icash88 Privacy Policy for Malaysian Users

1. Introduction

This Privacy Policy applies to icash88 and to all features, account functions, casino content, sports betting information, payment guidance and support services made available through the website. References to icash88, "we", "us" or "our" mean the entity operating the website and its associated services. References to "you" or "user" mean any person who accesses or interacts with icash88, whether as a visitor or registered account holder.

icash88 is designed for Malaysian adults. All account-related features, MYR payment guidance, live casino context and sports information are directed at eligible adults aged 21 and above. This policy should be read alongside the Terms & Conditions and the Responsible Gambling information, which together govern the full icash88 experience.

Privacy laws and standards continue to develop. icash88 reviews this policy periodically to reflect operational changes, new features, updated payment methods and applicable legal requirements. The effective date displayed at the top of this page identifies the current published version.

2. Definitions

Personal Data

Any information that identifies or could reasonably identify a natural person, including name, identification number, contact details, device identifiers and financial records where linked to an individual.

Processing

Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, disclosure, restriction, deletion or destruction.

Data Controller

The entity that determines the purposes and means of processing personal data. In relation to icash88 user data, this is the operator of the website.

Data Processor

A third party that processes personal data on behalf of the data controller under a contracted arrangement with appropriate obligations.

KYC

Know Your Customer procedures conducted to verify identity, age, address, payment ownership and compliance-relevant information before or after account activation or withdrawals.

Cookies

Small data files placed on a device by a website to record session information, user preferences and technical performance details.

3. Personal Data We Collect

icash88 may collect the following categories of personal data:

3.1 Registration and Account Data

Full name, date of birth, email address, contact number, registered address and account credentials. This information is required to create and maintain an account, confirm eligibility and apply the relevant Terms.

3.2 Identity Verification Documents

Valid Malaysian MyKad, driving licence or passport details, proof of address such as a utility bill or bank statement dated within three months, and selfie verification images where required by KYC procedures. Document records are retained for the legally required period.

3.3 Payment and Transaction Data

Payment method identifiers, transaction amounts in MYR, timestamps, processing references and related records generated through Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, USDT or other accepted methods. Full card credentials are not stored by icash88 directly.

3.4 Technical and Device Data

IP address, browser type and version, device identifiers, operating system, time zone, referring URL and approximate geolocation where available. This data supports security monitoring, fraud detection and website performance.

3.5 Communication and Support Data

Records of messages, support requests, feedback and dispute correspondence submitted through the website or associated support channels.

3.6 Responsible Gambling Data

Self-exclusion requests, deposit-limit settings, cooling-off elections and related responsible-play configurations. This category is processed to protect user welfare and is treated with particular care.

4. How icash88 Uses Your Data

Personal data collected by icash88 may be processed for the following purposes:

• Creating, maintaining and securing user accounts.
• Verifying age, identity and payment ownership through KYC reviews.
• Processing MYR deposits, withdrawals and promotional transactions.
• Enforcing the Terms & Conditions, including detecting fraud, duplicate accounts and prohibited conduct.
• Providing account support and responding to queries or complaints.
• Applying responsible gambling restrictions including self-exclusion and deposit limits.
• Sending transactional communications such as payment confirmations and security alerts.
• Conducting internal analysis to improve website performance and safety.
• Meeting applicable legal, regulatory and anti-money-laundering obligations.

icash88 does not use personal data to run targeted third-party advertising campaigns or sell user profiles to unrelated marketing businesses.

5. Legal Basis for Processing

Processing is conducted on one or more of the following bases depending on the category of data and purpose involved:

• Contractual necessity: processing required to register an account, process payments and deliver the icash88 service as agreed in the Terms & Conditions.
• Legal obligation: processing required to meet KYC, anti-money-laundering, age-verification and other applicable requirements.
• Legitimate interests: processing necessary for fraud prevention, security monitoring, responsible gambling controls and internal performance review, where these do not override user rights.
• Consent: where processing relies on consent, users may withdraw that consent at any time without affecting prior lawful processing.

6. Data Sharing and Disclosure

icash88 does not sell personal data. Data may be shared in the following circumstances:

6.1 Service Providers

Selected partners that perform functions on behalf of icash88, including payment processors, identity verification providers, cloud infrastructure operators and customer support platforms. These partners process data under binding data-processing agreements and may not use it for independent purposes.

6.2 Legal and Regulatory Authorities

icash88 may disclose data to law enforcement agencies, regulatory bodies or courts when required by a valid legal obligation, court order or applicable authority request. Disclosures will be limited to the minimum necessary.

6.3 Business Transfers

In the event of a reorganisation, merger, acquisition or asset transfer, user data may be transferred to a successor entity. Users will be notified through an appropriate website or account notice if such a transfer materially affects their data.

6.4 User Consent

icash88 may share data with third parties where the user has provided explicit consent and the purpose is clearly described at the time consent is obtained.

7. Payment Data and Financial Records

Payment transactions through DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank and digital-asset channels are facilitated through authorised payment intermediaries. icash88 retains transaction references, amounts and timing for account management, dispute resolution and applicable compliance purposes.

Users are responsible for verifying payment details before confirming a transaction. For digital-asset deposits using USDT or other supported networks, the blockchain address, network and token type must be checked against the current cashier instructions. Blockchain transactions are generally irreversible.

Financial records may be retained for extended periods to satisfy applicable legal and regulatory requirements, even where an account is closed. The specific retention period depends on the type of record and the applicable obligation.

8. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected, including any legal or regulatory obligation that requires retention beyond the active account period.

Account data is generally retained while the account is active and for a period after closure to allow for dispute resolution, financial reconciliation, compliance reviews and lawful authority requests. Identity documents and KYC records may be subject to minimum retention periods under applicable anti-money-laundering rules.

Responsible gambling records, including self-exclusion and deposit-limit configurations, may be retained for longer periods to ensure re-registration restrictions are applied correctly and to protect user welfare.

Where data is no longer required for any lawful purpose, it will be securely deleted or anonymised in accordance with current operational practices.

9. Cookies and Similar Technologies

icash88 uses cookies, local storage and similar technologies to support essential website functions, maintain session security, remember user preferences and analyse traffic patterns.

9.1 Essential Cookies

Required for login sessions, security tokens, language preferences and basic website operation. These cannot be disabled without affecting core functionality.

9.2 Performance and Analytics Cookies

Used to understand how visitors navigate the website, which pages load slowly and where errors occur. Data collected is aggregated and does not directly identify individual users.

9.3 Functional Cookies

Allow the website to remember display preferences and other optional settings chosen by the user during a session or across sessions.

9.4 Managing Cookies

Most browsers allow cookies to be reviewed, limited or deleted through the browser privacy settings. Disabling essential cookies may prevent account login and other core features from working correctly. icash88 does not currently respond to browser Do Not Track signals because there is no consistent industry standard for doing so.

10. Security and Data Protection Measures

icash88 applies technical and organisational safeguards appropriate to the sensitivity of the data processed. Measures may include HTTPS encryption for data in transit, access controls limiting internal data access to authorised personnel, regular security assessments and procedures for identifying and managing security incidents.

Users also have a role in protecting their data. Account credentials, one-time passwords and device access should be kept private. Credentials should not be shared with other people and should be changed promptly if unauthorised access is suspected. Identity documents should only be submitted through the secure HTTPS verification area.

No security system eliminates all risk. icash88 will notify affected users of a significant personal data breach in a manner appropriate to the circumstances and, where required, report the breach to applicable authorities within legally specified timelines.

11. User Rights

Subject to applicable law and verification, users may exercise the following rights in respect of their personal data held by icash88:

• Access: request confirmation of whether personal data is processed and, if so, obtain a copy of the data held.
• Correction: request correction of inaccurate or incomplete personal data.
• Erasure: request deletion of personal data where it is no longer necessary for the original purpose, consent has been withdrawn or processing was unlawful, subject to mandatory retention obligations.
• Restriction: request that processing be restricted while accuracy or lawfulness is reviewed.
• Objection: object to processing based on legitimate interests in circumstances where the user's rights override those interests.
• Data portability: receive a structured copy of data provided on the basis of consent or contractual necessity, where technically feasible.

Requests should be submitted through the icash88 support channel with sufficient information to verify identity. A response will be provided within a reasonable period, typically within 30 days, unless the request is complex or relates to multiple records. Some rights may be limited where lawful retention, security investigation or regulatory obligation applies.

12. Minors and Age Restrictions

icash88 is directed exclusively at adults aged 21 and above. Casino-style gambling is not appropriate for underage users, and icash88 does not knowingly collect or process personal data from individuals below the applicable minimum age.

If icash88 becomes aware that personal data has been collected from an underage individual, the account will be suspended and the relevant data reviewed. Responsible adults are encouraged to use available parental control tools and to ensure that account credentials are not accessible to minors.

13. Changes to This Privacy Policy

icash88 may update this Privacy Policy from time to time to reflect changes in operational practice, new data processing activities, updated payment methods, legal requirements or service improvements. The effective date at the top of this page identifies the current version in force.

Material changes may be communicated through a website notice or account message where appropriate. Continued use of icash88 after a revised policy takes effect constitutes acceptance where permitted. If you disagree with a material change, you should stop using the website and contact support to discuss account closure.

14. Contact Us

Privacy-related questions, data access requests, correction requests, erasure requests and complaints about how icash88 handles personal data should be directed to the support team. Please include a brief description of your request or concern and the account reference where relevant. Do not include passwords, one-time codes or complete payment credentials in any message.

Website contact: [email protected]

This address is displayed as plain text. Users should confirm that any response genuinely originates from icash88 before sharing sensitive account or identity information in a reply. icash88 will never request passwords by email.