Privacy & Data Security

Privacy Policy itrust88 — Your Data Protection & Information Security

Itrust88 takes every aspect of your personal data protection seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your information in accordance with applicable data protection laws in Malaysia.

SSL 256-bit
No Data Sales
PDPA Compliance
Secure Storage
Updated: December 2026  |  Bahasa Malaysia
256-bit
SSL Encryption
0
Third-Party Data Sales
24/7
Security Monitoring
100%
Your Data Controls
Our Commitment

Why Your Privacy Is Safe with itrust88

Six core data protection principles we apply for every itrust88 member.

256-bit SSL Encryption

All data transmitted between your device and itrust88 servers is encrypted using SSL 256-bit technology — the same standard used by leading banking institutions worldwide. No sensitive data can be intercepted during transmission.

Secure Data Storage

Your personal information is stored on servers protected by multi-layered firewalls and regularly audited by independent parties. Access to sensitive databases is restricted exclusively to staff with specific authorisation.

Strict Access Controls

A role-based access control (RBAC) system ensures that only relevant staff can view your data, and every access is logged in a tamper-proof audit trail for tracking and accountability purposes.

No Data Sales

Itrust88 has never and will never sell, rent, or transfer your personal data to advertisers, marketing companies, or any third party without your explicit consent. Your data is not our product.

Malaysia PDPA Compliance

Itrust88's data protection practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We have appointed a dedicated Data Protection Officer (DPO) to ensure ongoing compliance with all legal requirements.

24/7 Threat Monitoring

The itrust88 cybersecurity team monitors all system activity around the clock using advanced Intrusion Detection Systems (IDS). Any suspicious activity is detected and responded to in real time.

This Privacy Policy applies to all services provided by itrust88 through the website itrust88.vin, the official mobile app, and all customer support channels. By using any itrust88 service, you agree to the practices described in this document.

01 Information We Collect

To provide a secure, responsible, and high-quality online gaming platform service, itrust88 needs to collect certain categories of information from members. We only collect data that is strictly necessary for the stated purposes, and nothing more.

Data Category Example Information Primary Purpose
Identity Information Full name, date of birth, identification card number (MyKad) Account verification (KYC), fraud prevention
Contact Information Email address, phone number, residential address Account communications, verification, support
Financial Information Bank account details, deposit/withdrawal transaction records Payment processing, AML compliance
Usage Data Game history, activity logs, session duration Service improvement, responsible gaming
Technical Data IP address, browser type, device information Security, fraud detection, platform performance
Communication Data Support chat records, sent emails, complaints Service quality, issue resolution records

We collect this information through three primary methods: information you provide directly during registration or use of the platform; data collected automatically via cookie technology and session monitoring; and information obtained from trusted third parties such as identity verification service providers and payment providers.

Note: We do not collect sensitive information such as biometric data, medical records, or religious beliefs unless specifically required by law or with your explicit consent.

02 How We Use Your Information

Every piece of data we collect is used for a clear and lawful purpose. itrust88 will not use your information for purposes unrelated to the provision of platform services. Below is a detailed breakdown of how your data is used:

  • Account Management & Verification: Identity and contact information is used to create, verify, and manage your member account, including the KYC process mandated by financial authorities.
  • Transaction Processing: Financial data is required to securely process deposits and withdrawals, and to maintain accurate transaction records for accounting and compliance purposes.
  • Security & Fraud Prevention: Technical data and usage patterns are continuously analysed to detect suspicious activity, unauthorised login attempts, and potential fraud.
  • Service Improvement: Aggregated and non-identifiable usage data helps our development team improve platform performance, enhance user experience, and build new features.
  • Service Communications: Contact information is used to send important account notifications, security updates, and responses to your support requests.
  • Legal Compliance: We use and retain certain data as required by Malaysian law, including Anti-Money Laundering (AML) reporting requirements and Counter-Terrorism Financing (CFT) obligations.
  • Responsible Gaming: Gaming patterns and session data are used to detect signs of problem gambling and provide appropriate support to members who need assistance.

Any use of your data for direct marketing purposes — such as informing you of itrust88 promotions and special offers — is carried out only with your explicit consent, and you may withdraw that consent at any time through your account notification settings.

03 Information Sharing

Itrust88 does not sell, does not rent, and does not trade your personal data to any party for commercial purposes. Data sharing only occurs in the following limited situations, and each case is subject to strict contractual protections:

  • Trusted Service Providers: Third-party companies that assist us in operating the platform, such as payment service providers, licensed game providers, and customer service platforms. All these partners are bound by strict confidentiality agreements and are only permitted to use your data for the specified service purposes.
  • Legal Requirements: When required by law, court order, or a competent authority — itrust88 complies with all lawful disclosure requests while notifying you to the extent permitted by law.
  • Business Transfers: In the event of a merger, acquisition, or transfer of itrust88 assets, members' personal data will only be transferred with prior notice to members and on the condition that the receiving party maintains an equal or higher level of privacy protection.
  • Your Consent: In other situations not listed above, we will obtain your explicit consent before sharing any personal information.

Important Notice: itrust88 will never request your login credentials or password via email, chat, or phone. If you receive such a request claiming to be from itrust88, please report it to our security team immediately.

04 Cookies & Tracking Technologies

Itrust88 uses cookies and related tracking technologies to ensure the platform functions properly, enhance the user experience, and analyse platform usage. Below are the categories of cookies we use:

  • Essential Cookies: These cookies are required for the platform's core operations, including login session authentication, security, and essential platform functions. The platform cannot function without these cookies and they cannot be disabled.
  • Performance Cookies: Collects anonymous, aggregated data on how visitors use the platform — such as the most frequently visited pages and error messages — to help us improve performance and usability.
  • Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and game choices to deliver a more personalised experience.
  • Analytics Cookies: Used by our first-party analytics tools to understand usage patterns and improve the overall platform experience. This data is aggregated and cannot be linked to any individual's identity.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the itrust88 platform. For more information on managing cookies, refer to your browser's help documentation.

05 Data Security

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is itrust88's highest priority. We implement multiple layers of technical and organisational security to ensure the integrity of your data at all times.

The key security measures we implement include:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL for all communications between your browser or app and the itrust88 servers.
  • At-rest encryption for all databases containing member personal information.
  • Two-factor authentication (2FA) available for all member accounts as an additional layer of protection during login.
  • Continuous 24/7 security monitoring using advanced Intrusion Detection and Prevention Systems (IDS/IPS).
  • Regular penetration testing conducted by independent cybersecurity experts.
  • Mandatory security awareness training for all itrust88 staff with access to member data.
  • A clear and tested incident response procedure to address any data breach swiftly and effectively.

Best Practices: While we take all reasonable steps to protect your data, security also depends on your own practices — use a strong password, enable 2FA, and never share your account credentials with anyone.

06 Data Retention & Deletion

Itrust88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

Our general data retention period guidelines are as follows:

  • Active Account Data: Retained for as long as your account is active and for the required period following account closure to fulfil legal obligations.
  • Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian accounting and anti-money laundering (AML) legal requirements.
  • KYC & Verification Records: Retained for the period required by regulatory authorities, typically between five to seven years.
  • Security Logs: Retained for the period necessary for fraud detection and security investigation purposes, typically between one to three years.
  • Marketing Data: Retained until you withdraw your consent, after which the data is deleted or anonymised within 30 days.

When data is no longer needed, itrust88 ensures it is securely deleted or anonymised using non-recoverable methods. The data deletion process is carried out periodically and documented for accountability purposes.

07 Your Rights

As an itrust88 member and an individual whose personal data we process, you hold certain rights under Malaysia's Personal Data Protection Act 2010 (PDPA). itrust88 is committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to obtain a copy of all personal data we hold about you. Access requests will be processed within 21 working days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction. Update your profile directly through your account settings.

Right to Erasure

Under certain circumstances, you may request that we delete your personal data — subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without providing any justification.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Withdraw Consent

For any processing based on your consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, contact our data protection team at [email protected] by stating the right you wish to exercise and the information required to verify your identity. We will respond within 21 business days.

08 Children's Data

Itrust88 is an online gaming platform that is intended for individuals aged 18 and above only. We do not knowingly collect or process personal data from minors. This is not merely an internal policy — it is a moral and legal obligation we take very seriously.

The measures we take to protect minors include:

  • Mandatory age verification during new account registration.
  • KYC verification requiring identity proof that confirms the member's age.
  • Active monitoring to detect potential use of the platform by underage individuals.
  • Immediate and permanent closure of any account confirmed to belong to an underage individual.

If you believe we may have collected data from a person under the age of 18, please contact us immediately at [email protected]. We will investigate and take appropriate action, including deletion of the relevant data, in the shortest time possible.

09 Privacy Policy Amendments

Itrust88 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. All material amendments will be communicated to you via:

  • An email notice to your registered address at least 14 days before the amendments take effect.
  • A prominent notice on the itrust88 homepage regarding Privacy Policy updates.
  • An in-platform notification pop-up will appear at your next login after any amendment is made.

The "Updated" date at the top of this document will always reflect the date of the latest amendment. We encourage you to review this Privacy Policy periodically. Continued use of the itrust88 platform after an amendment takes effect will be considered acceptance of the updated terms.

If you disagree with any amendment to this Privacy Policy, you have the right to close your account and cease use of itrust88 services before the amendment takes effect.

10 Contact Us

If you have any questions, concerns, or wish to exercise your data protection rights, the itrust88 Data Protection Officer (DPO) team is ready to assist you.

You can reach us via:

  • Data Protection Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
  • Help Centre: Visit the FAQ us for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related inquiries within 5 working days and resolve more complex requests within 21 working days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

FAQ

FAQ — itrust88 Privacy Policy

Answers to the most frequently asked questions from our members regarding privacy and data security.

Absolutely not. itrust88 has never and will never sell, rent, or transfer your personal data to any party for commercial purposes. Your data is only shared with service providers who help us operate the platform, and solely for the specified service purposes, subject to strict confidentiality agreements.

You may submit a data access request by emailing [email protected] with the subject line "Data Access Request" along with your full name and account number. Our data protection team will verify your identity and process the request within 21 working days. A copy of your data will be sent in a secure, readable format.

When an account is closed, we will delete or anonymise personal data that is no longer required. However, certain records such as financial transactions and KYC data must be retained for the period prescribed by Malaysian law — typically between 5 to 7 years — for legal compliance and audit purposes. Once the mandatory retention period expires, all data will be permanently deleted.

itrust88 does not store credit or debit card details directly on our servers. All payment processing is handled through licensed payment providers that comply with the PCI DSS (Payment Card Industry Data Security Standard). We only retain transaction reference tokens and the banking information required for withdrawal processing — not your full card number.

Yes, you may submit a data deletion request ("right to be forgotten") to us. However, such requests are subject to our legal retention obligations. Data required to be retained by law cannot be deleted immediately, but will be deleted as soon as the mandatory retention period expires. Data not subject to legal obligations will be deleted within 30 days from the date the request is verified.

itrust88 employs a multi-layered security approach — including SSL 256-bit encryption, layered firewalls, real-time intrusion detection, regular penetration testing by independent experts, and 24/7 security monitoring. Member passwords are stored in an irreversible hashed format. We also offer two-factor authentication (2FA) for additional protection on your account login.
Safe & Trusted Platform

Join itrust88 with Full Confidence

Your personal data is always protected to the highest security standards. Register a free account today and enjoy a safe, fair, and transparent gaming experience alongside more than 500,000 active itrust88 members.

SSL 256-bit
No Data Sales
PDPA Compliance
24/7 Monitoring
Bahasa Melayu