Privacy Policy — How iCinta88 Collects, Uses & Protects Your Personal Data

1 Introduction

iCinta88 ("we", "us", "our", or "the Platform") is committed to safeguarding the privacy and personal data of every individual who accesses or uses our online casino and sports betting platform at https://icinta88.cam. This Privacy Policy ("Policy") has been prepared to inform you clearly and transparently about how iCinta88 processes personal data in connection with the provision of our services to Members based in Malaysia and other permitted jurisdictions.

This Policy applies to all personal data collected through the iCinta88 website, including data submitted during registration, data generated through your use of our services, and data collected through technical means such as cookies and analytics tools. It should be read alongside our Terms & Conditions, which govern the overall relationship between you and iCinta88.

By registering an account on the iCinta88 Platform or by continuing to use our services after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact information, location data, online identifiers, or any other information specific to the physical, economic, cultural, or social identity of that individual.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, organisation, structuring, adaptation, retrieval, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means iCinta88, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of and under the instructions of iCinta88.
• "Member" means any individual who has registered a valid account on the iCinta88 Platform.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for one or more specified purposes.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial account credentials.

3 Data Controller Identity

iCinta88 acts as the Data Controller for all personal data collected and processed in connection with the provision of its online casino and sports betting services. As Data Controller, iCinta88 determines the purposes for which your personal data is collected and the manner in which it is processed, stored, and where applicable, shared with third parties.

For all privacy-related enquiries, data access requests, correction requests, deletion requests, or complaints, you may contact iCinta88 through the channels specified in Section 15 of this Policy. iCinta88 commits to responding to all data subject requests within a reasonable timeframe, which shall not exceed 30 calendar days from the date of receipt of a valid request.

4 Personal Data We Collect

iCinta88 collects personal data through several channels in the course of providing its services. The categories of personal data we collect include the following:

4.1 Data You Provide Directly

4.2 Data Collected Automatically

5 Purposes of Data Processing

iCinta88 processes your personal data only for specified, explicit, and legitimate purposes. The following table sets out the principal purposes for which we process personal data:

6 Legal Basis for Processing

iCinta88 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing necessary for the performance of the contract between you and iCinta88 — specifically, delivering the betting and casino services you have registered to access, processing payments, and managing your account.
• Legal Obligation: Processing required for iCinta88 to comply with its legal and regulatory obligations, including KYC identity verification, AML/CFT compliance, and responding to lawful demands from competent regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out in pursuit of iCinta88's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and general service improvement, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given and specific consent, particularly for the receipt of direct marketing communications. You may withdraw consent at any time by contacting our support team or adjusting your account communication preferences.

7 Data Sharing & Third-Party Disclosure

7.1 Authorised Third-Party Processors

iCinta88 may share your personal data with carefully selected third-party service providers acting as Data Processors on our behalf, strictly for the purposes described in this Policy. These include:

• Payment service providers — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency payment processors — for the purpose of processing deposits and withdrawals.
• Identity verification and KYC service providers — to assist with the verification of Member identity documents and address confirmation.
• Fraud detection and anti-money laundering screening services — to identify and prevent fraudulent activity and comply with AML/CFT obligations.
• Game software providers — who may receive limited technical data such as device type and session identifiers necessary for game delivery.
• Cloud infrastructure and data hosting providers — who store iCinta88 data on secure, encrypted servers.
• Customer support platform providers — who facilitate live chat and email support functionality.
• Analytics service providers — who assist iCinta88 in understanding platform usage patterns to improve service quality.

All third-party processors engaged by iCinta88 are required to process personal data only on our documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection obligations.

7.2 Legal and Regulatory Disclosure

iCinta88 may disclose personal data to competent regulatory authorities, law enforcement agencies, or judicial bodies where required to do so by applicable law, court order, or legitimate regulatory demand. iCinta88 will notify affected Members of such disclosures where it is legally permissible to do so.

7.3 No Sale of Personal Data

iCinta88 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your personal data will not be disclosed to third parties for their own independent use without your prior explicit consent.

8 Data Retention

iCinta88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your membership and for a minimum of five (5) years following permanent account closure, to comply with AML/CFT regulatory requirements.
• Transaction and payment records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC documents: Retained for the duration of your membership and for a minimum of five (5) years following account closure.
• Communication records (live chat, email): Retained for up to two (2) years for service improvement, dispute resolution, and compliance purposes.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter for accountability purposes.
• Technical and analytics data: Retained for up to twelve (12) months in identifiable form, after which data is anonymised or deleted.

Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

9 Data Security

iCinta88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our data security measures include the following:

• Transport Layer Security (TLS) / 256-bit SSL encryption — all data transmitted between your device and the iCinta88 platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at rest — all personal data stored on iCinta88 servers is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls — access to personal data is restricted to authorised iCinta88 personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication (2FA) — available to all Members for additional account security, and mandatory for privileged system access by iCinta88 staff.
• Regular security assessments — iCinta88 conducts periodic penetration testing, vulnerability assessments, and security audits of its infrastructure and applications.
• Incident response procedures — iCinta88 maintains documented data breach response procedures. In the event of a data breach likely to result in a high risk to your rights and freedoms, iCinta88 will notify affected Members without undue delay.

While iCinta88 takes reasonable and appropriate technical precautions to protect your personal data, no transmission over the internet or electronic storage system can be guaranteed to be completely secure. You accept this inherent risk by using the Platform.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. iCinta88 uses cookies and similar tracking technologies (including local storage, session storage, and device fingerprinting) to operate, maintain, and improve the Platform, and to provide a personalised and secure experience for Members.

10.2 Types of Cookies Used

• Essential / Session Cookies: Required for the basic functioning of the Platform, including maintaining your login session, processing transactions, and applying security measures. These cookies cannot be disabled without rendering the Platform non-functional.
• Preference Cookies: Used to remember your language, currency, and other settings to provide a consistent experience across sessions.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how Members use the Platform — including pages visited, features used, and error rates — to help iCinta88 improve service quality.
• Security Cookies: Used to detect and prevent fraudulent activity, bot activity, and other security threats, including through device fingerprinting and session integrity verification.

10.3 Cookie Management

You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain categories of cookies, or delete existing cookies. Please note that disabling essential cookies may prevent you from using certain features of the Platform, including account login and payment processing.

11 Your Data Rights

As a Member of the iCinta88 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team as described in Section 15:

iCinta88 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases requiring additional investigation, this period may be extended by up to a further 30 days, subject to prior notification. Requests may require verification of your identity before being actioned.

12 Minors & Age Restriction

The iCinta88 Platform is strictly restricted to individuals who are aged 21 years or older. iCinta88 does not knowingly collect, store, or process the personal data of individuals under 21 years of age. If iCinta88 becomes aware that personal data has been collected from an individual under the age of 21, such data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered on or used the iCinta88 Platform, please contact our support team immediately so that we can take appropriate action, including deletion of the relevant data and closure of the account.

13 International Data Transfers

In the course of providing its services, iCinta88 may transfer your personal data to countries or jurisdictions outside of Malaysia, including to cloud infrastructure providers and game software vendors operating internationally. Where such transfers occur, iCinta88 takes appropriate measures to ensure that your personal data continues to be protected in accordance with the standards described in this Policy.

These measures may include implementing contractual data protection clauses with international service providers, ensuring recipients are subject to equivalent privacy and security obligations, or transferring data to jurisdictions recognised as providing an adequate level of data protection.

By registering and using the iCinta88 Platform, you consent to the international transfer of your personal data as described in this section, subject at all times to the protections set out in this Policy.

14 Amendments to This Privacy Policy

iCinta88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The current version of this Policy, bearing the date of the most recent revision, will be published on the Platform and will supersede all prior versions.

Where amendments to this Policy are material — such as changes to the categories of data we collect, new sharing arrangements with third parties, or changes to your data rights — iCinta88 will provide reasonable advance notice to registered Members via email or in-platform notification prior to the amended Policy taking effect.

Your continued use of the iCinta88 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the amended Policy. If you do not agree with any amendment, you should cease using the Platform and close your account in accordance with the procedure set out in our Terms & Conditions.

15 Contact Us

For all privacy-related enquiries, including requests to exercise your data rights, questions about this Privacy Policy, or complaints regarding iCinta88's data handling practices, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the Platform at https://icinta88.cam — typical response time under 2 minutes.
• Email (non-clickable): [email protected]

When submitting a data rights request, please include your registered Member username, the specific nature of your request (e.g., data access, rectification, erasure), and sufficient information to enable us to verify your identity and locate your relevant records. iCinta88 will not process data rights requests without adequate identity verification to protect the security of Member data.

iCinta88 commits to acknowledging all privacy-related enquiries within 2 business days and resolving them within the applicable statutory timeframe.