Privacy Policy Iron66 – Our Member Data Protection & Privacy

Iron66 understands that privacy is a fundamental right of every individual. As an online betting platform serving hundreds of thousands of members across Malaysia, we recognise the importance of the trust you place in us when you register and use Iron66's services.

This Privacy Policy is a binding document that clearly and transparently explains everything related to the handling of your personal data — from how we collect and use it, to how we protect it and the rights you hold over it. We do not hide anything behind complex legal language; every section is written in plain language that any everyday user can understand.

If at any time you have questions or concerns about how iron66 handles your personal data, our Data Protection team is available to be reached through the channels stated at the end of this document.

Iron66 collects several categories of personal information depending on your interaction with our platform. Below are the types of data we collect:

Account Registration Information

Financial & KYC Information

• Bank account or digital wallet details registered for deposits and withdrawals.
• Identity verification documents such as copies of your national ID, passport, or driving licence.
• Bank statements for the purpose of verifying source of funds when required.
• Transaction records for deposits, withdrawals, and wagering activity within the account.

Technical & Usage Information

• IP address, device type, operating system, and browser type used.
• Login session data including date, time, and approximate geographical location.
• Pages visited, games played, and duration of platform usage.
• Cookie data and other tracking technologies as described in Section 5.

Every piece of information we collect is used for a specific and legitimate purpose. The following are the primary purposes for which your personal data is used at iron66:

• Account Management: Creating, verifying, and managing your member account, including the KYC process and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Service Provision: Enabling you to access all games, sports betting, promotions, and features on the iron66 platform.
• Service Communications: Sending important notifications relating to your account, transactions, changes to terms, and security updates.
• Customer Support: Helping you resolve issues, answer enquiries, and provide technical assistance.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Legal Compliance: Fulfilling reporting and compliance obligations to the relevant authorities.
• Platform Improvement: Analysing usage patterns to improve the user experience and develop new features.
• Relevant Marketing: Sending relevant promotions and offers to members who have opted in to receive them — you may unsubscribe at any time.

Iron66 does not sell or transfer member personal data to third parties for commercial purposes. However, there are limited situations where we need to share certain information:

• Payment Service Providers: Required transaction information is shared with payment processors such as FPX, DuitNow, and digital wallet providers to enable deposits and withdrawals to be processed securely.
• Technical Service Providers: Companies that support the technical operations of the iron66 platform, including server hosting and cybersecurity services, may require limited access to data in order to perform their duties.
• Relevant Authority: Iron66 will disclose information to law enforcement authorities or regulatory bodies when required to do so by law or a valid court order.
• Identity Verification Service: KYC information may be shared with trusted third-party identity verification service providers for document verification purposes.

Iron66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are essential to platform operations.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies: Collecting anonymised data on how members use the platform to help us understand usage patterns and improve our services.
• Performance Cookies: Monitoring platform performance and detecting any technical issues to ensure a smooth experience for all members.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Iron66 platform.

Iron66 employs multiple layers of security to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data communications between you and the iron66 platform are secured with banking-grade TLS/SSL protocols.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of protection to their accounts.
• Enterprise-Grade Firewall: Iron66's server infrastructure is protected by advanced firewall systems and intrusion detection systems (IDS) operating 24/7.
• Regular Security Audits: Internal and external security assessments are conducted periodically to identify and address potential system vulnerabilities.
• Role-Based Access Control: Access to member data within Iron66 is restricted on a need-to-know basis and is subject to thorough auditing.
• Incident Response Procedure: Iron66 has a clear incident response protocol to act swiftly in the event of any security breach.

Iron66 retains member personal data only for as long as necessary for the stated purposes or as required by applicable law. Below are our general data retention guidelines:

• Active account data is retained for as long as your account remains active and for a reasonable period following account closure for the purposes of dispute resolution and legal compliance.
• Financial transaction records are retained for a minimum of 5 years after the transaction is made, to fulfil legal and accounting requirements.
• Communication logs and customer support data are retained for 3 years after the last interaction.
• Technical data and access logs are retained for 12 months for security and troubleshooting purposes.

Once the applicable retention period has ended, your personal data will be securely deleted or anonymised in a way that prevents re-identification.

As an iron66 member, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the iron66 Data Protection team through the channels listed in Section 11. We may need to verify your identity before processing your request to ensure data security.

Iron66 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from minors.

• All prospective members are required to confirm they are 18 years of age or older during the registration process.
• If iron66 discovers that we have collected data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question.
• Parents or guardians who become aware that a child under their care has registered on Iron66 are encouraged to contact us immediately.

Iron66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or technological developments.

• Significant amendments will be communicated to all active members via their registered email at least 7 days before taking effect.
• The latest version of the Privacy Policy is always available on this page, with a clear update date displayed at the top.
• Continued use of the iron66 platform after the effective date of any amendments is deemed acceptance of the updated policy.
• If you disagree with any amendments made, you have the right to close your account before the effective date and request the deletion of your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by iron66, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Live Chat icon at the bottom corner of the iron66 platform.
• Email: [email protected] — we aim to respond to all enquiries within 2 business days.
• Help Centre: Visit the FAQ us for instant answers to frequently asked questions about privacy and account security.