iron888 Privacy Policy

1. Introduction

Iron888 ("we", "us", "our", or the "Company") operates the online gaming platform accessible at iron888.win (the "Platform"). This Privacy Policy explains how iron888 collects, uses, discloses, stores, and protects the personal data of individuals ("you", "your", or "the Member") who access or use the Platform.

Iron888 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 ("PDPA") where applicable, and other relevant international data protection standards.

By registering an iron888 account or using the Platform, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as described in this Privacy Policy. This Policy should be read in conjunction with the iron888 Terms & Conditions.

2. Personal Data We Collect

Iron888 collects the following categories of personal data from Members and Platform visitors:

2.1 Identity Data

• Full legal name as it appears on government-issued identification;
• Date of birth and age verification documentation;
• National identification number or passport number (for KYC purposes);
• Copies of government-issued identity documents (MyKad, passport) and proof of address.

2.2 Contact Data

• Email address;
• Malaysian mobile phone number;
• Residential address (city, state, postcode).

2.3 Financial Data

• Payment method details (bank account, e-wallet identifiers such as Touch 'n Go or Boost account references — iron888 does not store full payment card numbers);
• Transaction history — deposits, withdrawals, and balance adjustments;
• Source of funds documentation where required by anti-money laundering obligations.

2.4 Technical & Usage Data

• IP address, device type, operating system, and browser type;
• Login timestamps and session duration;
• Pages visited, games played, bets placed, and Platform navigation patterns;
• Cookie identifiers and local storage data.

2.5 Communications Data

• Records of support chat conversations, emails, and other communications with iron888;
• Survey responses and feedback submitted through the Platform.

3. How We Collect Your Data

Iron888 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically through cookies, web server logs, and Platform analytics tools when you access iron888.win;
• Third-party sources: Identity verification agencies, payment processors (including Touch 'n Go, Boost, Maybank, CIMB, and Public Bank), and fraud prevention services that provide supplementary data to verify information you have provided.

4. Purposes of Processing

Iron888 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your iron888 account, including authentication and security;
• Service delivery: Processing deposits and withdrawals, recording bets, settling winnings, and providing access to Platform games and features;
• KYC and regulatory compliance: Verifying your identity and age, meeting anti-money laundering obligations, and complying with applicable regulatory requirements;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and other misuse of the Platform;
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance;
• Marketing and promotions: Sending promotional communications about iron888 offers where you have not opted out — you may opt out at any time;
• Platform improvement: Analysing usage patterns to improve the iron888 Platform, user experience, and game offering;
• Responsible gaming: Monitoring gaming activity to identify signs of problem gambling and facilitating self-exclusion where requested.

5. Legal Basis for Processing

Iron888 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and iron888 — i.e., operating your account and delivering Platform services;
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering legislation and regulatory requirements imposed by iron888's licensing authority;
• Legitimate interests: Processing for fraud prevention, Platform security, and service improvement where those interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications where you have provided consent — consent may be withdrawn at any time without affecting prior processing.

6. Disclosure and Sharing of Data

Iron888 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Iron888 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment partners for the purpose of processing transactions;
• Identity verification and KYC providers: Third-party services engaged to verify identity documents and age as required by applicable regulations;
• Fraud prevention services: Third-party fraud screening providers who assist in identifying suspicious activity;
• Technology and hosting providers: Cloud infrastructure and software providers engaged to operate the Platform, all of whom are bound by confidentiality obligations;
• Regulatory authorities and law enforcement: Where required by applicable law, court order, or the directions of iron888's licensing authority or relevant Malaysian or international authorities;
• Professional advisers: Legal, accounting, and audit professionals where required for legitimate business purposes, subject to professional confidentiality obligations.

Any third party receiving personal data from iron888 is required to implement appropriate technical and organisational measures to protect that data.

7. International Data Transfers

Iron888 may transfer your personal data to countries outside Malaysia in connection with the provision of Platform services, including to server infrastructure and third-party service providers located in other jurisdictions. Where such transfers occur, iron888 takes appropriate measures to ensure that your personal data receives an adequate level of protection, including through the use of contractual protections with data recipients.

By using the Platform, you acknowledge and consent to the transfer of your personal data outside Malaysia as described in this Policy.

8. Data Retention

Iron888 retains your personal data for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. Specifically:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations;
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC documentation: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later;
• Communications records: Retained for three (3) years from the date of the communication for customer service and dispute resolution purposes;
• Technical and usage data: Retained for up to twenty-four (24) months, used for security monitoring and Platform improvement.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies and Tracking Technologies

Iron888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for basic Platform functionality including session management, authentication, and security — cannot be disabled without impairing Platform use;
• Functional cookies: Remember your preferences (such as language settings and game lobby view) to personalise your experience;
• Analytics cookies: Collect anonymised data about how Members navigate the Platform to help iron888 improve performance and user experience;
• Security cookies: Assist in detecting fraud, bot activity, and account security anomalies.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Iron888 does not use third-party advertising or behavioural profiling cookies.

10. Your Data Protection Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by iron888:

• Right of access: You may request a copy of the personal data iron888 holds about you;
• Right to correction: You may request that inaccurate or incomplete personal data be corrected or updated;
• Right to erasure: You may request deletion of your personal data where there is no longer a legitimate legal or contractual basis for retention — subject to applicable regulatory retention obligations;
• Right to restrict processing: You may request that iron888 restrict processing of your personal data in certain circumstances;
• Right to object: You may object to processing of your personal data based on iron888's legitimate interests, including processing for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact iron888 support through the Platform's live chat facility or by emailing [email protected]. Iron888 will respond to valid requests within thirty (30) days. Iron888 may require identity verification before processing a data rights request.

11. Minors and Age Restrictions

The iron888 Platform is strictly intended for individuals aged 21 years and above. Iron888 does not knowingly collect personal data from any person under the age of 21. If iron888 discovers that personal data has been collected from a person under 21, such data will be immediately deleted and the associated account terminated.

If you are a parent or guardian and believe that a minor has provided personal data to iron888, please contact support immediately so that appropriate action can be taken.

12. Data Security

Iron888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the iron888 Platform;
• Encryption of sensitive data fields at rest in iron888's database systems;
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis;
• Regular security assessments and monitoring of Platform infrastructure;
• Two-factor authentication available to Members to protect account access.

Whilst iron888 takes data security seriously, no internet transmission or electronic storage system is completely secure. Iron888 cannot guarantee absolute security of your data and is not liable for breaches beyond its reasonable control.

13. Third-Party Links

The iron888 Platform may contain links to third-party websites or services (for example, payment provider portals). Iron888 is not responsible for the privacy practices or content of any third-party website. This Privacy Policy applies solely to data collected by iron888 through the Platform. We encourage you to review the privacy policy of any third-party site you visit.

14. Changes to This Privacy Policy

Iron888 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Members by email or by prominent notice on the Platform prior to taking effect, where reasonably practicable. The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or iron888's handling of your personal data, please contact our support team through the live chat facility on the Platform, or by email:

Email: [email protected]

This email address is provided for reference only and is displayed as plain text. For the fastest response, please use the on-Platform live chat. Iron888 will never request your password by email or any other channel.