Privacy Policy ironman 66 – Protection of Malaysian Players' Personal Data

This Privacy Policy ("Policy") is published by ironman 66 ("we", "Platform") and applies to all players who register and use the services on ironman66.my. This document clearly explains how we manage your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Ironman 66 acts as the Data Controller responsible for determining the purposes and means of processing players' personal data. By registering an account on ironman 66, you consent to us processing your personal data in accordance with the terms set out in this Privacy Policy.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy ironman 66 constitutes the entire agreement between you and our platform.

Ironman 66 collects various categories of personal data to ensure the platform operates safely, fairly, and in compliance with Malaysian law. Below is a full breakdown of each data category we collect:

a) Identity Data

• Full name as stated on your MyKad or passport.
• MyKad number or passport number for non-citizen players.
• Date of birth for minimum age verification (18 years and above).
• Identity document images for the KYC (Know Your Customer) process.

b) Contact Details

• An active email address for account communications and transaction notifications.
• A Malaysian mobile number for two-factor authentication (2FA) and customer support.
• Malaysian residential address as part of the identity verification process.

c) Financial Data

• A Malaysian bank account number for processing withdrawals in MYR.
• Payment method details used, including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
• Deposit and withdrawal transaction history in Malaysian Ringgit (RM).

d) Technical & Usage Data

• IP address and general location data for security and fraud detection purposes.
• The type of device, operating system, and web browser you are using.
• Login activity logs including date, time, and session duration.
• Game history including game type, bet amounts in MYR, and outcomes.

Ironman 66 collects players' personal data through several distinct channels, all transparently and with the player's knowledge:

• Account Registration: When you complete the registration form on ironman 66, basic information such as your name, email, and phone number is collected directly.
• Identity Verification (KYC): When you submit identification documents for the KYC process, your identity data is collected and stored securely.
• Gaming Activity: Game behaviour data is collected automatically when you use the platform, including records of slots, Live Casino, blackjack, lottery, and match odds betting.
• Financial Transactions: Each time you make a deposit or withdrawal in MYR, the transaction details are automatically recorded by the ironman 66 payment system.
• Support Communications: When you contact our customer support team via live chat or email, the conversation content is retained for quality assurance and reference purposes.
• Cookies & Tracking Technologies: The ironman 66 platform uses cookies and similar technologies to automatically collect technical data. Further details are provided in Section 9.

Ironman 66 uses collected personal data solely for the following legitimate and stated purposes:

• Account Management: Creating, managing, and maintaining player accounts on the ironman 66 platform.
• Identity Verification: Ensures every player meets the minimum age requirement of 18 and verifies identity for KYC purposes as required by law.
• Transaction Processing: Processes deposits and withdrawals in MYR via local Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, GrabPay, and FPX.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access, and platform abuse.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may be experiencing gambling-related issues and offering appropriate support.
• Service Communications: Sending important notifications regarding your account, transactions, terms changes, and security updates.
• Product Improvements: Analysing usage data in aggregate form (without identifying individuals) to improve the gaming experience on the ironman 66 platform.
• Marketing (with consent): Sends promotional information, bonuses, and special offers only to players who have consented to receive marketing communications.
• Legal Compliance: Meet our legal obligations under PDPA 2010, the Anti-Money Laundering Act 2001, and other applicable Malaysian regulations.

Ironman 66 does not sell or disclose players' personal data to third parties for marketing purposes without your consent. However, we may share personal data in the following limited circumstances:

• Service Providers: Third parties that assist in operating the ironman 66 platform, including cloud computing service providers, payment gateways (Touch 'n Go, DuitNow, GrabPay, FPX), and customer support system providers. All such providers are bound by strict confidentiality agreements.
• Gaming Technology Partners: Gaming software providers, such as slots developers and live casino operators, that require limited access to game session data for technical purposes only.
• Fraud Prevention Agencies: In cases of suspected fraud or money laundering, we may share information with financial crime prevention agencies.
• Legal Authorities: When required by Malaysian law, court order, or a lawful request from a law enforcement agency.

Ironman 66 continuously invests in cybersecurity infrastructure to ensure that players' personal data remains protected at all times. Our technical and organizational security measures include:

• Data Encryption: All data transmitted between your browser and the ironman 66 platform is protected by TLS 1.3 encryption (256-bit SSL). Sensitive data stored in our databases is also encrypted using AES-256 standards.
• Access Controls: Access to players' personal data is strictly limited to ironman 66 staff who require it to perform their duties, in accordance with the principle of least privilege.
• 24/7 Monitoring: An intrusion detection system (IDS) and suspicious activity monitoring operate around the clock to detect and prevent any cyber threats.
• Regular Security Testing: ironman 66 conducts regular penetration testing and security audits carried out by independent security experts.
• Data Backup: Player data is regularly backed up to a secure, separate location to ensure data recovery in the event of an emergency.

Ironman 66 does not retain your personal data for longer than is necessary for the stated purposes or as required under Malaysian law. Below are the retention period guidelines for each data category:

Upon expiry of the designated retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to any individual.

Under Malaysia's PDPA 2010, you as a data subject have the following rights regarding your personal data held by ironman 66:

To exercise any of the above rights, please contact the ironman 66 Privacy Officer by email at privacy@ironman66.my. We will process your request within 21 business days in accordance with the requirements of PDPA 2010.

Ironman 66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as the platform will not function properly without them.
• Functional Cookies: Saving your preferences such as language, time zone, and display settings to provide a more personalised experience on ironman 66.
• Analytics Cookies: Helps us understand how players use the platform through aggregated, anonymised data. This information is used to improve slots, Live Casino, and other platform features.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect player accounts from unauthorised access.

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect the functionality of the ironman 66 platform. For more information on managing cookies, refer to your web browser's help documentation.

In the course of operating the platform, ironman 66 may need to transfer players' personal data to servers or service providers operating outside Malaysia. When such transfers occur, ironman 66 ensures that:

• The recipient country or region provides an adequate level of data protection, at minimum equivalent to Malaysia's PDPA 2010.
• Appropriate data transfer agreements have been put in place with data recipients, including binding standard data protection clauses.
• Data transfers are carried out only when necessary for the purposes stated in this Privacy Policy and do not exceed the required scope.

If you have any questions about cross-border data transfers involving your personal data, please contact our Privacy Officer for further information.

Ironman 66 maintains a strict zero-tolerance policy against the use of our platform by individuals under the age of 18. We do not knowingly collect or process personal data from anyone below the age of 18.

Should we discover that personal data of a child or individual under 18 years of age has been collected without our knowledge, we will immediately take the following steps:

• Suspend the associated account immediately while an investigation is conducted.
• Securely delete all personal data associated with the account.
• Forfeiting all winnings and returning the original deposit balance (where applicable) to the legal guardian.
• Report incidents to the relevant authorities where required by law.

Ironman 66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. The latest version of the Privacy Policy will always be available on this page.

For any material amendments that affect how we handle your personal data, ironman 66 will:

• Sending email notifications to all registered players at least 14 days before the amendments take effect.
• Displaying a clear notice on the ironman 66 platform homepage regarding upcoming changes.
• In cases of material changes requiring fresh consent, obtain renewed consent from players before continuing to process their data.

Continued use of the ironman 66 platform after the amendment's effective date will be deemed as acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ironman 66 handles your personal data, please contact our Privacy Officer through the following channels: