Ironman666 Privacy Policy – Malaysia Personal Data Protection

Ironman666 is an online casino and Sports Betting platform operating in Malaysia. We understand that your trust is the foundation of our relationship — and that trust begins with transparency about how your data is handled. This Privacy Policy is written to give you a clear and straightforward picture, not a document filled with legal jargon that is difficult to navigate.

This Privacy Policy applies to all users who access or use the ironman666 platform, including:

• Visitors to ironman666.best who have not yet registered an account
• Registered members who use ironman666's gaming, Live Casino, slots, or Sports Betting services
• Individuals who contact the ironman666 customer support team
• Users who interact with ironman666 marketing communications

This Policy should be read together with the Terms & Conditions ironman666. In the event of any conflict between this Privacy Policy and the Terms & Conditions in relation to data protection, this Privacy Policy shall prevail. This document was last updated on 1 January 2026.

Ironman666 only collects data that is strictly necessary to provide the services you request. Below are the categories of data we collect and how they are obtained:

Ironman666 uses the personal data collected for the following purposes only. We will not use your data for any other purpose without informing you in advance and obtaining the necessary consent:

• Service provision: Creating and managing your account, processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks, as well as processing your winnings withdrawals accurately and securely
• Identity verification: Conducting KYC verification to confirm your identity, protect your account from unauthorised access, and fulfil Malaysia's legal obligations regarding age verification (21 years and above)
• Security & fraud prevention: Detecting and preventing fraudulent activity, bonus abuse, multiple account registrations, money laundering, and other security threats that could compromise the ironman666 platform or its players
• Service improvement: Analysing usage patterns on an aggregate (not individual) basis to understand which games are most popular among Malaysian players, where UX can be improved, and how ironman666 can continue to enhance the gaming experience
• Customer support: Retaining communication records to ensure continuity of support — if you contact us more than once regarding the same issue, the ironman666 team will have the full context needed to assist you more effectively
• Legal compliance: Fulfilling regulatory reporting obligations to Malaysian authorities, retaining financial transaction records in accordance with applicable laws, and cooperating with authorities when legally required
• Marketing communications: Sending information about promotions, new bonuses, and ironman666 platform updates — only to members who have given consent to receive marketing communications, and you may withdraw this consent at any time

All data processing by ironman666 has a valid legal basis under Malaysia's PDPA — whether based on the performance of a contract, a legal obligation, the platform's legitimate interests, or explicit consent you have provided.

Ironman666 does not sell, rent, or trade your personal data to third parties. However, in the course of operating the platform, there are situations where your data may be shared with certain parties for legitimate reasons:

• Payment service providers: When you make a deposit or withdrawal, the minimum necessary transaction details are shared with the relevant payment providers involved — such as DuitNow, Touch 'n Go eWallet, GrabPay, or Malaysian banking institutions like Maybank and CIMB. All such providers are subject to strict Malaysian financial regulations
• Game providers: Game providers such as Evolution Gaming, Pragmatic Play, and Playtech may receive minimal session data for operational purposes. They do not receive your full personal information and are bound by confidentiality agreements with ironman666
• Regulatory bodies & authorities: ironman666 fully complies with lawful requests from Malaysian authorities — including Bank Negara Malaysia, the Companies Commission of Malaysia (SSM), or the Royal Malaysia Police — when required by court order or applicable legislation
• Independent audit: Independent auditors conducting security and game fairness audits may access anonymised or aggregated data. They are not granted access to any personally identifiable data

Ironman666 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or unauthorised disclosure:

• Data encryption in transit: All communications between your device and ironman666 servers are protected by the latest version of TLS (Transport Layer Security) protocol with AES-256-bit encryption, ensuring that no third party can intercept or read the data transmitted
• Data encryption at rest: Sensitive personal data stored in ironman666's databases is also encrypted using industry-recognised encryption standards. This means that even in the highly unlikely scenario where the database is accessed without authorisation, your data cannot be read
• Internal access controls: Only ironman666 staff who require access to specific data to perform their duties will be granted that access. The principle of least privilege is enforced — no staff member has access to more data than is necessary for their role
• Continuous monitoring: ironman666's security monitoring system operates 24 hours a day, 7 days a week to detect suspicious activity, intrusion attempts, or anomalies that may indicate a security issue
• Regular security audits: ironman666 conducts regular penetration testing and security audits by independent parties to identify and remediate any system vulnerabilities before they can be exploited
• Incident response procedures: ironman666 has a comprehensive security incident response procedure in place. In the event of a data breach involving your personal data, we will notify you and the relevant authorities within the timeframe prescribed by Malaysian law

While ironman666 takes all reasonable steps to protect your data, no security system can be guaranteed 100% free from all threats. You also play an important role in keeping your account secure — always use a strong password, never share your login credentials with anyone, and contact ironman666 immediately if you suspect any suspicious activity on your account.

Ironman666 uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions properly. Below are the types of cookies used and their purposes:

• Essential cookies: Required for the ironman666 platform to function properly — including maintaining your login session, remembering your language preference, and ensuring session security. These cookies cannot be disabled as the platform will not function without them
• Preference cookies: Saving your preferences such as display settings, your usual betting limits, and game preferences to make your ironman666 experience more personalised and convenient
• Analytics cookies: Helping ironman666 understand how players use the platform — which pages are most popular, where Malaysian players commonly encounter difficulties, and how long a typical gaming session lasts. This data is used in aggregated form and does not identify you as an individual
• Security cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access

You can manage your cookie settings through your web browser. However, disabling essential cookies may disrupt or prevent you from accessing certain parts of the ironman666 platform. For guidance on managing cookies in popular browsers such as Chrome, Safari, or Firefox, please refer to the respective browser's help documentation.

Ironman666 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by Malaysian law. Once the retention period expires, data will be securely deleted or anonymised:

• Active account data: Retained for the entire duration your ironman666 account remains active. Once your account is closed at your request, basic profile data is kept for 90 days before being permanently deleted, allowing you to reopen your account should you change your mind within that period
• Financial transaction records: Retained for a minimum of 7 years after the transaction date, in compliance with Malaysia's accounting and tax legislation and anti-money laundering (AML) regulations
• KYC Documents: Retained for the period prescribed by Malaysian law in relation to identity verification and AML — typically 5 to 7 years after the business relationship ends
• Support communication records: Retained for 2 years to ensure continuity of support and as a record should it be required to resolve disputes
• Technical log data: Retained for a maximum of 12 months for security and technical troubleshooting purposes

As a data subject under Malaysia's PDPA, you have certain rights regarding the personal data ironman666 holds about you. ironman666 respects these rights and provides accessible channels for you to exercise them:

Ironman666 takes the protection of minors from exposure to gambling activities very seriously. The ironman666 platform is exclusively for individuals aged 21 and above who are residents or citizens of Malaysia.

Ironman666 does not knowingly collect or process personal data of individuals under the age of 21. Should ironman666 discover that personal data of someone under 21 has been collected, the following steps will be taken immediately:

• The account in question will be suspended or closed immediately
• All personal data associated with that individual will be permanently deleted from the ironman666 system
• Any winnings or balances associated with that account will be withheld and processed in accordance with applicable laws

If you believe that a minor has registered for or is using the ironman666 platform, please report it to us immediately by email at support@ironman666.best. We will investigate and take appropriate action within 24 hours of receiving the report.

Ironman666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, technological advancements, new Malaysian legal requirements, or changes in how we operate the platform.

When this Privacy Policy is materially updated, ironman666 will:

• Updating the "Last updated" date at the top of this document
• Displaying a clear notice on the ironman666 homepage regarding changes made
• Send notification emails to all registered members with valid email addresses, at least 14 days before material changes take effect

Your continued use of the ironman666 platform after an updated Privacy Policy comes into effect constitutes your acceptance of the revised privacy terms. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data before the changes take effect.

For reviews of this Privacy Policy and related documents, you can access the latest version at any time via the link in the footer of ironman666.best.

If you have any questions, concerns, or complaints regarding ironman666's Privacy Policy or how we handle your personal data, you may reach us through the following channels. The ironman666 team will provide a meaningful response within the stipulated timeframe: