Updated: 1 January 2026 | Version 3.1 | English
To all ironman 888 members: This Privacy Policy sets out in detail how we collect, use, store, and protect your personal data. By using the ironman 888 platform, you agree to the terms stated in this policy. Please read it carefully.
1 Introduction – Ironman 888's Commitment to Your Privacy
Ironman 888 (referred to as "we", "the Platform", or "ironman 888" in this document) recognises that privacy is a fundamental right of every individual. We understand that when you register and use the ironman 888 platform, you are placing a great deal of trust in us by allowing us to hold your personal information.
This Privacy Policy is drafted in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data management. Our goal is straightforward: to ensure that every piece of data you share with ironman 888 is handled with integrity, stored securely, and never misused.
This policy applies to all ironman 888 platform users, including website visitors, registered members, and former members. It covers data collected through the ironman 888 website, mobile applications, and all official communication channels, including email, live chat, and WhatsApp.
Ironman 888 never sells member personal data to third parties for marketing purposes. This is an absolute commitment we will not compromise under any circumstances.
2 Personal Data We Collect
Ironman 888 collects various categories of personal data depending on how you interact with our platform. Below is a full breakdown of the data we may collect:
Identity Data
Full name (as per MyKad), identity card number (MyKad), date of birth, gender, nationality. Required for age and identity verification (KYC process).
Contact Data
Active email address, Malaysian mobile number, residential address. Used for account communications, notifications, and customer support.
Financial Data
Payment account information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks), deposit and withdrawal records in MYR (RM). We do not store credit or debit card details directly.
Gaming Activity Data
Betting records, games played (Live Casino, slots, blackjack, badminton betting, Malaysian Super League, EPL, e-sports), wins and losses, session duration. Used for responsible gambling monitoring.
Technical Data
IP address, browser type, operating system, screen resolution, device information (phone model, OS version), and access log data. Used for security and platform improvement purposes.
Communication Data
Records of conversations with the ironman 888 customer support team, feedback you have provided, and complaints filed. Retained for quality control and dispute resolution purposes.
3 How ironman 888 Uses Your Data
Ironman 888 uses your personal data only for legitimate and reasonable purposes as described below. We do not use your data beyond the purposes disclosed or that a member could reasonably expect:
- Account Management: Creating, managing, and maintaining your ironman 888 account, including the identity verification (KYC) process required under our operating licence.
- Transaction Processing: Processing deposits via TnG eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay; processing withdrawals in RM; and maintaining accurate financial records.
- Service Provision: Grants you access to all games and features on the ironman 888 platform – from Live Casino to Sports Betting on badminton and football.
- Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and other suspicious activities that may harm other members or the integrity of the platform.
- Customer Support: To provide effective technical support and customer service, including the resolution of complaints and disputes.
- Legal Compliance: To comply with applicable legal and regulatory obligations, including the retention of required financial records.
- Product Improvement: Analysing usage patterns in aggregated, anonymised form to improve the user experience on the ironman 888 platform.
- Marketing Communications: Sending you information about relevant ironman 888 promotions, bonuses, and offers – only where you have given your consent to receive such communications. You may opt out at any time.
4 Disclosure of Data to Third Parties
Ironman 888 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, in the normal course of business operations, we may share your data with the following categories of third parties, subject to strict controls:
- Payment Service Providers: E-wallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and the FPX banking system to process your financial transactions in RM. Data shared is kept to a minimum and limited to what is necessary to complete each transaction.
- Game Providers: Companies that supply game software to ironman 888 may receive the technical data necessary to ensure games function correctly. All such providers are bound by strict confidentiality agreements.
- Regulatory Body: Relevant authorities where required by law or by a lawful directive from a competent authority.
- Fraud Prevention Services: Third-party systems that assist ironman 888 in identifying and preventing fraudulent activity to protect all members.
- Professional Advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations.
All third parties who receive ironman 888 member data are required to adhere to privacy standards equivalent to or stricter than our own. We conduct periodic reviews to ensure ongoing compliance.
5 Ironman 888 Data Security Measures
Ironman 888 invests seriously in cybersecurity infrastructure to ensure your personal and financial data remains protected at all times. The following are the security layers we have in place:
Security AuditPeriodically
- 256-bit SSL Encryption: All communications between your browser or app and ironman 888's servers are encrypted using the same industry standard applied by leading banking institutions.
- Strict Access Controls: Only ironman 888 staff with a legitimate business need are permitted to access member personal data, with every access logged and monitored.
- Data Segregation: Financial data is stored separately from game data, with multi-layered access controls to minimise risk.
- Secure Backups: Member data is regularly backed up to secure, encrypted locations to ensure swift recovery in the event of a system failure.
- Penetration Testing: ironman 888 conducts regular penetration testing through independent cybersecurity firms to identify and patch any vulnerabilities.
6 Cookies & Tracking Technologies
Ironman 888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit the ironman 888 website.
| Cookie Type |
Purpose |
Duration |
Can Be Disabled? |
| Essential Cookies | Login, session, security | Session | No (required) |
| Functional Cookies | Language preferences, display settings | 1 year | Yes |
| Analytics Cookies | Understanding usage patterns (anonymised) | 2 years | Yes |
| Performance Cookies | Platform speed & stability improvements | 6 months | Yes |
You can manage your cookie settings through your web browser. Please note that disabling essential cookies may affect the login functionality and account security of your ironman 888 account.
7 International Data Transfers
In the course of ironman 888's operations, your personal data may be processed or stored on servers located outside Malaysia as part of our technical infrastructure. All such data transfers are carried out with adequate safeguards in place:
- We only engage infrastructure and cloud service providers that comply with internationally recognised security standards (ISO 27001 and equivalent).
- Data transfer agreements containing protection clauses equivalent to Malaysia's PDPA are executed with all partners who receive member data.
- Sensitive financial data is always processed within environments that comply with international financial security standards.
8 Your Privacy Rights as an Ironman 888 Member
Under Malaysia's Personal Data Protection Act 2010 (PDPA), as an ironman 888 member you have the following rights regarding your personal data:
1
Right of Access
Request a copy of all personal data we hold about you. We will provide this information within 30 working days.
2
Right to Rectification
Request correction of inaccurate or incomplete data. Update your account information via your profile settings or by contacting ironman 888 support.
3
Right to Erasure
Request deletion of your personal data under certain circumstances, subject to applicable legal retention obligations.
4
Right to Restrict Processing
Request that we restrict the processing of your data under certain circumstances while a dispute or review is in progress.
5
Right to Object
Object to the processing of your data for direct marketing purposes. You may unsubscribe from ironman 888 promotional emails at any time.
6
Data Portability Right
Request a copy of your data in a structured, machine-readable format for transfer to another service provider where applicable.
To exercise any of the rights above, please contact our Data Protection Officer by email at privacy@ironman888.click or via live chat on the ironman 888 platform. We will process your request within a reasonable timeframe.
9 Data Retention Period
Ironman 888 does not retain your personal data longer than necessary for the original purpose of collection or as required by law:
- Active Account Data: Retained for as long as your account remains active on the ironman 888 platform.
- Financial Transaction Data: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's accounting and anti-money laundering legal requirements.
- KYC (Identity Verification) Data: Retained for a minimum of 5 years following account closure or the date of last verification.
- Support Communication Records: Retained for 3 years for quality control and dispute resolution purposes.
- Technical Log Data: Retained for a maximum of 12 months.
Once the applicable retention period has ended, data will be securely deleted or anonymised in accordance with established procedures.
10 Child Protection
The ironman 888 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.
If you believe a minor has registered an account on ironman 888 using false information, please contact us immediately at privacy@ironman888.click. We will investigate the matter and immediately close the account in question and delete all associated data.
ironman 888 employs a multi-layered age verification process during registration to prevent access by minors. We also encourage parents to monitor their children's internet usage and report any concerns to us.
11 Amendments to This Privacy Policy
Ironman 888 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.
When we make material changes to this Privacy Policy, we will:
- Updating the "Last Updated" date at the top of this policy.
- Sending notifications to registered members via email and/or in-platform notifications on ironman 888.
- In the event of particularly significant changes, we may request that you reconfirm your consent.
We encourage you to review this Privacy Policy periodically. Your continued use of the ironman 888 platform after any amendments take effect will be considered acceptance of the updated terms.
12 How to Contact Ironman 888 About Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or how ironman 888 handles your personal data, please contact our Data Protection Officer through the following channels:
- Privacy Email: privacy@ironman888.click
- General Support Email: support@ironman888.click
- Live Chat: Available 24/7 on the ironman 888 platform
- WhatsApp: Number available within the platform after logging in
We are committed to responding to all privacy-related enquiries within 3 working days. For data rights requests under the PDPA, we will provide a full response within 30 working days.