i188 Privacy Policy — How We Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how i188 ("the Company", "we", "us", "our") collects, processes, stores, uses, and protects personal data in connection with the operation of the i188 online casino and sports betting platform, accessible at i188.im.

This Policy applies to all users of the i188 platform, including registered account holders, visitors who browse the platform without registering, and any other individuals whose personal data is processed by i188 in connection with the provision of the platform's services. References to "you" or "the Player" throughout this Policy refer to any such individual.

By accessing the i188 platform, creating an account, making a deposit, or otherwise using our services, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. This Policy should be read alongside i188's Terms & Conditions and Responsible Gaming Policy.

i188 is committed to handling your personal data in a manner that is transparent, fair, and consistent with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR), notwithstanding that the GDPR may not directly apply to all of i188's operations.

2 Data Controller

For the purposes of applicable data protection law, i188 acts as the data controller in respect of personal data collected through the i188 platform. As data controller, i188 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

i188 operates under the oversight of an international gaming licence. The Company's data processing obligations are shaped in part by the requirements of the applicable licensing authority, which may impose mandatory data retention and reporting obligations that take precedence over individual data subject requests in certain circumstances.

3 Personal Data We Collect

i188 collects personal data in the categories described below. The specific data collected from any individual player will depend on how they interact with the platform, what services they use, and what information is required for regulatory compliance purposes.

i188 does not intentionally collect special category personal data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless such data is voluntarily provided by a player in the context of a responsible gaming or welfare concern, in which case it will be processed only for the purpose of addressing that concern.

4 How We Collect Your Data

i188 collects your personal data through the following channels and mechanisms:

• Direct collection: Data you provide directly when completing the i188 registration form, submitting identity verification documents, making deposits or withdrawal requests, contacting customer support, or updating your account profile;
• Automated technical collection: Data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access or use the i188 platform — including IP address, device identifiers, browser type, and session data;
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers used to facilitate deposits and withdrawals on the i188 platform;
• Identity verification services: Data received from third-party KYC verification service providers used to confirm player identity and age as required by i188's regulatory obligations;
• Fraud detection and AML services: Data received from third-party anti-fraud and anti-money laundering screening services used to identify and prevent prohibited financial activity on the platform;
• Game providers: Gaming activity data received from the third-party studios whose games are hosted on the i188 platform, including round-level gaming data necessary for bet settlement and dispute resolution.

5 Purpose & Legal Basis for Processing

i188 processes your personal data only where there is a valid legal basis for doing so. The following table sets out the primary purposes for which i188 processes personal data and the corresponding legal basis in each case.

6 Sharing Your Personal Data

i188 may share your personal data with third parties only in the following circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, for the purpose of processing deposits and withdrawals from your i188 account. These providers receive only the data necessary to complete the relevant transaction;
• Identity verification and KYC providers: Third-party services engaged to verify player identity, age, and source of funds as required by i188's licensing obligations;
• Anti-fraud and AML screening services: Services used to screen player accounts and transactions against sanctions lists, PEP databases, and fraud risk indicators;
• Game studios and software providers: Third-party studios whose games are hosted on the i188 platform, to the extent necessary for game delivery, bet settlement, and dispute resolution;
• Regulatory and licensing authorities: i188's licensing authority and any other competent regulatory body to which i188 is required to report player data under applicable gaming regulations;
• Law enforcement and government authorities: Where i188 is required to disclose player data by law, court order, or in response to a lawful request from a competent authority;
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to appropriate confidentiality obligations.

All third parties with whom i188 shares personal data are required to process such data only for the specified purpose and in accordance with i188's instructions and applicable data protection standards. i188 does not permit third-party service providers to use player data for their own commercial purposes.

7 Data Retention

i188 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or regulatory obligation. The following general retention principles apply:

• Active account data: Retained for the duration of your account relationship with i188 and for a period of five (5) years following account closure, in accordance with standard AML and gaming regulatory retention requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable anti-money laundering regulations;
• KYC and identity verification documents: Retained for the duration of the account relationship and for five (5) years following account closure;
• Customer support records: Retained for three (3) years from the date of the relevant interaction, unless the matter remains unresolved or subject to formal dispute or legal proceedings;
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of the consent obtained;
• Self-exclusion records: Retained indefinitely to prevent re-registration by excluded players, subject to the terms of the exclusion agreement.

Upon expiry of the applicable retention period, i188 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

8 Data Security

i188 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the i188 platform;
• Encrypted storage of sensitive data including identity documents, payment details, and account credentials;
• Access controls restricting i188 staff access to personal data on a strict need-to-know basis, with access logging and audit trail capabilities;
• Two-factor authentication (2FA) available to all players as an additional account security layer;
• Regular penetration testing and security audits conducted by independent third-party security professionals;
• Intrusion detection systems monitoring the i188 platform infrastructure for anomalous activity indicative of cyberattack or unauthorised access attempts.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, i188 will notify affected players in accordance with its obligations under applicable data protection regulations, without undue delay and no later than the timeframe required by the relevant regulatory authority.

9 Cookies & Tracking Technologies

i188 uses cookies and similar tracking technologies on the i188 platform to deliver core functionality, improve user experience, and support platform analytics. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function correctly — including session authentication, security tokens, load balancing, and fraud prevention. These cookies cannot be disabled without breaking core platform functionality;
• Functional cookies: Used to remember your preferences and settings, such as your selected language, display preferences, and responsible gaming tool configurations;
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the i188 platform — including which games are most visited, session duration patterns, and navigation flows. This data is used solely to improve the platform and is not linked to individual player identities for marketing purposes;
• Security and fraud prevention cookies: Used in conjunction with i188's fraud detection systems to identify and block suspicious activity patterns across sessions and devices.

i188 does not use third-party advertising cookies or permit third-party advertising networks to place tracking cookies on the i188 platform. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the i188 platform.

10 Your Privacy Rights

Subject to applicable data protection law and certain exceptions related to i188's legal and regulatory obligations, you have the following rights in respect of your personal data held by i188:

To exercise any of these rights, please contact i188 customer support via the live chat facility on the platform or by email at the address provided in Section 14. i188 will respond to all valid data subject requests within 30 days of receipt. Where a request is complex or numerous, i188 may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

Please note that certain rights may be limited or overridden by i188's legal and regulatory obligations — for example, the obligation to retain transaction records and KYC data for prescribed periods under AML regulations will take precedence over a request for erasure of such data.

11 Minors & Age Verification Policy

If you are a parent or guardian and have reason to believe that a minor has registered for an i188 account, please contact i188 customer support immediately via the live chat facility or email. i188 will investigate the matter promptly, take all necessary remedial action, and respond to your report within 5 business days.

i188 strongly encourages parents and guardians to make use of parental control software and device-level access restrictions to prevent minors from accessing online gambling platforms. i188 does not bear responsibility for access to the platform that occurs despite reasonable age verification measures, where access is facilitated by a third party sharing their account credentials with a minor.

12 International Data Transfers

As an internationally operated platform, i188 may transfer your personal data to, or store it in, countries outside Pakistan. Such transfers may occur in connection with the use of third-party service providers — including game studios, payment processors, KYC verification services, and cloud infrastructure providers — that are located in jurisdictions outside Pakistan.

Where personal data is transferred outside Pakistan, i188 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required by internationally recognised data protection frameworks. These safeguards may include:

• Transfers to countries or organisations that provide adequate levels of data protection as recognised by relevant regulatory authorities;
• Data processing agreements incorporating standard contractual clauses or equivalent protections;
• Binding corporate rules or other approved transfer mechanisms where applicable.

If you would like further information about the specific safeguards in place for any particular international data transfer involving your personal data, please contact i188 via the details in Section 14.

13 Changes to This Privacy Policy

i188 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory requirements, or i188's data processing practices. Material changes to this Policy will be communicated to registered players by way of a prominent notice on the i188 platform and, where practicable, by email to the address registered to each affected account.

The date of the most recent update is indicated in the "Effective Date" notice at the top of this document. We recommend that you review this Policy periodically to ensure you remain informed about how i188 handles your personal data. Your continued use of the i188 platform following publication of an updated Policy constitutes your acceptance of the changes.

Where a proposed change to this Policy would involve a materially different use of your personal data than was disclosed at the time of collection, i188 will seek your fresh consent before implementing that change in relation to your existing data.

14 Contact Us — Data & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way i188 processes your personal data, please contact us through one of the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all prior versions of the i188 Privacy Policy. i188 operates under international gaming licence oversight and processes personal data in accordance with the data protection requirements of its licensing framework.