Ironman888 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

Ironman888 (referred to as "we", "the Platform", or "ironman888") is an online Sports Betting and casino platform operating for users in Malaysia. We recognise that privacy is a fundamental right of every individual, and we take this responsibility with the utmost seriousness.

This Privacy Policy explains how ironman888 collects, uses, stores, processes, discloses, and protects the personal information you provide when registering and using our platform, including the ironman888.biz website and our mobile application.

This policy applies to all registered ironman888 members, prospective members currently in the registration process, and any individual accessing or using ironman888 services in any capacity.

Ironman888's privacy practices are in full compliance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia, which governs how organisations in Malaysia collect and process individuals' personal data.

Ironman888 collects several categories of personal information depending on how you interact with our platform:

A. Data You Provide Directly

• Identity Information: Full name, Malaysian identity card number (MyKad), date of birth, gender, nationality.
• Contact Information: Email address, mobile phone number, residential address in Malaysia.
• Account Details: Username, password (stored in encrypted form), security questions.
• Financial Information: Payment methods used (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX), bank account number, deposit and withdrawal transaction history in MYR.
• KYC Documents: Identity card copy, proof of address, and other verification documents required for the Know Your Customer process.

B. Automatically Collected Data

• Technical Data: IP address, browser type, operating system, device used, screen resolution.
• Usage Data: Pages visited, session duration, clicks and in-platform interactions, games played (football, baccarat, slots, lottery, and others).
• Location Data: General location based on IP address (state/region in Malaysia) for geographic verification.
• Cookie Data: Session and persistent cookie information that supports the functionality of the ironman888 platform.

Personal data collected by ironman888 is used for legitimate and specific purposes as follows:

Ironman888 processes your personal data on lawful grounds under Malaysia's PDPA 2010:

• Consent: For most data processing activities, including direct marketing. You provide consent during the registration process and may withdraw it at any time.
• Contract: For processing required to fulfil the service agreement between you and ironman888 — including MYR deposit processing, withdrawals, and account management.
• Legal Obligation: To meet Malaysia's legal compliance requirements, including anti-money laundering laws and mandatory identity verification obligations.
• Legitimate Interests: For platform security purposes, fraud prevention, and ongoing service improvement — where ironman888's interests do not override your fundamental right to privacy.

Ironman888 does not sell, rent, or trade members' personal data to any party for marketing or commercial purposes. However, there are specific situations where we may need to share your data with carefully selected parties:

Trusted Third-Party Service Providers

Ironman888 works with a number of service providers that help us deliver a better platform. These include Malaysian payment processors (for Touch 'n Go, DuitNow, GrabPay, and other transactions), casino game providers (such as Evolution, PG Soft, and Ezugi), and cloud infrastructure providers. All providers are bound by strict data protection agreements and are not permitted to use your data for their own purposes.

Legal Requirements

Ironman888 may be required to disclose members' personal data to Malaysian legal authorities if mandated by a court order, warrant, or other valid legal requirement. In such cases, we will notify you to the extent permitted by law.

Ironman888 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. The following are our general data retention guidelines:

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked back to you personally.

The security of members' personal data is a technical and operational priority we never compromise on. ironman888 implements multiple layers of protection to keep your data safe at all times:

• Transport-Layer Encryption: All communication between your browser and ironman888's servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. This means data in transit — including your login details and MYR transaction information — cannot be read by any third party.
• Data-at-Rest Encryption: Sensitive data stored in the ironman888 database — including passwords (hashed using the bcrypt algorithm), identity card numbers, and financial details — is encrypted using AES-256 standards.
• Two-Factor Authentication (2FA): ironman888 members can enable 2FA for an additional layer of security. Once activated, logging in requires verification via SMS OTP sent to your registered phone number.
• Role-Based Access Control: Only specifically authorised ironman888 staff may access members' personal data, and only for permitted purposes. All access is logged and continuously monitored.
• 24/7 Security Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) operate around the clock to detect and counter cyber threats.
• Regular Penetration Testing: ironman888 conducts regular penetration testing by independent third parties to identify and address vulnerabilities before they can be exploited.

Under Malaysia's PDPA 2010, you have the following rights over your personal data held by ironman888:

To exercise any of the above rights, please contact the ironman888 Data Protection Officer at privacy@ironman888.biz with a clear description of your request. We will respond within 14 business days.

Ironman888 uses cookies and similar technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Strictly Necessary Cookies: Session cookies required for core ironman888 platform functions — including login, session security, and navigation. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as your chosen language (Bahasa Malaysia) and display settings, so you don't have to reconfigure them each time you visit ironman888.
• Analytics Cookies: Helps us understand how members use the platform so we can improve it. Analytics data is collected anonymously and is not linked to your personal identity.
• Marketing Cookies: Used only with your consent to display relevant ironman888 promotions. You may opt out of marketing cookies via the cookie settings within the platform.

You can manage your cookie settings at any time through your browser settings menu or via the privacy preference centre in your ironman888 account. Please note that disabling certain cookies may affect platform functionality.

Ironman888 is a platform designed exclusively for adults aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data belonging to someone under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you believe your child or a minor has registered an account on ironman888, please contact us immediately at privacy@ironman888.biz and we will respond within 24 hours.

Ironman888 has appointed a Data Protection Officer (DPO) responsible for overseeing privacy policy compliance and handling member personal data enquiries.

For any privacy-related enquiries, concerns, or complaints, please contact us through the following channels:

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia operating under the Malaysian Ministry of Communications and Digital.

Ironman888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our business practices, Malaysian legal requirements, or technological developments. Any material amendments will be communicated to members via email to your registered address or through an in-platform notification on ironman888 at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document will always reflect the latest version of the ironman888 privacy policy. We encourage you to review this policy periodically to stay informed about how we protect your information.