Privacy Policy i288 —
Your Data, Our Responsibility

1 Introduction

I288 is an online wagering platform operating under applicable laws and regulations. As part of our operations, we collect and process users' personal data for legitimate and specific purposes. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) and leading international data protection standards.

By registering and using the i288 platform, you agree to the collection and use of your personal data as described in this policy. If you do not agree with any part of this policy, please discontinue use of our platform.

2 Data We Collect

We collect various types of personal data depending on how you interact with our platform. Below is a summary of the data categories we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information or religious beliefs unless required by law.

3 How We Use Your Data

The personal data we collect is used for specific and lawful purposes. We will not use your data for any other purpose without first obtaining your consent.

• Account management — to create, verify, and maintain your account on the i288 platform.
• Transaction processing — to process deposits, withdrawals, and all financial transactions accurately and securely.
• KYC & AML Compliance — to fulfil legal requirements relating to identity verification and anti-money laundering.
• Platform Security — to detect and prevent fraud, suspicious activity, and system abuse.
• Service improvement — to analyse usage patterns and improve the overall user experience.
• Service Communications — to send important notices, account updates, and responses to your enquiries.
• Marketing — to keep you informed about the latest promotions and offers, subject to your communication preferences.
• Responsible gaming — to monitor gameplay patterns and provide necessary support to at-risk users.

4 Data Sharing

I288 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we do share data in the following limited circumstances:

• Service providers — technical partners and payment processors who assist us in operating the platform, bound by strict confidentiality agreements.
• Regulatory authorities — when required by Malaysian law or a valid court order.
• Fraud prevention — with recognised industry bodies or other platforms to prevent cross-platform fraud.
• Business transfers — in the event of a merger or acquisition, user data may be transferred as part of the business assets, with appropriate notice given to users.

5 Data Security

The security of your personal data is our priority. i288 continuously invests in the latest security infrastructure to ensure your data is protected against unauthorized access, disclosure, alteration, or destruction.

The security measures we implement include:

• End-to-end data encryption using 256-bit SSL/TLS protocol for all communications between your device and our servers.
• An intrusion detection system (IDS) operating around the clock to identify any unusual activity.
• Strict internal access controls — only authorized personnel can access user data, and only to the extent required for their role.
• Regular security audits conducted by independent third parties to assess and strengthen our protection systems.
• Two-factor authentication (2FA) is available for all user accounts as an additional layer of security.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a security incident involving your data, we will notify you within the timeframe required by applicable law.

6 Cookies & Tracking Technologies

I288 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login session authentication. Cannot be disabled.
• Performance Cookies — collects information about how you use the platform to help us improve our services.
• Functional Cookies — remembers your preferences such as language and display settings for your convenience.
• Analytics Cookies — helps us understand traffic patterns and platform usage in aggregated, anonymised form.

You can manage cookie settings through your browser. However, disabling certain cookies may affect the functionality of some parts of our platform.

7 Data Storage & Deletion

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law. Retention periods depend on the type of data and legal requirements:

• Active account data — retained for the duration your account remains active.
• KYC & financial transaction data — retained for a minimum of 7 years after account closure, in accordance with Malaysian financial compliance requirements.
• Support communication records — retained for 3 years for reference and dispute resolution purposes.
• Gaming activity data — retained for 5 years for audit and responsible gaming purposes.

Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be linked to your identity.

8 Your Rights

As an i288 user, you have the following rights regarding your personal data, in accordance with the Malaysia Personal Data Protection Act:

• Right to access — you may request a copy of the personal data we hold about you.
• Right to rectify — you may request correction of any inaccurate or incomplete data.
• Right to withdraw consent — you may withdraw consent for data processing for marketing purposes at any time.
• Right to object — you may object to the processing of your data for specific purposes.
• Right to erasure — in certain circumstances, you may request deletion of your data, subject to our legal obligations.

To submit any request related to the above rights, please contact our privacy team via email at privacy@i288.app. We will process your request within 30 business days.

9 Children's Data

The i288 platform is exclusively for individuals who are aged 18 years and above. We do not intentionally collect or process personal data of children under the age of 18.

If we discover that a child's data has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who find that their child has registered on our platform are advised to contact us immediately.

10 Policy Changes

I288 reserves the right to update or modify this Privacy Policy at any time. Any material changes will be communicated to you via your registered email or a prominent notice on our platform at least 14 days before the changes take effect.

The "Updated" date at the top of this document reflects the date of the last revision. We encourage you to review this page periodically. Your continued use of the i288 platform after any changes take effect will be considered your acceptance of the revised policy.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data, our team is ready to assist. You can reach us via:

• Privacy Email: privacy@i288.app
• General Support Email: support@i288.app
• Live Chat: available 24/7 via the chat icon at the bottom corner of the platform

We are committed to responding to all privacy-related inquiries within 3 business days. For more complex requests such as data access or deletion, the processing period is up to 30 business days.