iwin88 is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, who it may be shared with, and the rights you hold over your own data as a user of our platform.
iwin88 collects only the personal data that is strictly necessary to operate your account, process transactions, and comply with our licensing obligations. We do not collect data for its own sake, and we do not retain information longer than required.
All data transmitted between your device and our platform is protected using 256-bit SSL/TLS encryption. Sensitive data at rest — including payment details and identity documents — is stored using industry-standard encryption protocols.
iwin88 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used only to provide and improve our services, and to meet our legal obligations.
You have the right to access, correct, export, or request deletion of your personal data at any time. Requests are handled by our support team and acknowledged within 5 business days, with resolution targeted within 30 days.
We use cookies and similar tracking technologies solely to maintain session integrity, analyse aggregate site performance, and improve the user experience. You can manage cookie preferences through your browser settings at any time.
iwin88's data handling practices are designed to align with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, applied as best-practice standards across our operations.
This Privacy Policy (hereinafter "the Policy" or "this Policy") is published by iwin88 (hereinafter "iwin88", "we", "us", or "our") in relation to the collection, processing, storage, and disclosure of personal data obtained from users (hereinafter "you", "your", or "the User") of the website located at https://iwin88.cam and all associated services (collectively, "the Platform").
iwin88 is a Malaysia-focused online casino and sports betting platform. We take the privacy of our players seriously. This Policy is intended to be transparent, readable, and substantive — not merely a formality. We encourage you to read it carefully so that you understand exactly how your data is handled when you use our services.
By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. If you disagree with any part of this Policy, you should not use the Platform or register an account.
For the purposes of this Policy, the following definitions shall apply:
iwin88 acts as the Data Controller in respect of all personal data collected from users of the Platform. As Data Controller, iwin88 determines the purposes for which personal data is collected and the means by which it is processed.
Where iwin88 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, fraud detection partners, or analytics providers — those third parties act as Data Processors under formal data processing agreements that impose obligations consistent with the protections described in this Policy.
For any queries regarding this Policy or iwin88's role as Data Controller, please contact our Data Privacy team using the contact details set out in Section 16 of this Policy.
The personal data we collect from you falls into the following categories:
When you create an account on iwin88, we collect the information you provide during the registration process, including your full legal name, date of birth, email address, mobile phone number, preferred username, and password (stored in hashed form — we never store plaintext passwords).
As part of our KYC obligations, we collect copies of identity documents you submit for verification purposes, including Malaysian MyKad (NRIC), Driver's Licence, or Passport; proof of residential address (utility bills, bank statements, or telco bills — typically acceptable if dated within three months); and selfie photographs taken with your identity document. These documents are processed solely for the purpose of age and identity verification and are stored securely with access restricted to authorised compliance personnel.
We collect information about your deposits and withdrawal transactions, including payment method details (e-wallet identifiers, bank account numbers for FPX / DuitNow transactions, and cryptocurrency wallet addresses for USDT TRC20 deposits), transaction amounts, and timestamps. Full card numbers are not stored on our systems — card payment processing is handled directly by our payment service providers through secure, PCI-DSS-compliant infrastructure.
We record your activity on the Platform, including game sessions played, wagers placed, sports betting history (Liga Super Malaysia, EPL, UFC, and other markets), bonus participation, login times, and account modification events. This data is used to manage your account, detect fraud, enforce responsible gambling policies, and resolve disputes.
We automatically collect technical information when you access the Platform, including your IP address, browser type and version, operating system, device type and identifiers, referring URL, pages visited, and session duration. This data is used for security monitoring, fraud detection, and aggregate performance analytics.
If you contact our support team via live chat or email, we retain records of those communications, including the content of messages and any attachments, for the purpose of resolving your query and maintaining a quality assurance record of customer interactions.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration | Name, email, phone, DOB | Account creation, communication |
| KYC / Identity | MyKad, passport, selfie | Age verification, fraud prevention |
| Financial | Bank account, e-wallet ID, transaction history | Deposits, withdrawals, AML compliance |
| Activity | Game logs, bet history, login times | Account management, responsible gambling |
| Technical | IP address, device type, browser | Security, fraud detection, analytics |
| Communications | Support chat logs, email records | Query resolution, QA |
iwin88 processes personal data only where a valid lawful basis exists for doing so. The lawful bases on which we rely are as follows:
iwin88 uses the personal data we collect for the following specific purposes:
To create, maintain, and administer your iwin88 account, including processing deposits and withdrawals, managing bonuses and promotions, and providing access to games and betting markets.
To verify that you are at least 21 years of age and that the identity you have provided is accurate, as required by our licensing conditions and responsible gambling obligations.
To detect and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct. This includes automated monitoring of account activity patterns and manual investigation by our compliance team.
To comply with applicable anti-money laundering (AML) regulations, licensing requirements, and any lawful requests from competent authorities, including the retention of transaction records for the periods mandated by applicable law.
To respond to your enquiries, resolve disputes, process complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
To monitor account activity for signs of problem gambling, to enforce deposit limits, session reminders, and self-exclusion requests, and to ensure the platform is not accessed by individuals who have requested exclusion.
To analyse aggregate, anonymised usage patterns in order to improve the design, performance, and content of the Platform. Individual user data is not used for this purpose in identifiable form.
Where you have opted in to receive marketing communications, to send you information about promotions, new games, and special offers relevant to your activity on iwin88. You may opt out of marketing communications at any time by contacting our support team.
iwin88 does not sell, rent, or trade your personal data to any third party. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
We share financial data with our payment processing partners — including providers handling Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 cryptocurrency transactions — to the extent necessary to process your transactions.
We may engage third-party KYC verification service providers to assist with document authentication and identity checks. These providers operate under contractual obligations that restrict their use of your data to the specific purpose of verification on our behalf.
We may share device and behavioural data with third-party fraud prevention services operating on our behalf to detect and block fraudulent activity, account takeover attempts, and multi-accounting.
We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts if required to do so by applicable law, court order, or legitimate legal process. We will, where legally permissible, notify you of such disclosures.
In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.
iwin88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing conditions. The following retention periods apply as general guidance:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Licensing obligation / legal compliance |
| KYC identity documents | Duration of account + 5 years post-closure | AML regulatory requirement |
| Financial transaction records | 7 years from transaction date | AML and licensing requirement |
| Game and betting activity logs | Duration of account + 3 years post-closure | Dispute resolution / regulatory audit |
| Customer support communications | 3 years from date of last communication | Legitimate interests / dispute resolution |
| Technical / device logs | 12 months on a rolling basis | Security and fraud prevention |
| Marketing consent records | Until consent is withdrawn + 3 years | Evidence of consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.
iwin88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:
iwin88 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that enable certain website functions. We use the following categories of cookies:
These cookies are essential for the Platform to function and cannot be disabled. They are set in response to actions you take, such as logging in or setting preferences. They do not store any personally identifiable information beyond what is needed to maintain your session.
These cookies collect aggregate, anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and whether error messages are received. We use this data to improve the performance and content of our Platform. These cookies do not directly identify individual users.
These cookies allow the Platform to remember choices you have made — such as your preferred language or display settings — and provide enhanced, personalised features. Information collected by functional cookies may be anonymised and cannot track browsing activity on other websites.
You can control and manage cookie settings through your browser's privacy settings. Please be aware that disabling strictly necessary cookies will affect the functionality of the Platform and may prevent you from accessing certain features, including your account.
iwin88 operates under an international online gaming licence, and certain aspects of our data processing infrastructure may be located in jurisdictions outside Malaysia. As a result, your personal data may be transferred to, stored in, and processed in countries other than Malaysia.
Where we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect that data at a level consistent with the protections described in this Policy. These safeguards may include contractual clauses between iwin88 and receiving parties that impose data protection obligations, or reliance on jurisdictions that provide adequate levels of data protection.
By using the iwin88 Platform and providing your personal data, you acknowledge and consent to these transfers as described in this section, subject to the protections described throughout this Policy.
You hold a number of rights in relation to the personal data that iwin88 holds about you. These rights are described below. To exercise any of these rights, please contact our support team using the details in Section 16.
You have the right to request a copy of the personal data iwin88 holds about you. We will provide this information within 30 days of a verified request, free of charge for reasonable requests.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor account details can often be updated directly in your account settings.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that regulatory requirements may prevent full deletion of certain data categories (such as KYC and transaction records) during mandatory retention periods.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
Where processing is based on your consent or on a contract, you have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data where it is based on our legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, we will cease processing for that purpose immediately.
Where processing is based on your consent — such as receipt of marketing communications — you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
The iwin88 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under this age, we will immediately close the associated account, delete the collected data, and return any funds deposited, subject to identity verification.
If you are a parent or guardian and believe that a minor in your care has registered an account on iwin88, please contact our support team immediately at so that we can investigate and take appropriate action.
The iwin88 Platform may contain references to or integrations with third-party services, including payment processors and game studios. These third-party services operate under their own privacy policies and data protection practices, over which iwin88 has no control.
iwin88 is not responsible for the privacy practices of third-party services accessed through or in connection with the Platform. We encourage you to review the privacy policies of any third-party services you interact with, particularly payment providers used for depositing or withdrawing funds from your iwin88 account.
iwin88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our services. Where changes are material, we will notify registered users by email and/or by posting a prominent notice on the Platform not less than 14 days before the revised Policy takes effect.
The effective date of the current version of this Policy is stated at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to any amendment, you should cease using the Platform and close your account before the amendment takes effect.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint regarding our data processing practices, please contact iwin88 using the following channels:
We will endeavour to resolve all privacy-related complaints within 30 days of receipt. Where a complaint cannot be resolved to your satisfaction through our internal process, you may have the right to escalate to a data protection authority in the applicable jurisdiction.
Now that you understand how we protect your data, explore everything iwin88 has to offer — slots, live dealer, sports betting, and fast MYR payouts. For any questions about privacy or your account, our team is online 24/7.
For players aged 21 and above only. Please gamble responsibly.