I8 Casino Privacy Policy

1Information We Collect

I8 Casino collects various types of personal data depending on how you interact with our platform. This data collection is carried out transparently and solely for legitimate purposes.

1.1 Data You Provide Directly

When you register an account or use our services, you provide the following information:

1.2 Data Collected Automatically

When you browse or use our platform, our systems automatically record the following technical information to ensure security and a better user experience:

• IP address and geographic location (country/state level)
• Device type, operating system and web browser used
• Pages visited, time spent, and navigation patterns
• Transaction log data and game records
• Cookies and device identifiers

1.3 Data from Third Parties

In certain cases, we may receive information about you from trusted third parties, including payment service providers, identity verification agencies, and licensed AML/KYC compliance partners.

2How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. We do not use your data for any purpose other than those stated below:

• Account Management: Register, verify and maintain your account securely
• Transaction Processing: Process deposits, withdrawals and all financial transactions accurately and promptly
• Identity Verification: Carrying out KYC procedures as required by law and licensing requirements
• Platform Security: Detect, investigate and prevent fraud, hacking and suspicious activity
• Customer Support: Provide accurate and effective support whenever you need assistance
• Legal Compliance: Fulfil applicable legal obligations, regulations and court orders
• Service Improvements: Analyse usage patterns to improve platform performance and user experience
• Service Communications: Send important account notices, security updates and relevant promotional information (with your consent)

3Legal Basis for Data Processing

We process your personal data on a solid legal basis in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international standards:

• Contract Performance: Processing required to fulfil the terms of service you agreed to upon registration
• Legal Obligation: Compliance with AML, KYC regulations and online gambling licensing requirements
• Legitimate Interest: Fraud prevention, platform security and responsible risk analysis
• Consent: For marketing communications and optional data sharing, we require your explicit consent, which may be withdrawn at any time

4Data Sharing and Disclosure

I8 Casino takes a highly limited approach to data sharing. We only share your information in the following circumstances and only with the parties that require it:

4.1 Trusted Service Providers

We work with carefully selected third-party service providers to handle specific functions, including payment processing, identity verification, cloud services and analytics. All providers are bound by strict data protection agreements and may only use your data for purposes we specify.

4.2 Authorities and Regulatory Bodies

We may be required to disclose personal data to government authorities, law enforcement bodies or gambling regulators if mandated by law or a valid court order. In such situations, we will endeavour to notify you in advance unless prohibited from doing so by law.

4.3 Business Transfers

In the event of a merger, acquisition or sale of company assets, your personal data may be transferred to the new entity. You will be notified of any such changes and your rights will remain protected.

5Data Security and Encryption

Protecting your personal data from unauthorised access, disclosure, alteration or destruction is our absolute priority. We implement multiple layers of technical and organisational security:

5.1 Technical Security Measures

• Transit Encryption: All communications are protected with TLS 1.3 protocol and 256-bit SSL encryption
• Storage Encryption: Sensitive data such as passwords and financial information is stored in encrypted format using the AES-256 algorithm
• Multi-Layer Firewall: Our servers are protected by multi-layered firewall systems and intrusion detection systems
• Two-Factor Authentication: 2FA is available and recommended for all member accounts for added security
• Continuous Monitoring: Our SIEM system monitors for suspicious activity 24 hours a day, 7 days a week

5.2 Organisational Security Measures

• Access to personal data is restricted to staff who require it solely to perform their duties
• All staff undergo data protection training and are bound by strict confidentiality agreements
• Internal and external security audits are conducted periodically by accredited independent parties
• Clear and tested incident response procedures to address any data breaches

6Cookies and Tracking Technologies

I8 Casino uses cookies and similar tracking technologies to enhance your experience, ensure security, and understand how our platform is used. The following are the types of cookies we use:

• Necessary Cookies (Required): Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: Collect information on how you use the platform to help us improve our services.
• Functional Cookies: Remember your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies: Help us understand traffic patterns and user behaviour in aggregate, anonymised form.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality.

7Data Retention Period

I8 Casino does not retain your personal data longer than necessary for the purposes outlined in this policy. Retention periods are determined based on operational requirements and legal obligations:

• Active Account Data: Retained for as long as your account is active and for 5 years following account closure
• Financial Transaction Records: Retained for 7 years in accordance with applicable AML and tax legal requirements
• KYC Documents: Retained for 5 years after the business relationship ends
• Security Logs: Retained for 2 years for investigation and audit purposes
• Marketing Data: Deleted when you withdraw consent or within 30 days of a deletion request

Upon expiry of the retention period, your data will be securely deleted or permanently anonymised in accordance with our data deletion procedures.

8Your Rights as a Data Subject

Under Malaysia's PDPA and applicable data protection standards, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our Data Protection Officer via our support email. We will process your request within 30 days of the date of receipt and we may need to verify your identity before processing the request.

9International Data Transfers

In the course of our operations, your personal data may be processed or stored on servers located outside Malaysia. We ensure that any international data transfers are carried out with protections equivalent to or greater than those required under Malaysian law, through:

• Binding data transfer agreements with all overseas service providers
• Use of internationally recognised standard contractual clauses
• Selection of partners in countries with adequate data protection standards
• Regular audits of the data protection practices of our service providers

10Children's Privacy

I8 Casino is a platform that is only designed for users aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. If you believe we may hold data relating to a child, please contact us immediately.

11Changes to the Privacy Policy

I8 Casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or improvements to how we operate.

When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on our platform for a minimum of 30 days
• Send a notice to your registered email address for significant changes

Continued use of the platform after changes are published will be considered your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and request data deletion in accordance with the procedures outlined in Section 8.

12Contact Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Live Chat: Available 24/7 via the i8 Casino platform
• Response Time: We are committed to responding to all enquiries within 3 business days

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated and we have been unable to resolve the matter to your satisfaction.