iron888 Privacy Policy

1. Who We Are

This Privacy Policy is issued by the operator of iron888, the online casino and sports betting platform accessible at iron888.club ("iron888", "we", "us", or "the Company"). iron888 is licensed by a recognised international gaming authority and operates in compliance with the data protection obligations imposed by that licence.

iron888 acts as the data controller in respect of the personal data collected from players and visitors to the iron888 Platform. This means we determine the purposes for which, and the means by which, your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under contractual data processing agreements with iron888.

For all privacy-related enquiries, you may contact us at: [email protected]

2. Personal Data We Collect

2.1 Account Registration Data

When you register an iron888 account, we collect: full legal name; date of birth; email address; username; password (stored in hashed, non-reversible form); country of residence; and preferred currency (MYR for Malaysian players).

2.2 Identity Verification (KYC) Data

To comply with our licensing obligations and anti-money laundering requirements, iron888 may collect: copies of government-issued photo identification (such as MyKad, passport, or driving licence); proof of residential address (such as a utility bill or bank statement); and selfie or facial biometric data where required for identity confirmation. This data is collected from players in Malaysia including those based in Kuala Lumpur, Penang, Johor Bahru, Kota Kinabalu, and other cities nationwide.

2.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, and wagering activity on your iron888 account, including payment method details (such as masked card numbers, e-wallet identifiers for Touch 'n Go eWallet, Boost, DuitNow, GrabPay, and FPX), transaction amounts, timestamps, and settlement outcomes.

2.4 Usage & Technical Data

We collect data about how you interact with the iron888 Platform, including: IP address; device type, model, and operating system; browser type and version; session duration and page views; game history and wagering patterns; login timestamps; and geolocation data (country-level, derived from IP).

2.5 Communications Data

Records of communications between you and iron888 support — including live chat transcripts, email correspondence, and any feedback submitted — are retained for quality assurance, training, and dispute resolution purposes.

3. How We Collect Your Data

iron888 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you use the iron888 Platform;
• From third-party service providers — including payment processors, identity verification agencies, fraud prevention services, and analytics providers who supply data to help us operate the Platform safely and in compliance with applicable laws;
• From public sources — where required for compliance purposes, including sanctions screening databases and public records.

4. Purposes for Which We Process Your Data

iron888 processes your personal data for the following purposes:

• Creating and managing your player account on the iron888 Platform;
• Processing deposits, withdrawals, and bet settlements, including integration with Malaysian payment methods;
• Verifying your identity and age (21+) in compliance with our licensing and anti-money laundering obligations;
• Detecting, investigating, and preventing fraud, money laundering, cheating, collusion, and other prohibited activities;
• Providing customer support and resolving disputes;
• Sending transactional communications (account statements, deposit confirmations, withdrawal notifications);
• Sending marketing communications where you have provided consent or where permitted under applicable law;
• Conducting responsible gaming monitoring, including detection of problem gambling indicators, and enforcing self-exclusion requests;
• Improving the iron888 Platform through analytics, A/B testing, and performance monitoring;
• Complying with our legal and regulatory obligations under our gaming licence and applicable laws.

5. Legal Basis for Processing

iron888 processes personal data on the following legal bases:

• Contractual necessity — processing required to create and manage your account, process transactions, and deliver the gaming services you have requested;
• Legal obligation — processing required to comply with anti-money laundering regulations, KYC obligations, age verification requirements, and responsible gaming mandates imposed by our licensing authority;
• Legitimate interests — processing carried out in the legitimate interests of iron888 or our players, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights;
• Consent — where you have provided explicit consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing with Third Parties

iron888 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors — to process deposits and withdrawals via Touch 'n Go eWallet, Boost, DuitNow, FPX, and other accepted Malaysian payment methods;
• Identity verification providers — to carry out KYC and age verification checks;
• Game providers — licensed gaming studios whose games are available on the iron888 Platform may receive gameplay data necessary to deliver and certify their games;
• Fraud prevention and security services — third-party services that help iron888 detect and prevent fraud, money laundering, and platform abuse;
• Regulatory and law enforcement authorities — where required by law, court order, or our licensing authority's compliance requirements;
• IT and infrastructure providers — cloud hosting, database, and analytics service providers operating under data processing agreements with iron888.

All third-party processors engaged by iron888 are bound by contractual obligations to process data only on iron888's instructions and to maintain appropriate security standards.

7. International Data Transfers

As an internationally licensed gaming operator, iron888 may transfer personal data to countries outside Malaysia in connection with the service providers and infrastructure described in this Policy. Where such transfers occur, iron888 takes steps to ensure that the receiving party provides an adequate level of data protection, including through the use of contractual safeguards such as data processing agreements incorporating standard contractual clauses.

8. Data Retention

iron888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and our licensing obligations. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC documentation is retained for the same minimum period of five years post-closure;
• Customer support communications are retained for a minimum of three (3) years;
• Marketing consent records are retained for the duration of the consent and for a reasonable period thereafter for compliance documentation purposes.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with iron888's data disposal procedures.

9. Cookies & Tracking Technologies

iron888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies — necessary for the operation of the Platform, including maintaining your login session and storing your preferences;
• Performance cookies — used to collect anonymous statistical data about how players use the Platform, enabling us to identify and fix performance issues;
• Functionality cookies — used to remember choices you make, such as preferred language or game lobby filters;
• Analytics cookies — used by our internal analytics tools to understand player behaviour and improve the Platform experience.

iron888 does not use third-party advertising cookies or share cookie data with advertising networks. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the Platform.

10. Security Measures

iron888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and iron888's servers;
• Encryption at rest for sensitive personal data, including KYC documents and payment information;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication for internal administrative systems;
• Regular security assessments and penetration testing;
• Incident response procedures for the management of data security events.

Despite these measures, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data security incident affecting your personal data, iron888 will notify affected individuals and relevant authorities as required by applicable law and our licensing conditions.

11. Your Rights

Subject to applicable law and our licensing obligations, you have the following rights in relation to your personal data held by iron888:

• Right of access — to request a copy of the personal data we hold about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction — to request that we restrict processing of your personal data in certain circumstances;
• Right to object — to object to processing carried out on the basis of legitimate interests;
• Right to withdraw consent — to withdraw consent for processing based on consent at any time, without affecting the lawfulness of prior processing;
• Right to data portability — to receive a copy of your personal data in a structured, commonly used machine-readable format.

To exercise any of these rights, please contact iron888 at [email protected]. We will respond to verified requests within 30 days. We may require proof of identity before processing a request. Please note that certain rights are subject to exceptions where compliance with our legal and regulatory obligations requires continued data processing.

12. Children's Privacy

The iron888 Platform is strictly restricted to individuals who are 21 years of age or older. iron888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child has registered an iron888 account should contact us immediately at [email protected]. 21+

13. Marketing Communications

With your consent, iron888 may send you marketing communications about promotions, bonuses, new game releases, and other Platform features. You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email from iron888;
• Updating your communication preferences in your Account settings;
• Contacting our support team at [email protected] and requesting removal from marketing lists.

Please note that opting out of marketing communications does not affect the receipt of transactional communications, which are required for account management and are sent on the basis of contractual necessity.

14. Changes to This Privacy Policy

iron888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable advance notice via the Platform or by email to your registered address. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the iron888 Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or iron888's handling of your personal data, please contact our Data Protection team:

Email: [email protected]

Please include your registered username, a clear description of your query or request, and any relevant details. iron888 will acknowledge your contact within 3 business days and aim to resolve privacy enquiries within 30 days.

If you are not satisfied with iron888's response to a privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority or the dispute resolution body designated by our licensing authority, in accordance with the procedure set out in our Terms & Conditions.