Privacy Policy

This Privacy Policy ("Policy") is published by ime88 ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting website accessible at https://ime88.cam. This Policy describes how ime88 collects, processes, uses, stores, and protects the personal data of users ("you", "your", "Data Subject") who access or interact with the Platform, whether as registered account holders or anonymous visitors.

ime88 is committed to protecting the privacy and security of all personal data we hold. We process personal data in accordance with internationally recognised data protection principles, including but not limited to those reflected in the General Data Protection Regulation (GDPR) and applicable Malaysian data protection legislation. Our processing practices are designed to be transparent, proportionate, and consistent with users' reasonable expectations.

By accessing the Platform, registering an Account, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Policy and consent to the processing of your data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform and, if applicable, request closure of your Account.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, ime88 acts as Data Controller in respect of all user personal data collected through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller in accordance with documented instructions.
• "KYC Data" — Identity verification documents and information submitted as part of the Know Your Customer process, including identity cards, passports, proof of address, and selfie photographs.
• "Cookies" — Small text files placed on a user's device by the Platform for the purposes of session management, analytics, security, and personalisation.
• "PDPA" — Personal Data Protection Act 2010 (Malaysia) — the primary Malaysian legislation governing the processing of personal data in commercial transactions.

ime88 collects the following categories of personal data from users of the Platform:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes, except where such data is necessarily apparent from identity documents submitted for KYC purposes, in which case it is processed solely for identity verification and not retained beyond what is required.

ime88 collects personal data through the following means:

• Direct Submission: Information you provide when registering an Account, completing KYC verification, initiating a deposit or withdrawal, contacting support, or submitting any form on the Platform.
• Automated Technical Collection: Technical and usage data collected automatically via cookies, server logs, and analytics tools when you access and browse the Platform.
• Payment Service Providers: Financial transaction data received from integrated payment processors, including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency transaction verifiers.
• Identity Verification Services: Where we engage third-party KYC verification service providers, we may receive verification results and flagged risk scores in addition to the raw documents submitted.
• Fraud and AML Screening: Data received from third-party anti-money laundering and sanctions screening services used to fulfil our regulatory obligations.

ime88 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to enter into or perform the contract between you and ime88 — for example, processing your account registration details, KYC documents, and financial data to enable deposits, gameplay, and withdrawals.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) legislation, know-your-customer (KYC) requirements, and gaming regulatory obligations. These obligations may require us to retain and disclose data regardless of consent.
• Legitimate Interests: Processing necessary for the legitimate interests of ime88, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security monitoring, responsible gambling monitoring, and service improvement analytics.
• Consent: Where you have explicitly consented to a specific processing activity — such as receiving marketing communications or promotional notifications. You may withdraw consent at any time via your Account Settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

ime88 uses the personal data we collect for the following specific purposes:

1. Account Administration: To create, manage, and maintain your Account on the Platform, including authentication, password management, and account settings.
2. Identity Verification (KYC): To verify your identity, age (21+ requirement), and address in accordance with our regulatory obligations and to prevent fraud and money laundering.
3. Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, USDT TRC20), to verify payment instrument ownership, and to maintain accurate financial records.
4. Gameplay and Service Delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other Platform features; to record game outcomes and transaction history for your records and dispute resolution.
5. Responsible Gambling: To monitor gameplay patterns for indicators of problem gambling behaviour; to enforce deposit limits, self-exclusion periods, and cooling-off periods set by you; to send responsible gambling reminders where appropriate.
6. Security and Fraud Prevention: To detect and investigate suspicious activity, unauthorised account access, bonus abuse, and potential fraudulent transactions.
7. Legal and Regulatory Compliance: To fulfil our obligations under AML legislation, gaming regulations, and any lawful requests from competent authorities.
8. Customer Support: To respond to your enquiries, resolve complaints, and maintain records of communications for quality assurance and dispute resolution.
9. Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and platform updates by email. You may opt out at any time via the unsubscribe link in any marketing email or through your Account Settings.
10. Analytics and Platform Improvement: To analyse usage patterns, game performance, and user experience data to improve the Platform's functionality, content, and performance.

ime88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with the following categories of third parties where necessary and lawful:

• Payment Service Providers: Financial institutions and payment processors (including DuitNow, FPX operators, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network operators) receive necessary financial data to process transactions.
• KYC and Identity Verification Providers: Third-party providers engaged to assist with identity verification, document authentication, and AML screening. These providers operate as Data Processors under binding data processing agreements.
• Technology and Hosting Providers: Cloud hosting, database, and infrastructure providers who process data on our behalf to operate the Platform. All such providers are bound by confidentiality obligations and data processing agreements.
• Game Content Providers: Game studios and live dealer operators integrated into the Platform may receive minimal session data (e.g., player token) to facilitate gameplay. These providers do not receive your personal identity information.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent authorities, courts, or regulators where required by applicable law, court order, or regulatory directive. ime88 will endeavour to notify you of such disclosures where legally permissible.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who are subject to professional confidentiality obligations, where necessary to protect our legal rights or fulfil compliance obligations.

ime88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active Account is retained for the duration of the Account relationship plus a minimum of five (5) years following Account closure, as required under anti-money laundering regulations.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years from the date of verification or from the date of the last transaction, whichever is later. This retention is required under applicable AML and gaming regulations.
• Transaction Records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of seven (7) years for accounting and regulatory audit purposes.
• Support Communications: Customer support communications are retained for a minimum of two (2) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing Data: Marketing consent records and communication logs are retained for as long as you remain opted in, plus two (2) years following opt-out to demonstrate compliance.
• Technical / Log Data: Server access logs and session data are retained for up to twelve (12) months for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

ime88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your browser and the Platform is protected by 256-bit Transport Layer Security (TLS/SSL) encryption. The padlock icon in your browser's address bar confirms an active encrypted connection.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial information, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff accessing personal data are subject to confidentiality obligations and receive data protection training.
• Two-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication.
• Penetration Testing and Audits: The Platform undergoes regular security assessments and vulnerability testing by independent security specialists.
• Incident Response: ime88 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframes required by applicable law.

While we implement robust security measures, no data transmission over the internet or electronic storage system is guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own Account credentials and for notifying us immediately if you suspect any unauthorised access.

The Platform uses cookies and similar tracking technologies to operate effectively, enhance user experience, and gather analytics. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state, security tokens, and load balancing cookies. These cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last-visited page, and display options to personalise your experience on subsequent visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — including pages visited, time on site, and click patterns. This information is used solely to improve Platform performance and user experience.
• Security Cookies: Used to detect fraud, bot activity, and unauthorised access attempts. These cookies help protect the integrity of the Platform and safeguard player accounts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use core Platform features including account login. ime88 does not use cookies to serve third-party advertising.

Subject to applicable law and any overriding legal obligations (including AML and regulatory retention requirements), you have the following rights in respect of your personal data held by ime88:

To exercise any of the above rights, please contact our Data Protection team via the live chat function on the Platform or by email. We will respond to verified requests within 30 days. Requests may require identity verification before being actioned to protect against unauthorised access to your personal data.

The Platform is strictly intended for use by individuals aged 21 years and above. ime88 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the KYC process; no withdrawal will be permitted until a user's age has been positively verified against a valid identity document.

If ime88 becomes aware that personal data has been collected from a person under the age of 21, the Account will be immediately suspended, all balances will be frozen pending investigation, and the personal data of the underage individual will be securely deleted in accordance with our data retention policy, except where retention is required by applicable law.

If you are a parent or guardian and believe that a person under your care has registered an Account on the Platform, please contact our support team immediately via live chat or email. We will investigate promptly and take appropriate action.

ime88 operates in an international digital environment. As a result, your personal data may be transferred to and processed in countries other than Malaysia in the course of providing the Platform's services — including hosting infrastructure, KYC service providers, payment processors, and game content delivery networks located in various jurisdictions.

Where personal data is transferred outside of Malaysia, ime88 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by Malaysian data protection law (PDPA) and internationally recognised data protection principles. Such safeguards may include:

• Binding contractual clauses incorporated into agreements with Data Processors, requiring them to process personal data only in accordance with our instructions and to implement appropriate security measures;
• Transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable standards;
• Technical safeguards such as end-to-end encryption ensuring data remains protected during international transmission.

You may request further information about the safeguards in place for international transfers by contacting our Data Protection team.

ime88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, regulatory requirements, or Platform functionality. The effective date of the current version is displayed at the top of this page.

Where amendments are material — meaning they substantially affect how we process your personal data or your rights as a Data Subject — we will notify registered users by email and/or via a prominent in-Platform notification at least fourteen (14) days before the changes take effect, where reasonably practicable.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of, and agreement to, the updated Policy. We encourage you to review this page periodically to stay informed of any changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ime88, please contact our Data Protection team using the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week via the chat icon on any page of the Platform. Ideal for urgent account-related data queries.
• Email (plain text — not a link):
  [email protected]
  Please include "Privacy Request" in the subject line and your registered Account email for faster handling.

We aim to acknowledge all data-related requests within 48 business hours and to provide a substantive response within 30 calendar days. Where a request is complex or involves multiple data categories, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason.