i8my Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which i8my ("we", "us", "our", "the Platform") collects and processes personal data from users ("Member", "Player", "User", "you") of the i8my website located at i8my.win and all associated services. Please read this Policy carefully. By registering an account or using i8my's services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

1. Introduction

i8my is committed to protecting the privacy and personal data of all individuals who interact with our platform. We recognise that trust is foundational to the relationship between an online gaming operator and its Members. This Policy has been drafted to give Malaysian players and all other users a clear, transparent understanding of exactly what data i8my holds, why we hold it, who we may share it with, and how long we keep it.

i8my operates under an international online gaming licensing framework that imposes specific data protection, Know Your Customer (KYC), and anti-money laundering (AML) obligations on us. Some of our data processing activities are therefore legally mandated — they are not optional and cannot be opted out of without affecting your ability to hold an active i8my account.

2. Data Controller

For the purposes of applicable data protection legislation, i8my acts as the data controller in respect of all personal data collected through the Platform. As data controller, i8my is responsible for determining the purposes for which and the manner in which your personal data is processed.

If you have questions about how i8my processes your personal data, you may contact our Data Protection team at [email protected]. All enquiries are handled in English and responses will be provided within 30 days of receipt.

3. Personal Data We Collect

3.1 Registration Data

When you open an i8my account, we collect the following information:

• Full legal name as it appears on your identity document;
• Date of birth (to verify the mandatory 21+ age requirement);
• Residential address;
• Email address;
• Mobile phone number;
• Username and hashed password (passwords are never stored in plain text).

3.2 KYC Verification Data

To comply with our licensing obligations, we require identity verification documents including:

• A copy of your Malaysian MyKad (National Identity Card) or valid passport;
• Proof of residential address (utility bill, bank statement, or equivalent dated within 90 days);
• Source of funds documentation for high-value accounts or where required by AML procedures.

3.3 Financial Transaction Data

All deposit and withdrawal transactions are logged, including: transaction amounts in MYR, timestamps, payment method identifiers (e-wallet account references, masked bank account numbers), and transaction status. We do not store complete bank account numbers or full card numbers on our servers.

3.4 Gaming Activity Data

i8my logs all gaming and betting activity associated with your account, including: game sessions, bet amounts, outcomes, bonus usage, wagering progress, and session duration. This data is used for account integrity, dispute resolution, and responsible gaming monitoring purposes.

3.5 Technical & Device Data

When you access i8my, we automatically collect: IP address, device type and operating system, browser type and version, referring URL, session duration, and pages visited. This information is collected via server logs and analytics tools.

3.6 Communications Data

If you contact i8my's customer support, we retain records of those communications — including live chat transcripts and email correspondence — for quality assurance, training, and dispute resolution purposes.

4. How We Use Your Personal Data

i8my processes personal data for the following purposes:

• Account administration: to create, manage, and maintain your i8my account and verify your identity;
• Age verification: to enforce the mandatory 21+ minimum age requirement;
• KYC and AML compliance: to meet our legal obligations under our international gaming licence, including anti-money laundering screening;
• Payment processing: to process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank, and cryptocurrency;
• Platform operation: to deliver gaming services, process bets, calculate winnings, and manage the VIP programme;
• Customer support: to respond to enquiries, handle disputes, and provide technical assistance;
• Fraud prevention and security: to detect, investigate, and prevent fraud, money laundering, and platform abuse;
• Responsible gaming: to identify problem gambling patterns, enforce self-exclusion requests, and apply deposit and session limits;
• Service communications: to send transactional notifications — deposit confirmations, withdrawal updates, bonus activations — by email or in-app notification;
• Marketing communications: to send promotional offers and updates by email, where you have opted in to receive such communications and subject to your right to opt out at any time;
• Platform improvement: to analyse usage patterns, test new features, and improve the i8my Member experience.

5. Legal Basis for Processing

i8my processes personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between i8my and the Member (account operation, payment processing, game delivery);
• Legal obligation: processing required to comply with our licensing, KYC, AML, and age verification obligations;
• Legitimate interests: fraud prevention, platform security, analytics, and service improvement, where these interests are not overridden by your data protection rights;
• Consent: marketing communications and non-essential cookies, where your explicit consent has been obtained and is subject to withdrawal at any time.

6. Sharing Your Personal Data

i8my does not sell your personal data. We may share personal data with third parties only in the following circumstances:

• Payment service providers: to process deposits and withdrawals (e.g. Touch n Go, Boost, Maybank, CIMB, Public Bank, cryptocurrency processors). These providers receive only the data necessary to complete the transaction;
• Identity verification providers: to perform KYC checks against identity databases as required by our licensing obligations;
• Game software providers: game studio servers process game activity data to determine outcomes. i8my shares session tokens with certified studio providers — never your full identity profile;
• Regulatory and licensing authorities: as required by our operating licence or by court order, law enforcement request, or applicable law;
• Technical service providers: hosting, security, analytics, and customer support platform providers engaged under data processing agreements that require them to handle data only on i8my's instructions;
• Professional advisers: legal, accounting, and auditing advisers, subject to professional confidentiality obligations.

All third parties engaged by i8my to process personal data on our behalf are contractually bound to handle that data securely and in accordance with this Policy.

7. Cookies & Tracking Technologies

i8my uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly necessary cookies: required for the Platform to function (session management, login state, security tokens). These cannot be disabled without impairing Platform functionality;
• Functional cookies: used to remember your preferences (language, display settings, remembered username with your consent);
• Analytics cookies: used to measure traffic, game popularity, and user flow through the Platform. Data collected is aggregated and anonymised;
• Marketing cookies: used to track referral sources and measure the effectiveness of i8my promotional campaigns. Only deployed with your consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using i8my's core services but may affect personalisation features.

8. Data Retention

i8my retains personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and accounting obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in accordance with our licensing and AML obligations;
• Financial transaction records are retained for seven (7) years for accounting and regulatory compliance purposes;
• Gaming activity logs are retained for five (5) years for dispute resolution and regulatory audit purposes;
• Customer support communications are retained for three (3) years;
• Marketing consent records are retained until consent is withdrawn, and for three (3) years thereafter as proof of consent.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.

9. Data Security

i8my implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, or destruction:

• 256-bit SSL/TLS encryption on all data in transit between your browser and i8my's servers;
• Encryption of sensitive data fields (passwords, payment identifiers) at rest;
• Multi-factor authentication available for Member accounts;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular third-party security audits and penetration testing;
• Incident response procedures with notification protocols in the event of a data breach.

No online data transmission is completely risk-free. While i8my takes all reasonable measures to protect your data, we cannot guarantee absolute security.

10. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by i8my:

• Right of access: to request a copy of the personal data i8my holds about you;
• Right to rectification: to request correction of inaccurate or incomplete data;
• Right to erasure: to request deletion of your data, subject to our legal retention obligations;
• Right to restriction: to request that we limit processing of your data in certain circumstances;
• Right to data portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract;
• Right to object: to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact i8my Data Protection at [email protected]. We will respond within 30 days. Identity verification may be required before we action any request.

11. International Data Transfers

i8my may transfer personal data to third-party service providers located outside Malaysia. Where such transfers occur, i8my ensures appropriate safeguards are in place — including contractual data processing agreements with standard data protection clauses — to ensure your personal data receives an equivalent level of protection.

12. Children's Privacy

i8my does not knowingly collect personal data from individuals under 21 years of age. The Platform is strictly intended for adults aged 21 and above. If we become aware that an account has been registered by a person under 21, the account will be immediately suspended and any personal data will be deleted, except to the extent retention is required by applicable law.

If you are aware of or suspect that a minor has registered an i8my account, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

i8my may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. Material changes will be communicated to Members via a notice on the Platform or by email to their registered address. Continued use of the Platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

We recommend reviewing this Policy periodically. The "Last Updated" date at the top of this page reflects the most recent revision.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or i8my's data protection practices, please contact:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform
• Response Time: Within 30 calendar days of receipt