming patterns and intervene where activity suggests potential problem gambling, in accordance with our licence obligations. This includes applying self-imposed limits and self-exclusion instructions.
• Marketing Communications: Where you have opted in, to send promotional offers, bonus notifications, and platform updates to your registered email or mobile number. You may opt out of marketing communications at any time via your account settings.

3.2 i8bet will not use your personal data for any purpose that is incompatible with the purposes listed above without obtaining your prior consent or as otherwise required by law.

4.1 i8bet processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including account management, game provision, and payment processing — is carried out on the basis that it is necessary for the execution of the agreement between you and i8bet.
• Legal Obligation: Processing required to comply with our international gaming authority licence, anti-money laundering obligations, and any applicable regulatory requirements is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming oversight is carried out on the basis of i8bet's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit consent, which you may withdraw at any time.

5.1 i8bet does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: Financial data is shared with approved payment service providers (including eWallet operators and Malaysian banking institutions) to process deposits and withdrawals.
• Identity Verification Providers: Identity and document data is shared with licensed KYC and age verification service providers to fulfil our regulatory obligations.
• Game Content Providers: Certain anonymised or pseudonymised gaming activity data may be shared with licensed game studios to facilitate game session management and RTP auditing.
• Regulatory Authorities: We are obligated to disclose certain data to our international gaming authority and, where lawfully required, to competent governmental or law enforcement authorities.
• Professional Advisors: Legal advisors, auditors, and compliance consultants may access data on a confidential, need-to-know basis in the course of providing professional services to i8bet.

5.2 All third parties with whom i8bet shares personal data are contractually required to maintain appropriate security standards and to process such data only for the specified purpose. i8bet does not authorise any third party to use your data for their own independent marketing or commercial purposes.

6.1 i8bet uses cookies and similar tracking technologies to operate the Platform, maintain session continuity, detect fraud, and analyse user behaviour in aggregate. The categories of cookies used are:

• Strictly Necessary Cookies: Required for basic Platform functionality including i8bet login session management, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Analytical Cookies: Used to measure Platform usage in aggregate, including page views, session durations, and navigation paths. Data is processed in anonymised or pseudonymised form.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and previously used payment methods to improve your experience.

6.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality, including the i8bet login process and session continuity. i8bet does not use third-party advertising cookies or cross-site tracking technologies.

7.1 i8bet retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and contractual obligations. The principal retention periods applicable to i8bet Player data are:

• Account & Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering and gaming licence record-keeping requirements.
• Transaction & Financial Data: Retained for a minimum of seven (7) years to satisfy financial record-keeping obligations.
• Gaming Activity Data: Retained for a minimum of five (5) years for regulatory audit and dispute resolution purposes.
• Customer Support Communications: Retained for three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing Consent Records: Retained for the duration of the account and for three (3) years following opt-out or account closure, as evidence of consent management compliance.

7.2 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data will be restricted from active processing pending deletion.

8.1 i8bet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the i8bet Platform;
• Encrypted storage of sensitive personal and financial data at rest using industry-standard algorithms;
• Two-factor authentication (2FA) available on all i8bet accounts, providing an additional layer of login security via SMS OTP to your registered Malaysian mobile number;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular third-party security audits and penetration testing of the i8bet Platform infrastructure;
• Automated anomaly detection systems monitoring for unusual account activity, login patterns, and transaction behaviour.

8.2 Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed to be 100% secure. i8bet will notify affected Players and relevant authorities in the event of a personal data breach, in accordance with our regulatory obligations and within the timeframes prescribed by applicable law.

9.1 Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by i8bet:

• Right of Access: You may request a copy of the personal data i8bet holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Basic account information can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal and regulatory retention obligations.
• Right to Restrict Processing: You may request that processing of your data be restricted in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contract performance, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Objection to direct marketing will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, contact i8bet's support team via live chat within your account dashboard or by email at [email protected]. i8bet will respond to all verified requests within 30 calendar days. Requests may require identity verification before processing.

10.1 i8bet strictly prohibits access by any individual under the age of 21. i8bet does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been provided by a person under 21, we will immediately suspend the relevant account, void all associated transactions, and delete the data subject to our regulatory record-keeping obligations.

10.2 Where a parent or guardian believes that a minor has registered with i8bet or provided personal data to the Platform, they should contact our support team immediately via live chat. i8bet will investigate and take prompt action.

11.1 i8bet may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via the email address on file at least 14 days before the changes take effect.

11.2 The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the i8bet Platform following any update constitutes acceptance of the revised Privacy Policy.

11.3 Where changes materially affect how we process your data and require your consent (for example, a new category of marketing use), we will seek your explicit consent before the new processing begins.

12.1 For all privacy-related enquiries, data subject rights requests, or concerns about how i8bet processes your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 inside your i8bet account dashboard. This is the fastest channel for urgent privacy matters, with typical response times under 90 seconds during Malaysian peak hours (8am–2am MYT).
• Email: [email protected] — for formal data protection requests, please mark your email with the subject line "Data Privacy Request" to ensure it is routed to our compliance team.

12.2 i8bet is committed to resolving all privacy concerns promptly and transparently. If you are unsatisfied with our response to a privacy complaint, you may escalate the matter to the relevant supervisory authority under our international gaming authority licence jurisdiction.