Privacy Policy iwin88 — How We Protect Your Personal Data

This Privacy Policy is issued by iwin88 ("we", "Platform") to explain our privacy practices regarding the collection, use, storage, and disclosure of personal data of users ("you") who access and use the iwin88 platform via the iwin88.ng website or the official iwin88 mobile app.

This document forms part of your agreement with iwin88 and should be read together with Terms and Conditions us. By using the iwin88 platform, you agree to the data processing practices described in this document. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

Iwin88 collects your personal information through several channels when you use our platform. Information is collected directly from you, automatically through platform technology, or via legitimate third parties. The following is a summary of the categories of information we collect:

We only collect information that is strictly necessary for legitimate purposes and do not collect data beyond the platform's operational requirements.

The personal information we collect is used for pre-defined, legitimate purposes. iwin88 does not use your data for any purpose other than those stated below:

• Account management: Creating, verifying, and managing your user account, including mandatory KYC processes.
• Transaction processing: Processing deposits, withdrawals, and bonus payments securely and efficiently.
• Service delivery: Providing access to all games and iwin88 platform features that you use.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, and security threats.
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance.
• Legal compliance: Meeting the reporting and compliance obligations required under applicable Malaysia laws.
• Platform improvements: Analysing usage patterns in aggregate, anonymised form to improve the user experience.
• Service communications: Sending important notifications relating to your account, security, and changes to terms.

Iwin88 respects your privacy and does not share your personal information with third parties arbitrarily. Information sharing only occurs in the limited and controlled circumstances set out below:

• Payment service providers: Required financial information is shared with licensed payment gateways (such as DuitNow and FPX providers) solely to process your transactions.
• Game providers: Minimum required information is shared with licensed game providers to enable access to games within the iwin88 platform.
• Legal authority: When required by a valid court order, applicable Malaysian law, or a lawful request from a regulatory authority.
• Identity verification service: KYC data is shared with licensed identity verification services for mandatory age and identity verification purposes.

All third-party partners who receive iwin88 user data are bound by strict confidentiality agreements and are required to process that data solely for agreed purposes.

The security of your personal data is an absolute priority for iwin88. We implement multiple layers of technical and organisational safeguards to protect your data from unauthorised access, alteration, disclosure, or destruction.

• 256-bit SSL Encryption: All communications between your device and iwin88 servers are encrypted using TLS 1.3 protocol with 256-bit encryption keys — the same standard used by Malaysia's leading banks.
• Data encryption at rest: All personal data stored in the iwin88 database is encrypted using AES-256 encryption.
• Strict access controls: Only authorised personnel with legitimate operational needs may access users' personal data — with every access logged and monitored.
• Two-factor authentication (2FA): All iwin88 users can enable 2FA for an additional layer of protection on their accounts.
• Continuous security monitoring: iwin88's automated monitoring system operates 24/7 to detect suspicious activity and cyber threats in real time.

The iwin88 platform uses cookies and similar tracking technologies to enhance user experience, maintain secure login sessions, and analyse how our platform is used. Cookies are small data files stored on your browser or device.

• Essential cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting usage data in aggregate, anonymised form to help us identify and resolve technical issues and improve the platform.
• Preference cookies: Saving your preference settings such as language, display theme, and game preferences.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect the functionality of the iwin88 platform. The iwin88 mobile app uses equivalent matching technologies to cookies to deliver the same functionality.

Iwin88 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable Malaysian law.

• Active account data: Retained for the duration your account is active and for a minimum of 7 years after account closure for legal compliance and audit purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial reporting legal requirements.
• KYC Documents: Retained for the period stipulated by the relevant regulatory requirements.
• Support communication logs: Retained for 3 years after final resolution for reference and dispute settlement purposes.

Upon expiry of the defined retention period, your data will be securely deleted or anonymised in accordance with our integrated data deletion procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by iwin88. We fully respect and facilitate the exercise of these rights:

• Right to access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data via your profile settings or customer support.
• Right to erasure: You have the right to request deletion of your personal data under certain circumstances, subject to our legal retention obligations.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to restrict processing: In certain circumstances, you may request that we restrict the way we process your data.

To submit any request relating to your privacy rights, contact the iwin88 customer support team via live chat on the platform. We will process your request within 30 days of receipt.

The iwin88 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

If we discover or are notified that personal data of a minor has been collected without valid consent, we will take immediate steps to delete that data and terminate the associated account. Parents or guardians with concerns about a child's data may contact us via customer support.

Iwin88 reserves the right to modify or update this Privacy Policy from time to time in line with changes to business practices, legal requirements, or the latest industry standards. The date of the most recent amendment will always be displayed at the top of this document.

For material amendments — meaning changes that significantly affect how we process your personal data — iwin88 will endeavour to notify you via in-account notifications or email before the changes take effect. Continued use of the iwin88 platform after amendments are published constitutes acceptance of the updated Privacy Policy terms.