I8live Privacy Policy – Personal Data Protection for the Malaysia Platform

I8live collects your personal data through several channels as you use our platform. The types of data collected depend on how you interact with the platform and fall into the following categories:

Registration & Identity Data:

• Full name as it appears on your Malaysian identity card (MyKad)
• Identity Card Number (MyKad) for age verification and identity confirmation purposes
• Date of birth to verify member eligibility (18 years and above)
• Email address for account communications and service notices
• Mobile phone number Malaysia for two-factor authentication and communications
• Residential address in Malaysia for compliance purposes

Financial & Transaction Data:

• Details of the deposit and withdrawal methods used — DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost or ShopeePay
• Transaction history including deposits, withdrawals, and winnings in MYR
• The bank account or eWallet name registered for withdrawal purposes

Platform Usage Data:

• Game history and betting activity on the i8live platform
• Date, time and duration of each login session
• IP address and device information (device type, operating system, browser)
• General geolocation data (state within Malaysia) for regional compliance
• Platform interaction data including clicks, navigation, and settings preferences

Personal data collected by i8live is used exclusively for purposes related to delivering the platform's services to you. The primary purposes for which your data is used are as follows:

I8live will not use your personal data for any purpose beyond those listed above without first obtaining your explicit consent. Should the purpose of use change, you will be informed and given the opportunity to withdraw your consent.

I8live firmly upholds the principle that your personal data is never sold, rented or shared for commercial purposes. However, in the course of operating the platform, there are limited situations where data must be shared with the following parties:

• Payment Service Providers: To process your deposit and withdrawal transactions, the necessary information is shared with providers such as DuitNow, the FPX network, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay. Such sharing is kept to the minimum required solely to complete your transaction.
• Game & Software Providers: Usernames and session information may be shared with licensed game providers that supply content to the i8live platform. These providers are bound by strict data confidentiality agreements.
• Regulatory Bodies & Authorities: i8live complies with all lawful requests from Malaysian authorities with jurisdiction to require data disclosure in the context of criminal investigations, fraud prevention, or regulatory requirements.
• Security & Fraud Prevention Services: Transaction and usage data may be analysed by approved third-party security systems to detect fraudulent activity. These providers do not retain the data permanently.

I8live invests seriously in security infrastructure to keep your personal data protected at all times. The technical and organisational measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and i8live's servers is encrypted using TLS 1.3 with 256-bit encryption – the highest industry standard used by Malaysian banking institutions.
• Secure Password Storage: Your account password is never stored in plain text. We use a strong hashing algorithm (bcrypt) with a unique salt for each password, meaning that even in the event of unauthorised database access, your password remains protected.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their account as an additional layer of security. With 2FA, accessing your account requires a verification code sent to your mobile phone in addition to your password.
• Internal Access Controls: Only i8live staff with a legitimate operational need are permitted to access member personal data. All internal access is logged and regularly audited.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect suspicious activity, unauthorised access attempts and usage anomalies that may indicate a security breach.
• Regular Security Testing: i8live conducts regular penetration testing and security audits carried out by independent cybersecurity experts to ensure our infrastructure remains free from known vulnerabilities.

While no security system is perfect, i8live takes all reasonable steps in line with industry standards to protect your data. You also play an important role in your account's security – ensure your password is strong, unique and not shared with anyone.

I8live uses cookies and similar technologies to enhance the user experience, maintain session security and analyse platform performance. Cookies are small text files stored on your device when you visit our platform.

Types of cookies used by i8live:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled, as the platform will not function properly without them.
• Performance & Analytics Cookies: Collects aggregate data on how users interact with the platform – most visited pages, time spent and errors encountered. This data is used to improve the platform and is fully anonymised.
• Functional Cookies: Stores your preferences such as language settings, preferred betting limits, and display configurations to personalise and streamline your experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying suspicious devices and protecting your account from unauthorised access.

I8live does not use third-party cookies for advertising purposes unrelated to our services. We do not permit third-party advertising networks to place cookies on the i8live platform to track you across other websites.

I8live adheres to the principle of data minimisation — we retain your personal data only for as long as is necessary to fulfil the original purpose of collection or to meet applicable legal requirements. Our data retention policy is as follows:

• Active Account Data: For as long as your account remains active with i8live, all registration and profile data is retained to allow us to provide uninterrupted service.
• Transaction History Data: Financial records are retained for a minimum of 7 years from the transaction date, in line with Malaysian financial and tax regulatory requirements.
• Security Log Data: Access logs and security activity are retained for 2 years for security investigation purposes if required.
• Inactive Accounts: Accounts showing no activity for 3 years will be considered inactive. i8live will contact you before taking any action related to inactive accounts.
• After Account Closure: Upon voluntary account closure, your personal data will be anonymised or deleted within 90 days, except for data that must be retained to meet legal compliance requirements.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it can no longer be linked back to your identity.

As an i8live member residing in Malaysia, you have the following rights regarding your personal data under Malaysia's PDPA 2010 and i8live's privacy policy:

• Right of Access: You have the right to know what personal data we hold about you. Submit a data access request through i8live customer support and we will provide a copy of your data within 14 business days.
• Right to Rectification: If you find that any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic information can be updated directly through your account settings.
• Right to Erasure: You may request deletion of your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose or when you withdraw your consent (subject to applicable legal retention obligations).
• Right to Object to Processing: You have the right to object to the processing of your data for specific purposes, such as marketing communications. All such requests will be honoured promptly.
• Right to Data Portability: You may request a copy of your personal data in a machine-readable format (such as CSV) for transfer to another platform if needed.
• Right to Withdraw Consent: Where data processing relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

I8live sends marketing communications to members who have consented to receive information about promotions, new bonuses, the latest games, and exclusive offers. The types of communications you may receive include:

• Emails about new promotions and bonuses such as weekly rebate or monthly cashback offers
• SMS or WhatsApp notifications about time-sensitive promotions that require immediate action
• In-app notifications regarding account activity and personalised VIP offers

You can manage your marketing communication preferences at any time through either of these two methods:

• Account Settings: Log in to your i8live account and go to the notification settings section to choose which types of communications you wish to receive or opt out of.
• Unsubscribe Link: Every marketing email from i8live includes a clearly visible unsubscribe link at the bottom. Click that link to stop receiving promotional emails.

I8live has appointed a Data Privacy Officer responsible for ensuring compliance with all aspects of this Privacy Policy and applicable data protection laws. Our Privacy Officer is your first point of contact for any data privacy matters.

You may reach the i8live Privacy Officer through the following channels:

• Privacy Email: privacy@i8live.biz – for official enquiries regarding the Privacy Policy, data access requests, corrections, or data deletion
• General Customer Support: support@i8live.biz – for general privacy enquiries that do not require formal processing
• 24/7 Live Chat: Via the i8live platform for immediate enquiries and initial guidance on your privacy rights

When contacting the Privacy Officer, please include the following details to help expedite your request: your full registered name, i8live account number, the type of request being submitted, and specific details about the data concerned.

I8live reserves the right to amend this Privacy Policy from time to time to reflect changes in data processing practices, new legal requirements or service improvements. Where material changes occur, we will take the following steps to ensure you are informed:

• Display a prominent notice on the i8live platform homepage for at least 30 days before the changes take effect
• Sending notification emails to all registered members with a brief summary of key changes
• Updating the "Last Updated" date at the top of this page to reflect the current version
• For significant changes, seeking fresh consent from members where required by law

Continued use of the i8live platform after a revised Privacy Policy comes into effect will be considered your acceptance of the updated policy. If you do not agree with any of the changes, you have the right to close your account and request data deletion in accordance with the prescribed procedure.

Previous versions of this Privacy Policy are retained and can be requested through the i8live support team for historical reference if needed. i8live is committed to continuously improving our standards of data protection and transparency in how we communicate our privacy practices.