Introduction
Iwin88 cares about your privacy. As a trusted online betting entertainment platform in Malaysia, we understand that your trust in us begins with how we manage your personal information. This Privacy Policy document is provided to give you a clear and transparent account of our data protection practices.
This Privacy Policy applies to all users who visit, register, and use the iwin88 platform, including the official website at iwin88.bar, the iwin88 mobile app, and all related services we offer. By using any iwin88 service, you agree to the collection and use of your information as described in this Privacy Policy.
We recommend you read this document together with Terms & Conditions and policies Responsible Gaming iwin88 for a comprehensive understanding of your rights and responsibilities as a member of our platform.
This Privacy Policy is effective from 1 January 2026. Any amendments will be communicated to members via in-platform notifications or email, and the latest revision date will always be displayed at the top of this page.
Types of Personal Data We Collect
Iwin88 collects various types of information when you register and use our platform. All data collection is carried out on a lawful basis and only to the extent necessary for the stated purposes.
Registration & Identity Data
During the account registration process, we require the following basic information:
- Full name as it appears on a valid identification document
- Active mobile number registered in Malaysia
- Date of birth for age verification
- Account password (stored in an unreadable hashed format)
KYC (Know Your Customer) Data
To meet legal compliance requirements and process withdrawals, you are required to submit:
- Copy of national identity card (MyKad, front and back)
- Valid passport or driving licence (as an alternative)
- Bank statement or proof of payment account ownership
- Selfie holding identity document (in certain cases)
Transaction & Financial Data
To process deposits and withdrawals, we record transaction details including amounts, payment methods, reference numbers, and transaction timestamps. Full card or bank account details not saved on iwin88 servers — payment processing is handled by PCI-DSS certified third-party payment processors.
Usage & Technical Data
Our system automatically records technical information when you use the platform, including IP address, browser type and version, device operating system, pages visited, session time and duration, and gaming activity logs.
Iwin88 does not collect biometric data such as fingerprints or facial recognition. Full credit or debit card numbers are also not stored in our systems — all payment processing uses secure tokens through certified processors.
Summary of Data Types & Purposes
| Data Type | Primary Purpose | Legal Basis |
|---|---|---|
| Registration data | Account management, secure login | Contract performance |
| KYC Data | Identity verification, AML compliance | Legal obligation |
| Transaction data | Payment processing, financial records | Contract performance |
| Usage data | Security, platform improvements | Legitimate interest |
| Communication data | Customer support, notifications | Contract performance |
How We Use Your Data
Every piece of data we collect is used solely for legitimate purposes directly related to the provision of iwin88 services. Below is a detailed breakdown of how we use your data:
Account Management & Identity Verification
Your registration and KYC data are used to create and manage your iwin88 account, verify your identity at login, process withdrawals securely, and ensure that only the rightful account owner can access their funds. This is a fundamental requirement to keep your account safe.
Financial Transaction Processing
Transaction records are used to accurately process deposits and withdrawals, maintain complete financial records, resolve any payment-related disputes or enquiries, and ensure bonuses and promotions are correctly credited to eligible accounts.
KYC & AML Compliance
Iwin88 has a legal obligation to prevent money laundering and terrorism financing. Your data is used to conduct required background checks, monitor suspicious transaction patterns, and report to authorities when required by applicable law.
Service Communications
We use your contact information to send important account notifications (such as login confirmations, security alerts, and transaction status updates), inform you of changes to our Terms & Conditions or Privacy Policy, and provide effective customer support via live chat and email.
Platform Improvements & Analytics
Usage data collected in aggregate form (without identifying individuals) is used to understand platform usage patterns, identify and resolve technical issues, optimise the user interface, and develop better new features for all members.
Iwin88 no use your data to make automated decisions that significantly affect you without human involvement. Any important decisions such as account closures or withdrawal rejections involve manual review by our team.
Data Sharing & Disclosure
Iwin88 does not sell, rent, or trade members' personal data to third parties. However, there are certain situations where we need to share your information with specific parties, as described below:
Third-Party Service Providers
We work with carefully selected service providers to support platform operations, including payment processors (FPX, Touch 'n Go, GrabPay, ShopeePay), game software providers, cloud service providers, and analytics platforms. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
Legal & Regulatory Requirements
Iwin88 may be required to disclose your data to authorities when:
- Ordered by a court or authorised regulatory body
- Required for financial crime investigations or anti-money laundering purposes
- Required to fulfil applicable financial reporting obligations
- Required to protect the rights, property, or safety of iwin88 or its users
In all such cases, we will disclose only the minimum information necessary and will notify you if permitted to do so by law.
Business Transfer
In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of the business assets. In such cases, the new entity will be bound by this Privacy Policy or an equivalent policy, and members will be notified in advance.
All cross-border data transfers (where applicable) are carried out in accordance with recognised data transfer mechanisms, including Standard Contractual Clauses (SCC) or equivalent protective mechanisms, to ensure your data remains protected.
Security & Data Protection
Your data security is iwin88's top priority. We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, modification, or destruction.
Technical Security Measures
- 256-bit SSL/TLS Encryption for all data transmissions between your device and our servers
- Data encryption at rest (at-rest encryption) for all sensitive data stored in the database
- Multi-layer firewall and intrusion detection systems (IDS/IPS) that monitor traffic in real time
- Two-Factor Authentication (2FA) available for all member accounts
- 24/7 Monitoring by a trained cybersecurity team
- Penetration testing Periodic penetration testing is conducted by independent security firms
Internal Access Controls
Access to member data within the iwin88 organisation is restricted on a need-to-know basis. Only staff who require access to specific data to perform their duties are permitted to do so. All access is logged and audited regularly.
Security Incident Response
Iwin88 has a comprehensive incident response plan. In the event of a data breach affecting members' personal information, we will notify affected members and the relevant authorities within the timeframe stipulated by applicable law. We are committed to addressing any security incidents transparently and promptly.
While we take all reasonable steps to protect your data, no security system is 100% breach-proof. We encourage members to take personal security measures as well, such as using strong passwords, enabling 2FA, and not sharing login credentials.
Cookies, Trackers & Similar Technologies
Iwin88 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure security functions operate correctly.
Types of Cookies Used
- Essential Cookies: Required for core platform functions such as login sessions, security, and navigation. These cookies cannot be disabled.
- Performance Cookies: Collect information on how you use the platform to help us improve the overall user experience.
- Functional Cookies: Remember your preferences such as language, display settings, and other options to personalise your experience.
- Analytics Cookies: Help us understand aggregate usage patterns without identifying individual users.
Managing Cookies
You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the iwin88 platform. Most modern browsers allow you to selectively accept, reject, or delete cookies via the settings menu.
Iwin88 does not use third-party cookies for targeted advertising. The analytics we use are solely for platform improvement purposes, not for selling user profiles to advertisers.
Member Rights Regarding Personal Data
Iwin88 respects your rights over your personal data. As a member, you have the following rights, which you may exercise at any time:
Right of Access
Request a copy of the personal data we hold about you in a readable format.
Right to Rectification
Request correction of inaccurate or incomplete data in our records.
Right to Erasure
Request deletion of your personal data under certain circumstances permitted by law.
Right to Restriction of Processing
Request restriction of your data processing in specific situations while a dispute is being resolved.
Right to Data Portability
Receive your data in a structured, machine-readable format for transfer to another platform.
Right to Object
Object to the processing of your data for specific purposes, including direct marketing.
To exercise any of the above rights, please contact our privacy team by email at [email protected] or via live chat on the platform. We will process your request within 30 working days. In complex cases, this period may be extended to 60 days with prior notification to you.
Certain rights may be restricted in specific situations — for example, the right to erasure may not apply if we are legally required to retain records for AML compliance or financial regulatory purposes. We will inform you if your request cannot be fully fulfilled, along with valid reasons.
Data Retention Period
Iwin88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or to comply with applicable legal requirements.
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account data | For the duration of the active account | Ongoing service provision |
| KYC Data | 5 years after account closure | AML compliance requirements |
| Transaction records | 7 years | Financial legal requirements |
| Support communication logs | 3 years | Dispute resolution |
| Technical log data | 12 months | Security & troubleshooting |
| Marketing data (with consent) | Until consent is withdrawn | Promotional communications |
Upon expiry of the retention period, data will be securely deleted or anonymised so it can no longer be linked to any individual. The deletion process follows recognised security standards to ensure the data cannot be recovered.
Children's Privacy & Protection of Minors
Iwin88 is a betting entertainment platform that exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
All members are required to verify their age during registration. Our KYC process is specifically designed to detect and prevent registration by minors. Should we find that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.
If you discover that your child or an underage dependent has registered or attempted to register an iwin88 account, please contact us immediately via live chat or email at [email protected]. We will handle such situations promptly and in strict confidence.
Amendments to the Privacy Policy
Iwin88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to members via:
- In-platform notifications on iwin88 (pop-ups or notification banners)
- Email to the address registered in your account
- Update the "Last Updated" date at the top of this page
Your continued use of the iwin88 platform after any amendments are published will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically, at least once every three months.
For highly significant changes that affect your fundamental rights, we will provide at least 14 days before changes take effect, giving you sufficient time to review and decide whether to continue using our platform.
Contact Us Regarding Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) team through the following channels:
Privacy Email
Live Chat
Available 24/7 on the iwin88 platform
Response Time
Within 3 working days for general enquiries
We take every privacy-related complaint seriously and will conduct a thorough investigation into each inquiry received. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.