1. Introduction
This Privacy Policy ("Policy") sets out how iclub88 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data provided by or generated about users ("Member", "User", "you") of the iclub88 website at iclub88.asia and all associated services (collectively, "the Services").
iclub88 is committed to handling personal data responsibly and in compliance with applicable data protection laws, including the Malaysian Personal Data Protection Act 2010 ("PDPA") and any other applicable data protection legislation in the jurisdictions where iclub88 holds gaming authority licensing. By registering an account or otherwise using the iclub88 Services, you consent to the collection and use of your personal data as described in this Policy.
This Policy should be read together with the iclub88 Terms & Conditions, which are incorporated by reference. Defined terms used but not defined here carry the same meaning as in the Terms & Conditions.
2. Personal Data We Collect
2.1 Information You Provide Directly
When you register and use your iclub88 account, we collect personal data that you voluntarily provide, including:
- Identity data: Full legal name, date of birth, gender, nationality, and Malaysian NRIC or passport number (for KYC/AML verification).
- Contact data: Malaysian mobile number, email address, and residential address.
- Financial data: Payment method details (e.g., Touch 'n Go eWallet account identifier, Boost number, Maybank2u account reference, FPX bank selection, USDT wallet address) submitted during deposit or withdrawal — iclub88 does not store full bank account numbers or card numbers directly.
- Account credentials: Username and hashed password (plaintext passwords are never stored).
- KYC documentation: Copies of government-issued identification, proof of address, and payment method ownership documents submitted during verification.
- Support communications: Records of live chat sessions, emails, and any other correspondence with the iclub88 support team.
2.2 Information Collected Automatically
When you access and use the iclub88 platform, we automatically collect certain technical and usage data, including:
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
- Session data: Login timestamps, session duration, pages visited, game sessions initiated, bets placed, and navigation patterns within the platform.
- Geolocation data: Approximate geographic location derived from IP address, used for fraud prevention, jurisdiction compliance, and responsible gaming monitoring.
- Cookies and similar technologies: See Section 10 (Cookies) for full details.
2.3 Information From Third Parties
iclub88 may receive personal data about you from third-party sources including: identity verification service providers, payment processors, fraud detection agencies, and gaming regulators. Such data is used solely for verification, fraud prevention, and regulatory compliance purposes.
3. How We Use Your Personal Data
iclub88 uses your personal data for the following purposes:
- Account management: Creating, verifying, maintaining, and securing your iclub88 account; authenticating your identity at login; processing password resets and two-factor authentication via SMS OTP.
- Service delivery: Processing deposits and withdrawals in MYR; settling bets and casino game outcomes; awarding bonuses, cashback, and promotions; providing access to sportsbook, live casino, and slot game products.
- KYC and AML compliance: Verifying your identity and age (minimum 21 years) in accordance with applicable anti-money laundering and gaming regulatory obligations.
- Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access, duplicate accounts, and financial fraud through automated and manual review processes.
- Responsible gaming: Monitoring betting patterns to identify potential problem gambling indicators; applying deposit limits, loss limits, and self-exclusion tools where requested or required.
- Customer support: Responding to enquiries, resolving disputes, and communicating account-related notifications via live chat, email, or SMS.
- Platform improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience — this analysis uses anonymised or pseudonymised data where possible.
- Legal and regulatory obligations: Retaining records as required by applicable gaming licences, tax authorities, and data protection regulators; responding to lawful requests from law enforcement or regulatory bodies.
4. Legal Basis for Processing
iclub88 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform our obligations under the iclub88 Terms & Conditions — including account creation, game access, and financial transaction processing.
- Legal obligation: Processing required to comply with applicable laws including KYC/AML obligations under gaming licences and the Malaysian PDPA.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your data protection rights.
- Consent: Where iclub88 relies on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing already carried out.
5. Data Sharing & Third-Party Disclosure
iclub88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:
- Service providers and processors: Third-party vendors who process data on our behalf under contractual data processing agreements, including payment processors (Touch 'n Go, Boost, DuitNow, FPX, etc.), identity verification providers, SMS gateway services, cloud infrastructure providers, and game studios whose platforms are integrated into iclub88. These providers are contractually restricted from using your data for any purpose other than delivering services to iclub88.
- Gaming regulators and licensing authorities: iclub88 is required to share certain player data with its gaming licensing authority as a condition of its operating licence. Such disclosures are limited to what is required under applicable regulatory obligations.
- Law enforcement and legal proceedings: iclub88 will disclose personal data to law enforcement agencies, courts, or regulators where required by law or a valid legal order, or where iclub88 reasonably believes disclosure is necessary to prevent imminent harm, fraud, or serious criminal activity.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of iclub88's assets, member personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
6. International Data Transfers
iclub88 operates internationally and some of your personal data may be transferred to, stored in, or processed in countries outside Malaysia — including servers in other Asian jurisdictions where our technology infrastructure and game studio partners are located. Where such transfers occur, iclub88 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations on recipients equivalent to those applicable under Malaysian law.
By using the iclub88 Services, you acknowledge and consent to the transfer of your personal data outside Malaysia where required for the purposes described in this Policy.
7. Data Retention
iclub88 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:
- Account and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations under iclub88's gaming licence.
- KYC documentation: Retained for the duration of account activity plus five (5) years after account closure.
- Customer support communications: Retained for three (3) years from the date of the communication.
- Technical logs: Retained for twelve (12) months unless a longer retention period is required for active investigation or legal proceedings.
After applicable retention periods expire, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.
8. Security Measures
iclub88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- Encryption in transit: All data exchanged between your browser or device and iclub88 servers is protected by TLS (Transport Layer Security) encryption — indicated by the HTTPS protocol and padlock icon in your browser.
- Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest in iclub88's database and storage infrastructure.
- Access controls: Access to personal data within iclub88's internal systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative access.
- Penetration testing: iclub88 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in the platform.
- Incident response: iclub88 maintains a data breach response plan. In the event of a material data breach affecting your personal data, we will notify affected members and relevant authorities as required by applicable law, within the timeframes mandated by those laws.
While iclub88 takes all reasonable precautions, no online platform can guarantee absolute security. You also play a role in protecting your account — use a strong, unique password and enable two-factor authentication on your iclub88 account.
9. Your Data Protection Rights
Subject to applicable law and iclub88's legitimate regulatory obligations, you have the following rights in respect of your personal data held by iclub88:
- Right of access: You may request a copy of the personal data iclub88 holds about you, along with information about how it is used and with whom it is shared.
- Right of correction: You may request that inaccurate or incomplete personal data be corrected or updated. You can update many account details directly within your iclub88 account settings; for identity and KYC data, contact support.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
- Right to restrict processing: In certain circumstances, you may request that iclub88 restrict how your data is used — for example, while a correction request is being investigated.
- Right to erasure: You may request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (e.g., AML record-keeping requirements may prevent full erasure of financial transaction records).
- Right to object: You may object to the processing of your data for direct marketing purposes at any time.
To exercise any of these rights, contact the iclub88 support team via live chat or by email at [email protected]. iclub88 will respond to verified requests within thirty (30) calendar days. We may require identity verification before processing a data rights request.
10. Cookies & Similar Technologies
10.1 What Are Cookies
Cookies are small text files stored on your device by your browser when you visit a website. iclub88 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform.
10.2 Types of Cookies Used
- Strictly necessary cookies: Required for the iclub88 platform to function — including session authentication tokens that keep you logged in, CSRF protection tokens, and load balancing cookies. These cannot be disabled without breaking core functionality.
- Functional cookies: Store your preferences such as language settings, preferred bet display format, and last-visited game lobby. These improve your experience but are not essential.
- Analytics cookies: Aggregated, anonymised data about how members navigate the iclub88 platform — used to identify and fix usability issues and prioritise platform improvements. iclub88 uses first-party analytics only; no data is shared with third-party analytics vendors under this category.
- Security cookies: Used to detect and prevent fraud, identify suspicious login patterns, and support responsible gaming monitoring functions.
10.3 Managing Cookies
You can control cookie settings through your browser preferences. Disabling strictly necessary cookies will impair your ability to log in to iclub88 and use the Services. Blocking functional and analytics cookies will not prevent platform access but may reduce the quality of your experience. Note that clearing cookies will log you out of your iclub88 session.
11. Children's Privacy
The iclub88 platform is strictly for persons aged 21 years and over. iclub88 does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from a person under the minimum age, that account will be immediately suspended and all associated data reviewed and deleted in accordance with applicable law. If you believe that a minor has registered an iclub88 account, please contact our support team immediately.
12. Third-Party Platforms
The iclub88 platform integrates third-party game studios (e.g., Evolution Gaming, Pragmatic Play, PG Soft) and payment providers. While iclub88 selects partners carefully and imposes data protection obligations contractually, this Privacy Policy does not cover how those third parties process data within their own systems for their own purposes. Please refer to each provider's privacy documentation for information about their data practices.
13. Changes to This Privacy Policy
iclub88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or gaming regulatory requirements. When material changes are made, iclub88 will notify registered members via the contact details on their account and/or via a prominent notice on the Platform, with the revised effective date clearly displayed.
Your continued use of the iclub88 Services following the effective date of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or iclub88's handling of your personal data, please contact us through the following channels:
- Live Chat: 24/7 via the iclub88 website — fastest response, typically under two (2) minutes.
- Email: [email protected] — responses within one (1) business day.
For data protection requests specifically (access, correction, erasure), please include "Data Rights Request" in the subject line of your email and provide your registered iclub88 username and the specific right you wish to exercise. iclub88 will verify your identity before processing the request.