islot88 Privacy Policy

1. Introduction

islot88 ("we", "us", "our") operates the online gaming and sports betting platform accessible at islot88.asia (the "Platform"). We take the privacy and security of personal data belonging to our Members and website visitors seriously, and we are committed to protecting it in accordance with applicable data protection law and the compliance requirements of the international gaming authority ("IGA") framework under which islot88 operates.

This Privacy Policy applies to all personal data collected through or in connection with the islot88 Platform, including data collected during account registration, KYC verification, transactions, gameplay, customer support interactions, and general website browsing. By using the islot88 Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

islot88 acts as the data controller in respect of personal data collected through the islot88 Platform. As data controller, islot88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection requirements.

If you have any questions about how islot88 processes your personal data, you may contact us at the email address provided in Section 13 of this Privacy Policy.

3. Personal Data We Collect

islot88 collects the following categories of personal data from Members and platform visitors:

Category	Data Points Collected	Collection Method
Identity Data	Full legal name, date of birth, nationality, gender	Registration form; KYC document submission
Identity Documents	MyKad / Passport number, document images, selfie photograph	KYC verification process
Contact Data	Email address, mobile phone number, residential address	Registration form; account settings updates
Financial Data	Deposit / withdrawal history, payment method identifiers (e.g. last four digits, eWallet reference), transaction amounts in MYR	Payment processing; transaction records
Technical Data	IP address, device type, browser type and version, operating system, session duration, page views	Automatic collection via server logs and cookies
Gaming Data	Game history, bet amounts, win/loss records, active promotions, VIP tier and points balance	Platform gameplay activity
Communications Data	Support correspondence, dispute submissions, complaint records	Customer support interactions

islot88 does not collect sensitive personal data categories (such as racial or ethnic origin, political opinions, religious beliefs, or health data) beyond what is strictly necessary for regulatory compliance purposes — for example, problem gambling self-assessment data collected as part of islot88's responsible gaming programme.

4. How islot88 Uses Your Personal Data

islot88 processes your personal data for the following purposes:

• Account management: Creating and administering your islot88 account, verifying your identity and age (21+ requirement), and managing your account settings.
• KYC and regulatory compliance: Verifying your identity in accordance with IGA anti-money laundering and know-your-customer requirements. This is a mandatory legal obligation and cannot be waived.
• Service delivery: Processing deposits and withdrawals in MYR, providing access to games and sportsbook markets, crediting bonuses, and managing VIP tier benefits.
• Fraud prevention and security: Detecting and investigating suspicious account activity, preventing unauthorized access, monitoring for collusion or match-fixing, and complying with anti-money laundering obligations.
• Responsible gaming: Monitoring gambling behaviour patterns to identify potential problem gambling indicators, administering self-exclusion and deposit limit tools, and contacting Members where islot88 has a regulatory obligation to do so.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the islot88 Platform's performance, user experience, and game selection.
• Communications: Responding to customer support enquiries and formal disputes; sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) to your registered email address.
• Marketing: Where you have provided explicit consent, sending promotional communications about islot88 bonuses, new games, and platform updates. You may withdraw marketing consent at any time by contacting islot88 support.

5. Legal Basis for Processing

islot88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the islot88 Member agreement — including account creation, identity verification, payment processing, and game access.
• Legal obligation: Processing required to comply with IGA regulatory requirements, anti-money laundering obligations, and applicable data protection laws.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics, where islot88's legitimate interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, where you have given explicit, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

islot88 does not sell your personal data to third parties. islot88 may share your personal data with the following categories of recipients only where necessary and on a confidential basis:

• Technology and service providers: Game providers, payment processors (including Touch 'n Go eWallet, DuitNow, FPX operators, and Malaysian banking partners), KYC verification platform providers, and cloud infrastructure providers. All third-party processors are contractually required to process your data only on islot88's instructions and in compliance with applicable data protection requirements.
• Regulatory and law enforcement authorities: Where islot88 is legally required to disclose personal data to IGA regulatory authorities, financial intelligence units, or law enforcement agencies — including in connection with anti-money laundering investigations, age verification enforcement, or court orders.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

7. Cookies & Tracking Technologies

The islot88 Platform uses cookies and similar tracking technologies to operate correctly, maintain your session after islot88 login, and analyse Platform usage. The following cookie categories are used:

• Strictly necessary cookies: Required for Platform functionality, including session management, authentication state, and security features. These cannot be disabled.
• Performance cookies: Collect anonymised data about how visitors use the islot88 Platform (pages visited, time on site, error events). Used to improve Platform performance. No personally identifiable information is collected via performance cookies.
• Functional cookies: Remember your preferences (such as language settings or table game preferences) to improve your experience on islot88.

You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies may impair islot88 Platform functionality, including the ability to maintain your logged-in session after islot88 login.

8. Data Retention

islot88 retains personal data for the periods set out below, or for longer where required by applicable law or IGA regulatory requirements:

• Active account data: Retained for the duration of the Member's active islot88 account plus five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Technical and log data: Typically retained for twelve (12) months from collection, unless required for longer in connection with an active investigation or dispute.
• Support correspondence: Retained for three (3) years from the date of the interaction, or longer if the correspondence relates to an unresolved dispute or regulatory matter.

9. Data Security

islot88 implements technical and organisational measures appropriate to the sensitivity of the personal data it holds. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the islot88 Platform — the same standard used by Malaysian online banking platforms including Maybank2u, CIMB Clicks, and Public Bank Online.
• Hashed storage of account passwords. islot88 staff cannot access your password in readable form.
• Role-based access controls limiting access to personal data to staff with a legitimate operational need.
• Intrusion detection and monitoring systems on islot88's infrastructure.
• Regular internal security reviews and third-party penetration testing.

10. Your Data Rights

Subject to applicable law and IGA compliance obligations, you have the following rights in respect of your personal data held by islot88:

• Right of access: You may request a copy of the personal data islot88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your islot88 account.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where islot88 no longer requires it for the purpose for which it was collected and there is no overriding legal or regulatory obligation to retain it.
• Right to restriction: You may request that islot88 restrict processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to object: You may object to processing based on islot88's legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent (e.g. marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact islot88 at the email address in Section 13. islot88 will respond to all valid data rights requests within 30 days. Note that some requests may be subject to verification of identity before islot88 can action them, and some requests may be refused where islot88 has an overriding legal or regulatory obligation to retain or process the relevant data.

11. Minors

The islot88 Platform is strictly restricted to individuals aged 21 and over. islot88 does not knowingly collect personal data from persons under the age of 21. If islot88 discovers that a person under 21 has registered an account, we will immediately close the account, delete the associated personal data to the extent permitted by law, and return any deposits to the payment method used, net of any withdrawals already processed.

If you have reason to believe that a minor has registered on the islot88 Platform, please contact us immediately at the email address in Section 13.

12. Changes to This Privacy Policy

islot88 may update this Privacy Policy from time to time to reflect changes in applicable law, IGA regulatory requirements, or our data processing practices. When material changes are made, islot88 will update the "Last Updated" date at the top of this page and, where required, notify registered Members via the email address associated with their islot88 account. Your continued use of the islot88 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised policy.

13. Contact & Data Enquiries

For all data protection enquiries, requests to exercise your data rights, or concerns about islot88's handling of your personal data, please contact us at:

Email: [email protected]

islot88 will acknowledge receipt of your enquiry within 5 business days and endeavour to provide a substantive response within 30 days. For complex requests, islot88 may extend this period by a further 30 days where permitted by applicable law, in which case you will be notified of the extension and the reason for it.