Data Protection Policy

inw8 Privacy Protection Policy

Protecting your personal information is one of inw8's top priorities. This policy clearly explains what data we collect and how we handle it.

Last updated: 30 October 2026

1. Introduction and Purpose of This Policy

This Privacy Policy ("Policy") is a formal document that describes how inw8 ("we") handles the personal information of users ("you" or "our members") who use the inw8 platform. By continuing to use the service at https://inw8.org, you are considered to have read and agreed to this Policy. We protect your personal data with SSL encryption and will never sell it to third parties for any reason.

Section 1.1

Who This Policy Applies To

This Policy applies to everyone who uses inw8's website, mobile platform, and related services. This includes registered members, people attempting to open an account, and visitors simply browsing the website.

2. Personal Information We Collect

inw8 collects only the data needed to provide the service. We will never collect personal information that is not necessary.

Section 2.1

Data Collected at Registration

  • Full name
  • Date of birth (to verify age 21+)
  • Email address
  • Phone number
  • Payment method details (KBZPay, Wave Money, AYA Pay number)
  • National registration ID number for identity verification at account opening
Section 2.2

Data Collected Automatically While Using the Platform

  • IP address and geographic location (state / region level)
  • Browser type and version
  • Device type (mobile / desktop)
  • Time spent on the website and pages visited
  • Gaming history (session logs)
  • Deposit / withdrawal records
Section 2.3

Cookies and Tracking Technologies

inw8 uses cookies and similar technologies for (a) session management — to keep you logged in, (b) service improvement — to understand which features are used and how, and (c) security — to detect and prevent unauthorised access. You can disable cookies in your browser settings, but some parts of the service may not work properly as a result.

3. Data Retention Period and Methods

All data we collect is kept only for as long as necessary for its intended purpose. The table below lists the main data types and how long we retain them.

Data Type Retention Period Deletion Condition
Account Registration Data For the entire duration the account is active 90 days after account closure
Deposit / Withdrawal Records Five years Automatically deleted after five years
Game Session Records Two years Automatically deleted after two years
Communication Records (live chat / email) One year Deleted after one year
Cookies / session tokens Session expiry or 30 days Upon logout or after 30 days, whichever comes first

4. How We Use Your Data

inw8 uses your personal information only for purposes directly related to providing our services.

Purpose 1

Account Management

Your data is used for account creation, identity verification (KYC), and login security.

Purpose 2

Financial Transactions

To process financial checks and maintain transaction records during deposits and withdrawals.

Purpose 3

Customer Support

To refer to your data when resolving issues via 24/7 live chat and email.

Purpose 4

Security and Fraud Prevention

To detect and prevent unauthorised access, financial fraud, and platform abuse.

Purpose 5

Responsible Gaming

To review gaming patterns and assist users who request playtime or spending limits.

Purpose 6

Service Improvement

To analyse platform usage and make improvements to the user experience.

5. Data Sharing with Third Parties

inw8 will never sell your personal information to advertisers or data brokers. We may share it on a limited basis only in the following cases where it is strictly necessary to provide our services.

Section 5.1

Service Provider Companies

Payment processors (the technical systems of KBZPay, Wave Money, and AYA Pay), game software providers, and server infrastructure providers are permitted to handle data only under inw8's instructions. Confidentiality agreements are in place with all of them.

Section 5.2

Legal Requirements

We may be required to provide data to relevant domestic authorities under court orders, legal directives, or anti-money laundering (AML) regulations. When this occurs, we will make every effort to notify you to the extent permitted by law.

6. Data Security Measures

inw8 applies both technical and organisational measures to protect your data.

Technical Safeguards

  • TLS 1.3 / SSL encryption to protect data in transit
  • AES-256 encryption for financial data
  • Two-Factor Authentication (2FA) for access protection
  • Firewall and DDoS protection systems
  • Server access log monitoring

Organisational Safeguards

  • Restricted staff data access on a need-to-know basis
  • Regular data handling training for staff
  • Data breach incident response plan
  • Data protection agreements with third-party service providers
  • Internal data breach audits

We acknowledge that no cybersecurity measure can be guaranteed 100% secure. We therefore encourage you to use a strong personal password and never share it with third parties.

7. Your Data Rights

As an inw8 platform user, you have the following rights regarding your personal information.

Right 1

Right of Access

You can request to view any data we hold about you.

Right 2

Right of Rectification

You can contact our customer support to request correction of any inaccurate data.

Right 3

Right of Erasure

You may request deletion of your data after the service ends (once the legal retention period has passed).

Right 4

Right to Object

You may request to object to or restrict certain data processing activities.

Section 7.1

How to Exercise Your Rights

To exercise any of the rights listed above, you can reach our customer service team via 24/7 live chat or by emailing [email protected]. We will review your request carefully after receiving it and respond as quickly as possible. No data will be released to anyone until a full identity verification has been completed.

8. Minor Protection

The inw8 service is intended for adults aged 21 and above only. If we become aware that we are holding data belonging to someone under the age of 21, we will delete that data immediately. If you wish to report such a case, please contact us at [email protected].

9. How We Will Notify You of Policy Changes

inw8 may update this Privacy Policy from time to time. Any such updates will be reflected on this page with the revised date. If significant changes occur, we will—

  • Send a notification to your registered email address
  • Display a notice when you log in to the platform
  • Clearly state the date on which the changes take effect

If you continue using the platform after any changes, you will be considered to have accepted the revised policy. We therefore encourage you to check this page regularly.

10. Contact inw8

If you have any questions, data requests, or complaints regarding this Privacy Policy, you can reach our customer service team through the following channels—

24/7 Live Chat

Click the live chat icon on the platform to contact us directly in Burmese

Privacy Protection FAQ

Here are the most frequently asked questions from inw8 users about personal data.

inw8 will not sell your personal information to any third-party advertising company or data broker. Limited sharing is done only with companies that are strictly necessary to provide the service (payment processors, technology providers), and data protection agreements are in place with all of them.

You can request access to your data via 24/7 live chat or by emailing [email protected]. After we verify your identity, we will give you a full account of the data inw8 holds about you.

When a transaction is processed, the phone number used with KBZPay, Wave Money, or AYA Pay is recorded, but card CVV numbers, PINs, or full bank account details are never stored directly on inw8's servers. Financial transactions pass through the payment provider's encrypted servers.

Registration data is deleted 90 days after an account is closed. However, financial records must be retained for five years due to legal requirements. After that period, they will also be deleted.

You can block cookies from your browser settings. However, if session cookies are blocked, you will not be able to log in and therefore cannot use the service. If you block only analytics cookies, the platform continues to work normally.

If a data breach is detected, an incident response team will be formed immediately, and affected users will be notified by email. If you have questions about this, you can contact [email protected].