itrust88 Privacy Policy

1. Introduction

1.1 itrust88 ("we", "us", "our") is committed to protecting the privacy and security of personal data belonging to our Members and platform visitors. This Privacy Policy sets out in clear terms what personal data we collect, why we collect it, how it is used, who it may be shared with, and how long we retain it.

1.2 itrust88 operates under an international gaming authority licence that imposes specific data processing and retention obligations. Some of the data processing described in this Policy is mandatory for itrust88 to fulfil its regulatory obligations and cannot be opted out of while a Member account remains active.

1.3 This Policy should be read together with the itrust88 Terms & Conditions, which govern the overall use of the platform and are incorporated by reference into this Policy.

2. Data Controller

2.1 itrust88 is the data controller in respect of personal data collected and processed through the itrust88 platform. As data controller, itrust88 determines the purposes and means of personal data processing described in this Policy.

2.2 For all privacy-related enquiries, corrections, or complaints, Members may contact itrust88 via the contact details in Section 15 of this Policy.

3. Data We Collect

3.1 itrust88 collects the following categories of personal data in the course of operating the platform:

3.1.1 Identity & Contact Data

• Full legal name as it appears on government-issued identification
• Date of birth and nationality
• Residential address (including city, postcode, and country)
• Email address and contact telephone number

3.1.2 KYC & Verification Data

• Copies of government-issued photo identification (MyKad, passport)
• Proof of address documents
• Proof of payment method ownership where required
• Selfie photographs for identity verification where required

3.1.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• Account balance history
• Bonus and promotional credit transaction records

3.1.4 Gameplay & Activity Data

• Game session records, including game titles, wager amounts, outcomes, and session duration
• Sportsbook betting records
• Login timestamps, session duration, and device type used

3.1.5 Technical & Device Data

• IP address and approximate geolocation at time of access
• Device type, operating system, and browser type
• Cookie identifiers and session tokens

3.1.6 Communications Data

• Records of customer support interactions, including live chat transcripts and email correspondence
• Records of responsible gaming tool usage and requests

4. Legal Basis for Processing

4.1 itrust88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to operate your itrust88 account and deliver the services you have contracted for, including account management, game access, and payment processing.
• Legal obligation: Processing required to fulfil itrust88's obligations under its international gaming authority licence, including KYC verification, anti-money laundering controls, problem gambling monitoring, and regulatory reporting.
• Legitimate interests: Processing necessary for fraud detection, platform security, responsible gaming monitoring, and service improvement where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have opted in to receive such communications. Consent may be withdrawn at any time.

5. How We Use Your Data

5.1 itrust88 uses personal data for the following purposes:

• Creating, verifying, and maintaining your itrust88 account
• Processing deposits and withdrawals to and from your MYR wallet
• Conducting KYC identity verification as required under our gaming licence
• Detecting and preventing fraud, money laundering, and unauthorised account access
• Monitoring gameplay patterns for responsible gaming compliance purposes
• Administering promotions and calculating applicable bonus terms
• Providing customer support via live chat and email channels
• Sending transactional communications, including deposit and withdrawal confirmations
• Sending marketing communications where you have provided consent
• Improving the itrust88 platform through aggregated usage analytics
• Complying with legal, regulatory, and licence obligations

6. Data Sharing & Disclosure

6.1 itrust88 does not sell, rent, or trade personal data to third parties for their own marketing purposes. Personal data is shared with third parties only in the following circumstances:

• KYC verification providers: Identity documents and verification data are shared with certified third-party KYC service providers for identity confirmation and anti-money laundering screening.
• Payment processors: Transaction data is shared with payment processors including eWallet operators (Touch n Go, Boost) and banking partners (Maybank, CIMB, Public Bank) as necessary to process deposits and withdrawals.
• Fraud detection and security partners: Technical and behavioural data may be shared with security service providers for the purpose of fraud detection and account protection.
• Game software providers: Gameplay data is processed by licensed game studio partners as part of game delivery. Game providers operate under their own data processing agreements with itrust88.
• Regulatory and licensing authorities: itrust88 may be required to disclose Member data to its licensing authority, law enforcement agencies, or other regulatory bodies pursuant to a legal obligation or official request.
• Professional advisers: Legal, audit, and financial advisers who are bound by confidentiality obligations may access limited personal data in the course of providing professional services to itrust88.

7. International Data Transfers

7.1 As an internationally licensed platform, itrust88 may transfer personal data to service providers and regulatory bodies located outside Malaysia. Where such transfers occur, itrust88 applies appropriate contractual safeguards to ensure that personal data receives a level of protection consistent with this Privacy Policy and applicable data protection standards.

8. Data Retention

8.1 itrust88 retains personal data for as long as is necessary for the purposes for which it was collected, including satisfaction of regulatory retention requirements under our international gaming licence.

8.2 As a general principle, account data and transaction records are retained for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping obligations applicable under our licence.

8.3 KYC verification documents are retained for the minimum period required by our licensing authority, typically five years from the date of account closure or the last transaction, whichever is later.

8.4 Following expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with itrust88's internal data lifecycle management procedures.

9. Cookies & Tracking Technologies

9.1 itrust88 uses cookies and similar tracking technologies (including session tokens and local storage) to operate platform functionality, maintain login sessions, and analyse user behaviour on the platform.

9.2 The following categories of cookies are used on itrust88:

• Strictly necessary cookies: Required for core platform functionality including login session management, security token storage, and game session continuity. These cannot be disabled.
• Performance and analytics cookies: Aggregate data used to understand how Members navigate and use the platform, enabling performance improvements. These do not identify individual users.
• Functional cookies: Cookies that remember your preferences, such as language settings and responsible gaming tool configurations.

9.3 You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the itrust88 platform.

10. Security Measures

10.1 itrust88 implements technical and organisational security measures appropriate to the nature and sensitivity of personal data processed on the platform. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and itrust88 servers
• AES-256 encryption for sensitive personal data stored at rest
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Multi-factor authentication requirements for administrative system access
• Regular internal security audits and vulnerability assessments
• Segregation of player funds from operational accounts

10.2 In the event of a data security incident affecting personal data, itrust88 will notify affected Members and relevant regulatory authorities in accordance with applicable notification obligations under our international gaming licence.

11. Your Rights

11.1 Subject to applicable legal restrictions and regulatory retention obligations, itrust88 Members have the following rights in respect of their personal data:

• Right of access: You may request a copy of the personal data itrust88 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to legal and regulatory retention requirements.
• Right to restriction of processing: You may request that processing of your personal data be restricted in certain circumstances.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to itrust88.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of these rights, please contact the itrust88 data team using the contact details in Section 15. itrust88 will respond to rights requests within 30 days of receipt. Identity verification may be required before a request is processed.

12. Children & Minors

12.1 itrust88 services are strictly available to adults aged 21 and above only. itrust88 does not knowingly collect personal data from individuals under the age of 21. If itrust88 becomes aware that personal data has been collected from a minor, that account will be immediately closed and the associated data deleted.

12.2 If you believe a minor has registered an itrust88 account, please notify us immediately using the contact details in Section 15.

13. Marketing Communications

13.1 itrust88 may send marketing communications, including promotional offers, new game announcements, and platform news, to Members who have opted in to receive such communications at the time of registration or through their account settings.

13.2 You may withdraw your consent to marketing communications at any time by updating your notification preferences in the itrust88 account dashboard or by contacting our support team. Withdrawal of marketing consent does not affect the delivery of transactional communications (e.g., deposit and withdrawal confirmations) which are sent as part of the contracted service.

14. Changes to This Privacy Policy

14.1 itrust88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or operational changes. Where material changes are made, itrust88 will notify Members via the platform or by email to the registered account address.

14.2 The version date at the top of this Privacy Policy indicates when it was last reviewed and updated. Continued use of the itrust88 platform following notification of changes constitutes acceptance of the updated Policy.

15. Contact & Complaints

15.1 For any questions, rights requests, or concerns regarding this Privacy Policy or itrust88's handling of your personal data, please contact the itrust88 support team via 24/7 live chat from within your account dashboard, or by email at [email protected].

15.2 If you are not satisfied with itrust88's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority or to the dispute resolution body applicable under our international gaming authority licence.