Introduction
This Privacy Policy ("Policy") is published by ibet8 ("ibet8", "we", "us", or "our"), the operator of the online gaming platform accessible at https://ibet8.cam (the "Platform"). It describes how ibet8 collects, receives, uses, stores, shares, transfers, and otherwise processes personal data belonging to users of the Platform ("you", "User", or "Player").
ibet8 operates as a data controller in respect of personal data you provide when registering an account, making a deposit or withdrawal, placing a bet, contacting our support team, or otherwise interacting with the Platform. As a data controller, ibet8 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
This Policy applies to all personal data collected through the Platform, our customer support channels (including Live Chat, WhatsApp, and email at [email protected]), and any related communications we send to you. It does not apply to third-party websites that may be linked from our Platform — those sites operate under their own independent privacy policies.
By registering an account and using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.
Related Documents: This Privacy Policy should be read alongside ibet8's Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall legal framework governing your use of the Platform.
Definitions
Throughout this Policy, the following terms carry the meanings assigned below:
- Personal Data: Any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, financial information, and online identifiers.
- Processing: Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction, whether automated or manual.
- Data Controller: The entity that determines the purposes and means of processing Personal Data. ibet8 is the Data Controller in respect of data collected through the Platform.
- Data Processor: A third party that processes Personal Data on behalf of the Data Controller, pursuant to a written data processing agreement and the Data Controller's documented instructions.
- Consent: A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose, expressed by a clear affirmative act.
- KYC: Know Your Customer — the identity and age verification process conducted by ibet8 to comply with anti-money laundering obligations and responsible gambling requirements.
- Cookies: Small text files placed on your device by the Platform to collect usage and preference data for functional, analytical, and marketing purposes.
Data We Collect
ibet8 collects personal data through several channels — directly from you when you register or interact with the Platform, automatically when you browse the Platform, and in some cases from third-party service providers. The categories of personal data we collect are set out in the table below:
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Malaysian IC number or passport number, photograph (for KYC) | Registration form; KYC document submission |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) | Registration form; account settings updates |
| Financial Data | Deposit and withdrawal transaction records, payment method details (e.g., Touch 'n Go eWallet account reference, DuitNow QR identifier, bank account details for FPX), transaction amounts in MYR | Payment processing; transaction history |
| Gaming Data | Betting history, game session records, wager amounts, wins and losses, bonus usage, game preferences | Platform activity logs |
| Technical Data | IP address, device type, operating system, browser type and version, time zone, screen resolution, session duration, pages visited | Automatic collection via cookies and server logs |
| Communication Data | Live Chat transcripts, email correspondence, WhatsApp messages, support ticket content | Customer support interactions |
| Compliance Data | Responsible gambling self-assessment responses, self-exclusion records, AML/KYC verification outcomes, source of funds declarations | KYC process; responsible gambling tools; regulatory compliance checks |
Special Category Data: ibet8 does not intentionally collect sensitive personal data such as health information, religious beliefs, or racial or ethnic origin. If any such data is disclosed incidentally — for example, in a support communication — it will not be used for profiling or processed beyond what is strictly necessary to respond to your enquiry.
How We Process Your Data
ibet8 processes your personal data for the following specific purposes:
To create and maintain your ibet8 account, verify your identity and age (21+ requirement), authenticate your login, and manage your account preferences and settings throughout the duration of your use of the Platform.
To process deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, 7-Eleven Cliqq, and USDT TRC20. Financial transaction data is processed in MYR and retained for audit and regulatory compliance purposes.
To operate the sports betting, live casino, and slot game features of the Platform, record and settle wagers, calculate and credit winnings, manage bonus funds, and personalise your gaming experience based on your activity and preferences.
To fulfil ibet8's obligations under applicable anti-money laundering (AML) regulations, including transaction monitoring, suspicious activity reporting, and the maintenance of records required by our international gaming licence. KYC data is processed on this basis and cannot be waived by User consent.
To respond to your enquiries via Live Chat, email ([email protected]), or WhatsApp, resolve disputes, process responsible gambling requests (including self-exclusion and deposit limit adjustments), and maintain records of support interactions for quality assurance purposes.
To monitor your gaming activity for indicators of problem gambling behaviour, administer voluntary self-exclusion and deposit limit requests, enforce mandatory cooling-off periods, and communicate relevant responsible gambling information to you in accordance with ibet8's duty of care obligations.
To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct. Technical data including IP addresses and device fingerprints is used to identify suspicious patterns and protect both the Platform and its Users.
To analyse aggregated usage data, identify technical issues, improve platform performance, and develop new features. Where analytics data is processed, it is used in aggregated or pseudonymised form wherever practicable and is not used to make automated decisions that produce legal or similarly significant effects on individual Users without human oversight.
Legal Basis for Processing
ibet8 processes your personal data on the following legal grounds, as applicable to each processing activity:
- Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you have agreed to — including account management, payment processing, and the delivery of gaming services.
- Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC verification, AML transaction monitoring, and records retention mandated by our international gaming licence.
- Legitimate Interests: Processing carried out to pursue ibet8's legitimate business interests, including fraud prevention, platform security, analytics, and service improvement — provided such interests are not overridden by your privacy rights.
- Consent: Where ibet8 relies on your consent as the legal basis for processing (for example, in relation to optional marketing communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
ibet8 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share your personal data only in the limited circumstances described below:
- Payment Processors: Personal and financial data is shared with our authorised payment processing partners — including e-wallet providers (Touch 'n Go, Boost, GrabPay), banking intermediaries (FPX, DuitNow), and cryptocurrency settlement providers — strictly to the extent necessary to process your transactions.
- KYC and Compliance Service Providers: Identity verification and AML screening data may be shared with licensed KYC technology providers and credit reference agencies engaged to assist ibet8 in meeting its regulatory compliance obligations.
- Gaming Content Providers: Pseudonymised game session data may be shared with third-party game software providers to support game delivery, RNG certification, and jackpot network administration.
- Customer Support Platforms: Communication data may be processed by third-party customer support software providers who act as Data Processors on ibet8's behalf under binding data processing agreements.
- Regulatory and Law Enforcement Authorities: ibet8 will disclose personal data to government authorities, regulators, or law enforcement bodies where required by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of ibet8's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection standards being maintained.
All third-party service providers engaged by ibet8 who process personal data on our behalf are required to do so under written data processing agreements that impose data protection obligations equivalent to those described in this Policy.
Data Retention
ibet8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following retention periods apply as a general guide:
- Account and Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following permanent Account closure, in compliance with AML record-keeping requirements applicable to our gaming licence.
- Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction to comply with applicable financial regulations and audit requirements.
- Gaming Activity Logs: Retained for a minimum of three (3) years to support dispute resolution, responsible gambling monitoring, and regulatory audit purposes.
- Customer Support Communications: Retained for a minimum of two (2) years from the date of the most recent interaction, or longer where a communication relates to an ongoing investigation or legal dispute.
- Self-Exclusion Records: Retained indefinitely or for a minimum period consistent with the self-exclusion term elected, to prevent re-registration by self-excluded individuals.
- Technical and Analytics Data: Retained in aggregated or pseudonymised form for up to twenty-four (24) months for platform improvement and security analysis purposes.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to you as an identifiable individual.
Cookies & Tracking Technologies
ibet8 uses cookies and similar tracking technologies (including pixel tags and local storage) on the Platform to support core functionality, analyse usage patterns, and maintain session security. The categories of cookies we deploy are described below:
These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, and ensure security features operate correctly. These cookies cannot be disabled without impairing Platform functionality.
These cookies collect aggregated information about how Users interact with the Platform — including page visit frequency, session duration, and error reports. This information helps ibet8 improve Platform performance and user experience. Data collected is aggregated and not used to identify individual users.
These cookies enable the Platform to remember choices you have made — such as preferred language, odds format, and display preferences — to provide a more personalised experience across sessions.
Most modern web browsers allow you to control cookie settings through your browser preferences. You may choose to block or delete cookies; however, doing so may affect your ability to use certain features of the Platform, including maintaining a persistent login session. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.
Data Security
ibet8 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and ibet8's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols, consistent with the encryption standards used by international financial institutions.
- Two-Factor Authentication (2FA): Account holders are encouraged to enable 2FA to add an additional layer of access security beyond the standard username and password combination.
- Access Controls: Access to personal data within ibet8's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive data protection training.
- Segregated Data Storage: Financial data and identity documents are stored in isolated, access-controlled environments separate from general operational data systems.
- Penetration Testing & Security Audits: ibet8 conducts periodic security assessments to identify and remediate vulnerabilities in its platform and data infrastructure.
- Incident Response: ibet8 maintains a data breach response protocol. In the event of a personal data breach that poses a risk to your rights and freedoms, ibet8 will notify affected Users and relevant authorities as required by applicable law.
Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are encouraged to use a strong, unique password for your ibet8 Account and to contact our Support team immediately if you suspect any unauthorised access to your Account.
Your Rights
Subject to applicable data protection law and certain limitations where your rights may be restricted by ibet8's legal obligations (for example, AML record-keeping requirements), you hold the following rights in respect of your personal data:
You may request a copy of the personal data ibet8 holds about you, together with information about how it is processed.
You may request that inaccurate or incomplete personal data held by ibet8 be corrected or completed without undue delay.
You may request deletion of your personal data in certain circumstances, subject to ibet8's legal retention obligations.
You may request that ibet8 restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data.
You may request receipt of personal data you have provided to ibet8 in a structured, commonly used, machine-readable format where technically feasible.
You may object to processing carried out on the basis of ibet8's legitimate interests where you believe your rights and freedoms override those interests.
To exercise any of the rights described above, please contact ibet8's Customer Support team via Live Chat or email at [email protected] with a clear description of your request. ibet8 will respond within 30 days of receipt of a verifiable request. We may require you to provide proof of identity before processing your request to protect against unauthorised access to your data.
Protection of Minors
ibet8's Services are strictly intended for individuals aged 21 years and above. ibet8 does not knowingly collect personal data from individuals under the age of 21. All registration applications are subject to age verification, and KYC documentation confirming date of birth is required before any Account can be fully activated.
If ibet8 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to deactivate the relevant Account and securely delete the associated personal data. If you are a parent or guardian and believe your child has registered an Account with ibet8, please contact our Support team immediately at [email protected].
International Data Transfers
As an internationally licensed operator serving players across Southeast Asia and beyond, ibet8 may in certain circumstances transfer personal data to service providers or system infrastructure located outside Malaysia. Where such transfers occur, ibet8 will ensure that equivalent data protection standards are maintained through one or more of the following safeguards:
- Transferring to jurisdictions that have been assessed as providing an adequate level of data protection.
- Entering into binding data processing agreements with recipient entities that include standard contractual clauses or equivalent transfer mechanisms.
- Applying technical and organisational measures to ensure the ongoing security of transferred data throughout the transfer and subsequent processing lifecycle.
By using the Platform, you acknowledge that your personal data may be transferred and processed in locations outside Malaysia for the purposes described in this Policy.
Policy Amendments
ibet8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the Services we offer. The "Last Updated" date at the top of this page will be revised accordingly whenever a material change is made.
Where a change materially affects your rights or how we process your personal data, ibet8 will provide advance notice of at least 14 days via email or Platform notification before the revised Policy takes effect. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically to stay informed.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or ibet8's processing of your personal data — including requests to exercise your data subject rights — please contact our team through any of the following channels:
For formal data requests, please state "Data Privacy Request" in your subject line.
For a complete overview of your account rights and platform obligations, please also review our Terms & Conditions. For information on responsible gambling tools and self-exclusion options, visit our Responsible Gambling page.