Privacy Policy iron888 – Member Personal Data Protection

1 Personal Information We Collect

When you use the iron888 platform — whether registering a new account, making a deposit, playing games or contacting our support team — we may collect various types of personal information to provide you with the best possible service.

The information we collect falls into two main categories:

Information you provide directly:

• Full name as per official documents (identity card or passport)
• Date of birth for age verification purposes
• Active email address and mobile phone number
• Full current residential address
• Bank account or digital wallet details for payment processing
• Copies of KYC documents (identity card, bank statement) when required
• Username and iron888 platform account information

Information collected automatically:

• IP address and estimated location information based on IP
• Web browser type, operating system and device version
• Gaming activity history and platform usage patterns
• Login session data including time, duration and frequency
• Transaction information — deposits, withdrawals, total wagering amounts and wins
• Cookie data and other tracking technologies as described in Section 5

2 How We Use Your Personal Data

Iron888 uses collected personal data solely for legitimate purposes directly related to the provision of our online casino platform services. Below is a concise data usage table:

Iron888 will not use your data for purposes unrelated to the provision of online casino services without first obtaining your additional consent. You have the right to withdraw consent for any consent-based data use at any time.

3 Information Sharing & Disclosure

Iron888 does not sell, rent, or trade member personal data to third parties. However, there are limited situations where we may need to share your information with certain parties:

• Payment Providers: FPX, Maybank2u, CIMB Clicks, Touch 'n Go, GrabPay and Boost require minimum transaction information to securely process your deposits and withdrawals.
• Game Providers: Gaming software providers such as slot and live casino companies may receive the minimum game session data required for game operations.
• KYC & Identity Verification Services: We use licensed identity verification providers that comply with strict privacy standards to verify member documents.
• Law Enforcement: iron888 will disclose information to authorities when required by court order, law enforcement investigation, or AML reporting obligations.
• Professional Advisors: Lawyers, accountants or auditors bound by strict professional confidentiality obligations.

Should iron888 undergo a business restructuring, merger, or acquisition, member personal data may be transferred as part of the business assets. In such situations, we will inform members via a clear notice on our platform.

4 Data Security & Information Protection

Iron888 continuously invests in the latest cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, disclosure, alteration, or destruction. Key security measures we implement include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and iron888 servers
• Encryption of data at rest (AES-256) for sensitive information stored in our databases
• Two-factor authentication (2FA) available to protect your account from unauthorised access
• Real-time threat monitoring by a dedicated cybersecurity team operating 24/7
• Regular penetration testing by an independent security firm to identify and address vulnerabilities
• Role-based access control ensuring iron888 staff only access data necessary for their roles
• Incident response plan to swiftly address any security breaches

While we take all reasonable precautions, no security system is entirely foolproof. We encourage you to play your part in protecting your account by using a strong password and not sharing your login credentials.

5 Cookies, Tracking Technology & Analytics

Iron888 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage patterns, and deliver more relevant content to you. Below are the types of cookies we use:

• Essential Cookies: Required for core platform operations — login, game sessions and security. Cannot be disabled.
• Performance Cookies: Collects information on how you use our platform (pages visited, time spent) to help us improve the user experience.
• Functional Cookies: Saves your preferences such as language, display settings and game preferences for a more personalised experience.
• Analytics Cookies: We use third-party analytics tools that do not personally identify users to understand aggregated platform usage trends.

We do not use cross-site tracking technologies or sell your analytics data to third-party advertisers. All analytics data collected is used solely for internal improvements to the iron888 platform.

6 Your Rights Regarding Personal Data

As an iron888 member, you are protected under Malaysia's Personal Data Protection Act. iron888 is committed to fully respecting and facilitating the exercise of these rights:

7 Data Retention Period

Iron888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for the period required by applicable law. Below are our general retention period guidelines:

• Active account data: Retained for the duration your account remains active on iron888, plus the period required to fulfil legal obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the transaction date to comply with financial reporting and AML requirements.
• KYC documents: Retained for the period required by applicable law, typically five (5) to seven (7) years.
• Support communication logs: Retained for three (3) years for customer service reference.
• Cookie and analytics data: Generally not exceeding two (2) years, depending on the cookie type.
• Closed or inactive account: Basic data is retained for the legally required period before being securely deleted.

Once the retention period has expired and there is no longer a legitimate need to retain your data, iron888 will securely delete or anonymise it using industry-standard procedures.

8 Links to Third-Party Websites

The iron888 platform may contain links to websites or services operated by third parties, such as game providers or payment partners. This Privacy Policy applies solely to the iron888 platform.

All third-party service providers working with iron888 are required to sign data processing agreements ensuring they comply with privacy standards equivalent to our platform.

9 Children's Privacy & Youth Protection

Iron888 is an online gambling platform that is only permitted for individuals aged 18 and above. We do not intentionally collect, store or process any personal information from minors.

• All account registrations require age verification through a rigorous KYC process.
• Iron888 uses automated detection tools to identify registration attempts by minors.
• If we discover that an account has been registered by a minor, the account will be closed immediately and all associated data will be deleted.

10 Privacy Policy Amendments

Iron888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, updated legal requirements, or platform service improvements. The "Last Updated" date at the top of this document will always be kept current.

• Material changes will be communicated via a prominent notice on the iron888 homepage or through your registered email.
• We encourage you to review this page periodically to ensure you are always up to date on how we manage your data.
• Your continued use of the iron888 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy.
• If you do not agree with any amendments, you may close your account and request data deletion in accordance with your rights as set out in Section 6.

11 Contact Us – Data Protection Officer

If you have any questions, concerns or complaints regarding the iron888 Privacy Policy or how we process your personal data, please do not hesitate to contact us. The iron888 Data Protection Team is always ready to assist you.