Privacy Policy

1. Introduction

isport88 ("we", "our", "us") operates the online sports betting and casino platform accessible at isport88.club ("Platform"). In the course of providing our services to registered members and visitors in Malaysia and elsewhere, isport88 collects, processes, and stores personal data. We take our data protection obligations seriously and are committed to handling personal data responsibly, securely, and in accordance with applicable privacy laws.

This Privacy Policy describes the categories of personal data isport88 collects, the purposes for which that data is processed, the lawful bases upon which processing is carried out, how long data is retained, the circumstances under which data may be shared with third parties, and the rights available to data subjects. This Policy should be read in conjunction with isport88's Terms & Conditions, which govern your use of the Platform.

If you have questions about this Privacy Policy or wish to exercise any of your data rights, please contact us using the details set out in Section 14.

2. Personal Data We Collect

isport88 collects the following categories of personal data from members and Platform visitors:

isport88 does not collect sensitive special category data (such as health data, biometric data, or racial/ethnic origin) unless specifically required for responsible gaming obligations and with your explicit consent.

3. How Personal Data Is Collected

isport88 collects personal data through the following means:

• Direct interaction: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawal requests, contacting customer support, or responding to surveys and promotions.
• Automated technical collection: Data collected automatically as you access and use the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 9 for details on cookies.
• Third-party payment processors: Transaction confirmation data and fraud risk signals received from payment service providers, including Touch 'n Go eWallet, Boost, and Malaysian banking partners.
• Identity verification providers: Data received from third-party KYC and identity verification services engaged by isport88 to fulfil its anti-money laundering obligations.
• Fraud prevention and security services: Risk signals and fraud indicators received from specialised fraud detection providers to protect the integrity of the Platform.

4. Purposes of Processing

isport88 processes personal data for the following purposes:

1. Account registration and management — to create and administer your isport88 member account, verify your identity and eligibility, and manage your account settings and preferences.
2. Service delivery — to facilitate sports betting, casino gaming, poker, and slot transactions; to process deposits and withdrawals; and to deliver the core features of the isport88 Platform.
3. Regulatory compliance — to fulfil obligations under anti-money laundering laws, Know Your Customer requirements, responsible gaming regulations, and other applicable legal obligations.
4. Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorised account access, cheating, and other security threats to the Platform and its members.
5. Customer support — to respond to your queries, complaints, and support requests, and to maintain records of our communications with you.
6. Marketing and promotions — to send you promotional communications, bonus offers, and personalised recommendations, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
7. Responsible gaming — to monitor your gaming behaviour for indicators of problem gambling, to apply and enforce responsible gaming limits, and to administer self-exclusion arrangements.
8. Platform improvement — to analyse usage patterns, conduct statistical analysis, and improve the features, performance, and user experience of the isport88 Platform.

5. Legal Basis for Processing

isport88 processes personal data on the following lawful bases:

• Contractual necessity: Processing necessary for the performance of the contract between isport88 and you as a registered member — including account management, service delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing carried out for isport88's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and general business analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — particularly in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

isport88 does not sell or rent personal data to third parties for their own marketing purposes. isport88 may share personal data with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment service providers — Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment processors, for the purpose of processing deposits and withdrawals.
• Identity verification and KYC providers — third-party identity verification services engaged to conduct KYC and document verification on behalf of isport88.
• Fraud prevention and security providers — fraud detection, risk scoring, and cybersecurity service providers engaged to protect the Platform and its members.
• Game and software providers — casino game studios and sports data providers whose services are integrated into the isport88 Platform, to the extent technical data must be shared to deliver those services.
• Professional advisors — legal, accounting, audit, and compliance professionals engaged by isport88, subject to professional confidentiality obligations.
• Regulatory and law enforcement authorities — where isport88 is required by law, court order, or regulatory directive to disclose personal data.

7. Data Retention

isport88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of seven (7) years following the date of each transaction, as required for financial regulatory compliance.
• Gaming and betting history: Retained for a minimum of five (5) years for dispute resolution, regulatory reporting, and responsible gaming monitoring purposes.
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute management.
• Technical and log data: Typically retained for 12 months for security monitoring purposes, subject to regulatory requirements.
• Marketing preferences: Retained until you withdraw consent or object to processing, after which data is suppressed or deleted promptly.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with isport88's data disposal procedures.

8. Data Security

isport88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the isport88 Platform.
• Encrypted storage of sensitive data at rest, including payment instrument references and identity documents.
• Access controls and role-based permissions limiting staff access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Two-factor authentication (2FA) available to all members as an additional account security layer.
• Incident response procedures for detecting, reporting, and managing personal data breaches, including notification to affected members and relevant authorities where required by law.

Notwithstanding isport88's security measures, no internet transmission is entirely secure. You are responsible for maintaining the security of your isport88 login credentials and for notifying isport88 promptly if you suspect unauthorised access to your account.

9. Cookies & Tracking Technologies

isport88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, login state persistence, and security token validation. These cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to collect aggregated data on how members use the Platform — including pages visited, features used, and session duration — to help isport88 improve the Platform experience. Data collected is anonymised or pseudonymised.
• Functional cookies: Used to remember your preferences — such as language settings, preferred sports, and display options — to personalise your experience on subsequent visits.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and abuse of the Platform.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies may affect the functionality and personalisation features of the isport88 Platform but will not prevent access to core services.

10. Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by isport88:

• Right of access: You may request a copy of the personal data isport88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (such as AML record-keeping requirements).
• Right to restriction: You may request that isport88 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, isport88 will cease such processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact isport88 using the details in Section 14. isport88 will respond to all verified data rights requests within 30 days. Identity verification may be required before a request is processed.

11. Minors

The isport88 Platform is strictly intended for adults aged 21 and above. isport88 does not knowingly collect or process personal data from individuals under the age of 21. If isport88 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted promptly and the associated account will be suspended. Parents or guardians who believe a minor has registered on the isport88 Platform should contact us immediately at the details in Section 14.

12. International Data Transfers

In the course of delivering its services, isport88 may transfer personal data to recipients located outside Malaysia — for example, to game studio providers or fraud prevention services operating internationally. Where such transfers occur, isport88 ensures that appropriate safeguards are in place to protect personal data, including contractual data protection clauses with the receiving parties consistent with applicable privacy regulations.

isport88 does not transfer personal data to recipients in jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above.

13. Changes to This Privacy Policy

isport88 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that meaningfully affect the way isport88 processes your personal data or your data rights — will be communicated to registered members via email or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page reflects the most recent revision.

Continued use of the isport88 Platform following notification of any amendment to this Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with any amendment, you may close your account in accordance with the procedure described in the Terms & Conditions.

14. Contact

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by isport88, please contact us through the following channels:

isport88 aims to respond to all privacy-related enquiries within 5 business days. For formal data rights requests, a response will be provided within 30 days of receipt and identity verification.