iw8 Privacy Policy

1. Introduction

iw8 ("the Platform", "we", "us", "our") operates the online gaming and sports betting platform accessible at iw8.asia. In the course of providing our services to Members ("you", "your"), we process certain personal data. This Privacy Policy ("Policy") describes what data we collect, why we collect it, how we use it, with whom we may share it, and what rights you have in relation to your data.

This Policy applies to all personal data processed by iw8 in connection with your use of iw8.asia, including registration, account management, deposits and withdrawals, game play, customer support interactions, and marketing communications. By registering for or continuing to use an iw8 account, you acknowledge that you have read and understood this Policy.

This Policy should be read together with the iw8 Terms & Conditions, which govern the overall agreement between you and iw8.

2. Data We Collect

iw8 collects the following categories of personal data:

• Identity Data: Full name, date of birth, nationality, and government-issued identification details collected during account registration and verification.
• Contact Data: Email address, mobile phone number, and residential address as provided during registration or account updates.
• Financial Data: Payment method details (e.g., bank account numbers, e-wallet identifiers), transaction history, deposit and withdrawal records. iw8 does not store full card numbers or CVV codes.
• Account Data: Username, account preferences, bonus balance, wagering history, game session records, and responsible gaming settings.
• Technical Data: IP address, browser type and version, device type and identifiers, operating system, time zone, and session logs collected automatically when you access iw8.asia.
• Usage Data: Pages visited, features used, games played, time spent on the platform, and navigation patterns.
• Communications Data: Records of correspondence between you and iw8 support, including live chat transcripts and email exchanges.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications from iw8.

3. How We Collect Data

iw8 collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or updating your account settings.
• Automated technologies: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies when you browse or interact with iw8.asia. See Section 7 for details on cookies.
• Third-party sources: Identity verification and fraud prevention data received from our Know Your Customer (KYC) service providers, payment processors, and, where applicable, publicly available sources used to fulfil our compliance obligations.

4. How We Use Your Data

iw8 uses your personal data for the following purposes:

• To create, maintain, and manage your iw8 account, including account verification and identity checks.
• To process deposits, withdrawals, and other financial transactions in MYR.
• To provide access to games, betting markets, and all platform features.
• To detect, prevent, and investigate fraud, money laundering, and other prohibited conduct.
• To comply with anti-money laundering (AML), know-your-customer (KYC), and other applicable regulatory obligations.
• To provide customer support and respond to account queries.
• To send service communications, including transaction confirmations, security alerts, and account notifications.
• To send promotional communications, bonuses, and offers where you have consented to receive them.
• To operate responsible gaming features, including monitoring for problem gambling indicators and enforcing self-exclusion requests.
• To improve the iw8 platform through analysis of aggregated, anonymised usage data.

5. Legal Basis for Processing

iw8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the iw8 Terms & Conditions, including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations, age verification requirements, and reporting obligations to regulators.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

iw8 does not sell your personal data to third parties. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment processors: Malaysian banking institutions and e-wallet providers (including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, and Boost) to process your financial transactions.
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with regulatory requirements.
• Game software providers: Game providers whose titles are hosted on iw8 may receive limited data necessary to operate their games within our platform.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory direction, iw8 will disclose your data to the relevant authority.
• Fraud prevention agencies: Data may be shared with fraud prevention services where iw8 suspects prohibited conduct.
• IT and infrastructure service providers: Cloud hosting, cybersecurity, and platform infrastructure partners operating under strict data processing agreements.

Any third party receiving your data is required to process it only for the specified purpose and in accordance with applicable data protection standards.

7. Cookies & Tracking Technologies

iw8.asia uses cookies and similar tracking technologies to operate the platform, maintain session integrity, and analyse usage patterns. The categories of cookies we use are:

• Strictly necessary cookies: Essential for platform operation, including login session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and display preferences, to improve your experience.
• Analytics cookies: Collect anonymised data about how users interact with iw8.asia to help us improve the platform. These are only set with your consent.
• Marketing cookies: Used to deliver relevant promotional content to you, subject to your consent.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the iw8 platform.

8. Data Retention

iw8 retains your personal data for as long as necessary to fulfil the purposes set out in this Policy and to comply with applicable legal and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five years from account closure, in accordance with AML regulatory requirements.
• Financial transaction records are retained for a minimum of seven years to comply with financial record-keeping obligations.
• Customer support correspondence is retained for three years from the date of the interaction.
• Marketing preference records are retained until you withdraw consent or close your account.

Following the expiry of applicable retention periods, data is securely deleted or anonymised.

9. Data Security

iw8 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and iw8 servers.
• Encryption of sensitive data fields, including financial data, at rest.
• Access controls restricting data access to authorised personnel only, on a need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Two-factor authentication available for Member accounts and mandatory for administrative access.

Notwithstanding these measures, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your iw8 account credentials.

10. Your Rights

Subject to applicable law and iw8's regulatory obligations, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data iw8 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to iw8's legal retention obligations. Data subject to active regulatory or fraud investigation may not be erasable.
• Right to restriction: You may request that iw8 restrict processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, submit a written request to [email protected]. iw8 will respond within 30 days of receipt. We may require identity verification before processing your request.

11. Third-Party Services

The iw8 platform integrates with third-party payment processors, game software providers, and KYC service providers. These parties operate their own privacy policies, and iw8 is not responsible for their data practices beyond the contractual data processing obligations imposed on them by iw8. iw8 conducts due diligence on all third-party processors to ensure adequate data protection standards are maintained.

iw8.asia does not contain links to external third-party websites. Any third-party integrations operate within the iw8 platform environment under iw8's oversight.

12. Children's Privacy

iw8 is strictly an adult platform. Access is prohibited to persons under 21 years of age. iw8 does not knowingly collect personal data from persons under 21. If iw8 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe a minor has accessed iw8, please notify us immediately at [email protected].

13. Policy Amendments

iw8 reserves the right to update this Privacy Policy at any time. The effective date and last updated date at the top of this page reflect the current version. Where changes are material, iw8 will notify Members via the platform or by email. Continued use of the iw8 platform following notification of a material change constitutes acceptance of the updated Policy.

The most current version of this Policy is always available at iw8.asia/privacy-policy.

14. Contact Us

For any questions, concerns, or data rights requests relating to this Privacy Policy, please contact iw8 using the details below:

• Data Enquiries Email: [email protected]
• Live Chat: Available daily 9:00 AM – 2:00 AM MYT via iw8.asia

iw8 will acknowledge receipt of your query within 3 business days and provide a substantive response within 30 calendar days.