Privacy Policy — i8my

Introduction

i8my ("we", "our", "us", or "the Platform") operates the online casino and sports betting platform accessible at i8my.cam. We understand that the privacy and security of your personal data is of paramount importance. This Privacy Policy ("Policy") sets out in full how i8my collects, processes, stores, discloses, and protects the personal information of all users, visitors, and registered Members ("you", "your") who access or use the Platform.

This Policy applies to all personal data collected through your use of i8my, including data provided during account registration, identity verification (KYC), financial transactions, customer support interactions, and general Platform usage. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

By registering an account on i8my or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must refrain from using the Platform and contact us to close your account.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Data We Collect

i8my collects personal data across several categories, each collected for specific and legitimate purposes outlined in this Policy:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Gender
• Malaysian MyKad number, passport number, or equivalent government-issued identification
• Nationality and country of residence
• Username chosen at registration

3.2 Contact Information

• Email address
• Mobile phone number
• Residential address (required for KYC and regulatory compliance)
• City and state (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history
• Payment method details (e.g., registered Touch 'n Go eWallet phone number, bank account name, DuitNow reference, FPX transaction IDs)
• Cryptocurrency wallet addresses (where USDT TRC20 transactions are involved)
• Account balance and wagering history
• Bonus and promotional credit activity

3.4 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser information
• Session timestamps and duration
• Pages visited, games played, and betting markets accessed
• In-Platform search queries and navigation paths

3.5 Communications Data

• Content of live chat sessions with customer support
• Email correspondence with i8my support staff
• Responses to surveys or feedback requests
• Responsible gambling assessment responses and self-declared limit preferences

3.6 Identity Verification Documents

• Photographic identity documents submitted during KYC (MyKad front/back, passport photo page)
• Proof of address documents (utility bills, bank statements)
• Selfie verification images where requested

How We Collect Your Data

i8my collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Data you actively provide to us during: account registration; completion of KYC verification; submitting deposit or withdrawal requests; contacting customer support via live chat or email; responding to surveys; or completing responsible gambling assessments.

4.2 Automated Collection

Technical and usage data collected automatically when you access or interact with the Platform, including through cookies, browser storage, server logs, and analytics tools operated by or on behalf of i8my. This data is collected whether or not you are logged in.

4.3 Third-Party Sources

Identity and fraud-risk information received from licensed identity verification providers and fraud detection services engaged by i8my for KYC and anti-money laundering (AML) compliance purposes. i8my does not purchase personal data from consumer data brokers.

4.4 Payment Processor Data

Confirmation and transaction reference data received from licensed payment processors handling transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 channels. i8my does not receive or store full payment card numbers or banking passwords.

Data Processing & Use

i8my processes your personal data for the following specific and documented purposes:

i8my does not use personal data for automated decision-making that produces legal effects concerning Members, other than standard fraud-risk scoring and AML transaction monitoring which are required by law. Members who believe a decision has been made about them solely based on automated processing may contact us to request human review.

Legal Basis for Processing

i8my processes personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract between i8my and a Member — including account operation, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, AML transaction monitoring, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out in pursuit of i8my's legitimate business interests, provided those interests do not override the individual rights of Members — including fraud prevention, platform security, and service improvement.
• Consent: Processing where you have provided explicit, informed consent — including optional marketing communications and certain cookie categories. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing & Disclosure

i8my does not sell, rent, or trade your personal data. We may share personal data with the following categories of recipients, strictly for the purposes described in this Policy:

7.1 Licensed Payment Processors

Transaction data is shared with licensed payment processing partners — including those operating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank integrations, and cryptocurrency processing services — solely to process your deposits and withdrawals in MYR or equivalent.

7.2 Identity Verification Providers

Identity document data and verification images may be processed by licensed third-party KYC and identity verification service providers engaged by i8my. These providers are contractually bound to process data only on i8my's instructions and in accordance with applicable data protection law.

7.3 Regulatory and Legal Authorities

i8my may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory requirement. i8my will not disclose more data than is strictly required in such circumstances.

7.4 Fraud & AML Detection Services

Technical and transactional data may be shared with licensed fraud detection and anti-money laundering monitoring services to identify and prevent fraudulent activity, money laundering, and abuse of the Platform.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving i8my, personal data held by i8my may be transferred to the successor entity, subject to equivalent privacy protections being maintained and Members being notified of any material change in data controller.

Cookies & Tracking Technologies

The i8my Platform uses cookies and similar tracking technologies to operate core Platform functions, understand usage patterns, and improve your experience. The following categories of cookies may be placed on your device:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. Blocking all cookies may prevent you from logging into your account. Our cookie consent tool (where deployed) allows granular control over non-essential cookie categories.

Data Retention

i8my retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of account activity and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and regulatory record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable financial regulations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the customer relationship, as required by AML legislation.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer where records relate to an active dispute or regulatory matter.
• Technical and usage data (logs): Retained for up to twelve (12) months in standard operational logs; anonymised analytics data may be retained for longer periods.
• Marketing consent records: Retained for the period of consent and for a minimum of two (2) years following withdrawal of consent as an audit record.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

Data Security

i8my employs industry-standard technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using Transport Layer Security (TLS) protocols. The padlock icon in your browser confirms an encrypted connection is active.
• Encrypted Data Storage: Sensitive personal data and financial records are stored in encrypted form within secured database infrastructure with restricted access controls.
• Two-Factor Authentication (2FA): Members are offered and encouraged to enable 2FA on their accounts for an additional layer of protection against unauthorised login.
• Access Controls: Personal data access within i8my is restricted on a strict need-to-know basis. Staff accessing Member data are subject to confidentiality obligations.
• Fraud Monitoring: Automated systems monitor account activity and transaction patterns for signs of fraud, account takeover, and money laundering in real time.
• Regular Security Review: i8my conducts periodic security assessments and updates its security measures in response to emerging threats.

While i8my takes data security seriously, no internet-based system can be guaranteed to be completely secure. Members are advised to maintain strong, unique passwords, enable 2FA, and report any suspicious account activity to support immediately.

Your Rights as a Data Subject

As a Member of i8my, you hold the following rights with respect to your personal data. These rights may be exercised by contacting us as described in Section 15 of this Policy. We will respond to all valid requests within a reasonable timeframe and no later than 30 days from receipt.

Please note that some rights are subject to limitations where retention is required by law, such as AML record-keeping obligations. Where a request cannot be fulfilled in full, i8my will explain the applicable limitation in writing.

To exercise any of the above rights, please contact us at [email protected] with "Data Subject Request" in the subject line. We may require you to verify your identity before processing a request.

Minors & Age Policy

i8my strictly prohibits access to and use of the Platform by individuals under the age of 21 years. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory component of our KYC process.

If i8my becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through misrepresentation at registration or any other means — that data will be immediately deleted, the associated account will be permanently closed, and any funds wagered may be forfeited in accordance with our Terms & Conditions.

Parents or guardians who believe a person under the age of 21 has created an account on i8my should contact us immediately at [email protected] so the matter can be investigated and resolved without delay.

Third-Party Services & Links

The Platform may incorporate or reference third-party services such as licensed payment gateways (e.g., Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB), game studios, and identity verification providers. These third parties operate their own privacy policies, which govern their use of data received from i8my in the course of service delivery.

i8my performs due diligence on third-party data processors and requires all processors to maintain adequate data protection standards consistent with this Policy. All data processing agreements with third parties include requirements that data be processed only on i8my's documented instructions.

i8my is not responsible for the privacy practices of any third-party services or websites outside the Platform itself. Where the Platform contains links to external resources for informational purposes (such as responsible gambling support bodies), those external sites are governed solely by their own privacy policies.

Policy Amendments

i8my reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are material and may significantly affect how your personal data is processed, i8my will endeavour to notify registered Members via email or in-Platform notification prior to the changes taking effect. For non-material amendments, publication of the revised Policy on the Platform constitutes sufficient notice.

Continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any revision of this Policy, you should cease use of the Platform and contact us to close your account and request deletion of your data where permitted.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by i8my, please contact us through the following channels: