Privacy Policy — How i8cash Handles Your Personal Data

1. Introduction

This Privacy Policy ("Policy") sets out the practices of i8cash ("we", "us", "our", "the Platform") with respect to the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "User", "Player", "Member") who access and use the i8cash online gaming platform at https://i8cash.cam.

i8cash is committed to handling your personal data with care, integrity, and transparency. We collect and process personal data only where there is a clear, legitimate purpose for doing so, and we take technical and organisational measures to protect that data from unauthorised access, loss, or misuse.

This Policy is incorporated into and should be read in conjunction with the i8cash Terms & Conditions. By creating an Account, making a deposit, or otherwise using the i8cash platform, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy.

We may update this Policy from time to time. Where updates are material, we will notify you via email or an in-platform notification. The current version of this Policy is always available at https://i8cash.cam/privacy-policy.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, phone number, financial information, and gaming activity data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, i8cash.
• "Data Processor" means a third party that processes Personal Data on behalf of i8cash under a contractual arrangement.
• "KYC" means Know Your Customer — the identity verification process required under our licensing obligations before withdrawal of funds is permitted.
• "Cookies" means small text files placed on your device by the i8cash platform for the purpose of session management, security, and platform functionality.
• "Consent" means freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data.

3. Data Controller

i8cash acts as the Data Controller in respect of all Personal Data collected through the platform. As Data Controller, i8cash determines the purposes for which your data is processed and is responsible for ensuring that such processing is conducted lawfully and in accordance with applicable data protection principles.

For all privacy-related enquiries, requests, or complaints, you may contact i8cash at the following address:

4. Personal Data We Collect

When you create an i8cash Account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or above)
• Email address
• Mobile phone number
• Username and encrypted password
• Country of residence and city (e.g., Kuala Lumpur, Penang, Johor Bahru)

To comply with our licensing obligations and to verify your identity prior to the processing of withdrawals, we collect:

• A copy of a valid government-issued Malaysian photo identification document (MyKad / NRIC, Passport, or valid Driver's Licence)
• Proof of residential address (e.g., utility bill or bank statement dated within the preceding 3 months)
• A selfie photograph of you holding your identification document
• In certain cases, source of funds documentation

In connection with deposit and withdrawal activity, we collect:

• Payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20)
• Transaction reference numbers and amounts in MYR
• E-wallet registered phone numbers or bank account identifiers (as required for payment processing)
• Transaction timestamps and processing status

We collect data relating to your use of the platform, including:

• Games played, bets placed, and wager amounts
• Sports betting selections (including Liga Super Malaysia, EPL, and other markets)
• Bonus and promotion participation records
• Session duration and login history
• VIP tier status and loyalty point accumulation

We automatically collect certain technical data when you access the platform:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, features accessed, and clickstream data
• Session identifiers and cookie data

Where you contact our customer support team, we retain records of those communications, including the content of live chat conversations, emails, and any documents or screenshots you provide.

5. Lawful Basis for Processing

i8cash processes your personal data on one or more of the following lawful bases:

6. How We Use Your Personal Data

i8cash uses the personal data we collect for the following specific purposes:

• Account creation and authentication — to create, maintain, and secure your i8cash Account
• Identity verification — to confirm that you are who you say you are and that you are aged 21 or above
• Payment processing — to facilitate deposits and withdrawals in MYR via Malaysian payment methods including Touch 'n Go eWallet, DuitNow, FPX, and supported banking channels
• Fraud detection and prevention — to identify and prevent suspicious transactions, multi-accounting, bonus abuse, and other prohibited conduct
• Responsible gambling compliance — to monitor gaming activity and apply responsible gambling tools where appropriate, including deposit limit management, session monitoring, and self-exclusion enforcement
• Customer support — to respond to your enquiries, investigate complaints, and resolve disputes
• Platform improvement — to understand how the platform is used and to make product and experience improvements
• Marketing communications — to send you promotional offers and platform updates, where you have given explicit consent to receive such communications
• Legal and regulatory compliance — to meet our obligations under applicable gaming licensing conditions and any applicable laws

7. Data Sharing & Disclosure

i8cash may share your personal data with carefully selected third-party service providers acting as Data Processors on our behalf. These providers are contractually bound to use your data solely for the purpose of providing their services to i8cash and may not use it for their own independent purposes. Categories of third-party processors include:

• Payment processing partners and Malaysian banking partners (for transaction facilitation)
• Identity verification and KYC service providers
• Cloud infrastructure and hosting providers
• Fraud detection and anti-money laundering (AML) screening providers
• Customer support platform providers
• Game content delivery partners (game studio integrations)

i8cash may be required to disclose your personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so. We will only disclose the minimum data necessary to satisfy the applicable legal requirement.

i8cash does not sell, rent, lease, or otherwise commercially transfer your personal data to any third-party advertiser, data broker, or marketing company. Your personal data will never be traded for commercial gain.

In the event of a merger, acquisition, or sale of all or substantially all of the assets of i8cash, your personal data may be transferred as part of that transaction. In such circumstances, we will provide advance notice and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

8. KYC & Verification Data

KYC documentation — including copies of your Malaysian identification documents, proof of address, and selfie photographs — is processed exclusively for the purposes of identity verification and regulatory compliance. This data is handled with the highest level of security and access is strictly limited to authorised personnel involved in the verification process.

KYC documents are retained for the duration of your Account and for a period thereafter as required by our licensing obligations. Upon the expiry of the required retention period, KYC documentation is securely destroyed.

9. Payment Data & Financial Transactions

i8cash processes transaction data — including MYR amounts, payment method identifiers (such as e-wallet phone numbers and bank account references), and transaction reference numbers — for the purpose of facilitating deposits and withdrawals through Malaysian payment methods, and for maintaining accurate financial records.

i8cash does not store complete bank card numbers, CVV codes, or full banking credentials. Payment processing is handled by certified payment gateway providers who maintain their own security certifications for financial data handling.

Transaction records are retained for the periods specified under Clause 11 (Data Retention) and as required for regulatory compliance, anti-money laundering obligations, and dispute resolution purposes.

10. Cookies & Tracking Technologies

i8cash uses the following categories of cookies on the platform:

i8cash does not use third-party advertising cookies, cross-site tracking technologies, or behavioural profiling cookies for the purpose of serving targeted advertisements on third-party websites.

You may configure your browser settings to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair core platform functionality, including the ability to log in and maintain a secure session. Disabling functional or analytics cookies will not affect your ability to use the platform.

11. Data Retention

i8cash retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our licensing obligations or applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified or identifiable individual.

12. Data Security

i8cash implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the i8cash platform
• Encryption at rest for stored personal data and financial records
• Role-based access controls limiting data access to authorised personnel only
• Regular security assessments, penetration testing, and vulnerability scanning
• Multi-factor authentication requirements for platform access by staff
• Automated fraud detection and anomaly monitoring systems
• Incident response procedures for data breach detection and notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, i8cash will notify you without undue delay in accordance with applicable data breach notification requirements.

While we take all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your Account credentials and for notifying us immediately if you become aware of any unauthorised access to your Account.

13. Your Data Protection Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by i8cash. To exercise any of these rights, please contact us at [email protected] (plain text — not a link):

14. International Data Transfers

i8cash is an internationally operated platform and your personal data may be processed or stored on servers located outside Malaysia. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information — including contractual arrangements with Data Processors that require equivalent levels of data protection.

By using the i8cash platform, you acknowledge and consent to the transfer of your personal data to servers and processors located in other jurisdictions as described in this Policy, subject to the safeguards described above.

15. Children & Minors

The i8cash platform is strictly restricted to individuals aged 21 years or above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the KYC process, and any Account identified as belonging to a person under 21 will be immediately suspended.

If you have reason to believe that a minor has registered on or is using the i8cash platform, please contact our support team immediately at [email protected] (plain text — not a link). Upon receipt of such a report, we will take immediate action to investigate and, where confirmed, close the Account and return any deposited funds to the appropriate party.

16. Policy Amendments

i8cash reserves the right to update or amend this Privacy Policy at any time. All changes will be published on this page with a revised "Last Updated" date. Where amendments are material — such as a change in the categories of data collected, the purposes for which data is processed, or the rights available to you — we will provide advance notification via email or an in-platform announcement.

Your continued use of the i8cash platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you should cease using the platform and may request Account closure in accordance with our Terms & Conditions.

17. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact i8cash using the following details:

We aim to respond to all privacy-related requests within 30 days. For formal complaints that are not resolved to your satisfaction through direct engagement with our support team, you may escalate to the relevant supervisory authority in the jurisdiction applicable to your situation.