Privacy Policy

Ironman99 Privacy Policy – Malaysia Member Data Protection

Ironman99 takes your privacy seriously. We only collect data that is genuinely necessary, protect it with the highest level of encryption, and never sell it to third parties.

Updated: January 2026 · Version 3.1 · 256-bit SSL Protection

Ironman99's Six Data Protection Commitments

Each of these commitments is more than just words – they are daily practices upheld by every ironman99 team member.

256-bit SSL Encryption

All data you send and receive through the ironman99 platform is protected by 256-bit SSL encryption – the same standard used by major banking institutions in Malaysia.

No Data Sales to Third Parties

Ironman99 has never and will never sell, rent, or share member personal data with any third party for marketing purposes without your explicit consent.

Data Minimisation

We only collect data that is genuinely necessary to operate our services, process transactions, and fulfill identity verification requirements. No excess data is collected.

Restricted Data Access

Only ironman99 staff with a legitimate need may access member personal data. All access is logged and continuously monitored by the internal security team.

Right of Access & Erasure

You have the right to request a copy of your personal data, correct inaccurate information, or request deletion of your data under certain circumstances, in accordance with applicable laws.

Data Breach Notification

In the event of any data breach affecting your personal information, ironman99 is committed to notifying you within the timeframe specified under our incident response procedures.

01

Privacy Policy Introduction & Scope

This Privacy Policy ("Policy") describes how ironman99 ("Platform", "We") collects, uses, stores, and protects your personal information when you register, log in, or use any services provided through the ironman99 platform.

By registering an account or using ironman99 services, you agree to the data collection and processing practices described in this Policy. We encourage you to read this document carefully as it directly affects your privacy rights.

This Policy covers all ironman99 access channels including the official website, Android and iOS mobile apps, and any integrated platforms associated with ironman99. If you do not agree with this Policy, please stop using the platform and contact us to delete your account.

This Privacy Policy is to be read together with ironman99 Terms and Conditions. These two documents together form the complete agreement between you and ironman99 regarding the use of the platform.

02

Personal Data We Collect

Ironman99 collects your personal data only when it is necessary to provide the services you request. Below are the categories of data we collect and the purposes for collection:

Data Category Example Primary Purpose
Identity Data Full name, IC/passport number, date of birth Account registration & KYC
Contact Data Phone number, email address Communication & 2FA Verification
Financial Data Bank name, account number, transaction records Deposit & withdrawal processing
Technical Data IP address, device type, browser, OS Security & Fraud Detection
Usage Data Games played, session duration, betting history Platform improvement & responsible gaming
KYC Document Data IC copy, verification selfie, utility bill Identity verification & compliance

Data We Do Not Collect

Ironman99 does not directly collect credit or debit card numbers – all card payments are processed through a PCI-DSS certified payment gateway. We also do not store biometric data beyond what is submitted during the KYC process.

03

How We Use Your Data

The personal data we collect is used solely for the following purposes:

  • Account Management: Creating and managing member accounts, processing registrations and logins
  • Transaction Processing: Verifying and securely processing deposits and withdrawals
  • Fraud Prevention: Monitoring account activity to detect and prevent fraud and money laundering
  • Customer Support: Providing technical support and resolving disputes
  • Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and other statutory requirements
  • Platform Improvement: Analysing usage patterns to improve service quality
  • Service Communication: Sending transaction notifications, security updates, and important alerts
  • Responsible Gaming: Monitoring gameplay patterns to identify members who may need support

Ironman99 does not use your data for third-party advertising or sell it to outside companies. Marketing communications from ironman99 are only sent to members who have given their consent.

04

Data Sharing & Disclosure

Ironman99 does not share member personal data except in the following limited circumstances:

Third-Party Service Providers

We share necessary data with service providers that help us operate the platform, including payment gateway providers, cloud computing providers, and KYC service providers. All such providers are bound by strict confidentiality agreements and are only permitted to use data for the specified purposes.

Legal Requirements

Ironman99 will disclose personal data to the relevant authorities when required by law, court order, or in the course of a legitimate financial crime investigation. We will notify the member concerned of any such disclosure unless prohibited by law.

Platform Protection

In cases of suspected fraud, money laundering, or serious security threats, ironman99 reserves the right to share relevant information with regulatory bodies, other financial institutions, or law enforcement agencies to protect the interests of all platform members.

We have never and will never sell member personal data to data brokers, marketing companies, or any commercial entity without your explicit consent.

05

Security Measures & Data Protection

Ironman99 implements multiple layers of technical and organisational security to protect member personal data from unauthorised access, loss, or misuse.

Technical Measures

  • 256-bit SSL/TLS encryption for all data communications between your device and the ironman99 servers
  • Passwords are stored in hashed form using the bcrypt algorithm, which is irreversible and cannot be decrypted
  • Two-factor authentication (2FA) is available and encouraged for all accounts
  • Real-time threat monitoring by an AI system that detects suspicious activity 24/7
  • Network segmentation and multi-layered firewalls to protect server infrastructure
  • Regular data backups and disaster recovery plan to ensure service continuity

Organisational Measures

  • Mandatory data privacy training for all ironman99 staff
  • Role-based access control policy – each staff member can only access data required for their role
  • Regular internal and external security audits conducted periodically
  • Clear incident response procedures to handle any data breaches

While we take all reasonable steps to protect your data, no security system is entirely foolproof. You also play a role in keeping your account secure by using a strong password and not sharing your login credentials.

06

Ironman99 Member Privacy Rights

As an ironman99 member, you have the following rights regarding your personal data. All rights requests can be submitted through ironman99 customer support.

Right of Access

Requesting a copy of the personal data we hold about you

Right to Rectification

Correcting inaccurate or incomplete data

Right to Erasure

Requesting data deletion under certain circumstances

Right to Object

Objecting to data processing for marketing purposes

Right to Portability

Requesting your data in a machine-readable format

Right to Restriction

Requesting a restriction on data processing in certain situations

To submit any request related to your privacy rights, please contact the ironman99 customer support team via Live Chat on the platform. We will process your request within 30 business days. In certain cases requiring additional identity verification, this period may be extended with prior notice to you.

07

Cookies & Tracking Technologies

Ironman99 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following types of cookies are used:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. Cannot be disabled.
  • Performance Cookies: Collecting anonymised information about how users interact with the platform for improvement purposes.
  • Functional Cookies: Saving your preferences such as language and display settings for a more personalised experience.
  • Analytics Cookies: Helps us understand platform usage patterns to make better-informed improvement decisions.

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect platform functionality. Session cookies are automatically deleted when you close your browser, while persistent cookies expire according to their set duration.

08

Data Retention & Deletion Period

Ironman99 retains member personal data only for as long as necessary for the stated purposes or as required by applicable law.

Standard Retention Period

  • Active account data: Throughout the active account period plus 5 years after closure
  • Financial transaction records: Minimum 7 years in accordance with financial regulatory requirements
  • KYC Documents: Minimum 5 years after the business relationship ends
  • Security logs: 2 years for incident investigation purposes
  • Support communication data: 3 years from the date of last interaction

After the specified retention period, personal data will be securely deleted or anonymised in accordance with ironman99's data disposal procedures. Data required to be retained by law cannot be deleted upon member request until the applicable legal period has expired.

All data deletion at ironman99 is carried out using secure erasure methods that ensure data cannot be recovered. We apply the NIST SP 800-88 data sanitisation standard for all deletion operations.

09

Policy Changes & Contact Us

Ironman99 reserves the right to amend or update this Privacy Policy at any time. Any material changes will be communicated to members via in-platform notifications or registered email at least 14 days before the changes take effect.

Continued use of the ironman99 platform after any changes take effect will be considered acceptance of the updated Policy. We encourage you to review this page periodically to stay informed of the latest version of our Privacy Policy.

How to Contact Us

If you have any enquiries, concerns, or requests relating to this Privacy Policy or your personal data, please contact the ironman99 team via:

  • In-platform Live Chat – available 24 hours a day, 7 days a week
  • Customer support email: [email protected]
  • Via the page FAQ for frequently asked questions about privacy

Our team will endeavour to respond to all privacy-related enquiries within 5 business days. For more complex data deletion or access requests, the response period may extend up to 30 business days depending on the complexity of the request.

This Privacy Policy should be read together with ironman99 Terms and Conditions and Responsible Gaming Policy for a full overview of your rights and obligations as a platform member.

Your Data Is Safe With Us

Create an account and enjoy bank-grade data protection with 256-bit SSL encryption.

Register Free Login
SSL 256-bit
End-to-End Encryption
Integrated KYC
Identity Verification
No Data Sales
Privacy Guaranteed
Right to Erasure
Your Data, Your Control
Start Safe

Privacy Protected, Gaming Made Easier

Register an ironman99 account and enjoy a secure gaming experience with bank-grade data protection. Over 500,000 members have trusted us.

Bahasa Melayu