Important Note: This Privacy Policy describes iron888's data protection practices in full. By using the iron888.pro platform, you agree to the collection and use of information as described here. Please read carefully before registering.
Section 1
Introduction
Iron888 is an online entertainment platform operating under iron888.pro. We understand that your trust is our most valuable asset, and that trust begins with how we handle the personal information you share with us.
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We are committed to ensuring that every iron888 user — whether new or returning — receives equal and transparent data protection.
This policy applies to all information collected through the iron888.pro website, the iron888 mobile app, customer support channels, email communications, and any other interactions between you and our platform.
Section 2
Data Collected
Iron888 only collects information necessary to provide a safe, transparent, and quality service. No data is collected excessively or without a clear purpose.
Basic Personal Information
During the registration and account verification (KYC) process, we collect:
- Full name as shown on your identity card or passport
- Date of birth to verify that you are 18 years of age or older
- Active email address for communication and account verification
- Mobile number for two-factor authentication (2FA) and support
- Current residential address for anti-money laundering (AML) compliance
- Copies of identification documents (identity card, passport) for the KYC process
Financial Information
To process deposits and withdrawals securely, we may collect:
- Bank name and bank account number registered in your name
- Digital wallet or e-wallet details used for transactions
- Deposit and withdrawal transaction records for compliance and investigation purposes when required
Platform Usage Information
Our system automatically records certain technical data whenever you use the iron888 platform:
- IP address and general location information (state/country)
- Device type, operating system, and web browser version
- Pages visited, session duration, and navigation patterns
- Gaming activity logs for security and audit purposes
- Login timestamps and withdrawal dates
| Data Type | Purpose of Collection | Retention Period |
|---|---|---|
| Identity Information | Account registration & KYC verification | Throughout active account + 5 years |
| Financial Information | Transaction processing & AML compliance | 7 years (legal requirement) |
| Activity Log | Security & Fraud Prevention | 2 years |
| Technical Data | Platform improvement & debugging | 90 days |
| Session Cookies | User experience & site performance | Until session ends / 30 days |
Section 3
How We Use Your Data
Every piece of data we collect has a clear and defined purpose. iron888 does not use user data for any purpose not stated in this policy.
Platform Operations
- Account verification: Ensuring only verified users aged 18 and above can access the platform
- Transaction processing: Verifying and processing deposits and withdrawals quickly and accurately
- Customer support: Identifying your account when you need assistance or when resolving disputes
- Legal compliance: Meeting KYC, AML, and applicable financial regulatory requirements
Service Improvements
- Analyzing usage patterns to improve the overall player experience
- Tailoring promotions and bonus offers relevant to your gaming habits
- Detecting and preventing fraudulent activity, multi-account use, and collusion
- Improving platform technical performance based on real usage data
Communications
Iron888 will contact you via email or WhatsApp for the following purposes: transaction verification, account security notifications, promotional updates (only if you have consented to receive marketing communications), and customer support responses.
Control Is in Your Hands: You may opt out of marketing emails at any time by updating your notification settings in your account or by contacting our support team.
Section 4
Information Sharing
Iron888 does not sell, does not rent or sell your personal data to third parties for commercial purposes. Data sharing only occurs in the following limited circumstances:
Trusted Service Providers
We share only the necessary data with service partners who help operate the iron888 platform, including payment gateway providers, game providers (such as Evolution, Pragmatic Play, and Microgaming), cloud infrastructure providers, and KYC identity verification companies. All such partners are bound by strict data protection agreements and are not permitted to use your information for any purpose other than those specified.
Legal Requirements
Iron888 will disclose user information to authorities when required by law, including for financial crime investigations, compliance with court orders, or cooperation with legitimate regulatory bodies. We will always endeavour to notify you of any such disclosure unless prohibited from doing so by law.
Platform Integrity Protection
In confirmed cases of fraud or serious security threats, relevant information may be shared with other platforms in the industry or relevant authorities for prevention and enforcement purposes.
International Data Transfers: Some of our service providers operate outside Malaysia. In such cases, we ensure that data protection mechanisms equivalent to Malaysia's PDPA and Europe's GDPR standards are fully observed.
Section 5
Data Encryption & Security
The security of your personal information is iron888's top priority. We invest in comprehensive security infrastructure to ensure your data is always protected from unauthorized access, leaks, or misuse.
Technical Protection Layers
- 256-bit SSL Encryption: All communications between your device and iron888's servers are protected by the highest-grade SSL/TLS encryption — the same standard used by Malaysia's leading banking institutions
- Two-Factor Authentication (2FA): An added layer of security through an OTP code sent to your mobile number each time you log in from a new device
- Stored data encryption: All sensitive data stored in our database, including passwords and financial information, is encrypted using the latest hashing algorithms
- 24/7 Monitoring: Intrusion detection and unusual activity monitoring systems operate around the clock to identify and block security threats
- PCI DSS Compliance: All card data processing and financial transactions comply with the Payment Card Industry Data Security Standard (PCI DSS)
Operational Security Practices
Access to user data at iron888 is restricted to staff who require it to perform their duties, in accordance with the "need-to-know" principle. All iron888 staff undergo regular data protection training and are bound by strict confidentiality agreements. Internal and external security audits are conducted periodically to ensure our systems remain robust.
Section 6
Cookies & Tracking Technologies
Iron888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.
Types of Cookies Used
- Essential Cookies: Required for core platform functions such as login authentication, session security, and language preference memory. These cookies cannot be disabled without affecting platform functionality.
- Performance Cookies: Collecting information on how users interact with the platform — most visited pages, time spent, and errors encountered — for technical improvement purposes.
- Functional Cookies: Saving your preferences such as language, display settings, and login details for a smoother return experience.
- Analytics Cookies: Helping us understand overall website traffic. This data is collected in aggregate and does not personally identify you.
You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and usability of the iron888 platform.
Section 7
User Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold. iron888 is committed to respecting and facilitating the exercise of all these rights.
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days.
If any of your data is inaccurate or outdated, you have the right to request prompt correction through customer support.
You may request deletion of your personal data, subject to applicable legal retention obligations.
You have the right to object to the processing of your data for marketing purposes at any time, without penalty.
You have the right to receive your personal data in a machine-readable format for transfer to another platform.
In certain circumstances, you may request that iron888 restrict the processing of your data while a query is being resolved.
How to Submit a Rights Request: To exercise any of the above rights, contact our data protection team at [email protected] with the email subject "Personal Data Rights Request". Include your full name and account number. We will verify your identity before processing any request.
Section 8
Children's Data Protection
Iron888 is an entertainment platform that strictly for individuals aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.
If we discover that we have collected personal data from anyone under the age of 18, we will take immediate steps to delete that information and terminate the associated account. If you believe a minor has registered on our platform, please contact us right away.
Section 9
Data Retention & Deletion
Iron888 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law and regulatory obligations.
When your account is closed at your request, personal data not subject to legal retention obligations will be deleted or anonymised within 90 days. Financial data and transaction records will be retained for 7 years in line with Malaysian financial and tax legal requirements before being securely deleted.
Section 10
Privacy Policy Amendment
Iron888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to you via your registered email or in-platform notification at least 14 days before the changes take effect.
The latest update date is always displayed at the top of this document. Continued use of the iron888 platform after any amendment takes effect constitutes your acceptance of the revised policy. If you disagree with the changes, you have the right to close your account before the effective date.
Section 11
Contact Us
For any inquiries, concerns, or requests regarding this Privacy Policy or how iron888 handles your personal data, please contact us through the following channels:
- Email (Data Protection): [email protected]
- Telegram: Official iron888 support channels
- WhatsApp: iron888 official support number
- Response time: Within 3 business days for privacy-related enquiries
Iron888 takes every privacy complaint seriously and will investigate each case thoroughly. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.