Privacy Policy

This Privacy Policy ("Policy") is issued by myiwin88 ("Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://myiwin88.cam (the "Platform"). It describes how we collect, use, store, share, and protect the personal data of individuals ("you", "your", "Player", "User") who access or use the Platform.

myiwin88 is committed to handling personal data responsibly and in accordance with applicable data protection laws and the standards set by our international gaming licence authority. We recognise that our players, including those accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other locations across Malaysia, entrust us with sensitive information, and we take that responsibility seriously.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Policy, the following terms carry the meanings set out below:

• Personal Data: Any information that identifies or could reasonably identify a living individual, whether directly (e.g., name, MyKAD number) or indirectly (e.g., device ID, IP address combined with other data).
• Data Controller: myiwin88, which determines the purposes and means of processing personal data collected through the Platform.
• Data Processor: Any third-party service provider that processes personal data on behalf of myiwin88 under a written data processing agreement.
• Processing: Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• Consent: A freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their personal data for one or more stated purposes.
• Special Category Data: Particularly sensitive data whose processing requires explicit consent, including data revealing racial or ethnic origin, health information, or financial crime-related information required for AML compliance.

myiwin88 collects the following categories of personal data in the course of providing the Platform and related services:

We collect only the data that is necessary and proportionate to the purposes described in this Policy. We do not collect sensitive categories of data such as health information, religious beliefs, or political opinions, except where required by applicable anti-money laundering regulations.

myiwin88 collects personal data through the following means:

1. Direct Submission: Information you provide when you register an account, complete KYC verification, submit a support request, or update your profile settings.
2. Transactional Activity: Data generated automatically when you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, FPX, or other payment channels, or when you place a wager on the Platform.
3. Automated Technical Collection: Data collected automatically by our servers and analytics tools when you access the Platform, including IP address, device fingerprint, browser data, and clickstream information.
4. Cookies and Tracking Technologies: Data collected via browser cookies, local storage, and pixel tags as described in Section 10 of this Policy.
5. Third-Party Sources: In limited circumstances, we may receive data from third-party identity verification providers, fraud detection services, and payment processors to supplement our records and verify your identity.

We process your personal data for the following purposes:

• Account Management: To create, maintain, and administer your myiwin88 account, including processing deposits and withdrawals in MYR and managing your loyalty tier status.
• Identity & Age Verification (KYC): To verify that you are at least 21 years of age and to confirm your identity as required under our international gaming licence and applicable anti-money laundering obligations.
• Service Delivery: To provide access to live casino games, slot titles, sports betting on markets including EPL, Liga Super Malaysia, and UFC, and to process all related transactions.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and money laundering.
• Legal & Regulatory Compliance: To comply with applicable laws, including anti-money laundering legislation, data retention obligations, and directions from regulatory and licensing authorities.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 multilingual support channels.
• Responsible Gambling: To monitor gameplay patterns, enforce self-exclusion and deposit limits, and identify players who may be at risk of gambling-related harm.
• Marketing Communications: To send promotional offers, bonus notifications, and Platform updates to Players who have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct internal research, and improve the performance, design, and game library of the myiwin88 Platform.

myiwin88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration, including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and directions from our licensing authority.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and Platform improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7.1  No Sale of Data: myiwin88 does not sell, rent, or lease your personal data to any third party for marketing purposes. Full stop.

7.2  Service Providers: We share personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment processors and e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, major Malaysian banks) for transaction processing.
• Identity verification and KYC service providers for age and identity checks.
• Cloud infrastructure and data hosting providers operating within secure, certified data centres.
• Game software providers and live casino studio operators, who may receive limited usage data necessary to deliver game content.
• Fraud detection and cybersecurity service providers.
• Customer support platform providers for live chat and ticketing systems.

7.3  Legal Disclosures: We may disclose your personal data to regulatory authorities, law enforcement agencies, or our licensing authority where required by law, court order, or where disclosure is necessary to protect the rights, property, or safety of myiwin88, its players, or the public.

7.4  Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8.1  As an internationally licensed gaming platform serving Malaysian players, myiwin88 may transfer personal data to and store it in jurisdictions outside of Malaysia. This may include servers and processors located in Southeast Asia, Europe, and other regions where our service providers operate.

8.2  Wherever personal data is transferred internationally, we take appropriate measures to ensure that an equivalent level of protection applies, including the use of contractual safeguards (such as standard contractual clauses) and working exclusively with service providers that maintain recognised data security certifications.

8.3  By using the myiwin88 Platform, you acknowledge that your personal data may be transferred outside of Malaysia for the purposes described in this Policy.

9.1  We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to provide the Platform, and to comply with our legal and regulatory obligations.

9.2  Retention periods by data category are as follows:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure, in line with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for seven (7) years in accordance with financial reporting and regulatory requirements.
• KYC Documents: Retained for five (5) years following account closure or the completion of the last transaction, whichever is later.
• Communications Data (support records): Retained for three (3) years from the date of the last communication.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and Usage Data: Retained for up to twenty-four (24) months from collection.

9.3  After the applicable retention period expires, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10.1  myiwin88 uses cookies and similar technologies (including local storage and session storage) to operate the Platform efficiently, maintain your login session, detect fraud, and improve your user experience.

10.2  We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled and include session authentication, security tokens, and load balancing. No consent is required for these cookies.
• Analytics Cookies: Used to understand how players interact with the Platform — which pages are visited most, how long sessions last, and where errors occur. Data is aggregated and anonymised where possible. Consent is required.
• Preference Cookies: Used to remember your settings such as language preference and responsible gambling limits. Consent is required.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are only activated upon your explicit consent.

10.3  You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality and performance of the Platform.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by myiwin88. To exercise any of these rights, please contact us using the details in Section 15. We will respond to verified requests within thirty (30) days.

12.1  myiwin88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your browser and the Platform.
• Encryption at rest for sensitive data stored in our databases, including identity documents and financial data.
• Access controls and role-based permissions ensuring that personal data is accessible only to authorised personnel who require it for their specific function.
• Regular penetration testing, vulnerability scanning, and independent security audits of Platform infrastructure.
• Multi-factor authentication for administrative access to systems containing personal data.
• Incident response procedures with defined timelines for detecting, containing, and reporting data breaches to the relevant authorities and affected players where required by law.

12.2  While we take all reasonable measures to protect your data, no method of transmission over the internet or electronic storage is completely secure. You should take appropriate steps to protect your own account credentials, including choosing a strong, unique password and enabling any available two-factor authentication on your myiwin88 account.

13.1  The myiwin88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.

13.2  Age verification is a mandatory step during the account registration and KYC process. Any account found to belong to a person under the age of 21 will be immediately suspended, all balances will be forfeited, and the personal data associated with the account will be securely deleted, except where retention is required to comply with applicable law or to report the incident to relevant authorities.

13.3  If you have reason to believe that a minor has registered an account on the Platform or that your minor child has accessed the Platform, please contact us immediately using the details in Section 15.

14.1  myiwin88 reserves the right to update or amend this Privacy Policy at any time. Changes will be reflected in the "Last Updated" date at the top of this page and, where changes are material, we will provide notice via the Platform or by email to your registered address.

14.2  It is your responsibility to review this Policy periodically. Continued use of the Platform following any amendment constitutes your acceptance of the updated Policy.

14.3  Where an amendment requires a new form of consent from you (e.g., processing your data for a new purpose), we will seek that consent separately before commencing such processing.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the myiwin88 Data & Privacy team through the following channels:

• Live Chat: Available 24/7 on the myiwin88 Platform. State "Privacy Request" at the start of your conversation so it is routed to the appropriate team. Average response: under 5 minutes.
• Email: [email protected] (plain text — not a clickable link). Use the subject line "Privacy Policy Request" to ensure prompt handling. Response within 2 business hours.
• Support Hours: 24 hours a day, 7 days a week, including Malaysian public holidays. Available in Bahasa Melayu, English, and Chinese.

We will acknowledge receipt of your request within 5 business days and provide a substantive response within thirty (30) days. If your request is complex or if we receive a large volume of requests simultaneously, we may extend this period by a further thirty (30) days with notice to you.