1
Introduction
This Privacy Policy ("Policy") describes how iceland888 ("we", "us", "our", "the Platform"), operating the website at https://iceland888.cam, collects, uses, stores, shares and protects the personal data of individuals ("you", "User "Player") who access or use our online casino information, sports betting guidance and associated digital services.
iceland888 takes its obligations under applicable data protection law seriously. We process personal data only for the specific, lawful purposes described in this Policy and apply appropriate technical and organisational safeguards to protect your information at every stage of processing.
By registering an account or continuing to use the iceland888 Platform, you acknowledge that you have read and understood this Policy. This Policy forms part of our Terms and Conditions and should be read together with them. If you do not accept this Policy, please discontinue your use of the Platform and do not register an account.
Scope of This Policy
This Policy applies to all personal data collected through the iceland888 website, mobile-accessible interface, customer support channels and any other means by which you communicate with us. It does not cover the data practices of third-party payment providers, game studios or linked services, each of which operates under its own privacy terms.
2
Definitions
The following terms carry the meanings set out below throughout this Policy.
"Personal Data"
Any information that identifies or can identify a natural person, including name, identity number, email address, device identifiers and financial account details.
"Processing"
Any operation performed on personal data, including collection, storage, use, disclosure, erasure or any combination of these activities.
"Data Controller"
iceland888, which determines the purposes and means of processing personal data collected through the Platform.
"Data Processor"
A third party that processes personal data on behalf of iceland888 under a data processing agreement, such as a KYC verification provider or payment gateway operator.
"Consent"
A freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
"KYC"
Know Your Customer — the identity and age verification process we are required to conduct before permitting withdrawals or certain account actions.
"Cookie"
A small text file placed on your device by the Platform or a permitted third-party service to store session, preference or analytical data.
3
Data We Collect
Iceland888 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we may collect are set out below.
3.1 Registration and Account Data
- Full legal name as appearing on your identity document.
- Date of birth (to verify you are at least 21 years of age).
- Nationality and country of residence.
- Email address and, where provided, mobile telephone number.
- Preferred username and encrypted account password.
- Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru or elsewhere in Malaysia).
3.2 Identity Verification (KYC) Data
- Government-issued identity document (MyKad, passport or equivalent) — front and reverse image.
- Selfie photograph or liveness verification image where required.
- Proof of address documentation where applicable (utility bill, bank statement).
3.3 Financial and Transaction Data
- Deposit and withdrawal history, including amounts MYR and transaction timestamps.
- Payment method identifiers — such as masked bank account numbers, e-wallet references (Touch 'n Go eWallet, Boost, GrabPay), DuitNow IDs or FPX transaction references.
- Cryptocurrency wallet addresses and USDT TRC20 transaction hashes where applicable.
- Bonus participation and wagering activity records.
3.4 Technical and Device Data
- IP address and approximate geographic location derived from it.
- Device type, operating system, browser version and screen resolution.
- Session start and end timestamps, page views, navigation patterns and feature usage.
- Cookies and similar tracking technology identifiers (see Section 8).
3.5 Communication Data
- Content of customer support conversations, complaints and enquiries.
- Email correspondence, live chat logs and any feedback you submit to us.
4
How We Collect Data
iceland888 collects personal data through the following channels:
- Directly from you — when you register an account, complete KYC verification, submit payment information, contact support or respond to any survey or promotion.
- Automatically — through cookies, server logs and analytics tools as you navigate and interact with the Platform.
- From third parties — identity verification agencies, fraud prevention providers, payment processors (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong where technically necessary) and other service providers acting as data processors on our behalf.
We do not purchase personal data from data brokers or obtain it from social media platforms without your explicit consent.
5
Data Processing
The table below sets out the primary purposes for which iceland888 processes your personal data and the categories of data involved in each activity.
| Purpose |
Data Categories Used |
Legal Basis |
| Account registration and management |
Registration data, communication data |
Contract performance |
| Identity and age verification (KYC) |
KYC data, registration data |
Legal obligation |
| Processing deposits and withdrawals |
Financial data, KYC data |
Contract performance |
| Fraud prevention and security monitoring |
Technical data, financial data, KYC data |
Legitimate interests |
| Anti-money laundering compliance |
Financial data, KYC data, transaction records |
Legal obligation |
| Customer support and dispute resolution |
Communication data, account data |
Contract performance |
| Platform analytics and improvement |
Technical data, usage data |
Legitimate interests |
| Responsible gambling monitoring |
Financial data, account data, behavioural data |
Legal obligation / legitimate interests |
| Marketing communications (opt-in only) |
Registration data, communication data |
Consent |
6
Legal Basis for Processing
iceland888 processes your personal data one or more of the following lawful bases, as identified in the table in Section 5:
- Contract performance: Processing necessary to register your account, process transactions and provide the gaming and information services you have requested.
- Legal obligation: Processing required to comply with applicable anti-money laundering legislation, age verification requirements and any other statutory or regulatory duties.
- Legitimate interests: Processing necessary for fraud prevention, platform security, analytics and responsible gambling monitoring, where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where we rely on your consent — in particular for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Withdrawing Consent
To withdraw consent for marketing communications, update your preferences in account settings or contact our support team. Withdrawal of consent does not affect processing carried out on another lawful basis.
7
Data Sharing
iceland888 does not sell, rent or trade your personal data to third parties for commercial purposes. We share data only where necessary and only with the categories of recipient described below.
7.1 Service Providers and Data Processors
We engage third-party organisations to provide specific operational services on our behalf, including KYC and identity verification providers, payment processing operators (including Malaysian e-wallet and banking channel intermediaries), technical infrastructure providers, and customer support tooling platforms. All such processors are contractually required to process your data only on our documented instructions and to maintain appropriate security standards.
7.2 Regulatory and Law Enforcement Authorities
iceland888 will disclose personal data to competent governmental, regulatory or law enforcement authorities where required to do so by law, court order, regulatory mandate or to prevent, detect or investigate fraud, money laundering or other serious criminal activity.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or a portion of the Platform's assets, your personal data may be transferred to the relevant successor entity as part of that transaction, subject to equivalent privacy protections.
No Sale of Personal Data
iceland888 does not sell, license or commercially exploit your personal data to advertising networks, data aggregators or any unrelated third party for their independent commercial purposes.
8
Cookies & Tracking Technologies
iceland888 uses cookies and similar technologies to deliver core platform functionality, remember your session preferences, detect fraud signals and collect anonymised usage analytics. The following categories of cookies may be active on the Platform:
- Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your logged-in session, storing security tokens and routing requests. These cookies cannot be disabled without impairing core functionality.
- Functional Cookies: Store your language, display preferences and other account-level settings to personalise your experience across sessions.
- Analytics Cookies:
- Security and Fraud-Detection Cookies: Used to identify unusual access patterns, bot activity and other signals indicative of fraudulent or abusive use of the Platform.
You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will affect your ability to access the Platform. Where cookie consent is required, a consent banner will be displayed on your first visit.
9
Data Retention
iceland888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The following general retention periods apply:
- Account and registration data: Retained for the duration of your account relationship and for a period of 5 years after account closure to meet anti-money laundering and regulatory obligations.
- KYC verification documents: Retained for a minimum of 5 years from the date of verification in accordance with applicable financial crime prevention requirements.
- Transaction records: Retained for 7 years from the date of each transaction to satisfy financial record-keeping obligations.
- Customer support records: Retained for 3 years from the date of the final interaction a support ticket or complaint.
- Marketing consent records: Retained for 3 years from the date of consent or until consent is withdrawn, whichever is earlier.
- Technical and log data: Typically retained for up to 12 months unless required for ongoing security investigations.
After the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.
10
Data Security
iceland888 implements a range of technical and organisational measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include, but are not limited to:
- Encryption of personal data in transit using industry-standard TLS protocols.
- Encryption of sensitive data at rest within our database infrastructure.
- Role-based access controls that restrict staff access to personal data to those with a verified operational need.
- Regular vulnerability assessments and penetration testing of Platform infrastructure.
- Incident response procedures for the detection, reporting and remediation of data security events.
- Staff training on data protection obligations and internal security policies.
Notwithstanding these measures, no digital system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately if you suspect unauthorised access to your account.
Your Responsibility
Never share your iceland888 account password or authentication codes with anyone, including persons claiming to represent our support team. iceland888 staff will never ask you for your password through any channel.
11
Your Rights
Subject to applicable data protection law, you have the following rights in relation to the personal data we hold about you. To exercise any right, please contact us using the details in Section 16.
👁️ Right of Access
You may request a copy of the personal data iceland888 holds about you, together with information about how it is being processed.
✏️ Right to Rectification
You may request correction of inaccurate or incomplete personal data. Some corrections may require supporting documentation.
🗑️ Right to Erasure
You may request deletion of your personal data where we have no overiding lawful reason to retain it, such as an ongoing regulatory obligation.
🚫 Right to Restrict Processing
You may request that we limit the processing of your personal data in specified circumstances, such as while a rectification request is being considered.
📦 Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
✋ Right to Object
You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Objections to marketing will always be honoured.
iceland888 will respond to all substantiated data rights requests within 30 calendar days of receipt. Where a request is complex or high in volume, this period may be extended by a further 60 days with prior written notice. Requests must be submitted in writing and include sufficient information to verify your identity before we can act on them.
12
Children & Minors
The iceland888 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect, solicit or process personal data from individuals below this age. Our registration and KYC procedures are designed to enforce this requirement.
If we become aware that personal data has been collected from a person under the age of 21 without verifiable parental consent and in violation of our eligibility requirements, we will take immediate steps to delete that information and close the associated account. If you believe a minor has accessed the Platform using your account or another's, please contact us immediately.
Protecting Young People
Parents and guardians are encouraged to use appropriate parental control tools to prevent minors from accessing gambling websites. iceland888 supports responsible gambling organisations that offer family safeguarding resources for households concerned about underage access.
13
Third-Party Links
The iceland888 Platform may include references or links to third-party payment providers, identity verification services or other external services. Once you leave the iceland888 Platform to access third-party service, this Privacy Policy no longer applies. We have no control over and accept no responsibility for the privacy practices or data handling of third-party operators.
We recommend that you review the privacy policy of any third-party service you use in connection with your iceland888 account, including your chosen payment provider (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank or CIMB).
14
International Data Transfers
The operation of the iceland888 Platform may involve the transfer of your personal data to service providers or infrastructure systems located in jurisdictions outside Malaysia. Where such transfers occur, iceland888 takes steps to ensure that appropriate safeguards are in place, such as contractual data protection clauses that impose obligations equivalent to those applicable in the originating jurisdiction.
We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing supplementary safeguard measures as required by applicable law.
15
Policy Amendments
iceland888 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered users by email to the address associated with their account and update the "Last Updated" date at the top of this page. We recommend reviewing this Policy periodically to stay informed of how your data is handled.
Continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy. If you do not agree to the revised terms, you should discontinue use of the Platform and may request account closure in accordance with the Terms and Conditions.
16
Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how we handle your personal data, please contact the iceland888 data protection team through the following channel:
Website email: [email protected]
Please include your full registered name, account username and a clear description of your enquiry or request. For data rights requests, we may ask you to provide additional verification confirm your identity before we take action. We aim to acknowledge all data-related enquiries within 5 business days and to resolve them within 30 calendar days of receipt.
If you are not satisfied with our response to a data concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.