Privacy Policy

This Privacy Policy ("Policy") is issued by i1m888 ("i1m888", "we", "us", "our"), the operator of the online gaming platform accessible at https://i1m888.cam ("Platform"). This Policy sets out the basis on which we collect, process, store, share, and protect the personal data of individuals ("you", "User", "Player") who access or use our Platform or communicate with us in any capacity.

i1m888 takes data protection seriously. We operate in compliance with applicable data protection legislation and industry-standard privacy practices. Our approach to personal data is guided by principles of transparency, data minimisation, purpose limitation, and security.

This Policy should be read alongside our Terms & Conditions, which incorporate this Policy by reference. In the event of any conflict between this Policy and our Terms & Conditions on a data protection matter, this Policy shall prevail.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identification numbers, location data, online identifiers, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, dissemination, erasure, or destruction.
• "Data Controller" means i1m888, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of i1m888 in accordance with our documented instructions.
• "KYC Data" means identity and document verification data collected pursuant to Know Your Customer obligations, including copies of government-issued identification and proof of address.
• "Cookies" means small text files stored on a User's device by the Platform for the purposes of session management, analytics, and personalisation.
• "Third Party" means any natural or legal person, public authority, or body other than the User and i1m888.

i1m888 collects only the personal data necessary to provide you with a safe, functional, and legally compliant gaming experience. The categories of personal data we collect are described below.

i1m888 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Data provided directly by you when you: register an account on the Platform; complete identity verification (KYC); make a deposit using FPX, DuitNow, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, or any other supported payment method; request a withdrawal; contact our customer support team via live chat or email; participate in a promotion or survey; or update your account profile settings.

4.2 Automated Collection

Data collected automatically when you access the Platform, including through the use of cookies, web beacons, pixel tags, log files, and similar tracking technologies embedded within the Platform. This includes technical data such as your device's IP address, browser fingerprint, session identifiers, and interaction data generated during your use of the Platform.

4.3 Third-Party Sources

In certain circumstances, i1m888 may receive personal data about you from third parties, including: payment service providers (such as FPX gateway operators and e-wallet platforms) for the purpose of transaction verification; identity verification service providers used in the KYC process; fraud detection and anti-money laundering screening services; and publicly available sources where legally permissible.

i1m888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you, including operating your account, processing deposits and withdrawals, and providing access to gaming services.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) legislation, counter-terrorism financing (CTF) regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out for our legitimate business interests, including platform security, fraud prevention, responsible gambling monitoring, and improving our services — where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent, particularly in relation to direct marketing communications and the use of non-essential cookies. You have the right to withdraw consent at any time.

i1m888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard data retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account relationship plus a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction on your account, in accordance with applicable financial compliance obligations.
• Transaction Records: Retained for a minimum of five (5) years following each transaction, for the purposes of financial audit, dispute resolution, and regulatory compliance.
• Communication Records: Support tickets, live chat transcripts, and email correspondence are retained for up to three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and Behavioural Data: Aggregated analytics data is retained indefinitely in anonymised form. Raw session logs are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

i1m888 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We disclose personal data only in the circumstances described below, and only to the minimum extent necessary for each specific purpose.

7.1 Service Providers

We share personal data with trusted third-party service providers who process data on our behalf under binding contractual data processing agreements. These include: payment gateway operators (including FPX network providers, DuitNow service operators, and e-wallet platforms such as Touch 'n Go, Boost, and GrabPay); identity verification and KYC service providers; IT infrastructure, hosting, and cloud storage providers; customer support platform operators; and email and communications service providers.

7.2 Legal and Regulatory Authorities

i1m888 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or in response to a lawful request. This includes mandatory reporting obligations under AML/CTF legislation. We will, where legally permissible, notify affected Users of such disclosure requests.

7.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or a material portion of i1m888's assets, personal data held by i1m888 may form part of the transferred assets. We will notify affected Users in advance of any such transfer and ensure that the acquiring entity is bound by obligations equivalent to those in this Policy.

The i1m888 Platform uses cookies and similar tracking technologies to provide certain functionalities, improve your experience, and gather anonymised analytics data. The categories of cookies we use are described below.

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security features. These cookies cannot be disabled without impairing the functionality of the Platform.
• Functional Cookies: Enable enhanced functionality and personalisation, such as remembering your preferred language, currency (MYR), and display settings. These cookies are set by i1m888 directly.
• Analytics Cookies: Used to collect anonymised information about how Users interact with the Platform, including pages visited, time on site, and navigation paths. This data helps us improve the Platform's performance and content. We do not link analytics data to individual User identities.
• Marketing Cookies: Used to track the effectiveness of our promotional campaigns and to deliver relevant content to Users who have consented to receive marketing communications. These cookies may be set by i1m888 or authorised third-party advertising partners.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality and user experience of the Platform. Non-essential cookies are only activated upon your consent, which can be withdrawn at any time via your browser settings or by contacting our support team.

i1m888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• Encryption: All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Personal data stored within our systems is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within i1m888's internal systems is restricted on a strict need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations and undergo regular data protection training.
• Two-Factor Authentication: 2FA is available to all Users and is strongly recommended as an additional layer of account security.
• Security Audits: i1m888 conducts regular internal and third-party security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to User rights, i1m888 will notify affected Users and relevant regulatory authorities within the timeframes required by applicable law.

In the course of providing our services, personal data collected by i1m888 may be transferred to, stored in, or processed by servers and service providers located outside of Malaysia. Such transfers may occur in connection with our cloud infrastructure, payment processing partners, or other third-party service providers.

Where personal data is transferred internationally, i1m888 ensures that appropriate safeguards are in place to maintain the level of protection required under applicable data protection law. These safeguards may include contractual clauses that impose equivalent data protection obligations on the recipient, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection.

By providing your personal data to i1m888, you acknowledge and consent to the transfer of your personal data to locations outside Malaysia as described in this section.

Subject to applicable law, you have the following rights with respect to your personal data held by i1m888. These rights may be exercised by contacting our Data Protection team using the details provided in Section 16.

• Right of Access: You have the right to request a copy of the personal data i1m888 holds about you, together with information about how it is processed.
• Right of Rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 6). Note that certain data may need to be retained to comply with AML and regulatory requirements.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is under review.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
• Right to Object: You have the right to object to processing based on our legitimate interests, including processing for direct marketing purposes. Objections to direct marketing will be honoured without condition.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The i1m888 Platform is strictly intended for individuals who are 21 years of age or older. i1m888 does not knowingly collect personal data from individuals under the age of 21. We implement age verification procedures at the point of account registration and prior to the processing of any withdrawal.

If we become aware that personal data has been collected from a person under 21 years of age without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage individual will be returned to the originating payment source after deduction of any applicable processing costs.

If you have reason to believe that a minor has created an account on the i1m888 Platform, please contact us immediately at the details provided in Section 16. We take all such reports seriously and will investigate promptly.

i1m888 may send you promotional communications, including information about new games, deposit bonuses, cashback offers, and platform updates, where you have provided valid consent to receive such communications at the time of registration or subsequently through your Account Settings.

Marketing communications from i1m888 may be delivered via email to your registered address, SMS to your registered Malaysian mobile number, or through in-platform notifications. Each marketing communication will include a clearly visible mechanism to unsubscribe or opt out of future communications.

You may withdraw your marketing consent at any time by: (a) clicking the unsubscribe link in any marketing email; (b) updating your communication preferences through Account Settings; or (c) contacting our support team directly. Withdrawal of marketing consent will not affect the lawfulness of any prior communications or any processing carried out on a different legal basis.

The i1m888 Platform may contain references to or integrations with third-party services, including payment gateways operated by financial institutions and e-wallet providers. When you interact with these third-party services — for example, when you initiate a deposit via Maybank2u, CIMB Clicks, or Touch 'n Go eWallet — you will be subject to the privacy policy and terms of that third-party service provider.

i1m888 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party service providers you interact with in connection with your use of the Platform.

i1m888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The most current version of this Policy will always be available on the Platform, along with the date on which it was last updated.

Where changes to this Policy are material — meaning they significantly affect how we process your personal data or your rights as a data subject — we will notify you by email to your registered address and/or by a prominent notice on the Platform, with a minimum of 14 days' advance notice where reasonably practicable.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of that revised Policy. If you do not accept the revised terms, you should discontinue your use of the Platform and contact us to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by i1m888, please contact our Data Protection team using the details below. We are committed to resolving all data protection enquiries promptly and transparently.

If you are not satisfied with i1m888's response to a data protection complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances.