Privacy Policy —
How igrab88 Handles Your Data

01 Introduction

igrab88 ("the Platform", "we", "us", "our") operates the online casino and sports betting website located at igrab88.cam, providing services to users ("you", "your", "the User") primarily based in Malaysia. As a platform that processes financial transactions and sensitive account data, igrab88 takes the protection of personal information with the utmost seriousness.

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data provided by Users in the course of registering for, accessing, or using any feature of the igrab88 Platform. It applies to all personal data processed through our website, mobile interface, live chat system, email correspondence, and any other communication channel operated by igrab88.

This policy should be read together with our Terms & Conditions and Responsible Gambling Policy, which collectively form the full framework governing your relationship with igrab88.

02 Definitions

The following definitions apply throughout this Privacy Policy:

03 Personal Data We Collect

igrab88 collects personal data from Users in a number of ways — directly through registration and account management, automatically through your use of the Platform, and from third-party partners where necessary. The categories of data we collect are as follows:

3.1 Data Provided Directly by You

During registration and ongoing account use, we collect:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification (MyKad or passport) as required for KYC verification.
• Contact Data: Residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru), email address, and Malaysian mobile phone number.
• Financial Data: Bank account details (e.g., Maybank, CIMB, Public Bank, Hong Leong), registered e-wallet numbers (e.g., Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency wallet addresses where applicable. We do not store full payment card numbers.
• Account Credentials: Username and encrypted password. igrab88 does not store passwords in plaintext.
• Communications Data: Content of messages sent to igrab88 through live chat, email, or any other support channel.

3.2 Data Collected Automatically

When you access and use the igrab88 Platform, we automatically collect:

• Technical Data: IP address, browser type and version, device type, operating system, and screen resolution.
• Usage Data: Pages visited, time spent on each page, game sessions played, bet amounts and outcomes, deposit and withdrawal history, and login timestamps.
• Session Data: Cookie identifiers, session tokens, and related identifiers used to maintain your authenticated session.
• Geolocation Data: General geographic location derived from IP address, used to verify that you are not accessing the Platform from a Restricted Jurisdiction.

3.3 Data from Third Parties

igrab88 may receive personal data about you from third-party service providers engaged to assist with identity verification (KYC partners), fraud detection, payment processing, and responsible gambling monitoring. Such data is received and used solely for the purposes described in this Policy.

04 How We Use Your Data

igrab88 processes your personal data only for legitimate, specified purposes. The following table sets out the principal purposes for which your data is used:

05 Legal Basis for Processing

igrab88 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the User Agreement — including account creation, transaction processing, and the provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and regulatory reporting requirements.
• Legitimate Interests: Processing undertaken in pursuit of igrab88's legitimate interests, including fraud prevention, security monitoring, platform analytics, and responsible gambling monitoring — provided that such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw this consent at any time by contacting our support team.

06 Data Sharing & Disclosure

igrab88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with carefully selected third parties in the following circumstances:

• Payment Service Providers: We share necessary financial data with payment processors and banking partners (including FPX, DuitNow, and e-wallet providers) solely for the purpose of executing your deposit and withdrawal transactions.
• KYC & Identity Verification Partners: We engage third-party identity verification services to validate documents submitted for KYC compliance. These partners are contractually bound to process your data only for the specified verification purpose.
• Fraud Prevention Services: We may share IP address, device fingerprint, and account behaviour data with specialist fraud detection providers to protect the integrity of the Platform and its users.
• Cloud Infrastructure Providers: igrab88 uses reputable cloud infrastructure and data storage providers. These processors have no independent access to your data beyond what is required for technical hosting services.
• Regulatory Authorities: Where required by law or by a valid regulatory order, igrab88 may disclose account and transaction information to competent authorities. We will notify you of such disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of igrab88's assets, your personal data may be transferred as part of the transaction. You will be notified of any such change in data controller.

07 Cookies & Tracking Technologies

igrab88 uses cookies and similar tracking technologies to operate and improve the Platform. When you first visit igrab88.cam, your browser may be issued one or more cookies that help us maintain your session, remember your preferences, and understand how you use the Platform.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing your use of the Platform.
• Performance Cookies: Collect anonymised data about how Users interact with the Platform (e.g., pages visited, errors encountered) to help us improve functionality and user experience.
• Preference Cookies: Store your language preferences, display settings, and other personalisation choices so that they persist between sessions.
• Analytics Cookies: Used to compile aggregate statistics about Platform usage. The data collected is anonymised and does not identify individual users.

7.2 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Most modern browsers provide cookie management settings in their privacy or security menus.

08 Data Retention

igrab88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status and for a period of at least 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction.
• Support Communications: Retained for 2 years from the date of the last interaction, unless required for longer by ongoing investigations or regulatory requests.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable additional period for audit purposes.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it non-identifiable.

09 Data Security Measures

igrab88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the igrab88 Platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive data at rest — including identity documents and financial records — is stored using strong encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. igrab88 staff are granted access only to the data necessary for their specific roles.
• Security Monitoring: igrab88 employs continuous monitoring systems to detect and respond to anomalous activity, potential intrusions, and data breach indicators.
• Password Security: User passwords are hashed using industry-standard cryptographic functions. igrab88 does not store passwords in recoverable form.
• Regular Security Reviews: Our security posture is reviewed and tested on an ongoing basis to ensure alignment with current best practices.

10 Your Rights as a Data Subject

As a data subject, you hold a number of rights with respect to the personal data igrab88 holds about you. These rights are summarised below:

To exercise any of the above rights, please contact igrab88 via live chat or by email at [email protected]. We will respond to all verified requests within 30 days. Some rights are subject to legal limitations — for example, the right to erasure cannot override a mandatory regulatory data retention obligation.

11 Minors & Age Policy

The igrab88 Platform is strictly reserved for individuals aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a minor, we will promptly delete that data and suspend the associated account.

igrab88 employs age verification mechanisms at the point of registration and as part of the KYC process. Users are required to confirm their date of birth during sign-up and may be asked to provide documentary proof of age before withdrawal processing is approved.

12 Third-Party Services & Links

The igrab88 Platform integrates with third-party services for payment processing, identity verification, and game provision. While igrab88 exercises due diligence in selecting these partners, we are not responsible for the privacy practices of external service providers once your data leaves our direct processing environment.

The igrab88 website does not contain links to external third-party websites for browsing or referral purposes. Where integration with payment providers (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, or CIMB online banking portals) occurs as part of a transaction, you will be subject to that provider's own privacy policy and terms during the transaction process. igrab88 recommends that you review the privacy policies of your payment provider before initiating transactions.

13 International Data Transfers

In the course of providing its services, igrab88 may transfer personal data to, or store personal data on, servers and systems located outside of Malaysia. This may occur in connection with our use of cloud infrastructure, third-party KYC partners, or game providers whose servers are based in other jurisdictions.

Where personal data is transferred internationally, igrab88 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections afforded within Malaysia. Such safeguards may include contractual data processing agreements, standard contractual clauses, or transfer to jurisdictions with recognised data protection standards.

14 Amendments to This Policy

igrab88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or change how we share data — we will provide advance notice to Users via the Platform or by email to the address registered on your account.

The date of the most recent revision is indicated at the top of this page. Continued use of the igrab88 Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. We recommend reviewing this page periodically to stay informed of any changes.

15 Contact Us — Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to the igrab88 support team through the channels below. All data-related enquiries are treated with priority and handled with strict confidentiality.

Our team operates around the clock and handles enquiries from players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We aim to acknowledge all privacy-related requests within 24 hours and to resolve them within 30 calendar days.

This Privacy Policy was last reviewed and updated on 1 January 2026. igrab88 reserves the right to modify this Policy at any time in accordance with applicable data protection requirements.