Privacy Policy

iMenang88 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at https://imenang88.cam, providing sports betting, live casino, slot games, and related services to registered players, primarily in Malaysia.

This Privacy Policy ("Policy") describes how iMenang88 collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who visit our website, register an account, or use any of our platform services ("you", "Player", "User", "Data Subject").

This Policy should be read in conjunction with the Terms & Conditions and the Responsible Gambling Policy, which form part of the overall contractual framework governing your use of iMenang88.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, IP address, financial data, and behavioural data generated through platform use.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. iMenang88 is the Data Controller in respect of all Personal Data processed through this platform.
• "Data Processor" — a third party that processes Personal Data on behalf of iMenang88 under a written data processing agreement, including payment processors, KYC verification providers, and cloud infrastructure providers.
• "KYC" (Know Your Customer) — the identity and age verification process through which iMenang88 collects and verifies official identification documents, including Malaysian IC (MyKad), passport, or equivalent government-issued identification.
• "Cookies" — small text files placed on a user's device by a web server, used to store session information, user preferences, and analytics data.

iMenang88 is the Data Controller responsible for the personal data processed in connection with the operation of the iMenang88 online gaming platform. As Data Controller, iMenang88 determines the purposes and means by which Personal Data is processed.

All data protection and privacy enquiries, including requests to exercise Data Subject rights under Section 12 of this Policy, should be directed to the iMenang88 Data Protection contact as described in Section 16 (Contact Us).

iMenang88 collects personal data through several channels: directly from you during registration and platform use, automatically through technical systems as you interact with our platform, and from third-party service providers involved in payment processing and identity verification.

4.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address, email address, mobile phone number, username.
• KYC Documentation: Copies of Malaysian IC (MyKad), passport, or other government-issued identification; proof of address documents; selfie photographs for liveness verification.
• Payment Data: Bank account details, e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), FPX transaction references, cryptocurrency wallet addresses — as applicable to your chosen deposit and withdrawal methods.
• Communications Data: Correspondence sent to iMenang88 via live chat, email, or WhatsApp support channels, including the content of support queries and complaints.
• Responsible Gambling Data: Self-exclusion requests, deposit limit settings, loss limit preferences, and cool-off period activations recorded against your account.

4.2 Data Collected Automatically

• Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and connection type.
• Behavioural Data: Pages visited, features accessed, session duration, click patterns, game play history, betting history, stake amounts, and win/loss records.
• Cookie Data: Session identifiers, authentication tokens, user preference settings, and analytics data as described in Section 11.
• Geolocation Data: Approximate geographic location derived from IP address for fraud prevention and access control purposes.

4.3 Data from Third Parties

• Identity and age verification results from KYC service providers.
• Transaction confirmation data from payment processors, banks, and e-wallet operators including Maybank, CIMB, Public Bank, DuitNow, and FPX infrastructure providers.
• Fraud screening and risk assessment data from third-party anti-fraud services.

iMenang88 processes your Personal Data for the following clearly defined purposes. We do not process data for purposes incompatible with those stated below without obtaining your separate, specific consent.

iMenang88 processes Personal Data only where a valid legal basis exists. The four legal bases applied by iMenang88 are:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you under the Terms & Conditions, including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, responsible gambling regulatory requirements, and tax reporting duties.
• Legitimate Interests: Processing necessary for the legitimate interests of iMenang88, including fraud prevention, platform security, and product improvement — provided these interests are not overridden by your rights and interests.
• Consent: Processing for specific optional purposes where you have provided freely given, specific, informed, and unambiguous consent — such as receiving promotional communications. You may withdraw consent at any time by contacting iMenang88 support.

iMenang88 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. Data is shared only in the circumstances described in this section.

7.1 Service Providers (Data Processors). iMenang88 engages third-party service providers who process data on our behalf under binding data processing agreements. Categories of service providers include:

• KYC and identity verification providers;
• Payment processors and e-wallet operators (including those supporting Maybank, CIMB, Public Bank, Touch 'n Go eWallet, DuitNow, and FPX transactions);
• Cloud infrastructure and hosting providers;
• Customer support platform providers;
• Anti-fraud and risk assessment services;
• Game content providers whose games are integrated into the iMenang88 platform.

7.2 Regulatory and Legal Disclosure. iMenang88 may disclose Personal Data to:

• Relevant government authorities, regulatory bodies, or law enforcement agencies where required by applicable law or court order;
• Gaming regulators as part of licence compliance obligations;
• Financial intelligence units in connection with AML reporting obligations.

7.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving iMenang88, Personal Data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer where required by law.

The operation of the iMenang88 platform may involve the transfer of Personal Data to servers, service providers, or personnel located outside Malaysia. Where such transfers occur, iMenang88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or greater than that afforded by applicable data protection law.

Safeguards used for international transfers include: standard contractual clauses in data processing agreements, technical and organisational security measures applied by all data processors, and restrictions on onward transfers by processors to sub-processors.

iMenang88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of the transaction in compliance with financial record-keeping obligations.
• KYC Documentation: Retained for the duration of the account relationship and for at least five (5) years post-closure.
• Support Communications: Retained for two (2) years from the date of the last communication in the relevant support thread.
• Responsible Gambling Records: Self-exclusion and restriction data is retained for the duration of the exclusion period and for a minimum of five (5) years post-expiry to prevent circumvention of exclusion commitments.
• Cookie and Analytics Data: Session cookies are deleted when you close your browser. Persistent analytics data is retained for up to thirteen (13) months.

Following the expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised.

iMenang88 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, alteration, disclosure, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the iMenang88 platform is encrypted using 256-bit SSL/TLS encryption, consistent with the security standards applied by major Malaysian banks including Maybank and CIMB.
• Encryption at Rest: Sensitive stored data, including payment details and KYC documents, is encrypted using AES-256 encryption at rest on iMenang88's server infrastructure.
• Access Controls: Access to Personal Data within iMenang88's internal systems is restricted on a strictly need-to-know basis, enforced through role-based access controls and multi-factor authentication requirements for staff.
• Security Monitoring: Continuous monitoring of platform systems for anomalous access patterns, intrusion attempts, and data exfiltration indicators.
• Vulnerability Management: Regular security assessments, penetration testing, and patch management procedures applied to all platform infrastructure.
• Incident Response: iMenang88 maintains a documented data breach response procedure. In the event of a breach likely to result in a high risk to your rights and freedoms, iMenang88 will notify affected players without undue delay.

iMenang88 uses cookies and similar tracking technologies to operate core platform functions, improve user experience, and collect anonymised analytics data.

11.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings and game layout preferences.
• Analytics Cookies: Aggregate, anonymised data used to understand how players interact with the platform, which pages are most visited, and how to improve the user experience. No personally identifiable information is used for analytics.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and credential stuffing attacks.

11.2 Cookie Management. Except for strictly necessary cookies, you can manage cookie preferences through your browser settings. Note that disabling functional cookies may impair certain platform features.

Subject to applicable law and the verification of your identity, you have the following rights in relation to your Personal Data held by iMenang88:

• Right of Access: You have the right to request a copy of the Personal Data iMenang88 holds about you and information on how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data. For routine profile updates (such as address or phone number), you may update these directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the original purpose, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations described in Section 9.
• Right to Restrict Processing: You may request that iMenang88 restrict the processing of your data in certain circumstances, such as where you contest the accuracy of data while rectification is pending.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling. iMenang88 will cease such processing unless compelling legitimate grounds override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

iMenang88 is strictly an adult platform. The minimum age to register and use the iMenang88 platform is 21 years of age. iMenang88 does not knowingly collect or process the Personal Data of persons under the age of 21.

Where iMenang88 becomes aware that Personal Data has been collected from a person under the age of 21, the account will be immediately suspended and the data will be deleted in accordance with legal record-keeping requirements. Any funds deposited to the account will be returned after deducting applicable bonus amounts, in accordance with our Terms & Conditions.

Account holders are responsible for ensuring that no minors have access to their iMenang88 account, device, or login credentials. If you believe a minor has registered on iMenang88, please contact our support team immediately via live chat.

The iMenang88 platform integrates with third-party services including payment processors (Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, and others), game content providers, and KYC verification services. These third parties operate under their own privacy policies and are data processors bound by contractual obligations with iMenang88.

iMenang88 is not responsible for the privacy practices of independent third-party websites that may be referenced in informational content. Players are encouraged to review the privacy policies of any third-party services they interact with independently of the iMenang88 platform.

iMenang88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The "Last Updated" date at the top of this page indicates when the current version was published.

Where changes are material — meaning they significantly affect your rights or how iMenang88 processes your Personal Data — iMenang88 will provide advance notice via email to your registered address or via a prominent platform notification before the changes take effect.

Your continued use of the iMenang88 platform following notification of material changes constitutes acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you may close your account in accordance with the account closure procedure in the Terms & Conditions.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by iMenang88, please contact us using the following channels:

• Live Chat: Available 24/7 via the iMenang88 platform — average response time 3–5 minutes. Reference "Privacy / Data Protection" in your opening message.
• Email (plain text — not a link): [email protected]
• Support Languages: English, Bahasa Melayu, 中文

iMenang88 will respond to Privacy Policy enquiries and formal data rights requests within 30 days. Complex requests may take up to 90 days, with prior notification.