Iron66 Privacy Policy – Malaysia Member Personal Data Protection

1Introduction & Scope of Privacy Policy

Iron66 ("we", "Platform", or "iron66") cares about the privacy of every member and user who accesses our platform. This Privacy Policy transparently explains how we handle your personal information — from the moment you first browse our website through to your daily activity as a registered member.

This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We believe transparency is the foundation of trust, which is why we strive to explain every aspect of how your data is handled in plain language — free from confusing legal jargon.

This policy applies to all users of the iron66 platform, including website visitors, registered members, and any party that interacts with our services through our website, mobile app, or official communication channels.

2Types of Information We Collect

Iron66 collects your personal information through several methods depending on how you interact with our platform. The following are the main categories of information we collect :

In addition to information you provide directly, we also collect information automatically when you use our platform, including cookie data, session data, and device information. All such data collection is solely aimed at enhancing your experience and ensuring the security of your account.

3How We Use Your Information

Every piece of information we collect is used for a clear and legitimate purpose. iron66 uses your personal data for the following purposes:

• Account Management: Creating and managing your member account, including secure login and two-factor identity verification.
• Transaction Processing: Handling deposits, withdrawals, and all financial activity in your account accurately and securely.
• KYC Verification: Complying with legal requirements related to identity verification and anti-money laundering.
• Platform Security: Detecting and preventing fraud, unauthorized access, and suspicious activity on the platform.
• Customer Support: Processing your enquiries and complaints, and providing accurate and effective assistance.
• Service Improvement: Analyzing usage patterns to improve user experience, platform performance, and the game library.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.
• Marketing Communications: Sending information about promotions, bonuses, and the latest offers — only if you have consented to receive them.
• Legal Compliance: Fulfilling reporting obligations and regulatory compliance requirements applicable to our platform's operations.

4Sharing Information with Third Parties

Iron66 understands that your trust is our most valuable asset. We do not share your personal information indiscriminately. Data sharing only occurs in the following limited situations, and is always subject to strict confidentiality agreements:

• Payment Service Providers: Payment gateway providers, banks, and e-wallet operators that process your transactions are given only the financial information necessary to complete those transactions.
• Game Providers: Third-party game providers that supply gaming content on the iron66 platform may receive session data necessary to operate the games.
• KYC Service Providers: Identity verification companies that assist us in authenticating member identity documents to meet compliance requirements.
• Statutory Authorities: Law enforcement agencies, regulatory bodies, or courts where we are legally required to do so.
• Technology Partners: Cloud computing, cybersecurity, and analytics service providers that help us operate the platform — all subject to strict data processing agreements.

In all data sharing instances, iron66 ensures that recipients are granted access only to the information strictly necessary for the stated purpose, and nothing beyond that. All our third-party partners are required to uphold data protection standards equivalent to or higher than our own.

5Data Security & Protection Measures

Your personal data security is iron66's top priority. We continuously invest in cutting-edge security infrastructure to ensure your information is always protected against unauthorized access, disclosure, alteration, or destruction.

Key security measures we employ include:

• TLS 1.3 Encryption: All data transmitted between your device and iron66 servers is encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept your communications.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including passwords and financial details, is encrypted using the industry-recognized AES-256 algorithm.
• Two-Factor Authentication (2FA): An additional security layer requiring verification through your device each time you log in from a new location or device.
• Continuous Monitoring: Our systems monitor account activity 24 hours a day, 7 days a week to detect any suspicious patterns or unauthorized access attempts.
• Regular Security Testing: Security audits and penetration testing are conducted regularly by independent security experts to identify and address any vulnerabilities.
• Internal Access Control: Only iron66 staff with a legitimate business need are granted access to member personal data, and all such access is logged and monitored.

6Cookies, Tracking Technologies & Your Choices

The iron66 platform uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how members use the platform, which pages are visited most frequently, and where technical issues may occur. All data is collected anonymously.
• Functional Cookies: Remembering your preferences such as display settings, language, and game choices to deliver a more personalized experience.
• Analytics Cookies: Used to analyse traffic patterns and platform usage for improvement purposes. This data is not linked to your personal identity.

You can control and manage cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the iron66 platform.

7Data Retention and Deletion

Iron66 only retains your personal information for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Our data retention policy is as follows:

• Active Account Data: Retained for as long as your account remains active and for the required period following account closure for compliance purposes.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's accounting and financial legal requirements.
• KYC Records: Retained for the period required under applicable anti-money laundering regulations, typically no less than five (5) years.
• Security Logs: Retained for twelve (12) months for security incident investigation purposes if required.
• Communication Records: Retained for two (2) years for customer support reference purposes.

When your data is no longer needed and there is no legal obligation to retain it, iron66 will securely delete or anonymise it using industry-recognised methods. You may request early deletion of your data, subject to applicable legal requirements.

8Your Rights as an iron66 Member

As an iron66 member, you have clear rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights. You may exercise the following rights by contacting our support team: