Iron888 is fully committed to protecting the privacy and personal data of every Malaysian player. This document explains in detail how we collect, use, store, and safeguard your information — with complete transparency and accountability.
Iron888 ("we", "Platform", or "Company") operates an online sports betting and casino platform under the domain iron888.bet. We are fully committed to the privacy of every individual who uses our services, including all registered players, website visitors, and anyone who interacts with the iron888 platform.
This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. It outlines in detail the types of data we collect, why we need it, how it is used, and the rights you hold as the data subject.
By registering an iron888 account, using our platform, or simply browsing this website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the iron888 platform and contact us to close your account if applicable.
Iron888 has never and will never sell, rent, or trade the personal data of Malaysian players to any third party for commercial marketing purposes. Your data is used solely for the purposes stated in this policy — nothing more.
Iron888 only collects data that is strictly necessary to provide a safe, efficient, and legally compliant service. The following are the categories of data we collect:
Full name, date of birth, gender, MyKad or passport number, and identity document images for the identity verification (KYC) process required under industry standards.
Email address, Malaysian phone number, and where applicable, residential address. This information is used for account communications, transaction notifications, and customer support.
Information relating to the payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), deposit and withdrawal history in Malaysian Ringgit (RM), and transaction records for AML compliance purposes.
Betting records for football (Malaysia Super League, EPL), badminton, cricket, slots, live casino, and other sports — including the date, time, amount, and outcome of all gaming activity.
IP address, device type, operating system, browser version, location data (state/general region within Malaysia), and session logs. This data is used for security, fraud detection, and platform improvements.
Pages visited, clicks made, time spent in each section of the platform, and personal settings preferences. This helps us refine the iron888 user experience for all Malaysian players.
NOTE: iron888 does not collect sensitive data such as medical information, political views, or religious beliefs. We also do not store full credit card numbers — sensitive payment data is processed directly by Malaysia's accredited payment providers.
Iron888 collects personal data through various channels that arise naturally in the course of your use of our platform:
Iron888 does not purchase personal data from any data brokers or third-party platforms to add to our database.
Every piece of data collected by iron888 has a clear and lawful purpose. We do not use your data for any purpose we have not disclosed to you:
| Purpose of Use | Data Types Used | Legal Basis |
|---|---|---|
| Account Management & Verification | Name, IC, email, phone | Contract performance |
| Deposit & Withdrawal Processing (RM) | Financial data, payment methods | Contract performance |
| Fraud Prevention & AML | Transaction data, IP, device | Legal obligation |
| Customer Support | All data related to reported issues | Legitimate interests |
| Platform Improvements | Behavioural data, cookies | Legitimate interests |
| Transaction & Security Notifications | Email, phone number | Legitimate interests |
| Regulatory Compliance & Reporting | Identity data, transactions | Legal obligation |
| Responsible Gaming | Game activity data | Public interest |
Iron888 no using your data to sell to third-party advertisers, profiling for external commercial purposes, or any purpose not stated in the table above.
Iron888 takes a strictly limited approach to sharing players' personal data. We only share your information in the following circumstances:
Data required to process deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks). This sharing is limited strictly to the information needed to complete each transaction.
Iron888 is required to disclose certain data to Malaysian authorities when requested for legal compliance, law enforcement, or valid court order purposes. We have no discretion in such circumstances.
Companies that help us operate the platform (such as cloud service providers and cybersecurity firms) may have limited access to certain data. All such parties are bound by strict confidentiality agreements.
OUR COMMITMENT: iron888 will never sell, rent, or share players' personal data with any marketing company, data broker, or third party for commercial gain. This is a line we will not cross.
Iron888 continually invests in the latest security infrastructure to ensure the personal data of all Malaysian players remains protected against cyber threats, unauthorised access, and data breaches.
While iron888 takes comprehensive security measures, no system can guarantee absolute security at all times. In the unlikely event of a data breach, iron888 is committed to notifying affected users and the relevant authorities within the timeframes required by Malaysian law.
Iron888 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand usage patterns on our platform.
| Cookie Type | Purpose | Duration | Required? |
|---|---|---|---|
| Essential Cookies | Login session management, CSRF security, language preferences | Session / 30 days | Yes — cannot be disabled |
| Performance Cookies | Monitors load times, platform errors, and overall performance | 90 days | Optional |
| Functional Cookies | Storing player preferences such as currency (RM) and favourite sports | 1 year | Optional |
| Analytics Cookies | Understanding user behaviour to improve the platform | 2 years | Optional |
You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect login functionality and account security on iron888.
Iron888 does not retain your personal data longer than necessary. Retention periods are determined based on operational needs, legal obligations, and Malaysia's PDPA guidelines:
Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.
As an iron888 player and Malaysian resident, you have the following rights regarding your personal data, protected under the Personal Data Protection Act (PDPA) 2010:
Request a copy of all personal data iron888 holds about you at any time.
Request the correction of any inaccurate or incomplete information in your records.
Request the deletion of your personal data, subject to mandatory legal retention obligations.
Object to the processing of your data for certain purposes that are not legally mandatory.
Request a restriction on the processing of your data while any dispute or investigation is ongoing.
Receive your data in a structured, machine-readable format for transfer to another platform.
To exercise any of the above rights, please contact iron888's privacy team by email at privacy@iron888.bet or via our platform's Live Chat. We are committed to processing such requests within 14 working days.
Iron888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data.
All material changes to this policy will be communicated to all registered iron888 users via email notification and in-platform notice at least 14 days before those changes take effect. For minor changes that do not affect your fundamental rights, we may update only the "Last updated" date at the top of this page.
It is your responsibility to review this page periodically. Your continued use of the iron888 platform after any amendments take effect will be considered acceptance of the revised policy.
If you have any questions, concerns, or wish to exercise your data rights, iron888's privacy team is ready to assist you.
Six pillars of data security that underpin the trust of 500,000+ Malaysian players in iron888
Every bit of data transmitted between your device and iron888's servers is encrypted with 256-bit SSL technology — the same standard used by Malaysia's leading banks. Your data remains completely unreadable to anyone while in transit.
Iron888 has never sold, rented, or traded players' personal data to any party for commercial gain, and never will. This is not merely a promise — it is a core business principle we will not compromise on.
Iron888 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. Our compliance team ensures that all data handling practices consistently meet the latest local legal requirements.
Iron888 is committed to full transparency. This Privacy Policy is written in plain language — not confusing legal jargon. We tell you exactly what we do with your data and why.
You have every right to access, correct, delete, or transfer your data. iron888 makes this process straightforward — no complicated paperwork or deliberately drawn-out procedures to discourage you from exercising your rights.
Iron888's privacy and data security practices are regularly audited by accredited independent firms. This ensures that the controls we describe in this policy are genuinely implemented in the day-to-day operations of our platform.