Privacy Policy ironman66 — Malaysia Player Data Protection

1Introduction

This Privacy Policy ("Policy") describes how ironman66 ("we", "platform", "company") collect, store, use, and protect your personal information ("data") when you use the ironman66.click platform and all related services.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant international data protection standards. Your trust is the foundation of everything we do, and we will never sell, rent, or misuse your personal data.

By registering an account or using the ironman66, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform. This Policy should be read together with Terms & Conditions ironman66.

2Personal Data We Collect

ironman66 collects personal data from various sources when you use our platform. Below is a full breakdown of the types of data we collect and the reasons for doing so:

2.1 Data You Provide Directly

• Full name as stated on your identity card or passport.
• National identity card number (MyKad) or passport.
• An active Malaysian phone number.
• A valid email address.
• Date of birth (for age verification).
• Residential address in Malaysia.
• Bank account or e-wallet details for payment purposes (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay).
• Identity verification documents (KYC) submitted upon request.

2.2 Automatically Collected Data

• IP address and geographic location information (state, city).
• Device type, operating system, and web browser used.
• Login and logout timestamp records.
• Betting history, slots gameplay, and Live Casino activity.
• Complete records of all deposits and withdrawals.
• Gaming session data, including duration and frequency.
• Cookie data and other tracking technologies (see Section 6).

2.3 Data from Third Parties

In certain circumstances, ironman66 may receive data from trusted third parties, including:

• Payment processors to verify deposit and withdrawal transactions.
• Identity verification service provider for KYC purposes.
• Fraud prevention agencies to detect and prevent unlawful activity.

3How We Use Your Data

ironman66 using your personal data only for the following legitimate and limited purposes. We will not use your data for any other purpose without first obtaining your renewed consent:

3.1 Service Operations

• Creating and managing your ironman66 account.
• Processing deposits and withdrawals via Malaysia's local payment methods.
• Verifying your identity during the KYC process to ensure the security of all parties.
• Enabling you to access all games and services on the ironman66 platform.

3.2 Security & Compliance

• Detecting and preventing fraud, money laundering, and illegal activities.
• Complying with legal and regulatory requirements under Malaysia's PDPA 2010.
• Verifying that players meet the minimum age requirement (18 years and above).
• Conducting investigations when suspicious account activity is reported.

3.3 Service Improvement

• Analyzing usage patterns to improve platform design and functionality.
• Personalising your gaming experience based on your preferences and activity history.
• Sending notifications related to bonuses, promotions, and relevant platform updates.
• Supporting responsible gaming features such as deposit limits and playtime monitoring.

3.4 Communications

• Sending email or SMS confirmations for deposit and withdrawal transactions.
• Responding to customer enquiries, complaints, and support requests.
• Notifying you of important changes to our Terms & Conditions or Privacy Policy.
• Sending promotional offers and bonuses where you have opted in to receive them (you may unsubscribe at any time).

4Sharing Data with Third Parties

ironman66 does not sell, rent, or trade your personal data to any third party for marketing purposes without your explicit consent. Your data may be shared only in the following limited circumstances:

4.1 Trusted Service Providers

We share necessary data with third-party service providers that help us operate the platform — including payment processors (to verify transactions via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay), server infrastructure providers, and KYC identity verification companies. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

4.2 Legal Requirements

Ironman66 may disclose your data to relevant authorities when required by Malaysian law or a valid court order — including the Malaysian Anti-Corruption Commission (MACC), the police, or financial regulatory bodies. We will endeavour to notify you of any such disclosure unless prohibited by law from doing so.

4.3 Business Transfers

In the event of a merger, acquisition, or transfer of ironman66's business assets, player data may be transferred to the new entity. You will be notified in advance and given the option to opt out before any such transfer takes place.

5Data Security

ironman66 implementing comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.

5.1 Technical Measures

• SSL 256-bit Encryption: All data transmitted between your device and ironman66's servers is encrypted using banking-grade TLS/SSL protocols.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information, is fully encrypted at rest.
• Two-Factor Authentication (2FA): Available to all ironman66 accounts as an additional layer of security.
• Firewall & 24/7 Monitoring: Our server infrastructure is protected by advanced firewall systems and continuously monitored for any intrusion attempts.
• Penetration Testing: Platform security is regularly tested by independent security experts to identify and address any vulnerabilities.

5.2 Organisational Measures

• Access to player data is restricted to ironman66 staff who require it to carry out their job responsibilities.
• All staff who handle player data undergo rigorous data security training and are bound by confidentiality agreements.
• Clear security incident response procedures are in place to ensure a swift response in the event of any data breach.

6Cookies & Tracking Technologies

Platform ironman66 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymised information about how visitors use the platform — such as the most frequently visited pages and time spent. This helps us improve site performance.
• Functionality Cookies: Saving your preferences such as language, display settings, and region to deliver a more personalised experience on your next visit.
• Analytical Cookies: Helps us understand aggregated user behaviour for product improvement purposes. Data is collected anonymously and is not linked to your individual identity.

6.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies. Please note that disabling essential cookies may affect the functionality of certain parts of the platform ironman66 and your overall gaming experience.

7Data Retention & Deletion

ironman66 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we retain certain data for the period prescribed by Malaysian law before it is securely deleted.

7.1 Retention Period

• Identity and KYC data: Retained for 7 years following account closure, in compliance with anti-money laundering legal requirements.
• Financial transaction records: Retained for 7 years from the transaction date, in accordance with Malaysian financial reporting requirements.
• Support communication records: Retained for 3 years for reference and dispute resolution purposes.
• Technical data (logs, IP): Retained for 12 months before being automatically deleted.
• Marketing information: Deleted within 30 days of unsubscribing from marketing communications.

Once the retention period expires, data is securely deleted or anonymised using procedures that ensure it cannot be recovered.

8Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by ironman66:

To exercise any of the rights above, contact the ironman66 Data Privacy team at support@ironman66.click by clearly stating your request. We will respond within 21 business days. Reasonable requests will be handled free of charge.

9Child Data Protection

Platform ironman66 is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors.

Should we discover that data from a minor has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered an ironman66 account without authorisation are urged to contact us immediately at support@ironman66.click.

10Cross-Border Data Transfers

In operating an online betting platform at an international level, ironman66 may need to transfer your personal data to servers or service providers located outside Malaysia in certain circumstances.

Any cross-border data transfer will only take place when:

• The recipient country or region maintains a level of data protection equivalent to or higher than that of Malaysia.
• Appropriate and legally binding data processing agreements have been signed with data recipients.
• You have provided explicit consent for such transfer (where required by law).
• The transfer is necessary to fulfil a contract or service you have requested.

In all cases, ironman66 ensuring that a level of data protection equivalent to this Privacy Policy applies to your data regardless of where it is processed.

11Privacy Policy Amendments

ironman66 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform functionality. You will be notified of any material changes through:

• In-platform notifications on ironman66 displayed prominently during your login session.
• An email to your registered address at least 14 days before the changes take effect.
• Update the "Last updated" date at the top of this document.

Continued use of the platform ironman66 after the effective date of any changes constitutes acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account and request data deletion before the changes take effect.

12Contact Us — Data Protection Officer

For any enquiries, concerns, or requests relating to this Privacy Policy or how ironman66 handling your personal data, please contact us:

• Data Privacy Email: support@ironman66.click (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 within the ironman66 platform — response within 5 minutes
• Support language: Bahasa Melayu and English
• Response time: Initiated within 24 hours, resolved within 21 business days

We take every privacy enquiry seriously and are committed to responding in a clear, honest, and helpful manner. If you are not satisfied with how we have handled your privacy request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.