Privacy Policy i8my –
Data Protection Your Privacy

Welcome to the i8my Privacy Policy. This document transparently and comprehensively explains how i8my ("we", "Platform") collects, processes, stores, and protects your personal information as a member or visitor of our online gaming platform in Malaysia.

I8my understands that your trust is the foundation of our relationship. We do not take lightly the responsibility of managing your personal data — every data-related decision is made with privacy and the best interests of our members as the top priority. This policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices in data protection.

By registering an account, logging in, or continuing to use the i8my platform, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us for further action regarding your account.

I8my collects various types of information depending on how you interact with our platform. The following is a comprehensive overview of the categories of data we collect and the reasons for collecting them:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive personal data such as medical records or biometric information unless required by law or explicitly requested by the relevant regulatory authority.

Every piece of information we collect is used for a clear and lawful purpose. i8my adheres to the "limited purpose" principle — meaning data collected for a specific purpose will not be used for any other purpose without your consent. The following are the primary ways we use your data:

• Account Management: Creating, verifying and managing your member account, including the KYC process required under Malaysian law.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions securely and promptly through your preferred payment method.
• Platform Security: Detecting and preventing fraud, unauthorized login attempts, money laundering and any activity that threatens the security of the platform and its members.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes and security information that require your attention.
• Marketing & Promotions: With your consent, sending information about promotions, bonuses, and special offers tailored to your interests and gaming patterns.
• Responsible Gaming: Monitoring gameplay patterns to identify potential gambling problems and offering appropriate assistance or limits to protect your well-being.
• Legal Compliance: Fulfilling legal and regulatory obligations and responding to lawful requests from the relevant authorities.
• Platform Improvement: Analyzing aggregated usage data (without identifying individuals) to improve the user experience and develop new features.

Every data processing activity is carried out on a valid legal basis — whether under contract (for service delivery), legal obligation, the legitimate interests of i8my, or with your explicit consent. You may withdraw consent for marketing communications at any time without affecting the core services you receive.

I8my maintains a very strict policy regarding the sharing of your personal data. We do not share your information except in the following clearly defined situations:

• Payment Providers: Required transaction information is shared with licensed payment providers such as local banks, e-wallet operators (Touch 'n Go, GrabPay) and DuitNow processors solely for the purpose of processing your transactions.
• Platform Service Providers: Technical partners that help us deliver our services — such as server hosting providers, anti-fraud systems, and gaming platforms — are bound by strict data protection agreements.
• Legal Authorities: When required by a valid court order, investigations by authorities relating to financial crime, or official requests from regulatory bodies with jurisdiction over i8my.
• Fraud Prevention: In cases of suspected large-scale fraud or money laundering, relevant information may be shared with enforcement agencies or other platforms within the AML/CFT compliance network.

All third parties that receive your data from i8my are required to process that information solely in accordance with our instructions and to comply with data protection standards that meet or exceed the requirements of Malaysia's PDPA 2010.

I8my uses cookies and similar tracking technologies to enhance your experience on the platform, ensure account security, and understand how members use our services. Cookies are small text files stored on your device by your web browser.

The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and transaction security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collecting anonymous data on how pages are used, helping us identify technical issues and improve platform speed and stability.
• Functional Cookies: Saving your preferences such as language, display settings and game preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used to understand platform usage patterns in aggregate for the purpose of continuously improving our services.

Protecting your personal data from unauthorized access, loss, misuse or disclosure is i8my's highest priority. We continuously invest in the latest cybersecurity infrastructure to ensure your data remains secure at all times.

The security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and i8my's servers — equivalent to the standards used by leading Malaysian banking institutions.
• Two-factor authentication (2FA) to protect your account from unauthorised login attempts.
• Round-the-clock monitoring by our cybersecurity team to detect any suspicious activity or threats in real time.
• Passwords are stored in hashed format that cannot be decrypted — keeping your password secure even in the event of an unexpected incident.
• Network segmentation and role-based access controls ensuring that only authorized staff can access data relevant to their responsibilities.
• Regular security audits and penetration testing by independent third parties to identify and patch any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system is 100% impenetrable. In the event of a data breach affecting your personal information, i8my will notify you within the timeframe required by law and take immediate action to mitigate the impact.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal information we hold about you. i8my fully respects these rights and will process every request promptly:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readily understandable format within 21 days of receiving your request.
• Right to Rectification: If any of your personal data is inaccurate, incomplete, or outdated, you have the right to request a correction and we will update it promptly.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the core services you receive.
• Right to Object: You may object to the processing of your personal data for specific purposes, particularly direct marketing.
• Right to Erasure: In certain circumstances — particularly when data is no longer needed or consent has been withdrawn — you may request the deletion of your personal data, subject to applicable legal retention obligations.

I8my retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet relevant legal obligations. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for the duration your account is active and for an additional 5 years after account closure — in line with Malaysia's AML/CFT requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's applicable accounting and financial legal requirements.
• Security Logs: Retained for 12 months for the purpose of security incident investigation and fraud detection.
• Marketing Data: Retained until you withdraw consent or close your account, whichever comes first.
• Customer Support Data: Conversation and complaint records are retained for 3 years for service quality improvement purposes.

Once the retention period expires or a valid deletion request is received and processed, your data will be securely deleted from all our systems using data erasure methods that meet industry information security standards.

The i8my platform may contain integrations with third-party services such as game providers, payment processors and identity verification systems. While we select our partners carefully, i8my's Privacy Policy applies to the i8my platform only.

Each game provider and service partner integrated into the i8my platform has its own privacy policy. We encourage you to read the relevant provider's privacy policy when interacting with third-party services within the i8my platform. i8my is not responsible for the privacy practices of those third parties outside the scope of direct integration within our platform.

I8my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or ongoing improvements in how we protect your data. The "Last updated" date at the top of this document will always reflect the currently in-force version.

For material changes that affect your rights or how we use your data in a significant way, we will notify you through:

• Prominent notifications on the platform's login page before changes take effect.
• Email notification to your registered email address at least 14 days before any significant changes take effect.
• An in-account notice when you log in to the platform for the first time after the changes.

Continued use of the i8my platform after the effective date of any changes means you accept the updated version of the policy. If you do not agree with the changes, you may close your account and request a withdrawal of your remaining balance in accordance with standard procedures before the changes take effect.

If you have any questions, concerns, or wish to exercise your privacy rights as outlined in this policy, the i8my Personal Data Protection team is ready to assist you at any time.

• Privacy Email: [email protected] — for all privacy enquiries and data rights requests.
• Live Support: 24/7 live chat is available on the i8my platform for immediate assistance with your account and privacy matters.
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days. Data access or deletion requests will be processed within 21 days.

If you believe that i8my has failed to meet our data protection obligations and you are not satisfied with our response, you have the right to lodge a formal complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body under the Ministry of Communications and Digital Malaysia.