This Privacy Policy explains how iw8 collects, uses, stores, and protects the personal data of players registered on the iw8 platform. We are committed to handling your information responsibly, transparently, and in accordance with internationally recognised data protection standards.
These cards outline iw8's core data protection commitments. They summarise — but do not replace — the full Privacy Policy below.
This Privacy Policy ("Policy") is issued by iw8 ("iw8", "the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform at https://iw8.cam ("the Platform"). This Policy applies to all registered users ("Users", "Players", "you") and visitors to the Platform.
iw8 takes its obligations regarding personal data seriously. This Policy is intended to provide full transparency on what data we collect, why we collect it, how it is used, with whom it may be shared, how long it is retained, and what rights you hold over your information.
By registering an account on iw8, depositing funds, placing wagers, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with this Policy, you should not use the Platform.
Language note: This Privacy Policy is published in English, which is the governing version for all interpretation purposes. Any translated version provided for user convenience does not supersede the English text.
The following definitions apply throughout this Privacy Policy:
iw8 is the Data Controller responsible for Personal Data collected through the Platform. iw8 operates under an international gaming license from a recognised offshore licensing jurisdiction and is subject to the data protection requirements imposed by that licensing authority.
iw8 does not operate under Malaysian domestic jurisdiction. Malaysian users accessing the Platform do so on the basis that the data processing described in this Policy is governed by the laws of iw8's licensing jurisdiction, not Malaysian law. Malaysian users who have concerns about their data protection rights in a cross-border context are encouraged to seek independent legal advice.
For all data-related enquiries, iw8 can be contacted via the channels set out in Section 16 of this Policy.
iw8 collects the following categories of Personal Data from users of the Platform:
| Category | Data Elements | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration & KYC |
| Contact Data | Email address, mobile phone number, residential address | Registration & KYC |
| Document Data | Malaysian MyKad / NRIC, Driver's License, Passport — images or scans; proof of address documents | KYC Verification |
| Financial Data | Payment method identifiers (e-wallet account, bank account details — no full card numbers stored), transaction history, deposit and withdrawal records | Deposit / Withdrawal |
| Gaming Data | Bet history, wager amounts, game sessions, win/loss records, bonus participation, VIP tier status | Ongoing Platform Use |
| Technical Data | IP address, browser type and version, device type, operating system, session timestamps, referral source | Automatic — on Platform access |
| Communications Data | Live chat transcripts, support ticket content, email correspondence, WhatsApp message logs | When you contact support |
| Marketing Preferences | Email/SMS opt-in status, promotional communication preferences | Registration & Account Settings |
Special category data: iw8 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where strictly required for responsible gambling purposes (e.g., self-exclusion records which may reference mental health concerns shared voluntarily by the user).
iw8 collects Personal Data through the following channels and mechanisms:
iw8 processes your Personal Data for the following defined purposes:
iw8 processes Personal Data only where a recognised legal basis applies. The primary legal bases relied upon are as follows:
iw8 does not sell, rent, or trade your Personal Data to third parties for their own independent commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the specified purpose:
All third-party Data Processors engaged by iw8 are subject to binding data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to iw8.
As an internationally operating platform, iw8 may transfer your Personal Data to countries outside Malaysia, including to our servers and service providers located in the jurisdiction of iw8's operating license and in other countries where our Data Processors maintain infrastructure.
Where Personal Data is transferred internationally, iw8 takes steps to ensure that appropriate safeguards are in place to protect your data, which may include contractual protections, adherence to the data protection requirements of iw8's licensing authority, and the application of technical security measures described in Section 13 of this Policy.
Malaysian user note: Malaysia's Personal Data Protection Act 2010 (PDPA) provides certain protections for Malaysian residents. As iw8 is not incorporated in Malaysia, the PDPA may not apply directly to our processing activities. However, iw8 voluntarily applies equivalent data protection principles where practicable as a matter of good practice and player trust.
iw8 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulatory obligation, or licensing conditions. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Regulatory / AML obligation |
| KYC Documents | Duration of account + 5 years post-closure | Licensing requirement |
| Transaction Records | 5 years from transaction date | AML / financial record-keeping |
| Gaming Activity Logs | 3 years from account closure | Regulatory / dispute resolution |
| Support Communications | 2 years from last interaction | Legitimate interest / dispute resolution |
| Technical / Server Logs | 13 months on a rolling basis | Security monitoring |
| Marketing Preferences | Until consent withdrawn or account closed | Consent |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Where retention is required by law, data is restricted from active use and held in archive-only mode.
Subject to applicable law and iw8's regulatory obligations, you have the following rights in respect of your Personal Data held by iw8:
To exercise any of the above rights, please contact iw8 at [email protected] with the subject line "Data Rights Request". iw8 will verify your identity before processing any data access or deletion request. We will respond to valid requests within 30 days. Complex requests may take up to 60 days, and you will be notified if an extension is required.
Regulatory override: The exercise of your data rights is subject to iw8's legal and regulatory obligations. Where applicable law requires iw8 to retain certain data (such as KYC records and transaction logs for AML compliance), a deletion request for that data may not be fulfilled until the mandatory retention period expires.
The iw8 Platform uses cookies and similar technologies including pixel tags, web beacons, and local storage objects. These technologies serve the following purposes:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Functional | Maintain your login session, remember language and display preferences, enable core platform features including the bet slip and deposit flow. | No — required for Platform operation |
| Performance / Analytics | Collect aggregated, anonymised data on how users navigate the Platform to identify and resolve technical issues and improve page performance. | Yes — via browser settings |
| Security | Detect and prevent fraud, bot activity, and suspicious session behaviour by analysing technical signals from your device and browser. | No — required for security |
| Preference | Remember your display, odds format, and notification preferences so that the Platform reflects your settings on return visits. | Yes — via account settings |
You may manage or delete non-essential cookies at any time through your browser's settings. Note that disabling certain cookies may affect the functionality of the Platform. For guidance on managing cookies in popular browsers, refer to the help documentation of your specific browser application.
iw8 implements a multi-layered security framework designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:
Your responsibility: iw8's security measures protect data on our systems. You are responsible for maintaining the security of your own account credentials, including your password and two-factor authentication devices. Never share your login details. If you suspect unauthorised access to your account, contact iw8 support immediately.
The iw8 Platform is strictly intended for persons aged 21 years and above. iw8 does not knowingly collect Personal Data from individuals under the age of 21. The minimum age requirement is enforced through mandatory KYC document verification prior to any withdrawal being processed.
If iw8 becomes aware that an account has been registered by or on behalf of a person under the age of 21, the account will be immediately suspended, all associated data will be subject to a retention review, and any funds held will be dealt with in accordance with our Terms and Conditions and applicable regulatory guidance.
If you believe that a minor in your care may have accessed or registered on the iw8 Platform, please contact our support team immediately at [email protected]. We will treat such reports as a priority and take all appropriate action.
21+ Policy: Gambling by persons under 21 years of age is absolutely prohibited on iw8. We encourage parents and guardians to make use of internet content filtering tools to prevent underage access to gambling websites.
iw8 reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, our operational practices, or the data protection standards of our licensing authority.
Where changes are material — for example, where they involve new categories of data collection, new sharing practices, or changes to your rights — iw8 will provide advance notice by updating the "Last Updated" date displayed at the top of this Policy and, where practicable, by sending a notification to your registered email address or displaying a notice within the Platform.
Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend that you review this Policy periodically. The current version is always available at https://iw8.cam/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by iw8, please contact us using the details below. Please include "Privacy" or "Data Request" in the subject line of written communications to ensure prompt routing to the appropriate team.
iw8 is committed to resolving data protection concerns promptly and transparently. If you are dissatisfied with our response to a data enquiry, you may have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction governing this Policy.
Questions about your account data or how we use your information? Our 24/7 support team is available in English, Bahasa Melayu, and Chinese to help you.
Visit iw8 Homepage Learn About iw8