Ironman 888 Privacy Policy – Malaysia Member Personal Data Protection

Ironman 888 collects your personal data only when it is necessary to provide platform services. Below are the categories of data we collect:

Your personal data is collected through the following channels when you interact with the ironman 888 platform:

• Account Registration: When you complete the registration form, you voluntarily provide your name, Malaysian phone number, and email address.
• Identity Verification (KYC): For withdrawals exceeding a certain amount, we may request identity verification documents such as MyKad or passport.
• Financial Transactions: Details relating to the payment method you use (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, or CIMB Clicks) are collected during the deposit and withdrawal process.
• Platform Usage: Activity data is collected automatically as you use the platform, including games played, matches wagered on, and session duration.
• Support Communications: Each time you contact the ironman 888 support team via live chat or email, your communication records are retained for service quality purposes.
• Cookies and Similar Technologies: Your web browser stores cookies from ironman 888 that help us improve the user experience and analyse platform usage.

Ironman 888 uses your personal data solely for the following legitimate and stated purposes. We do not use your data for any other purpose without your consent:

• Account Management: Creating and maintaining your account on the ironman 888 platform, including processing logins and identity verification.
• Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as managing your withdrawal of winnings.
• Legal Compliance: To meet anti-money laundering (AML) requirements, KYC compliance obligations, and applicable statutory reporting requirements.
• Platform Security: Detecting and preventing fraud, account abuse, and suspicious activity to protect all ironman 888 members.
• Service Improvement: Analyzing platform usage patterns to improve functionality, user experience, and offer more relevant games.
• Communications: Sending important account-related notifications, promotions you have opted into, and required policy updates.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.

Ironman 888 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, we may share your data in the following limited circumstances:

• Payment Service Providers: Payment gateways such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX banking institutions (Maybank, CIMB, and others) receive the transaction information necessary to process your payments.
• Game Providers: Third-party game software providers may receive the minimum technical data necessary to deliver the gaming experience to you.
• Supervisory Authority: Ironman 888 will disclose data when required by law, court order, or a valid request from a Malaysian law enforcement agency.
• Independent Audit: Auditing bodies that conduct security and game fairness reviews may access certain non-personally identifiable data.

Ironman 888 continuously invests in security infrastructure to ensure members' personal data is protected at all times. Our technical and organisational security measures include:

• SSL/TLS Encryption: All communications between your browser and ironman 888 servers are encrypted using the latest TLS 1.3 protocol.
• Stored Data Encryption: Personal data stored in our database is encrypted using AES-256, the encryption standard used by leading financial institutions.
• Access Controls: Only ironman 888 staff with a legitimate business need are permitted to access personal data, and all access is logged and monitored.
• Two-Factor Authentication: ironman 888's internal systems require two-factor authentication for all staff access to databases containing personal data.
• Regular Security Audits: The ironman 888 platform undergoes penetration testing and security audits at least twice a year by independent security firms.

In the event of any data breach that may affect your privacy, ironman 888 is committed to notifying you and the relevant authorities within 72 hours of confirming the relevant breach, in accordance with applicable legal requirements.

Ironman 888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with legal requirements. Below are our data retention period guidelines:

Once the retention period has lapsed, your personal data will be securely deleted or permanently anonymised so that it can no longer be identified. ironman 888's servers are housed in data centres that comply with ISO 27001 physical security standards.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by ironman 888:

Ironman 888 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect the functionality of the ironman 888 platform. Mandatory cookies cannot be disabled as they are critical to platform security.

Ironman 888 is a platform exclusively for individuals aged 18 years and above only. We take strict measures to ensure minors do not access our platform:

• The registration process requires age verification via a registered Malaysian phone number.
• Withdrawal of winnings requires identity verification (KYC) to confirm the player's age.
• Ironman 888 unintentionally collecting personal data from individuals under the age of 18.
• If we discover that data belonging to an individual under 18 has been collected inadvertently, it will be deleted immediately and the account in question will be closed.

Ironman 888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments.

When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a prominent notice on the ironman 888 platform homepage for a minimum of 14 days.
• Sending email notifications to all registered members for material changes.

Continued use of the ironman 888 platform after any Privacy Policy changes take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically.

Ironman 888 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this privacy policy and handling all data protection-related enquiries.

• DPO Email: privacy@ironman888.im – for all matters relating to personal data protection.
• General Support Email: support@ironman888.im – for general platform enquiries.
• Live Chat: Available 24/7 in Bahasa Melayu and English via the ironman 888 platform.

We aim to respond to all privacy-related enquiries within 5 business days. For formal data rights requests, processing may take up to 30 working days in accordance with PDPA 2010.